This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/an0UggxMVOLMbfkQRZg-oFGpksM.roa File: an0UggxMVOLMbfkQRZg-oFGpksM.roa (raw, json) Hash identifier: RrOytt0pmrmZwpnV5VgzGRGQLeTwpMRDbcMRpSijJI4= Subject key identifier: 6A:7D:14:82:0C:4C:54:E2:CC:6D:F9:10:45:98:3E:A0:51:A9:92:C3 Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee Certificate serial: 019BFE59B47E24F27AC2B5A030C68F12BC06 Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/an0UggxMVOLMbfkQRZg-oFGpksM.roa Signing time: Tue 27 Jan 2026 07:27:30 +0000 ROA not before: Tue 27 Jan 2026 07:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58172 IP address blocks: 45.133.232.0/23 maxlen: 23 45.135.131.0/24 maxlen: 24 91.213.49.0/24 maxlen: 24 94.131.224.0/24 maxlen: 24 94.131.225.0/24 maxlen: 24 94.131.226.0/23 maxlen: 23 94.131.226.0/24 maxlen: 24 94.131.227.0/24 maxlen: 24 94.131.228.0/24 maxlen: 24 94.131.229.0/24 maxlen: 24 94.131.230.0/24 maxlen: 24 94.131.231.0/24 maxlen: 24 94.131.232.0/24 maxlen: 24 94.131.233.0/24 maxlen: 24 94.131.234.0/23 maxlen: 23 94.131.234.0/24 maxlen: 24 94.131.235.0/24 maxlen: 24 94.131.236.0/23 maxlen: 23 94.131.236.0/24 maxlen: 24 94.131.237.0/24 maxlen: 24 94.131.239.0/24 maxlen: 24 157.22.232.0/24 maxlen: 24 157.22.233.0/24 maxlen: 24 157.22.237.0/24 maxlen: 24 157.22.238.0/24 maxlen: 24 157.22.239.0/24 maxlen: 24 185.191.212.0/24 maxlen: 24 185.210.139.0/24 maxlen: 24 193.148.60.0/24 maxlen: 24 194.35.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:59:b4:7e:24:f2:7a:c2:b5:a0:30:c6:8f:12:bc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee Validity Not Before: Jan 27 07:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a7d14820c4c54e2cc6df91045983ea051a992c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:d9:8a:69:cd:07:40:48:77:22:4e:65:64: 22:ce:b8:5a:63:e9:82:50:60:06:8d:b6:ff:50:01: 22:92:89:9a:2c:5f:f4:d7:a9:95:4e:ca:a5:f7:42: 50:33:83:55:2c:d2:4e:01:a8:9d:57:35:5d:ff:f7: 64:3b:d1:84:95:12:c5:20:dc:81:65:f8:26:4c:b4: 7e:29:2f:85:f3:74:65:be:dc:ae:e8:fb:68:ad:9a: bd:d0:46:d0:b1:60:a6:42:a1:67:b4:3c:59:d6:0c: 5c:10:02:e5:19:d4:13:37:fd:2f:39:37:91:a1:bb: 53:4c:ba:93:25:b5:ee:46:32:63:55:fc:c4:6e:08: e3:e7:0a:25:1a:48:df:53:a9:e2:36:43:2e:57:9f: e1:bd:f0:bf:63:99:f6:06:00:ed:6d:d7:74:60:23: d4:e0:03:f1:49:71:00:bc:06:3b:a1:c7:45:08:97: bb:f0:83:54:0b:13:2f:fb:9a:05:b3:97:4e:73:a0: d0:bc:9a:8d:df:07:45:f8:2f:57:0a:50:44:67:fc: 37:10:6f:66:94:2b:17:dd:57:73:63:a7:40:8d:d7: 5f:33:a8:75:52:66:4e:13:0b:9e:9a:b7:e1:17:90: 2e:67:2d:a7:85:dd:3d:0d:54:97:5b:e1:bc:18:07: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7D:14:82:0C:4C:54:E2:CC:6D:F9:10:45:98:3E:A0:51:A9:92:C3 X509v3 Authority Key Identifier: keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/an0UggxMVOLMbfkQRZg-oFGpksM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.232.0/23 45.135.131.0/24 91.213.49.0/24 94.131.224.0-94.131.237.255 94.131.239.0/24 157.22.232.0/23 157.22.237.0-157.22.239.255 185.191.212.0/24 185.210.139.0/24 193.148.60.0/24 194.35.124.0/24 Signature Algorithm: sha256WithRSAEncryption 04:81:fc:19:c4:4e:58:8f:dd:31:f9:77:2b:bf:2b:a3:3c:26: 75:8f:7f:7f:d3:ce:1d:d3:9a:5e:bf:7b:7f:9a:db:fa:5a:c5: d7:24:03:3f:08:3c:1e:e7:1c:bb:53:f9:a8:7d:37:23:2f:ea: 06:3f:2e:24:1a:9a:f0:a0:45:7c:6b:aa:23:04:e9:5c:6a:ac: b3:df:1c:3e:9d:c0:59:86:18:38:93:cb:38:13:d0:66:1e:48: c7:0c:5b:d8:6f:a1:af:5e:cc:e4:b6:a1:7d:12:ce:04:b2:88: b3:af:59:ed:bc:f2:bc:9d:14:a3:93:01:9b:4c:46:5d:e6:a9: 9f:97:29:c5:45:36:3d:3c:16:74:82:62:4a:c5:cf:57:75:30: d0:7d:ce:64:f3:ad:ac:ce:c2:db:94:a6:7e:2a:3e:d2:a3:6d: da:a1:49:c0:9f:94:31:31:4f:2f:98:e0:29:7b:8a:8a:51:28: f4:58:f3:99:e4:03:4f:db:99:2e:13:43:73:d9:88:ec:2f:70: 5c:82:a6:16:65:5c:59:29:0a:e6:5a:db:3c:bd:be:7d:dc:87: d1:50:d7:b9:f1:30:8d:d6:f9:e7:12:2f:7f:28:5b:c5:31:21: 23:38:70:cd:30:8a:d5:ed:2e:80:a7:23:d1:37:f1:77:ca:bb: 96:57:ba:89 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZv+WbR+JPJ6wrWgMMaPErwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2M2NjVlNTFjYzRjYjVjYWYwNWI4Mjk0ODQzZTI3MzNh MTNkZWUwHhcNMjYwMTI3MDcyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTdkMTQ4MjBjNGM1NGUyY2M2ZGY5MTA0NTk4M2VhMDUxYTk5MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksnZimnNB0BIdyJOZWQizrhaY+mC UGAGjbb/UAEikomaLF/016mVTsql90JQM4NVLNJOAaidVzVd//dkO9GElRLFINyB ZfgmTLR+KS+F83Rlvtyu6PtorZq90EbQsWCmQqFntDxZ1gxcEALlGdQTN/0vOTeR obtTTLqTJbXuRjJjVfzEbgjj5wolGkjfU6niNkMuV5/hvfC/Y5n2BgDtbdd0YCPU 4APxSXEAvAY7ocdFCJe78INUCxMv+5oFs5dOc6DQvJqN3wdF+C9XClBEZ/w3EG9m lCsX3VdzY6dAjddfM6h1UmZOEwuemrfhF5AuZy2nhd09DVSXW+G8GAdRuQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFGp9FIIMTFTizG35EEWYPqBRqZLDMB8GA1UdIwQY MBaAFEw8Zl5RzEy1yvBbgpSEPiczoT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUt MWE2NWI5MWJlZTU4LzEvYW4wVWdneE1WT0xNYmZrUVJaZy1vRkdwa3NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUtMWE2NWI5MWJlZTU4 LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQBLYXoAwQA LYeDAwQAW9UxMAwDBAVeg+ADBAFeg+wDBABeg+8DBAGdFugwDAMEAJ0W7QMEBJ0W 4AMEALm/1AMEALnSiwMEAMGUPAMEAMIjfDANBgkqhkiG9w0BAQsFAAOCAQEABIH8 GcROWI/dMfl3K78rozwmdY9/f9POHdOaXr97f5rb+lrF1yQDPwg8Huccu1P5qH03 Iy/qBj8uJBqa8KBFfGuqIwTpXGqss98cPp3AWYYYOJPLOBPQZh5Ixwxb2G+hr17M 5LahfRLOBLKIs69Z7bzyvJ0Uo5MBm0xGXeapn5cpxUU2PTwWdIJiSsXPV3Uw0H3O ZPOtrM7C25Smfio+0qNt2qFJwJ+UMTFPL5jgKXuKilEo9FjzmeQDT9uZLhNDc9mI 7C9wXIKmFmVcWSkK5lrbPL2+fdyH0VDXufEwjdb55xIvfyhbxTEhIzhwzTCK1e0u gKcj0Tfxd8q7lle6iQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:03 2026 by rpki-client