This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/a149HuY71oYMfosTA9HCL8g-pdI.roa File: a149HuY71oYMfosTA9HCL8g-pdI.roa (raw, json) Hash identifier: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA= Subject key identifier: 6B:5E:3D:1E:E6:3B:D6:86:0C:7E:8B:13:03:D1:C2:2F:C8:3E:A5:D2 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB825D011A3D17AC21AA17D4C2A814 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/a149HuY71oYMfosTA9HCL8g-pdI.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43391 IP address blocks: 92.45.58.0/24 maxlen: 24 92.45.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:82:5d:01:1a:3d:17:ac:21:aa:17:d4:c2:a8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b5e3d1ee63bd6860c7e8b1303d1c22fc83ea5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:c0:c2:30:9d:26:8c:49:e5:bf:d7:b7:e7: 07:82:01:18:25:45:f6:9f:29:50:dd:1c:d0:ca:f7: cd:1b:23:3c:6c:45:f3:82:3b:54:e2:77:dc:9d:3b: b2:93:68:38:e0:8d:d7:eb:05:1c:86:5b:2e:7b:c6: 18:d8:d6:d5:ce:7f:4e:27:8f:41:4a:9b:62:91:ff: 47:d1:1d:00:8c:72:a8:ad:18:c1:d0:b6:3f:94:fd: 42:97:81:1d:53:44:ce:82:90:78:29:80:4a:79:8e: af:09:ba:97:c9:28:d2:c5:0d:48:a1:b7:66:e2:79: 72:34:d9:17:45:ae:98:65:fb:30:ef:eb:22:ba:3e: 66:65:fc:fd:ed:b6:bc:8f:e6:c7:bb:03:a7:9d:84: 01:67:40:af:75:5e:dd:ca:51:89:a6:b2:ed:ee:51: 9a:b7:47:c3:f5:f4:27:37:b6:a7:23:d0:4b:6a:f6: 48:26:33:41:4f:2d:65:18:0f:13:62:34:4f:05:7a: e6:9a:20:19:9c:22:f2:a2:5e:48:4e:fb:56:9e:76: c3:46:46:80:c1:e7:1d:62:30:ea:18:75:5f:6e:fc: 51:a1:47:a3:9b:ce:ae:e0:d3:75:a2:ed:b2:f6:47: 87:cb:26:3f:c4:6c:eb:85:49:ef:95:dd:56:16:d4: 1d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5E:3D:1E:E6:3B:D6:86:0C:7E:8B:13:03:D1:C2:2F:C8:3E:A5:D2 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/a149HuY71oYMfosTA9HCL8g-pdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.45.58.0/24 92.45.72.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:8c:0a:1c:97:17:c9:09:47:46:06:55:bb:6f:10:05:7f:8a: 07:76:19:24:d2:59:85:c8:03:4b:25:11:42:93:65:95:b8:6d: b5:b9:ea:6a:6f:a9:a7:85:ab:fa:c1:f0:46:db:2d:c9:7b:d3: bd:2b:2d:2a:65:3f:a6:af:ac:b1:ce:6d:a0:5e:4c:35:9f:c6: 82:c4:e8:1b:9d:b9:64:19:70:68:21:4e:0f:79:de:c8:c1:38: 43:13:43:fd:a0:4b:c6:4a:f8:32:c8:d2:15:12:a5:3c:e0:da: 39:77:00:98:d1:2a:bb:2c:92:f1:70:08:00:64:c3:a9:72:18: d2:75:1b:56:4b:5f:60:24:87:68:c0:1f:d0:0c:ae:d1:a7:43: aa:c7:5c:4e:df:38:bf:4c:df:63:70:7b:49:70:92:17:d2:be: 5f:20:b5:c5:73:30:3e:88:b7:ea:a6:53:ca:38:3d:24:e9:95: b2:07:50:3f:31:a1:29:3b:b2:ae:e7:54:b7:7b:d7:0c:ba:7d: 87:83:1c:cd:a2:9f:e6:c9:28:66:b6:ba:41:06:9b:14:7d:2e: 2b:64:8c:66:c0:14:20:9a:14:06:66:6e:d3:e4:c9:d9:f8:58: 0c:f8:5e:83:cc:56:02:7d:ea:a7:c9:d0:1f:ab:49:47:3c:90: b5:29:f9:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt264JdARo9F6whqhfUwqgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjVlM2QxZWU2M2JkNjg2MGM3ZThiMTMwM2QxYzIyZmM4M2VhNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3bAwjCdJoxJ5b/Xt+cHggEYJUX2 nylQ3RzQyvfNGyM8bEXzgjtU4nfcnTuyk2g44I3X6wUchlsue8YY2NbVzn9OJ49B Sptikf9H0R0AjHKorRjB0LY/lP1Cl4EdU0TOgpB4KYBKeY6vCbqXySjSxQ1Iobdm 4nlyNNkXRa6YZfsw7+siuj5mZfz97ba8j+bHuwOnnYQBZ0CvdV7dylGJprLt7lGa t0fD9fQnN7anI9BLavZIJjNBTy1lGA8TYjRPBXrmmiAZnCLyol5ITvtWnnbDRkaA wecdYjDqGHVfbvxRoUejm86u4NN1ou2y9keHyyY/xGzrhUnvld1WFtQdBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGtePR7mO9aGDH6LEwPRwi/IPqXSMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvYTE0OUh1WTcxb1lNZm9zVEE5SENMOGctcGRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXC06AwQA XC1IMA0GCSqGSIb3DQEBCwUAA4IBAQAejAoclxfJCUdGBlW7bxAFf4oHdhkk0lmF yANLJRFCk2WVuG21uepqb6mnhav6wfBG2y3Je9O9Ky0qZT+mr6yxzm2gXkw1n8aC xOgbnblkGXBoIU4Ped7IwThDE0P9oEvGSvgyyNIVEqU84No5dwCY0Sq7LJLxcAgA ZMOpchjSdRtWS19gJIdowB/QDK7Rp0Oqx1xO3zi/TN9jcHtJcJIX0r5fILXFczA+ iLfqplPKOD0k6ZWyB1A/MaEpO7Ku51S3e9cMun2HgxzNop/myShmtrpBBpsUfS4r ZIxmwBQgmhQGZm7T5MnZ+FgM+F6DzFYCfeqnydAfq0lHPJC1Kfml -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:14 2026 by rpki-client