This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/RdkaFRkALmXWppyPovm4lLqOuf4.roa File: RdkaFRkALmXWppyPovm4lLqOuf4.roa (raw, json) Hash identifier: k34PYcy+lvNt5vspbUF9swbWIcTSvLB8s2++XmOPKz0= Subject key identifier: 45:D9:1A:15:19:00:2E:65:D6:A6:9C:8F:A2:F9:B8:94:BA:8E:B9:FE Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922 Certificate serial: 019B77C67EAC20E46D9B4B89449C142214FE Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/RdkaFRkALmXWppyPovm4lLqOuf4.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39442 IP address blocks: 92.39.104.0/21 maxlen: 21 185.125.72.0/22 maxlen: 22 185.183.48.0/22 maxlen: 22 185.183.48.0/23 maxlen: 23 188.247.32.0/19 maxlen: 19 188.247.40.0/24 maxlen: 24 188.247.44.0/22 maxlen: 22 188.247.44.0/24 maxlen: 24 188.247.54.0/24 maxlen: 24 188.247.55.0/24 maxlen: 24 188.247.56.0/21 maxlen: 21 213.234.0.0/20 maxlen: 20 213.234.0.0/24 maxlen: 24 213.234.1.0/24 maxlen: 24 213.234.5.0/24 maxlen: 24 213.234.6.0/24 maxlen: 24 213.234.8.0/24 maxlen: 24 213.234.10.0/24 maxlen: 24 213.234.11.0/24 maxlen: 24 213.234.16.0/21 maxlen: 21 213.234.16.0/22 maxlen: 22 213.234.16.0/24 maxlen: 24 213.234.18.0/23 maxlen: 23 213.234.20.0/24 maxlen: 24 213.234.21.0/24 maxlen: 24 213.234.22.0/24 maxlen: 24 217.149.176.0/20 maxlen: 20 217.149.176.0/21 maxlen: 21 217.149.176.0/24 maxlen: 24 217.149.177.0/24 maxlen: 24 217.149.178.0/24 maxlen: 24 217.149.179.0/24 maxlen: 24 217.149.181.0/24 maxlen: 24 217.149.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7e:ac:20:e4:6d:9b:4b:89:44:9c:14:22:14:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45d91a1519002e65d6a69c8fa2f9b894ba8eb9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:88:07:f6:d3:30:1b:f0:5b:43:15:53:3d:37: 62:3a:64:bf:1b:53:5d:8e:b1:62:a8:f7:40:ea:48: e9:1a:d0:24:51:94:09:b1:91:2f:1c:7f:7c:0f:65: 41:e1:9c:40:fc:11:b0:5a:37:c0:53:df:b1:dd:46: b5:ec:fb:ee:83:34:34:2b:fe:84:5d:0a:99:3e:92: 0e:c2:1f:6b:47:62:7d:5d:7e:49:55:d8:57:3c:cf: 08:5d:58:3b:25:09:88:9f:c5:0a:76:e3:41:85:81: 77:09:e4:40:87:ed:da:74:45:95:73:0d:ee:fc:f9: 07:c1:f7:dc:bb:34:62:3a:25:bc:f2:91:b8:37:9f: 8e:6e:15:fa:f5:a8:d2:f5:44:98:bf:a0:95:db:9d: 38:31:8f:ad:16:3d:e7:79:b5:97:e3:b8:ba:89:0f: 09:cd:d0:72:d6:bf:3f:33:d7:1c:92:d5:25:00:0b: f7:8e:90:30:d0:1d:be:03:92:35:f3:ea:cd:94:86: af:64:51:89:c3:ef:f0:04:61:64:8a:07:51:7a:11: 4b:7c:fa:7f:38:17:51:f8:48:23:fa:cb:34:9f:c9: 2d:c0:09:2f:86:08:f5:cb:69:3e:78:4f:c1:15:bc: 40:6e:4f:cd:3c:1c:15:60:2d:8c:ce:9c:52:47:02: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D9:1A:15:19:00:2E:65:D6:A6:9C:8F:A2:F9:B8:94:BA:8E:B9:FE