This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/AR0snb2WiBVjty2iEPK8q39KPZo.roa File: AR0snb2WiBVjty2iEPK8q39KPZo.roa (raw, json) Hash identifier: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk= Subject key identifier: 01:1D:2C:9D:BD:96:88:15:63:B7:2D:A2:10:F2:BC:AB:7F:4A:3D:9A Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Certificate serial: 019B9D69C91C36B47B61CE15F8F6B926DFC4 Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/AR0snb2WiBVjty2iEPK8q39KPZo.roa Signing time: Thu 08 Jan 2026 11:41:54 +0000 ROA not before: Thu 08 Jan 2026 11:41:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208327 IP address blocks: 45.145.92.0/24 maxlen: 24 45.145.94.0/24 maxlen: 24 45.145.95.0/24 maxlen: 24 2a0c:4d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:69:c9:1c:36:b4:7b:61:ce:15:f8:f6:b9:26:df:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887 Validity Not Before: Jan 8 11:41:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=011d2c9dbd96881563b72da210f2bcab7f4a3d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:d0:e1:05:2e:2c:e7:60:30:41:d9:19:d3: 0b:6f:86:46:79:71:67:7c:eb:5d:5f:b6:01:5c:c4: 40:e4:20:8d:b7:77:9d:f8:44:10:b5:f6:17:24:ea: 90:b6:e0:de:4a:0d:ae:bd:00:1e:96:64:ad:70:aa: 5f:c0:35:82:52:44:d9:67:62:72:e3:cc:29:1c:2d: 30:46:67:84:43:f6:34:74:44:97:39:7e:c4:ff:76: 19:35:83:a6:29:8f:a6:17:af:6f:28:5d:21:5a:46: ac:7b:66:0d:5e:d0:01:0f:5b:5e:a8:e6:60:3b:ce: c9:78:b5:01:cb:aa:ff:38:43:c8:a5:6c:e3:dd:2e: aa:82:df:3d:45:47:16:4d:f8:e7:84:1e:80:a5:9b: 94:18:ca:3f:c8:5d:58:59:82:f4:93:56:82:06:5f: 1a:93:f6:36:8f:d7:2b:62:90:eb:0d:57:2f:93:f5: 38:ed:8b:6d:1b:57:eb:c3:3c:27:19:70:e5:82:2b: ac:d2:34:cf:bc:ee:35:52:a6:b8:5d:5c:63:67:d5: bc:ab:88:7c:46:76:b8:01:48:c1:24:61:70:51:d2: 87:e5:44:09:55:e1:20:f3:f8:ab:39:d7:c8:77:98: 51:8b:28:a7:cc:1d:41:65:d4:f9:b3:f8:dc:be:62: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1D:2C:9D:BD:96:88:15:63:B7:2D:A2:10:F2:BC:AB:7F:4A:3D:9A X509v3 Authority Key Identifier: keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/AR0snb2WiBVjty2iEPK8q39KPZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.92.0/24 45.145.94.0/23 IPv6: 2a0c:4d80::/29 Signature Algorithm: sha256WithRSAEncryption 4e:ad:b8:e1:04:f9:0f:5d:d9:06:df:3c:03:d4:9e:b7:7f:63: dc:e2:2d:14:15:32:b1:d2:29:f2:e6:d9:18:18:4a:db:86:a2: fa:7d:b5:c1:30:9e:db:08:71:66:69:1a:eb:61:a7:60:5a:29: da:18:7d:96:3a:95:a5:2b:72:85:6b:59:0f:89:54:52:1b:31: e8:6d:4c:b4:68:14:bf:42:03:70:1f:66:ec:8b:b3:68:b3:66: 3b:49:65:3b:d2:73:03:95:7c:28:7d:c0:44:c2:b0:c8:c3:ac: 76:1f:29:89:22:c0:65:09:6a:25:8a:51:97:b1:9a:37:6e:af: d1:a2:1d:f1:cc:b2:5e:d6:49:7e:7a:6b:7c:1b:a7:70:a9:a5: 6d:66:91:ca:8b:c2:76:62:88:4a:3c:c7:a9:52:51:d3:78:36: a6:ae:28:77:5c:7b:47:50:50:a1:f5:cb:7f:5e:c9:69:cc:d5: d0:5c:f3:3a:52:b4:1c:9d:73:00:bc:a5:42:f6:f1:d2:04:7e: ce:95:bb:11:af:d9:07:34:2e:a9:c4:e8:6d:ed:26:d6:bf:bf: a8:f9:e8:0d:3c:1b:6f:6e:40:93:c2:54:32:1b:1d:81:95:8d: e0:0f:c7:7b:06:1f:93:e4:a7:ee:32:cf:37:b5:33:d2:d8:47: 48:69:d6:20 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZudackcNrR7Yc4V+Pa5Jt/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTYwZTkwMDBjNzVhNzVkNjdlMzdmZTA3YjE0ZTA3YjIy YzU4ODcwHhcNMjYwMTA4MTE0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTFkMmM5ZGJkOTY4ODE1NjNiNzJkYTIxMGYyYmNhYjdmNGEzZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1bQ4QUuLOdgMEHZGdMLb4ZGeXFn fOtdX7YBXMRA5CCNt3ed+EQQtfYXJOqQtuDeSg2uvQAelmStcKpfwDWCUkTZZ2Jy 48wpHC0wRmeEQ/Y0dESXOX7E/3YZNYOmKY+mF69vKF0hWkase2YNXtABD1teqOZg O87JeLUBy6r/OEPIpWzj3S6qgt89RUcWTfjnhB6ApZuUGMo/yF1YWYL0k1aCBl8a k/Y2j9crYpDrDVcvk/U47YttG1frwzwnGXDlgius0jTPvO41Uqa4XVxjZ9W8q4h8 Rna4AUjBJGFwUdKH5UQJVeEg8/irOdfId5hRiyinzB1BZdT5s/jcvmLZywIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAEdLJ29logVY7ctohDyvKt/Sj2aMB8GA1UdIwQY MBaAFI2mDpAAx1p11n43/gexTgeyLFiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQt YjViOGQwMjQ0OGI4LzEvQVIwc25iMldpQlZqdHkyaUVQSzhxMzlLUFpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQtYjViOGQwMjQ0OGI4 LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALZFcAwQB LZFeMA0EAgACMAcDBQMqDE2AMA0GCSqGSIb3DQEBCwUAA4IBAQBOrbjhBPkPXdkG 3zwD1J63f2Pc4i0UFTKx0iny5tkYGErbhqL6fbXBMJ7bCHFmaRrrYadgWinaGH2W OpWlK3KFa1kPiVRSGzHobUy0aBS/QgNwH2bsi7Nos2Y7SWU70nMDlXwofcBEwrDI w6x2HymJIsBlCWolilGXsZo3bq/Roh3xzLJe1kl+emt8G6dwqaVtZpHKi8J2YohK PMepUlHTeDamrih3XHtHUFCh9ct/XslpzNXQXPM6UrQcnXMAvKVC9vHSBH7OlbsR r9kHNC6pxOht7SbWv7+o+egNPBtvbkCTwlQyGx2BlY3gD8d7Bh+T5KfuMs83tTPS 2EdIadYg -----END CERTIFICATE-----Generated at Mon Feb 2 08:01:08 2026 by rpki-client