This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/evqIQ62pq9HFEcdH_-WKPhcBbYw.roa File: evqIQ62pq9HFEcdH_-WKPhcBbYw.roa (raw, json) Hash identifier: VZQtdw4+Di8RNvXjyIH1fsmL43AUcBeytD8J8Dq3nNM= Subject key identifier: 7A:FA:88:43:AD:A9:AB:D1:C5:11:C7:47:FF:E5:8A:3E:17:01:6D:8C Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F8F81ABE6AAE2F46D865A35058F1 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/evqIQ62pq9HFEcdH_-WKPhcBbYw.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35751 IP address blocks: 45.11.124.0/22 maxlen: 22 45.81.76.0/22 maxlen: 22 45.129.204.0/22 maxlen: 22 45.132.20.0/22 maxlen: 22 45.133.224.0/22 maxlen: 22 45.134.52.0/22 maxlen: 22 45.135.28.0/22 maxlen: 22 45.139.108.0/22 maxlen: 22 45.139.168.0/22 maxlen: 22 45.143.244.0/22 maxlen: 22 45.144.168.0/22 maxlen: 22 192.109.91.0/24 maxlen: 24 192.109.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f8:f8:1a:be:6a:ae:2f:46:d8:65:a3:50:58:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7afa8843ada9abd1c511c747ffe58a3e17016d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:fd:0a:07:2e:c3:6a:ca:cd:13:ed:cb:bd: ba:e2:27:8f:7a:d8:48:0a:b5:c4:fc:8e:87:b5:9e: 7c:c5:57:7b:6e:78:6d:7a:0c:3b:62:7a:3f:1b:95: 61:6e:97:b0:f9:c8:ed:75:38:4b:a2:e4:15:e6:89: c7:de:88:8f:65:b8:53:b5:92:d9:3c:c6:bb:ee:ac: a4:0c:ba:64:99:7f:a7:89:4f:9d:0c:1f:b1:7f:85: eb:0e:67:ea:0f:e9:28:63:75:b9:3b:a1:54:48:11: a2:76:fc:31:d1:16:c0:6b:0d:d1:17:2c:53:03:5c: ff:f7:12:be:b2:09:b6:8a:79:40:07:45:c6:13:d0: 6d:c0:60:8d:73:14:f2:25:3d:96:a6:d1:6f:cc:5a: be:c0:37:37:23:c8:62:21:be:55:02:18:de:7f:ca: f9:07:3f:28:e2:84:50:12:2e:9e:0a:de:c6:28:2e: 78:65:52:16:78:5a:7a:78:70:14:be:3e:81:06:a9: 79:87:0c:2f:52:3d:56:ee:13:f7:30:1e:9a:70:2a: a7:7d:18:a2:53:24:7e:e2:45:f6:b7:7e:52:2d:95: 26:fe:be:6c:e0:9f:08:8c:4c:97:b3:0e:4b:1f:77: b2:fd:b9:13:3b:e4:f6:c4:55:36:8b:6f:a0:4b:16: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FA:88:43:AD:A9:AB:D1:C5:11:C7:47:FF:E5:8A:3E:17:01:6D:8C X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/evqIQ62pq9HFEcdH_-WKPhcBbYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.124.0/22 45.81.76.0/22 45.129.204.0/22 45.132.20.0/22 45.133.224.0/22 45.134.52.0/22 45.135.28.0/22 45.139.108.0/22 45.139.168.0/22 45.143.244.0/22 45.144.168.0/22 192.109.91.0/24 192.109.100.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:0a:82:71:bd:10:bb:38:85:c4:30:34:3d:89:a7:07:1e:3c: 8d:4f:01:e7:8a:bc:95:a5:de:2b:0f:22:17:3b:4e:d9:57:a7: 82:f7:21:02:fe:d9:6d:2f:23:5f:76:2d:f6:c3:8f:d6:d0:43: df:28:ee:fc:c6:76:48:07:91:1b:48:75:ec:5d:38:51:6d:29: 6d:52:16:2b:b1:ac:ba:1b:c4:d1:23:d0:dd:ab:19:d2:14:c3: 80:7f:a4:20:ba:e5:51:88:50:78:f1:6f:2b:3e:cb:00:62:46: dd:93:6d:27:33:26:b3:7f:7c:3f:1e:35:28:3d:bf:aa:39:39: 63:11:e4:be:8b:c6:3f:a1:55:a3:48:44:fe:9a:5f:7e:ec:b6: 26:ab:a2:a2:a9:1c:79:38:71:a2:2a:1e:f4:15:79:c5:fa:7b: 46:bd:39:18:53:a4:12:d4:92:cb:b0:41:83:33:48:3a:9d:4c: 8d:4b:b8:38:3f:5b:a3:a4:e6:c9:34:cc:80:2a:13:f4:d3:3a: f3:3a:f2:f1:86:fe:8f:76:ed:0c:01:41:30:48:41:a3:d4:a2: 24:04:01:74:51:4f:e5:81:82:80:43:4c:68:7d:90:2d:d6:f1: d9:4a:05:f2:1e:b4:b6:fd:76:6d:09:c9:96:fb:61:8a:90:0b: bf:05:40:97 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt7Nfj4Gr5qri9G2GWjUFjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWZhODg0M2FkYTlhYmQxYzUxMWM3NDdmZmU1OGEzZTE3MDE2ZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysn9Cgcuw2rKzRPty7264iePethI CrXE/I6HtZ58xVd7bnhtegw7Yno/G5Vhbpew+cjtdThLouQV5onH3oiPZbhTtZLZ PMa77qykDLpkmX+niU+dDB+xf4XrDmfqD+koY3W5O6FUSBGidvwx0RbAaw3RFyxT A1z/9xK+sgm2inlAB0XGE9BtwGCNcxTyJT2WptFvzFq+wDc3I8hiIb5VAhjef8r5 Bz8o4oRQEi6eCt7GKC54ZVIWeFp6eHAUvj6BBql5hwwvUj1W7hP3MB6acCqnfRii UyR+4kX2t35SLZUm/r5s4J8IjEyXsw5LH3ey/bkTO+T2xFU2i2+gSxZKXwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFHr6iEOtqavRxRHHR//lij4XAW2MMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvZXZxSVE2MnBxOUhGRWNkSF8tV0tQaGNCYll3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQCLQt8AwQC LVFMAwQCLYHMAwQCLYQUAwQCLYXgAwQCLYY0AwQCLYccAwQCLYtsAwQCLYuoAwQC LY/0AwQCLZCoAwQAwG1bAwQAwG1kMA0GCSqGSIb3DQEBCwUAA4IBAQBtCoJxvRC7 OIXEMDQ9iacHHjyNTwHniryVpd4rDyIXO07ZV6eC9yEC/tltLyNfdi32w4/W0EPf KO78xnZIB5EbSHXsXThRbSltUhYrsay6G8TRI9DdqxnSFMOAf6QguuVRiFB48W8r PssAYkbdk20nMyazf3w/HjUoPb+qOTljEeS+i8Y/oVWjSET+ml9+7LYmq6KiqRx5 OHGiKh70FXnF+ntGvTkYU6QS1JLLsEGDM0g6nUyNS7g4P1ujpObJNMyAKhP00zrz OvLxhv6Pdu0MAUEwSEGj1KIkBAF0UU/lgYKAQ0xofZAt1vHZSgXyHrS2/XZtCcmW +2GKkAu/BUCX -----END CERTIFICATE-----Generated at Thu Jan 15 13:20:11 2026 by rpki-client