X509v3 Authority Key Identifier: keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/RdkaFRkALmXWppyPovm4lLqOuf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.39.104.0/21 185.125.72.0/22 185.183.48.0/22 188.247.32.0/19 213.234.0.0-213.234.23.255 217.149.176.0/20 Signature Algorithm: sha256WithRSAEncryption 07:3d:e4:20:90:5b:1b:78:72:ce:2c:8f:ef:55:77:57:13:43: 2f:a6:e8:db:8e:09:b9:2a:99:55:81:02:79:31:e9:84:c3:e6: 39:22:81:9d:c3:79:78:b2:e9:85:6c:67:47:5e:42:2a:27:f8: 6a:e8:b9:ca:19:60:cc:bf:d4:af:78:dc:31:d0:74:34:70:37: 52:37:5d:b0:42:14:64:c5:4e:f8:41:dc:5c:f7:48:d2:64:1b: 08:b3:a3:15:cf:4d:30:89:ba:ea:84:6b:cf:00:65:51:5c:1a: 42:7d:5e:41:50:10:e9:6c:1d:2a:c7:0b:7e:88:bc:de:2e:78: 49:a3:a5:36:34:d5:72:51:43:89:05:41:c7:99:c5:a0:1a:14: ea:79:a5:69:bf:c3:b5:24:fe:a3:45:7f:37:2b:5a:91:27:65: 01:09:f4:d9:96:bb:e6:6d:5a:c4:b2:0d:41:76:05:11:35:56: 0f:62:4e:09:03:c9:72:b4:b2:ee:0d:ae:2c:bc:36:e7:ed:10: 21:ca:12:6d:dd:9c:e3:ec:43:e8:6b:16:9b:0a:d9:ec:7b:0e: fd:8c:a2:f9:bb:27:54:2f:36:f8:5d:72:78:99:a4:b9:3e:8c: 79:b2:e2:c3:39:39:d9:d0:97:d5:74:df:16:5f:87:e7:1a:56: 9d:fc:20:6b -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt3xn6sIORtm0uJRJwUIhT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm OTc5MjIwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWQ5MWExNTE5MDAyZTY1ZDZhNjljOGZhMmY5Yjg5NGJhOGViOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44gH9tMwG/BbQxVTPTdiOmS/G1Nd jrFiqPdA6kjpGtAkUZQJsZEvHH98D2VB4ZxA/BGwWjfAU9+x3Ua17PvugzQ0K/6E XQqZPpIOwh9rR2J9XX5JVdhXPM8IXVg7JQmIn8UKduNBhYF3CeRAh+3adEWVcw3u /PkHwffcuzRiOiW88pG4N5+ObhX69ajS9USYv6CV2504MY+tFj3nebWX47i6iQ8J zdBy1r8/M9ccktUlAAv3jpAw0B2+A5I18+rNlIavZFGJw+/wBGFkigdRehFLfPp/ OBdR+Egj+ss0n8ktwAkvhgj1y2k+eE/BFbxAbk/NPBwVYC2MzpxSRwLjLwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFEXZGhUZAC5l1qacj6L5uJS6jrn+MB8GA1UdIwQY MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt N2JjNzNlZWUxNDQ3LzEvUmRrYUZSa0FMbVhXcHB5UG92bTRsTHFPdWY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3 LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArAwQDXCdoAwQC uX1IAwQCubcwAwQFvPcgMAsDAwHV6gMEA9XqEAMEBNmVsDANBgkqhkiG9w0BAQsF AAOCAQEABz3kIJBbG3hyziyP71V3VxNDL6bo244JuSqZVYECeTHphMPmOSKBncN5 eLLphWxnR15CKif4aui5yhlgzL/Ur3jcMdB0NHA3UjddsEIUZMVO+EHcXPdI0mQb CLOjFc9NMIm66oRrzwBlUVwaQn1eQVAQ6WwdKscLfoi83i54SaOlNjTVclFDiQVB x5nFoBoU6nmlab/DtST+o0V/NytakSdlAQn02Za75m1axLINQXYFETVWD2JOCQPJ crSy7g2uLLw25+0QIcoSbd2c4+xD6GsWmwrZ7HsO/Yyi+bsnVC82+F1yeJmkuT6M ebLiwzk52dCX1XTfFl+H5xpWnfwgaw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:30 2026 by rpki-client