This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/xGHWOsQ-oGvGbTeCgIS3fXd5JaA.roa File: xGHWOsQ-oGvGbTeCgIS3fXd5JaA.roa (raw, json) Hash identifier: VwXX+SRRTPtXinf9q3qUgR4Eg1IQPx2UwBKPXO+6CZs= Subject key identifier: C4:61:D6:3A:C4:3E:A0:6B:C6:6D:37:82:80:84:B7:7D:77:79:25:A0 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C134133672B6823B23BAAB97B6F2417 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/xGHWOsQ-oGvGbTeCgIS3fXd5JaA.roa Signing time: Fri 02 Jan 2026 00:19:55 +0000 ROA not before: Fri 02 Jan 2026 00:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 45.93.213.0/24 maxlen: 24 45.93.214.0/24 maxlen: 24 45.151.234.0/24 maxlen: 24 45.151.235.0/24 maxlen: 24 77.83.245.0/24 maxlen: 24 77.83.246.0/24 maxlen: 24 160.20.156.0/24 maxlen: 24 160.20.157.0/24 maxlen: 24 185.68.186.0/24 maxlen: 24 185.68.187.0/24 maxlen: 24 185.71.214.0/24 maxlen: 24 185.71.215.0/24 maxlen: 24 185.73.180.0/24 maxlen: 24 185.73.181.0/24 maxlen: 24 185.75.132.0/24 maxlen: 24 185.75.135.0/24 maxlen: 24 185.76.243.0/24 maxlen: 24 185.77.138.0/24 maxlen: 24 185.77.139.0/24 maxlen: 24 185.79.132.0/24 maxlen: 24 185.79.133.0/24 maxlen: 24 185.88.98.0/24 maxlen: 24 185.88.99.0/24 maxlen: 24 185.95.228.0/24 maxlen: 24 185.100.156.0/24 maxlen: 24 185.100.159.0/24 maxlen: 24 185.102.114.0/24 maxlen: 24 185.111.24.0/24 maxlen: 24 185.112.59.0/24 maxlen: 24 185.168.208.0/24 maxlen: 24 185.177.238.0/24 maxlen: 24 185.182.130.0/24 maxlen: 24 185.182.131.0/24 maxlen: 24 193.38.228.0/24 maxlen: 24 193.38.229.0/24 maxlen: 24 193.38.230.0/24 maxlen: 24 193.38.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:41:33:67:2b:68:23:b2:3b:aa:b9:7b:6f:24:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c461d63ac43ea06bc66d37828084b77d777925a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:e7:2c:80:9d:0e:c5:03:5b:9d:a8:2a:18: e9:7a:4c:36:6b:5a:d7:85:1c:7b:83:f4:93:35:f8: 46:19:11:4b:a1:78:98:1a:81:ad:de:fb:4b:e3:38: 0c:8f:2f:ef:1d:67:2b:31:e0:1d:76:69:9e:91:37: 79:7e:c1:30:a2:33:85:85:6a:80:d1:29:43:95:7e: 2f:50:d3:42:d1:7d:23:bb:0e:76:40:6d:10:ae:3a: e3:5d:8b:b4:78:48:9f:1b:92:5e:09:73:ea:fa:8e: a2:cb:67:b5:01:69:09:1a:82:3e:7b:e1:d9:7a:50: 1e:83:ca:66:b0:5d:6b:50:54:2b:71:19:95:33:ab: b0:eb:1f:41:9c:36:da:85:c0:b4:dd:2f:de:de:1c: ca:54:3f:5e:d9:64:97:19:6c:af:11:d4:92:e8:cb: 01:e1:11:24:79:16:9f:73:ef:03:5b:c7:65:f6:ef: 2e:59:78:e7:ed:c7:8b:05:52:d4:2b:f3:6b:20:48: 70:26:fa:9b:25:48:28:57:d8:fc:c0:b9:d1:c5:d5: 2f:d2:12:f1:a7:e2:7b:34:9d:69:ce:0a:e4:9c:94: 38:24:06:24:3a:1e:18:24:ab:7f:93:f2:20:2b:06: 53:ee:13:60:ea:f9:35:ff:cf:58:f6:4f:3f:8e:b8: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:61:D6:3A:C4:3E:A0:6B:C6:6D:37:82:80:84:B7:7D:77:79:25:A0 