This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/dYmQEZ2cKrbLqpv7XFpbPABN57U.roa File: dYmQEZ2cKrbLqpv7XFpbPABN57U.roa (raw, json) Hash identifier: nqNg9aI2+q6RU2gg3GpJIRCOLjZYP8tLEyC2RX+ANpk= Subject key identifier: 75:89:90:11:9D:9C:2A:B6:CB:AA:9B:FB:5C:5A:5B:3C:00:4D:E7:B5 Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Certificate serial: 019B7D5CEA5B8E71347628EE908D37EC278C Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/dYmQEZ2cKrbLqpv7XFpbPABN57U.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 45.136.104.0/24 maxlen: 24 45.136.105.0/24 maxlen: 24 45.136.107.0/24 maxlen: 24 185.26.144.0/24 maxlen: 24 185.26.145.0/24 maxlen: 24 185.26.146.0/24 maxlen: 24 185.26.147.0/24 maxlen: 24 185.126.176.0/24 maxlen: 24 185.153.228.0/24 maxlen: 24 185.153.229.0/24 maxlen: 24 185.153.230.0/24 maxlen: 24 185.153.231.0/24 maxlen: 24 185.162.144.0/24 maxlen: 24 185.162.147.0/24 maxlen: 24 185.171.24.0/24 maxlen: 24 185.171.25.0/24 maxlen: 24 185.171.26.0/24 maxlen: 24 185.171.27.0/24 maxlen: 24 185.247.136.0/24 maxlen: 24 185.247.138.0/24 maxlen: 24 185.247.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ea:5b:8e:71:34:76:28:ee:90:8d:37:ec:27:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=758990119d9c2ab6cbaa9bfb5c5a5b3c004de7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:43:10:4c:06:30:a4:3e:db:d4:7f:d2:a8: 05:14:36:54:93:e0:9b:da:aa:d6:ec:a6:b8:ef:dd: fc:91:10:82:b0:81:6d:76:16:c6:d9:0c:5a:d6:85: 79:47:f6:ee:53:6c:4c:39:9e:fc:aa:49:9b:f6:e9: 94:ea:a2:97:d9:5b:30:a1:c8:fb:98:a2:87:34:b0: 19:6c:81:2a:5a:6d:12:38:57:3a:83:ed:66:2c:cb: fd:3c:92:03:59:b2:4e:43:96:7e:20:3a:36:85:1d: 8d:d8:5a:ce:39:b7:9f:f8:35:62:80:77:89:a5:01: aa:fc:aa:9d:ec:36:f8:a1:9f:b4:d9:d8:60:5e:66: bf:ae:60:99:5b:68:54:f1:47:a0:bf:b9:5f:b8:db: 0f:56:e7:34:0b:39:16:e8:70:9f:18:ec:17:83:e7: 0f:a8:da:77:ed:38:71:6c:d7:6c:35:b1:90:be:3d: ab:aa:94:d9:c7:3c:95:c5:ed:c5:70:5f:08:35:d8: d2:dc:87:1e:8b:ca:b0:45:7a:bb:9f:8d:7c:c5:69: 1a:d5:dc:14:c1:64:1c:11:34:44:c1:ec:f9:93:de: af:af:87:8c:d1:6d:d4:f3:fb:5e:0f:4a:0a:99:65: e4:d3:60:7b:a4:74:94:e3:64:36:d6:16:26:12:9d: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:89:90:11:9D:9C:2A:B6:CB:AA:9B:FB:5C:5A:5B:3C:00:4D:E7:B5 X509v3 Authority Key Identifier: keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/dYmQEZ2cKrbLqpv7XFpbPABN57U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.104.0/23 45.136.107.0/24 185.26.144.0/22 185.126.176.0/24 185.153.228.0/22 