This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/iGCKYLy5OifXCBp6y__hXqwBY-E.roa File: iGCKYLy5OifXCBp6y__hXqwBY-E.roa (raw, json) Hash identifier: qEhWJEE9s0Q/c+XhoUDfPYQIsNqLlNPUuYN8qig5CL8= Subject key identifier: 88:60:8A:60:BC:B9:3A:27:D7:08:1A:7A:CB:FF:E1:5E:AC:01:63:E1 Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444 Certificate serial: 019B7C805A4AD33A482896F3A19A201DB0DA Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/iGCKYLy5OifXCBp6y__hXqwBY-E.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51185 IP address blocks: 45.157.64.0/24 maxlen: 24 45.157.65.0/24 maxlen: 24 45.157.66.0/24 maxlen: 24 45.157.67.0/24 maxlen: 24 94.124.64.0/21 maxlen: 21 94.124.64.0/24 maxlen: 24 94.124.65.0/24 maxlen: 24 94.124.66.0/24 maxlen: 24 94.124.67.0/24 maxlen: 24 94.124.68.0/24 maxlen: 24 94.124.69.0/24 maxlen: 24 94.124.70.0/24 maxlen: 24 94.124.71.0/24 maxlen: 24 178.248.48.0/24 maxlen: 24 178.248.49.0/24 maxlen: 24 178.248.50.0/24 maxlen: 24 178.248.51.0/24 maxlen: 24 178.248.52.0/24 maxlen: 24 178.248.53.0/24 maxlen: 24 178.248.54.0/24 maxlen: 24 178.248.55.0/24 maxlen: 24 185.45.208.0/24 maxlen: 24 185.45.209.0/24 maxlen: 24 185.45.210.0/24 maxlen: 24 185.45.211.0/24 maxlen: 24 185.187.156.0/24 maxlen: 24 185.187.157.0/24 maxlen: 24 185.187.158.0/24 maxlen: 24 185.187.159.0/24 maxlen: 24 2a02:2890::/48 maxlen: 48 2a02:2890:efff::/48 maxlen: 48 2a02:2890:ffff::/48 maxlen: 48 2a02:2891::/48 maxlen: 48 2a02:2891:1::/48 maxlen: 48 2a02:2891:2::/48 maxlen: 48 2a02:2891:4::/48 maxlen: 48 2a02:2891:9::/48 maxlen: 48 2a02:2891:10::/48 maxlen: 48 2a02:2891:11::/48 maxlen: 48 2a02:2891:12::/48 maxlen: 48 2a02:2891:13::/48 maxlen: 48 2a02:2891:15::/48 maxlen: 48 2a02:2891:16::/48 maxlen: 48 2a02:2891:18::/48 maxlen: 48 2a02:2891:29::/48 maxlen: 48 2a02:2891:ff::/48 maxlen: 48 2a02:2891:157::/48 maxlen: 48 2a02:2891:160::/48 maxlen: 48 2a02:2892:32::/48 maxlen: 48 2a02:2892:40::/48 maxlen: 48 2a02:2892:53::/48 maxlen: 48 2a02:2893:158::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5a:4a:d3:3a:48:28:96:f3:a1:9a:20:1d:b0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88608a60bcb93a27d7081a7acbffe15eac0163e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:55:1f:50:d3:57:71:a6:d3:98:10:1f:8e: 69:73:93:86:6f:3c:3c:a9:ee:b9:58:25:02:1e:f8: db:05:24:62:2d:61:d9:59:9c:81:63:01:2a:16:75: 58:c2:79:4a:a0:1c:f4:67:32:1c:4a:96:c0:bf:d1: 2a:c1:38:6e:ba:d5:ad:44:bb:41:b4:25:11:95:68: a9:ef:c4:aa:48:04:9e:95:3f:ad:f9:55:f0:45:97: d3:3a:38:79:cf:7a:c7:af:55:45:8a:1a:85:0b:ee: bf:36:5f:41:8a:81:3c:23:e3:7e:4f:a6:0e:61:7e: 08:0b:f0:2e:4e:a1:25:68:02:39:af:43:c2:ff:f2: 94:ee:7e:a0:1d:c9:db:74:84:22:a5:db:cc:cc:5e: bc:1f:99:e4:72:9a:47:74:89:3e:24:b2:cf:42:83: a4:e8:81:df:ee:99:f1:bf:81:f7:9b:a2:74:20:34: 21:20:99:3f:9f:6b:59:b9:92:18:28:1f:d2:bf:a8: 7c:55:d0:75:3a:d4:26:99:16:39:32:c0:a5:35:28: 09:75:4b:f0:ea:98:f8:5a:83:01:49:dc:7e:ed:32: 15:5b:4b:05:3f:e8:f1:ce:4d:b3:1b:98:c9:38:31: 27:bd:00:61:72:f1:39:35:5b:07:c5:80:de:e5:29: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:60:8A:60:BC:B9:3A:27:D7:08:1A:7A:CB:FF:E1:5E:AC:01:63:E1 X509v3 Authority Key Identifier: keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/iGCKYLy5OifXCBp6y__hXqwBY-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.64.0/22 