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/xGHWOsQ-oGvGbTeCgIS3fXd5JaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.213.0-45.93.214.255 45.151.234.0/23 77.83.245.0-77.83.246.255 160.20.156.0/23 185.68.186.0/23 185.71.214.0/23 185.73.180.0/23 185.75.132.0/24 185.75.135.0/24 185.76.243.0/24 185.77.138.0/23 185.79.132.0/23 185.88.98.0/23 185.95.228.0/24 185.100.156.0/24 185.100.159.0/24 185.102.114.0/24 185.111.24.0/24 185.112.59.0/24 185.168.208.0/24 185.177.238.0/24 185.182.130.0/23 193.38.228.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:6e:5c:81:ef:aa:7d:2e:e3:7c:4b:20:0a:c7:ad:a5:0e:f7: 5f:0e:d3:21:40:ea:ec:24:e4:1c:35:2a:f4:7c:7e:ea:f2:b7: 2b:da:58:2d:db:fe:2a:e1:84:c5:6d:a5:95:37:89:68:8d:14: c2:30:83:83:f8:e4:e9:d3:67:32:86:4b:30:76:14:09:96:93: 30:8a:0f:69:ac:91:57:f9:9e:ca:3c:ff:cd:91:75:90:8c:28: bb:f1:02:dd:31:31:a2:45:e6:c4:b0:38:4e:74:9b:e7:e6:02: cc:ed:fe:e6:b9:46:3b:b3:85:90:68:02:34:06:15:c7:49:0e: d9:10:93:45:b0:ae:24:86:a9:09:86:fa:1c:af:7e:3f:02:38: f4:cc:07:36:bb:9e:41:19:06:04:29:a4:e5:1e:1c:99:3d:49: 3e:cc:8a:d2:61:be:8a:45:3d:1b:1a:00:a4:a9:63:e2:66:b8: 98:d0:70:38:72:8c:7a:1f:b6:c4:e5:78:cc:c4:8b:fa:9b:60: c5:26:b8:94:92:31:0b:26:4b:2b:3a:f4:ee:6c:14:69:9b:d5: 78:2c:d5:5d:c6:f4:98:dd:b3:cd:4d:b3:4c:34:81:f6:f9:85: 23:2a:cf:0b:4d:6b:a9:db:b1:fa:4e:91:b7:8e:0c:66:28:b2: d2:ad:d6:ba -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt8E0EzZytoI7I7qrl7byQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDYxZDYzYWM0M2VhMDZiYzY2ZDM3ODI4MDg0Yjc3ZDc3NzkyNWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre7nLICdDsUDW52oKhjpekw2a1rX hRx7g/STNfhGGRFLoXiYGoGt3vtL4zgMjy/vHWcrMeAddmmekTd5fsEwojOFhWqA 0SlDlX4vUNNC0X0juw52QG0QrjrjXYu0eEifG5JeCXPq+o6iy2e1AWkJGoI+e+HZ elAeg8pmsF1rUFQrcRmVM6uw6x9BnDbahcC03S/e3hzKVD9e2WSXGWyvEdSS6MsB 4REkeRafc+8DW8dl9u8uWXjn7ceLBVLUK/NrIEhwJvqbJUgoV9j8wLnRxdUv0hLx p+J7NJ1pzgrknJQ4JAYkOh4YJKt/k/IgKwZT7hNg6vk1/89Y9k8/jrhK7QIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFMRh1jrEPqBrxm03goCEt313eSWgMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEveEdIV09zUS1vR3ZHYlRlQ2dJUzNmWGQ1SmFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZowDAME AC1d1QMEAC1d1gMEAS2X6jAMAwQATVP1AwQATVP2AwQBoBScAwQBuUS6AwQBuUfW AwQBuUm0AwQAuUuEAwQAuUuHAwQAuUzzAwQBuU2KAwQBuU+EAwQBuVhiAwQAuV/k AwQAuWScAwQAuWSfAwQAuWZyAwQAuW8YAwQAuXA7AwQAuajQAwQAubHuAwQBubaC AwQCwSbkMA0GCSqGSIb3DQEBCwUAA4IBAQCLblyB76p9LuN8SyAKx62lDvdfDtMh QOrsJOQcNSr0fH7q8rcr2lgt2/4q4YTFbaWVN4lojRTCMIOD+OTp02cyhkswdhQJ lpMwig9prJFX+Z7KPP/NkXWQjCi78QLdMTGiRebEsDhOdJvn5gLM7f7muUY7s4WQ aAI0BhXHSQ7ZEJNFsK4khqkJhvocr34/Ajj0zAc2u55BGQYEKaTlHhyZPUk+zIrS Yb6KRT0bGgCkqWPiZriY0HA4cox6H7bE5XjMxIv6m2DFJriUkjELJksrOvTubBRp m9V4LNVdxvSY3bPNTbNMNIH2+YUjKs8LTWup27H6TpG3jgxmKLLSrda6 -----END CERTIFICATE-----Generated at Tue Jan 20 19:51:22 2026 by rpki-client