This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/w54MSAoYkvWAhyocjd5urm0fs-o.roa File: w54MSAoYkvWAhyocjd5urm0fs-o.roa (raw, json) Hash identifier: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM= Subject key identifier: C3:9E:0C:48:0A:18:92:F5:80:87:2A:1C:8D:DE:6E:AE:6D:1F:B3:EA Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019B7F83A7ACCB5C1A8F75E5E2F6973277C3 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/w54MSAoYkvWAhyocjd5urm0fs-o.roa Signing time: Fri 02 Jan 2026 16:21:33 +0000 ROA not before: Fri 02 Jan 2026 16:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39521 IP address blocks: 45.10.16.0/23 maxlen: 24 45.10.16.0/24 maxlen: 24 45.10.17.0/24 maxlen: 24 45.10.18.0/24 maxlen: 24 45.88.5.0/24 maxlen: 24 45.88.6.0/24 maxlen: 24 45.88.7.0/24 maxlen: 24 45.95.40.0/24 maxlen: 24 45.95.41.0/24 maxlen: 24 45.130.100.0/22 maxlen: 22 83.229.34.0/24 maxlen: 24 95.178.107.0/24 maxlen: 24 185.144.56.0/22 maxlen: 24 188.191.49.0/24 maxlen: 24 188.191.50.0/24 maxlen: 24 188.191.51.0/24 maxlen: 24 217.194.153.0/24 maxlen: 24 2a05:e4c0::/32 maxlen: 32 2a05:e4c1::/32 maxlen: 32 2a05:e4c7::/36 maxlen: 36 2a07:3bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a7:ac:cb:5c:1a:8f:75:e5:e2:f6:97:32:77:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Jan 2 16:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c39e0c480a1892f580872a1c8dde6eae6d1fb3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:38:55:ff:e4:3b:19:99:ee:cb:3b:55:8b: dd:b0:da:63:77:aa:8e:93:d7:7c:02:06:f9:e8:c8: 22:9e:1f:08:f4:00:d1:4c:bd:e7:6b:b9:05:72:9e: e3:c5:13:47:e1:26:97:f6:47:c2:cd:5e:d2:70:f7: 8b:6b:a3:8e:a9:dd:bf:08:b6:95:bf:e4:bf:8b:be: 33:cf:89:f4:ba:aa:8f:b8:61:80:2e:31:78:e7:58: fd:df:dd:b8:5b:06:60:dd:56:8d:9e:ab:56:67:11: f1:3f:9b:8d:7a:89:5c:38:6a:45:ad:a9:55:fd:1c: 2c:5e:61:2d:3d:75:e5:3a:c1:94:d1:d3:14:21:09: d7:48:0b:cd:49:18:56:0d:24:13:26:02:d3:51:e0: 57:a0:84:67:3c:ff:a2:ff:de:f5:e0:0d:20:9f:28: 5f:cf:1e:57:81:66:47:8e:cf:5f:39:96:47:88:df: ad:e1:f5:8a:af:c6:b0:72:78:a8:33:5b:4b:15:2c: 08:9b:2c:6b:82:88:ae:77:b2:70:5a:78:c0:08:9b: ad:72:8e:c7:fe:dd:0e:fb:04:09:33:26:cf:77:79: 6f:ba:4b:51:e3:e0:f4:95:81:0b:dc:cf:92:9a:0f: 1d:68:d9:92:82:5c:dd:49:48:b3:18:d9:94:c3:47: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9E:0C:48:0A:18:92:F5:80:87:2A:1C:8D:DE:6E:AE:6D:1F:B3:EA X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/w54MSAoYkvWAhyocjd5urm0fs-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.16.0-45.10.18.255 