This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/q96d216QAtoDZvD6M_G3XQbxl48.roa File: q96d216QAtoDZvD6M_G3XQbxl48.roa (raw, json) Hash identifier: NAZ21w6eBGbL4I9za8usnSXilM010YnKcAiEgEn3/0g= Subject key identifier: AB:DE:9D:DB:5E:90:02:DA:03:66:F0:FA:33:F1:B7:5D:06:F1:97:8F Certificate issuer: /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3 Certificate serial: 019B78A2CB0475696AE0A4894D72507659E1 Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/q96d216QAtoDZvD6M_G3XQbxl48.roa Signing time: Thu 01 Jan 2026 08:18:13 +0000 ROA not before: Thu 01 Jan 2026 08:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199710 IP address blocks: 185.42.236.0/23 maxlen: 23 185.42.236.0/24 maxlen: 24 185.42.237.0/24 maxlen: 24 185.42.238.0/23 maxlen: 23 185.42.238.0/24 maxlen: 24 185.42.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:cb:04:75:69:6a:e0:a4:89:4d:72:50:76:59:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3 Validity Not Before: Jan 1 08:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abde9ddb5e9002da0366f0fa33f1b75d06f1978f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:6d:d2:75:e1:ad:ec:62:ef:7d:c1:44:19: e0:d5:86:8c:5a:bd:a2:14:76:67:b0:5d:1c:30:96: 27:4c:69:9f:06:61:c1:60:9a:3a:4b:5c:4b:11:6b: 4f:d6:c5:15:52:26:6b:03:c6:b2:d5:47:e3:7d:42: c0:52:08:30:9d:3d:f5:1e:5b:4a:4a:04:66:c4:32: 57:b8:c3:a3:09:09:ef:fb:51:b7:fa:0b:4e:17:8d: b8:08:37:f6:bd:b8:31:77:d9:91:6f:27:3d:67:41: 37:44:50:e6:05:61:58:e1:80:1c:a9:f0:82:63:59: a2:d2:6d:e5:d9:06:a6:68:29:a9:c9:58:aa:c0:87: bc:f9:74:36:f8:2e:c2:bb:47:73:95:23:34:e6:98: 3d:b7:66:ba:70:89:5b:b5:a6:3c:5f:d8:b0:4b:97: 6b:71:76:28:d2:4b:37:6e:f3:37:1f:66:f7:ef:1f: bc:65:8f:29:51:82:71:bc:a9:b3:35:8e:cb:ec:36: 32:1d:06:63:37:9f:2b:db:84:3a:b6:6b:9d:6e:c3: 78:52:fd:b4:a6:bb:83:34:27:96:e4:2e:00:54:7d: ec:5b:48:76:92:f4:d0:23:56:5f:b4:3a:68:c0:af: b3:cd:63:1a:66:67:85:11:28:fb:62:a1:8a:09:87: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DE:9D:DB:5E:90:02:DA:03:66:F0:FA:33:F1:B7:5D:06:F1:97:8F X509v3 Authority Key Identifier: keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/q96d216QAtoDZvD6M_G3XQbxl48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.236.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:eb:57:9f:ea:a4:30:b1:18:95:ab:ae:87:fd:85:69:aa:57: b9:40:19:ca:37:9c:e3:dd:72:26:cd:57:2e:a3:af:ad:c9:3d: 2a:3c:57:f8:19:28:d6:e9:7b:24:17:52:90:33:1c:0f:5d:15: 90:a6:d2:f0:5e:47:63:77:d7:29:e2:4a:ca:42:5d:64:99:ce: 91:74:cc:3e:58:ff:84:76:31:08:c5:25:97:01:58:ea:53:08: 88:fe:0a:64:db:65:96:6a:6f:86:7e:00:e8:5b:25:bc:16:30: b2:f4:fd:46:dd:f9:77:2c:10:cc:43:d4:b4:08:a2:70:17:e5: 5e:91:76:93:2e:33:66:f9:aa:97:04:5f:2c:7c:c9:91:9f:47: 49:87:e2:42:8e:d5:61:9a:c3:6f:9b:8f:67:f8:95:85:d1:8a: ad:ae:86:a4:5a:4f:44:0b:e1:83:f3:77:a0:49:64:6b:7e:08: 44:54:5a:07:45:03:50:ff:3e:c8:36:8e:19:cb:03:ac:86:c4: 4e:14:11:32:38:1e:93:68:ad:d4:1d:49:b3:a5:c3:9a:85:7a: 77:14:47:80:9a:2a:29:22:5a:38:26:24:a1:1c:ff:57:59:49: 4f:e5:f1:8c:f0:34:1d:71:e1:f6:47:43:fc:35:8d:98:1b:74: 48:39:8a:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ossEdWlq4KSJTXJQdlnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1Y2Y5ZGMwYzdiN2ZjNGEzMzZlNGVlZTU3YjFlYzE5NDhj OGRkZjMwHhcNMjYwMTAxMDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmRlOWRkYjVlOTAwMmRhMDM2NmYwZmEzM2YxYjc1ZDA2ZjE5NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnRt0nXhrexi733BRBng1YaMWr2i FHZnsF0cMJYnTGmfBmHBYJo6S1xLEWtP1sUVUiZrA8ay1UfjfULAUggwnT31HltK SgRmxDJXuMOjCQnv+1G3+gtOF424CDf2vbgxd9mRbyc9Z0E3RFDmBWFY4YAcqfCC Y1mi0m3l2QamaCmpyViqwIe8+XQ2+C7Cu0dzlSM05pg9t2a6cIlbtaY8X9iwS5dr cXYo0ks3bvM3H2b37x+8ZY8pUYJxvKmzNY7L7DYyHQZjN58r24Q6tmudbsN4Uv20 pruDNCeW5C4AVH3sW0h2kvTQI1ZftDpowK+zzWMaZmeFESj7YqGKCYe9hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvendtekALaA2bw+jPxt10G8ZePMB8GA1UdIwQY MBaAFEXPncDHt/xKM25O7lex7BlIyN3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84OTIwZmMtYmJhZS00MTMyLWI3NTIt ZWU3MmYyYjNhNDczLzEvcTk2ZDIxNlFBdG9EWnZENk1fRzNYUWJ4bDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84OTIwZmMtYmJhZS00MTMyLWI3NTItZWU3MmYyYjNhNDcz LzEvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSrsMA0G CSqGSIb3DQEBCwUAA4IBAQAb61ef6qQwsRiVq66H/YVpqle5QBnKN5zj3XImzVcu o6+tyT0qPFf4GSjW6XskF1KQMxwPXRWQptLwXkdjd9cp4krKQl1kmc6RdMw+WP+E djEIxSWXAVjqUwiI/gpk22WWam+GfgDoWyW8FjCy9P1G3fl3LBDMQ9S0CKJwF+Ve kXaTLjNm+aqXBF8sfMmRn0dJh+JCjtVhmsNvm49n+JWF0YqtroakWk9EC+GD83eg SWRrfghEVFoHRQNQ/z7INo4ZywOshsROFBEyOB6TaK3UHUmzpcOahXp3FEeAmiop Ilo4JiShHP9XWUlP5fGM8DQdceH2R0P8NY2YG3RIOYpY -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:14 2026 by rpki-client