This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/0hmiaf5Kc6xDAED47s7aPdVF9fY.roa File: 0hmiaf5Kc6xDAED47s7aPdVF9fY.roa (raw, json) Hash identifier: SL7Y/UyShd6DpHJFIitylp3NQgotmVeP5DXgAQQ/V/s= Subject key identifier: D2:19:A2:69:FE:4A:73:AC:43:00:40:F8:EE:CE:DA:3D:D5:45:F5:F6 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79113C2BAA5CE8D833584650B2F9AE38 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/0hmiaf5Kc6xDAED47s7aPdVF9fY.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.43.146.0/24 maxlen: 24 104.222.169.0/24 maxlen: 24 104.222.170.0/24 maxlen: 24 104.222.171.0/24 maxlen: 24 104.222.172.0/24 maxlen: 24 104.222.173.0/24 maxlen: 24 104.222.174.0/24 maxlen: 24 104.222.175.0/24 maxlen: 24 104.233.20.0/24 maxlen: 24 104.239.13.0/24 maxlen: 24 104.239.16.0/22 maxlen: 22 104.239.20.0/22 maxlen: 22 104.239.32.0/22 maxlen: 22 104.239.36.0/22 maxlen: 22 104.239.54.0/24 maxlen: 24 104.239.57.0/24 maxlen: 24 104.239.90.0/23 maxlen: 23 104.239.92.0/23 maxlen: 23 104.243.193.0/24 maxlen: 24 104.243.194.0/24 maxlen: 24 104.243.195.0/24 maxlen: 24 104.243.196.0/24 maxlen: 24 104.243.197.0/24 maxlen: 24 104.243.198.0/24 maxlen: 24 104.243.207.0/24 maxlen: 24 216.173.80.0/23 maxlen: 23 216.173.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3c:2b:aa:5c:e8:d8:33:58:46:50:b2:f9:ae:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d219a269fe4a73ac430040f8eeceda3dd545f5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:e4:ce:60:bd:c2:8d:b2:4a:ce:3c:41:c1: 90:50:db:0f:05:77:08:ba:c1:d8:ac:f2:6a:41:a8: 14:29:49:8a:15:dc:83:54:3c:fa:86:69:4a:3f:8b: cb:de:f6:d7:73:e7:cd:70:6c:0d:73:1f:3c:78:67: 60:9f:f2:34:ca:fb:24:8d:53:97:6b:35:9a:9c:27: 21:78:e1:ed:84:ad:bf:1d:d8:fe:b3:38:3b:c5:b4: a2:a7:01:fa:ce:ee:9a:c4:10:3d:8e:e5:06:8f:90: 40:c2:7b:7a:98:23:4f:e7:76:6a:92:d2:4f:7b:83: 22:7d:4a:ab:9f:7b:c0:f5:3d:3d:56:94:b6:69:42: 5a:0e:55:af:d3:d8:ea:0b:3e:bf:75:93:a7:34:bd: 76:73:4e:3c:26:0d:4f:8b:fe:99:3c:69:a7:4f:c6: 6f:f9:92:fc:d7:a4:72:92:dd:be:90:e1:c2:eb:1d: 2d:e4:d7:9e:fa:0f:f6:ed:a7:86:86:9f:d8:88:63: 8f:04:28:59:2a:67:04:18:54:1a:f6:fe:a5:b1:d9: 00:d2:55:db:fc:a4:8c:2d:5d:49:a9:5d:2c:2d:de: 5d:a6:4b:d4:b8:e8:42:f0:c8:ff:03:98:c4:92:88: 51:e4:86:b0:57:a8:f7:a3:4e:0a:8e:8f:26:5e:3c: 92:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:19:A2:69:FE:4A:73:AC:43:00:40:F8:EE:CE:DA:3D:D5:45:F5:F6 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/0hmiaf5Kc6xDAED47s7aPdVF9fY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.146.0/24 104.222.169.0-104.222.175.255 104.233.20.0/24 104.239.13.0/24 104.239.16.0/21 104.239.32.0/21 104.239.54.0/24 104.239.57.0/24 104.239.90.0-104.239.93.255 104.243.193.0-104.243.198.255 104.243.207.0/24 216.173.80.0/23 216.173.122.