185.162.144.0/24 185.162.147.0/24 185.171.24.0/22 185.247.136.0/24 185.247.138.0/23 Signature Algorithm: sha256WithRSAEncryption 11:67:1a:7a:b1:2e:09:e1:e3:3f:4b:57:54:9b:a0:27:b7:fb: 14:ec:f0:ee:d5:53:83:17:d4:5f:ff:80:cc:5c:29:e8:bc:9f: 23:f9:f5:4b:dc:31:94:22:51:b7:22:38:b7:54:84:89:5e:81: 11:8d:94:77:84:5a:05:4b:03:ef:6d:4c:ac:12:63:b4:33:36: 1c:f9:4c:54:53:15:f0:68:11:47:92:8f:9e:6f:fa:4f:4c:21: dc:44:cb:6d:7b:b6:c8:48:6f:60:07:ce:b2:9c:9c:3e:fd:fe: d0:80:83:e5:0b:13:fb:e5:86:90:54:2c:7d:55:55:7b:a1:c7: b4:be:f7:e1:45:83:a8:86:2b:39:c5:7e:94:a3:d8:0f:50:a7: 7d:b7:90:4e:ad:96:e4:cc:1e:b1:5b:c8:fe:bf:af:45:9b:b1: b8:a5:15:af:59:e3:8e:dd:fa:5f:54:16:bd:3c:74:67:ce:6b: 7c:d1:93:0e:30:56:43:f9:d4:33:84:1a:dc:88:86:15:fc:72: e3:71:33:9c:6e:fe:de:a4:ae:cf:2d:57:da:0e:35:5c:87:1b: 58:fb:d7:09:7f:f9:b7:f6:57:3b:ac:f6:d3:9e:42:63:bf:5d: 1f:33:f5:60:fc:a3:a0:71:3d:d9:e4:a4:2c:fa:b0:5f:7e:1e: 19:43:91:3c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt9XOpbjnE0dijukI037CeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx ODhhYzcwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTg5OTAxMTlkOWMyYWI2Y2JhYTliZmI1YzVhNWIzYzAwNGRlN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGZDEEwGMKQ+29R/0qgFFDZUk+Cb 2qrW7Ka47938kRCCsIFtdhbG2Qxa1oV5R/buU2xMOZ78qkmb9umU6qKX2Vswocj7 mKKHNLAZbIEqWm0SOFc6g+1mLMv9PJIDWbJOQ5Z+IDo2hR2N2FrOObef+DVigHeJ pQGq/Kqd7Db4oZ+02dhgXma/rmCZW2hU8Uegv7lfuNsPVuc0CzkW6HCfGOwXg+cP qNp37ThxbNdsNbGQvj2rqpTZxzyVxe3FcF8INdjS3Icei8qwRXq7n418xWka1dwU wWQcETREwez5k96vr4eM0W3U8/teD0oKmWXk02B7pHSU42Q21hYmEp1urQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFHWJkBGdnCq2y6qb+1xaWzwATee1MB8GA1UdIwQY MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh LTMzODk2MjBjMWJkNy8xL2RZbVFFWjJjS3JiTHFwdjdYRnBiUEFCTjU3VS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNhLTMzODk2MjBjMWJk Ny8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwVQYIKwYBBQUHAQcBAf8ERjBEMEIEAgABMDwDBAEtiGgD BAAtiGsDBAK5GpADBAC5frADBAK5meQDBAC5opADBAC5opMDBAK5qxgDBAC594gD BAG594owDQYJKoZIhvcNAQELBQADggEBABFnGnqxLgnh4z9LV1SboCe3+xTs8O7V U4MX1F//gMxcKei8nyP59UvcMZQiUbciOLdUhIlegRGNlHeEWgVLA+9tTKwSY7Qz Nhz5TFRTFfBoEUeSj55v+k9MIdxEy217tshIb2AHzrKcnD79/tCAg+ULE/vlhpBU LH1VVXuhx7S+9+FFg6iGKznFfpSj2A9Qp323kE6tluTMHrFbyP6/r0WbsbilFa9Z 447d+l9UFr08dGfOa3zRkw4wVkP51DOEGtyIhhX8cuNxM5xu/t6krs8tV9oONVyH G1j71wl/+bf2Vzus9tOeQmO/XR8z9WD8o6BxPdnkpCz6sF9+HhlDkTw= -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:42 2026 by rpki-client