45.88.5.0-45.88.7.255 45.95.40.0/23 45.130.100.0/22 83.229.34.0/24 95.178.107.0/24 185.144.56.0/22 188.191.49.0-188.191.51.255 217.194.153.0/24 IPv6: 2a05:e4c0::/31 2a05:e4c7::/36 2a07:3bc0::/29 Signature Algorithm: sha256WithRSAEncryption 44:cf:0b:61:86:8f:47:94:d3:9a:9e:c9:5d:b2:c8:84:bb:01: b1:a5:ec:4c:95:68:f0:5f:04:ad:0d:db:0e:10:09:1d:26:cb: e8:61:cd:1e:2d:14:5c:48:20:fe:0a:c8:ef:f1:ba:f4:d8:12: 18:65:ff:f9:d3:25:bc:48:37:df:02:d3:ab:e3:e8:fa:04:4d: 07:93:23:fb:ca:52:38:e4:e8:db:32:b4:54:ae:6a:bc:66:08: 40:e4:2e:1a:da:3c:29:ca:fe:6e:b3:99:fd:49:45:55:9f:3e: 99:d4:ac:b6:f6:3c:01:b0:0a:91:bb:e9:fd:a0:f6:06:7e:ee: 07:27:87:a8:57:58:93:73:3e:11:16:26:77:9f:58:28:3d:94: 83:a1:20:e9:71:00:b9:87:17:49:eb:e7:df:46:5d:10:cd:49: 68:e2:3f:e0:37:1d:05:66:f3:dc:43:99:40:72:13:ae:83:84: 25:97:61:92:70:40:0d:88:11:f9:e7:d5:3a:7a:39:1a:bc:39: 22:c1:7c:61:26:08:bf:cd:0e:38:47:71:fb:79:ef:3b:3f:a7: 82:7d:65:ce:bb:47:96:5a:44:3c:87:85:a4:76:f9:aa:f9:36: 83:42:6d:be:b3:20:96:a4:25:57:b9:a7:39:d6:0f:0b:1e:55: 60:b0:4f:48 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt/g6esy1waj3Xl4vaXMnfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwMTAyMTYyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzllMGM0ODBhMTg5MmY1ODA4NzJhMWM4ZGRlNmVhZTZkMWZiM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ag4Vf/kOxmZ7ss7VYvdsNpjd6qO k9d8Agb56Mginh8I9ADRTL3na7kFcp7jxRNH4SaX9kfCzV7ScPeLa6OOqd2/CLaV v+S/i74zz4n0uqqPuGGALjF451j93924WwZg3VaNnqtWZxHxP5uNeolcOGpFralV /RwsXmEtPXXlOsGU0dMUIQnXSAvNSRhWDSQTJgLTUeBXoIRnPP+i/9714A0gnyhf zx5XgWZHjs9fOZZHiN+t4fWKr8awcnioM1tLFSwImyxrgoiud7JwWnjACJutco7H /t0O+wQJMybPd3lvuktR4+D0lYEL3M+Smg8daNmSglzdSUizGNmUw0f5VQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFMOeDEgKGJL1gIcqHI3ebq5tH7PqMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvdzU0TVNBb1lrdldBaHlvY2pkNXVybTBmcy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwVAQCAAEwTjAMAwQELQoQ AwQALQoSMAwDBAAtWAUDBAMtWAADBAEtXygDBAItgmQDBABT5SIDBABfsmsDBAK5 kDgwDAMEALy/MQMEAry/MAMEANnCmTAcBAIAAjAWAwUBKgXkwAMGBCoF5McAAwUD Kgc7wDANBgkqhkiG9w0BAQsFAAOCAQEARM8LYYaPR5TTmp7JXbLIhLsBsaXsTJVo 8F8ErQ3bDhAJHSbL6GHNHi0UXEgg/grI7/G69NgSGGX/+dMlvEg33wLTq+Po+gRN B5Mj+8pSOOTo2zK0VK5qvGYIQOQuGto8Kcr+brOZ/UlFVZ8+mdSstvY8AbAKkbvp /aD2Bn7uByeHqFdYk3M+ERYmd59YKD2Ug6Eg6XEAuYcXSevn30ZdEM1JaOI/4Dcd BWbz3EOZQHITroOEJZdhknBADYgR+efVOno5Grw5IsF8YSYIv80OOEdx+3nvOz+n gn1lzrtHllpEPIeFpHb5qvk2g0JtvrMglqQlV7mnOdYPCx5VYLBPSA== -----END CERTIFICATE-----Generated at Wed Jan 21 08:34:00 2026 by rpki-client