This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/A0WL-QTaYCt0RnzYwBlw6geDuec.roa File: A0WL-QTaYCt0RnzYwBlw6geDuec.roa (raw, json) Hash identifier: eJbUJCQy9MPFVnVp1tldprt4bPEJXS2yCm2kEOXkmxI= Subject key identifier: 03:45:8B:F9:04:DA:60:2B:74:46:7C:D8:C0:19:70:EA:07:83:B9:E7 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80B9F05CDF63ED30DB7D705BD1AE0 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/A0WL-QTaYCt0RnzYwBlw6geDuec.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 45.88.102.0/24 maxlen: 24 45.88.103.0/24 maxlen: 24 178.159.93.0/24 maxlen: 24 178.159.95.0/24 maxlen: 24 185.238.88.0/24 maxlen: 24 185.238.89.0/24 maxlen: 24 185.238.90.0/24 maxlen: 24 185.238.91.0/24 maxlen: 24 194.113.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0b:9f:05:cd:f6:3e:d3:0d:b7:d7:05:bd:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03458bf904da602b74467cd8c01970ea0783b9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:12:b8:24:fb:b7:a7:44:91:ea:39:57:3b: 4a:fb:9b:9b:50:3a:66:9a:75:ae:72:9b:f9:cb:f9: ef:e3:68:f8:64:0c:98:70:a5:7e:45:c7:5a:ef:4b: 1e:18:8c:45:46:11:68:f7:40:72:6f:95:c5:a3:73: ea:dd:04:3d:23:81:5f:a8:5a:53:7b:9b:13:1b:06: 56:52:60:f6:9e:ef:aa:20:4b:17:a1:a7:55:47:b4: b5:5b:5c:be:1d:8c:c8:a9:10:b8:66:90:fd:89:b9: a4:fb:14:41:aa:e4:8f:26:1f:9a:9f:a7:69:15:ac: 85:63:57:35:76:05:93:fd:75:6b:d5:e9:19:3a:12: a6:02:12:83:c8:18:0e:2d:9b:23:54:76:f6:9a:26: 95:c6:ea:cb:66:82:8e:3a:31:1d:3b:81:84:ba:9a: bc:1f:4e:70:8d:bb:a2:ed:b2:89:c3:17:f6:6d:55: 78:31:42:1d:bc:a7:fb:e0:63:13:18:64:f8:87:71: da:db:97:25:cf:49:ed:69:da:50:32:71:52:89:a7: 1f:de:ee:11:17:16:e0:47:ad:1a:b9:eb:a6:d6:eb: 11:e6:11:5e:56:79:e8:b8:25:79:a1:a8:eb:9b:e6: 09:0d:72:02:5f:d7:c1:71:f7:dc:04:48:5b:e6:6e: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:45:8B:F9:04:DA:60:2B:74:46:7C:D8:C0:19:70:EA:07:83:B9:E7 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/A0WL-QTaYCt0RnzYwBlw6geDuec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.102.0/23 178.159.93.0/24 178.159.95.0/24 185.238.88.0/22 194.113.239.0/24 Signature Algorithm: sha256WithRSAEncryption 93:63:e3:4b:fe:1e:90:1f:e1:66:4c:9e:ae:2f:58:d6:12:27: cb:14:b8:d7:bc:83:ed:ab:54:cd:ed:63:f2:3d:20:71:6d:f4: 03:39:aa:99:30:c0:a0:a6:d1:ae:85:68:c1:45:d5:01:6c:79: 49:22:98:05:ac:6f:f8:e0:26:aa:bc:3b:60:c9:0d:78:e9:79: b1:de:fc:1b:7e:cc:e5:53:2a:2e:de:2f:93:df:5c:79:a7:32: c7:0f:9d:64:84:26:6c:50:31:92:84:63:d8:99:9b:35:ee:0c: 0f:6e:13:27:77:07:0c:1c:93:a0:66:de:f9:6a:33:61:b5:16: cb:08:57:71:42:c8:df:f7:1c:c7:81:be:16:8d:bf:8d:ba:51: 33:25:cc:d2:ab:af:41:b7:1d:71:fa:13:3e:81:dd:80:3d:bf: c2:54:60:aa:1a:90:44:64:c9:46:38:cf:c9:4a:42:5e:59:2e: c8:0f:97:8a:42:7a:63:23:b5:dc:75:68:58:ed:28:d0:8c:32: 5a:ec:fd:bc:81:7d:d8:20:00:64:25:32:d6:c6:3d:8f:eb:ef: 99:8a:34:1f:90:a8:27:a5:1c:67:44:7f:1a:f4:66:2f:b5:81: aa:25:21:22:8c:27:f5:fc:0a:02:af:c9:c8:ae:e5:06:78:af: 23:8d:51:d1 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6yAufBc32PtMNt9cFvRrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzQ1OGJmOTA0ZGE2MDJiNzQ0NjdjZDhjMDE5NzBlYTA3ODNiOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h0SuCT7t6dEkeo5VztK+5ubUDpm mnWucpv5y/nv42j4ZAyYcKV+Rcda70seGIxFRhFo90Byb5XFo3Pq3QQ9I4FfqFpT e5sTGwZWUmD2nu+qIEsXoadVR7S1W1y+HYzIqRC4ZpD9ibmk+xRBquSPJh+an6dp FayFY1c1dgWT/XVr1ekZOhKmAhKDyBgOLZsjVHb2miaVxurLZoKOOjEdO4GEupq8 H05wjbui7bKJwxf2bVV4MUIdvKf74GMTGGT4h3Ha25clz0ntadpQMnFSiacf3u4R FxbgR60aueum1usR5hFeVnnouCV5oajrm+YJDXICX9fBcffcBEhb5m5pnwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFANFi/kE2mArdEZ82MAZcOoHg7nnMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvQTBXTC1RVGFZQ3QwUm56WXdCbHc2Z2VEdWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLVhmAwQA sp9dAwQAsp9fAwQCue5YAwQAwnHvMA0GCSqGSIb3DQEBCwUAA4IBAQCTY+NL/h6Q H+FmTJ6uL1jWEifLFLjXvIPtq1TN7WPyPSBxbfQDOaqZMMCgptGuhWjBRdUBbHlJ IpgFrG/44CaqvDtgyQ146Xmx3vwbfszlUyou3i+T31x5pzLHD51khCZsUDGShGPY mZs17gwPbhMndwcMHJOgZt75ajNhtRbLCFdxQsjf9xzHgb4Wjb+NulEzJczSq69B tx1x+hM+gd2APb/CVGCqGpBEZMlGOM/JSkJeWS7ID5eKQnpjI7XcdWhY7SjQjDJa 7P28gX3YIABkJTLWxj2P6++ZijQfkKgnpRxnRH8a9GYvtYGqJSEijCf1/AoCr8nI ruUGeK8jjVHR -----END CERTIFICATE-----Generated at Tue Jan 20 17:24:51 2026 by rpki-client