This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/INXyDuwAPEqy1wE9aqdsndRieZ4.roa File: INXyDuwAPEqy1wE9aqdsndRieZ4.roa (raw, json) Hash identifier: C+DYGdKOJ0zyzigGQJD1Dwmeg7946X6g5JoRPeQvr9s= Subject key identifier: 20:D5:F2:0E:EC:00:3C:4A:B2:D7:01:3D:6A:A7:6C:9D:D4:62:79:9E Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 019B77C6EBEE312A6DCE1D3CF91A473078E4 Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/INXyDuwAPEqy1wE9aqdsndRieZ4.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 45.142.180.0/24 maxlen: 24 45.142.181.0/24 maxlen: 24 45.142.182.0/24 maxlen: 24 45.142.183.0/24 maxlen: 24 45.153.32.0/24 maxlen: 24 45.153.35.0/24 maxlen: 24 92.246.84.0/24 maxlen: 24 92.246.85.0/24 maxlen: 24 92.246.86.0/24 maxlen: 24 146.19.169.0/24 maxlen: 24 195.62.46.0/24 maxlen: 24 2a0d:c2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:eb:ee:31:2a:6d:ce:1d:3c:f9:1a:47:30:78:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d5f20eec003c4ab2d7013d6aa76c9dd462799e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b3:90:0e:5c:6b:72:4d:16:63:e5:28:32:70: 56:00:57:af:05:ad:61:38:bd:f7:01:4c:80:76:d0: 14:30:24:e7:28:3c:fc:a2:90:92:74:40:73:b4:2d: 1d:9e:ad:3c:9a:40:ba:f2:c2:40:e8:7c:6e:cf:f1: e2:4a:f2:e6:21:c7:9e:c9:34:50:e6:e7:04:87:4e: 6f:2e:03:55:39:16:e5:1e:b0:55:1a:45:de:9a:77: 4d:d6:a5:07:6b:2e:86:4e:8c:eb:3b:1e:8c:cd:a5: 31:1f:23:70:b3:db:e5:56:73:4c:67:da:d6:cc:68: d5:9a:88:8a:d2:ed:0b:70:91:c8:bf:46:85:e2:91: 65:35:ee:6a:71:4f:bf:a1:3b:21:94:df:9f:6b:b7: 19:f6:36:9f:ba:b0:42:13:89:37:a4:27:6d:87:04: 5b:22:88:94:fd:5d:29:02:44:4b:26:0b:2b:c2:e4: 68:4a:ca:a7:17:a4:3c:41:47:34:6e:a0:57:af:c5: 74:7a:6e:93:3a:b8:0b:cc:d6:e6:0a:a8:5b:01:72: 90:a8:76:b0:08:e9:1b:ec:6d:64:1a:18:62:1c:06: 93:20:76:65:84:d0:32:75:88:1d:e8:73:6d:d0:53: 4b:57:f6:f9:97:a7:89:e8:e0:fa:3e:fa:a5:d0:a6: 8e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:F2:0E:EC:00:3C:4A:B2:D7:01:3D:6A:A7:6C:9D:D4:62:79:9E X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/INXyDuwAPEqy1wE9aqdsndRieZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.180.0/22 45.153.32.0/24 45.153.35.0/24 92.246.84.0-92.246.86.255 146.19.169.0/24 195.62.46.0/24 IPv6: 2a0d:c2c0::/29 Signature Algorithm: sha256WithRSAEncryption d8:f6:36:0a:b8:c9:84:49:1a:53:60:cc:9a:94:cb:65:bb:2e: dc:a8:1f:b4:81:4c:88:78:a8:12:f8:5c:0f:23:c9:35:1b:96: dd:5c:39:c0:38:43:3d:98:22:ef:13:f9:72:9a:20:eb:f4:bd: 1e:f6:0a:45:6b:31:29:f4:6b:9d:a2:c3:ff:b0:97:3a:73:e5: 79:8c:f5:df:60:2d:c6:af:ec:7d:f8:79:a6:41:3e:08:1f:46: d9:3b:58:e1:4b:bf:4f:c3:42:f8:92:59:d4:dc:26:c4:5d:38: f8:5d:37:e8:2b:b0:60:41:d6:ed:3d:62:16:f3:8b:4f:e3:b1: 68:d1:de:7c:4c:8d:58:84:57:35:10:9b:a3:6a:d8:24:4c:ae: ee:43:01:11:42:96:a4:cb:cb:f9:67:97:4a:57:b7:36:af:b8: 38:38:69:dc:47:26:e0:0b:bb:2a:89:c3:99:6b:32:c3:8d:44: 39:cd:0f:00:f1:f5:26:b0:19:ca:29:1e:03:23:b9:bf:50:2c: 1a:8a:a2:73:c6:b9:85:f2:3e:42:06:45:b5:23:6d:0f:47:99: 3e:dc:70:dd:86:63:87:bd:56:50:84:75:38:e1:4e:be:b2:24: 5a:b3:05:bf:6e:33:65:52:b3:60:06:51:5d:69:0e:01:0a:da: 8f:30:3b:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt3xuvuMSptzh08+RpHMHjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQ1ZjIwZWVjMDAzYzRhYjJkNzAxM2Q2YWE3NmM5ZGQ0NjI3OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrOQDlxrck0WY+UoMnBWAFevBa1h OL33AUyAdtAUMCTnKDz8opCSdEBztC0dnq08mkC68sJA6Hxuz/HiSvLmIceeyTRQ 5ucEh05vLgNVORblHrBVGkXemndN1qUHay6GTozrOx6MzaUxHyNws9vlVnNMZ9rW zGjVmoiK0u0LcJHIv0aF4pFlNe5qcU+/oTshlN+fa7cZ9jafurBCE4k3pCdthwRb IoiU/V0pAkRLJgsrwuRoSsqnF6Q8QUc0bqBXr8V0em6TOrgLzNbmCqhbAXKQqHaw COkb7G1kGhhiHAaTIHZlhNAydYgd6HNt0FNLV/b5l6eJ6OD6Pvql0KaOHQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFCDV8g7sADxKstcBPWqnbJ3UYnmeMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEvSU5YeUR1d0FQRXF5MXdFOWFxZHNuZFJpZVo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQCLY60AwQA LZkgAwQALZkjMAwDBAJc9lQDBABc9lYDBACSE6kDBADDPi4wDQQCAAIwBwMFAyoN wsAwDQYJKoZIhvcNAQELBQADggEBANj2Ngq4yYRJGlNgzJqUy2W7LtyoH7SBTIh4 qBL4XA8jyTUblt1cOcA4Qz2YIu8T+XKaIOv0vR72CkVrMSn0a52iw/+wlzpz5XmM 9d9gLcav7H34eaZBPggfRtk7WOFLv0/DQviSWdTcJsRdOPhdN+grsGBB1u09Yhbz i0/jsWjR3nxMjViEVzUQm6Nq2CRMru5DARFClqTLy/lnl0pXtzavuDg4adxHJuAL uyqJw5lrMsONRDnNDwDx9SawGcopHgMjub9QLBqKonPGuYXyPkIGRbUjbQ9HmT7c cN2GY4e9VlCEdTjhTr6yJFqzBb9uM2VSs2AGUV1pDgEK2o8wOyA= -----END CERTIFICATE-----Generated at Mon Jan 19 17:50:12 2026 by rpki-client