94.124.64.0/21 178.248.48.0/21 185.45.208.0/22 185.187.156.0/22 IPv6: 2a02:2890::/48 2a02:2890:efff::/48 2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff 2a02:2891:4::/48 2a02:2891:9::/48 2a02:2891:10::/46 2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff 2a02:2891:18::/48 2a02:2891:29::/48 2a02:2891:ff::/48 2a02:2891:157::/48 2a02:2891:160::/48 2a02:2892:32::/48 2a02:2892:40::/48 2a02:2892:53::/48 2a02:2893:158::/48 Signature Algorithm: sha256WithRSAEncryption 37:b8:b8:5e:a6:2a:70:70:65:ac:b6:6c:7d:b3:30:b7:93:01: 96:29:22:4a:36:30:8d:4a:c3:80:8d:c0:b4:09:06:45:2c:b2: e5:11:8a:58:8d:b0:57:ec:0a:64:db:cd:64:d0:e4:71:dd:9a: 7c:cf:8f:c5:5f:fd:9e:19:a8:e5:7e:95:13:e2:13:4c:fb:d2: e8:d4:21:f3:be:9d:50:4d:39:59:05:b5:e7:ba:e3:dc:00:90: ce:69:6d:d0:40:c0:66:f4:ec:57:a5:92:48:48:4f:21:f7:df: ea:d3:2c:0c:3f:b8:b0:25:c0:29:1c:2f:34:1d:74:9b:e5:a8: 90:27:34:4c:fc:55:89:ae:2f:2a:08:95:a4:23:79:a8:ff:6c: 58:e5:ec:b5:85:75:8a:43:d2:e3:5b:90:d3:8d:97:f9:cd:5f: 66:b3:d1:82:34:75:f1:46:d7:e5:a4:16:58:ca:47:68:d5:7b: 85:72:ce:94:0d:e2:2d:6c:20:7c:a2:8a:1a:e5:7c:41:9b:13: 68:6f:d8:1d:1f:b8:3d:fa:35:cf:42:25:b2:38:38:72:1a:bd: c1:d1:45:ff:41:5e:86:72:11:b9:89:e9:cc:23:b6:bc:3e:ce: 43:56:d9:8c:b3:f5:ca:45:de:aa:28:b4:ef:49:06:ac:d5:46: 4f:ad:19:2c -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt8gFpK0zpIKJbzoZogHbDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzFjODViZjVjNTM0NzFhOTk3ZWY5ZmE5OTlkMGMxNmJl ODU0NDQwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODYwOGE2MGJjYjkzYTI3ZDcwODFhN2FjYmZmZTE1ZWFjMDE2M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vRVH1DTV3Gm05gQH45pc5OGbzw8 qe65WCUCHvjbBSRiLWHZWZyBYwEqFnVYwnlKoBz0ZzIcSpbAv9EqwThuutWtRLtB tCURlWip78SqSASelT+t+VXwRZfTOjh5z3rHr1VFihqFC+6/Nl9BioE8I+N+T6YO YX4IC/AuTqElaAI5r0PC//KU7n6gHcnbdIQipdvMzF68H5nkcppHdIk+JLLPQoOk 6IHf7pnxv4H3m6J0IDQhIJk/n2tZuZIYKB/Sv6h8VdB1OtQmmRY5MsClNSgJdUvw 6pj4WoMBSdx+7TIVW0sFP+jxzk2zG5jJODEnvQBhcvE5NVsHxYDe5Sn5CQIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFIhgimC8uTon1wgaesv/4V6sAWPhMB8GA1UdIwQY MBaAFJHByFv1xTRxqZfvn6mZ0MFr6FREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NISVdfWEZOSEdwbC0tZnFablF3V3ZvVkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wMzQ3ZDMtZTU0Yy00NGMwLThmN2Et NDUxNDM3NGU2ZmZhLzEvaUdDS1lMeTVPaWZYQ0JwNnlfX2hYcXdCWS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wMzQ3ZDMtZTU0Yy00NGMwLThmN2EtNDUxNDM3NGU2ZmZh LzEva2NISVdfWEZOSEdwbC0tZnFablF3V3ZvVkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHpBggrBgEFBQcBBwEB/wSB2TCB1jAkBAIAATAeAwQCLZ1A AwQDXnxAAwQDsvgwAwQCuS3QAwQCubucMIGtBAIAAjCBpgMHACoCKJAAAAMHACoC KJDv/zASAwcAKgIokP//AwcAKgIokQACAwcAKgIokQAEAwcAKgIokQAJAwcCKgIo kQAQMBIDBwAqAiiRABUDBwAqAiiRABYDBwAqAiiRABgDBwAqAiiRACkDBwAqAiiR AP8DBwAqAiiRAVcDBwAqAiiRAWADBwAqAiiSADIDBwAqAiiSAEADBwAqAiiSAFMD BwAqAiiTAVgwDQYJKoZIhvcNAQELBQADggEBADe4uF6mKnBwZay2bH2zMLeTAZYp Iko2MI1Kw4CNwLQJBkUssuURiliNsFfsCmTbzWTQ5HHdmnzPj8Vf/Z4ZqOV+lRPi E0z70ujUIfO+nVBNOVkFtee649wAkM5pbdBAwGb07FelkkhITyH33+rTLAw/uLAl wCkcLzQddJvlqJAnNEz8VYmuLyoIlaQjeaj/bFjl7LWFdYpD0uNbkNONl/nNX2az 0YI0dfFG1+WkFljKR2jVe4VyzpQN4i1sIHyiihrlfEGbE2hv2B0fuD36Nc9CJbI4 OHIavcHRRf9BXoZyEbmJ6cwjtrw+zkNW2Yyz9cpF3qootO9JBqzVRk+tGSw= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:16 2026 by rpki-client