This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/duEAUG-bxB2EvWz-YifRDzDM_48.roa File: duEAUG-bxB2EvWz-YifRDzDM_48.roa (raw, json) Hash identifier: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4= Subject key identifier: 76:E1:00:50:6F:9B:C4:1D:84:BD:6C:FE:62:27:D1:0F:30:CC:FF:8F Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Certificate serial: 019B9CB9F9B155F76C99EF56FF2E1E807E5A Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/duEAUG-bxB2EvWz-YifRDzDM_48.roa Signing time: Thu 08 Jan 2026 08:29:52 +0000 ROA not before: Thu 08 Jan 2026 08:29:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209902 IP address blocks: 45.139.96.0/22 maxlen: 24 80.88.232.0/22 maxlen: 24 185.91.68.0/24 maxlen: 24 185.166.180.0/22 maxlen: 24 185.243.204.0/22 maxlen: 24 195.35.118.0/23 maxlen: 24 195.211.165.0/24 maxlen: 24 2a12:5140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:b9:f9:b1:55:f7:6c:99:ef:56:ff:2e:1e:80:7e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Validity Not Before: Jan 8 08:29:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76e100506f9bc41d84bd6cfe6227d10f30ccff8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:f7:5a:c8:5c:f1:82:ab:f0:8a:bd:55:78: f7:cd:60:6a:2d:4a:8c:01:36:fa:98:2a:07:3d:2b: ec:46:17:f2:5e:16:d2:05:a7:d6:3d:11:a5:66:6b: 03:15:c6:6b:56:ab:ef:b9:2a:12:a5:92:3c:4d:78: 51:be:be:0a:d6:18:cf:18:7d:ee:37:94:03:ee:93: 85:76:08:bb:fb:f2:62:5a:68:10:22:1c:22:3b:09: 15:c7:90:3e:fa:3e:1f:6a:3a:c1:6b:8b:1e:71:23: 93:f2:91:67:bd:d9:11:36:ea:94:44:a2:48:ad:ee: e3:a7:da:d3:c3:42:16:4a:e8:a7:4b:20:57:26:9e: 12:5a:64:10:f8:dd:19:0d:42:73:2b:f5:84:6b:ee: 5c:3c:bc:39:67:1d:65:06:b7:e5:ae:c6:bb:03:85: 2c:ea:8f:f0:83:10:a8:57:03:ab:8c:72:19:96:72: d2:9b:5d:d0:0d:e4:67:1b:1f:4c:4b:1d:96:cb:16: 82:c2:ad:de:cf:f6:ed:cf:28:2a:e1:ba:14:42:90: 53:5c:9f:5a:af:00:32:04:3b:91:05:c3:10:43:12: fc:aa:e8:78:dd:73:7d:d8:24:41:2f:18:a5:43:f8: 1f:84:32:c3:0c:a0:1e:e7:3b:f7:a5:85:6f:59:c8: 2b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E1:00:50:6F:9B:C4:1D:84:BD:6C:FE:62:27:D1:0F:30:CC:FF:8F X509v3 Authority Key Identifier: keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/duEAUG-bxB2EvWz-YifRDzDM_48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.96.0/22 80.88.232.0/22 185.91.68.0/24 185.166.180.0/22 185.243.204.0/22 195.35.118.0/23 195.211.165.0/24 IPv6: 2a12:5140::/32 Signature Algorithm: sha256WithRSAEncryption a6:22:ea:5b:a3:7f:e1:09:a1:9b:21:ef:36:27:e0:bb:1c:32: d6:4b:23:b6:c8:8c:06:9e:70:a4:26:8b:88:51:55:61:e6:44: 68:70:4b:b4:cd:8d:4d:39:53:26:00:3a:47:74:91:d3:e7:bb: e1:b4:69:9e:49:04:88:e3:fd:e0:e3:43:0a:0a:36:7b:59:d5: ba:4e:e0:37:b1:ff:23:42:de:19:51:29:71:21:2f:82:72:65: 9a:93:f2:3a:be:48:88:55:ba:94:72:06:38:3d:ae:3f:2c:17: ba:b1:56:0a:1c:6b:e0:ea:83:68:a7:6d:b8:2e:84:7f:fc:fb: ea:84:5f:af:55:85:3a:d0:fd:76:8d:64:d4:41:9b:89:50:1f: ce:ea:f8:cf:de:9c:7d:10:03:fc:b0:3e:ac:4b:b5:d4:c1:96: 7a:70:9e:07:2b:59:d0:93:1b:4a:9a:fa:7f:0f:be:97:bf:5f: 44:51:4e:84:6d:e4:39:31:38:b0:2b:89:fc:7a:b9:2b:72:72: ce:a1:08:fa:ed:d4:05:59:9f:45:96:9a:0e:66:07:41:c4:06: ee:91:6a:be:37:6c:f8:c6:ce:0a:db:5e:0c:a4:4f:79:ee:09: 69:8a:19:b5:b0:98:cb:fd:ee:95:ff:fa:7b:62:b2:93:49:5c: 12:df:e4:c5 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZucufmxVfdsme9W/y4egH5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm YWRjODcwHhcNMjYwMTA4MDgyOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmUxMDA1MDZmOWJjNDFkODRiZDZjZmU2MjI3ZDEwZjMwY2NmZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ/3Wshc8YKr8Iq9VXj3zWBqLUqM ATb6mCoHPSvsRhfyXhbSBafWPRGlZmsDFcZrVqvvuSoSpZI8TXhRvr4K1hjPGH3u N5QD7pOFdgi7+/JiWmgQIhwiOwkVx5A++j4fajrBa4secSOT8pFnvdkRNuqURKJI re7jp9rTw0IWSuinSyBXJp4SWmQQ+N0ZDUJzK/WEa+5cPLw5Zx1lBrflrsa7A4Us 6o/wgxCoVwOrjHIZlnLSm13QDeRnGx9MSx2WyxaCwq3ez/btzygq4boUQpBTXJ9a rwAyBDuRBcMQQxL8quh43XN92CRBLxilQ/gfhDLDDKAe5zv3pYVvWcgr3wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFHbhAFBvm8QdhL1s/mIn0Q8wzP+PMB8GA1UdIwQY MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt NDdkMzA4NzEzN2Y0LzEvZHVFQVVHLWJ4QjJFdld6LVlpZlJEekRNXzQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0 LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCLYtgAwQC UFjoAwQAuVtEAwQCuaa0AwQCufPMAwQBwyN2AwQAw9OlMA0EAgACMAcDBQAqElFA MA0GCSqGSIb3DQEBCwUAA4IBAQCmIupbo3/hCaGbIe82J+C7HDLWSyO2yIwGnnCk JouIUVVh5kRocEu0zY1NOVMmADpHdJHT57vhtGmeSQSI4/3g40MKCjZ7WdW6TuA3 sf8jQt4ZUSlxIS+CcmWak/I6vkiIVbqUcgY4Pa4/LBe6sVYKHGvg6oNop224LoR/ /PvqhF+vVYU60P12jWTUQZuJUB/O6vjP3px9EAP8sD6sS7XUwZZ6cJ4HK1nQkxtK mvp/D76Xv19EUU6EbeQ5MTiwK4n8erkrcnLOoQj67dQFWZ9FlpoOZgdBxAbukWq+ N2z4xs4K214MpE957glpihm1sJjL/e6V//p7YrKTSVwS3+TF -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:59 2026 by rpki-client