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:c9:bf:9f:38:08:ba:e1:df:0a:02:3c:7c:96:a0:54:b6:ce: 4a:27:d3:c5:16:8b:89:3a:a9:b3:37:f6:de:39:44:61:03:8b: 52:82:9c:d8:b9:f9:d2:d3:72:aa:0d:28:5a:40:a6:59:94:dc: 9b:fa:8e:cd:d5:ad:3d:cb:56:48:86:e2:d0:89:ae:a7:6c:d1: be:b3:ce:e4:61:19:4b:34:b6:f7:61:58:d5:c9:45:25:47:f0: 32:3e:4a:a1:31:ed:99:18:01:1f:63:6f:6d:94:56:0e:c9:ed: a5:7a:51:27:4d:b4:2e:df:fd:47:ee:0e:29:24:7c:e6:83:70: 08:6a:c4:91:1a:00:cc:1f:df:4a:c5:33:0a:df:3c:07:6c:19: 27:aa:82:ce:73:63:24:68:59:a4:d1:27:a8:a5:52:a9:4b:9b: 8a:b4:83:0c:53:38:d2:fc:1d:47:b7:f9:c2:ee:0a:31:2a:82: 4a:93:a5:5a:dd:b0:ab:09:7c:c8:d9:43:58:f1:b5:b9:cc:b7: b9:0d:52:a9:2f:01:60:4f:03:be:8d:0d:78:7d:a3:38:15:f0: 78:e6:fe:8b:4c:1c:5d:a9:b1:f9:87:7c:ef:c6:25:54:33:5a: b4:7e:ee:16:37:22:14:57:23:22:86:e2:fc:ad:f0:a8:7b:e0: 5d:48:9f:08 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt5ETwrqlzo2DNYRlCy+a44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjE5YTI2OWZlNGE3M2FjNDMwMDQwZjhlZWNlZGEzZGQ1NDVmNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx/kzmC9wo2ySs48QcGQUNsPBXcI usHYrPJqQagUKUmKFdyDVDz6hmlKP4vL3vbXc+fNcGwNcx88eGdgn/I0yvskjVOX azWanCcheOHthK2/Hdj+szg7xbSipwH6zu6axBA9juUGj5BAwnt6mCNP53ZqktJP e4MifUqrn3vA9T09VpS2aUJaDlWv09jqCz6/dZOnNL12c048Jg1Pi/6ZPGmnT8Zv +ZL816Rykt2+kOHC6x0t5Nee+g/27aeGhp/YiGOPBChZKmcEGFQa9v6lsdkA0lXb /KSMLV1JqV0sLd5dpkvUuOhC8Mj/A5jEkohR5IawV6j3o04Kjo8mXjySKwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFNIZomn+SnOsQwBA+O7O2j3VRfX2MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvMGhtaWFmNUtjNnhEQUVENDdzN2FQZFZGOWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQALSuSMAwD BABo3qkDBARo3qADBABo6RQDBABo7w0DBANo7xADBANo7yADBABo7zYDBABo7zkw DAMEAWjvWgMEAWjvXDAMAwQAaPPBAwQAaPPGAwQAaPPPAwQB2K1QAwQB2K16MA0G CSqGSIb3DQEBCwUAA4IBAQA8yb+fOAi64d8KAjx8lqBUts5KJ9PFFouJOqmzN/be OURhA4tSgpzYufnS03KqDShaQKZZlNyb+o7N1a09y1ZIhuLQia6nbNG+s87kYRlL NLb3YVjVyUUlR/AyPkqhMe2ZGAEfY29tlFYOye2lelEnTbQu3/1H7g4pJHzmg3AI asSRGgDMH99KxTMK3zwHbBknqoLOc2MkaFmk0SeopVKpS5uKtIMMUzjS/B1Ht/nC 7goxKoJKk6Va3bCrCXzI2UNY8bW5zLe5DVKpLwFgTwO+jQ14faM4FfB45v6LTBxd qbH5h3zvxiVUM1q0fu4WNyIUVyMihuL8rfCoe+BdSJ8I -----END CERTIFICATE-----Generated at Fri Jan 2 02:37:36 2026 by rpki-client