This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/xE2y3RI3nuzZANWmX6fxwf9bkMg.roa File: xE2y3RI3nuzZANWmX6fxwf9bkMg.roa (raw, json) Hash identifier: SegO1prKKRLU/fQqPq9kWO/VrlLtICljHXGoFYxWh5M= Subject key identifier: C4:4D:B2:DD:12:37:9E:EC:D9:00:D5:A6:5F:A7:F1:C1:FF:5B:90:C8 Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e Certificate serial: 019B7F13D9FF9FC3FFAE323A6B2B21CB6520 Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/xE2y3RI3nuzZANWmX6fxwf9bkMg.roa Signing time: Fri 02 Jan 2026 14:19:26 +0000 ROA not before: Fri 02 Jan 2026 14:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47952 IP address blocks: 45.136.106.0/24 maxlen: 24 45.139.220.0/24 maxlen: 24 45.139.221.0/24 maxlen: 24 45.139.223.0/24 maxlen: 24 45.145.21.0/24 maxlen: 24 45.145.22.0/24 maxlen: 24 45.145.23.0/24 maxlen: 24 81.200.140.0/24 maxlen: 24 81.200.141.0/24 maxlen: 24 81.200.142.0/24 maxlen: 24 81.200.143.0/24 maxlen: 24 91.194.52.0/24 maxlen: 24 91.194.54.0/24 maxlen: 24 185.82.220.0/24 maxlen: 24 185.82.221.0/24 maxlen: 24 185.82.222.0/24 maxlen: 24 185.82.223.0/24 maxlen: 24 185.126.177.0/24 maxlen: 24 185.126.178.0/24 maxlen: 24 185.126.179.0/24 maxlen: 24 185.201.212.0/24 maxlen: 24 185.201.213.0/24 maxlen: 24 185.201.214.0/24 maxlen: 24 185.201.215.0/24 maxlen: 24 2a0a:c4c0::/48 maxlen: 48 2a0a:c4c0:1::/48 maxlen: 48 2a0a:c4c0:2::/48 maxlen: 48 2a0a:c4c0:3::/48 maxlen: 48 2a0a:c4c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:d9:ff:9f:c3:ff:ae:32:3a:6b:2b:21:cb:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e Validity Not Before: Jan 2 14:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c44db2dd12379eecd900d5a65fa7f1c1ff5b90c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:d3:81:ae:a9:37:17:08:8e:0c:8f:69:4b: c4:6c:c1:9e:c4:f1:8f:ff:6f:b4:da:da:23:ee:2f: 86:70:33:fe:23:6b:9e:55:ad:37:59:91:5e:73:c5: a3:ad:41:c2:ff:77:2f:af:d3:53:b6:46:fe:e7:bd: 79:3a:2c:81:db:fc:35:d9:95:ab:31:38:2a:fe:86: ed:8a:2c:57:d6:55:19:0e:da:fe:dc:66:13:44:1f: 51:2f:33:72:f0:55:c0:75:e2:ca:93:2e:fa:5c:18: d4:fd:c6:09:68:ce:fb:47:a7:4d:79:e9:d2:98:8a: 4a:38:79:2c:b9:d7:0c:1c:1b:fb:19:c5:f4:bd:60: 6a:07:17:96:e6:47:77:c5:ed:0e:c7:f8:93:79:2a: c6:d1:cf:3b:29:24:1c:e5:e6:92:e8:05:03:08:07: 36:26:f0:56:cd:52:66:ae:95:0c:ac:c8:ad:48:61: 1c:56:96:69:6d:bf:a2:61:eb:de:9c:80:1a:58:f6: a7:2f:7c:75:4d:95:4f:4f:68:70:8c:9c:a6:eb:4d: 3e:a4:a2:a4:a8:18:b2:9e:ee:b4:57:32:0a:fe:ed: 17:1a:f2:a1:fa:1f:59:24:96:3c:47:5d:dc:95:cc: 38:46:31:ab:93:01:70:63:b3:0f:f1:15:f0:1a:f6: 1b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4D:B2:DD:12:37:9E:EC:D9:00:D5:A6:5F:A7:F1:C1:FF:5B:90:C8 X509v3 Authority Key Identifier: keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/xE2y3RI3nuzZANWmX6fxwf9bkMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.106.0/24 45.139.220.0/23 45.139.223.0/24 45.145.21.0-45.145.23.255 81.200.140.0/22 91.194.52.0/24 91.194.54.0/24 185.82.220.0/22 185.126.177.0-185.126.179.255 185.201.212.0/22 IPv6: 2a0a:c4c0::/46 2a0a:c4c0:100::/48 Signature Algorithm: sha256WithRSAEncryption 0a:ef:23:38:62:12:82:1f:41:39:6b:9a:a4:e6:dd:d8:75:dc: f6:55:ab:f8:32:55:4f:27:9c:4b:82:ba:4e:a4:4a:b0:36:4e: 68:67:62:58:fb:d4:1b:0b:3c:86:0e:4d:3e:f9:0c:36:ff:e2: f6:58:f6:f6:d2:50:b4:d7:a5:da:ad:6d:7c:82:cb:96:29:09: c4:ad:a2:93:e9:8a:19:ff:3f:a2:e1:0a:bd:b9:ef:13:68:92: cf:b6:08:32:7d:35:63:13:f9:43:10:c3:d8:af:a2:46:41:fe: d5:d1:f7:4c:e8:c4:f9:65:d5:74:10:57:ec:43:f8:cb:44:a0: fd:74:34:6d:c1:31:bf:9f:d4:9f:40:1f:79:11:70:d5:2b:6f: 82:05:1e:76:bb:fc:ba:70:8a:bd:7b:49:e1:72:56:e5:0d:82: 6f:ca:37:ea:31:7e:34:83:26:b4:db:85:4c:52:89:16:b9:ca: 31:fd:b7:64:ae:6f:47:85:93:a6:59:9d:03:af:62:98:21:b4: 5e:fc:d8:aa:74:b0:ba:1b:64:14:be:84:2b:e9:2a:82:b5:b7: d8:d0:02:a7:e1:2a:7f:b0:a4:72:34:6c:77:a1:d7:4b:c0:e6: 33:58:f8:20:fd:b9:5a:36:f3:70:dc:57:2b:c2:1e:a8:8b:e1: 13:25:35:5d -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt/E9n/n8P/rjI6ayshy2UgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MzBiNzNiNTFjYmM1MzgwZGQ0YWRiM2Q1YWFmZjRkN2Ez MzRjNWUwHhcNMjYwMTAyMTQxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDRkYjJkZDEyMzc5ZWVjZDkwMGQ1YTY1ZmE3ZjFjMWZmNWI5MGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojPTga6pNxcIjgyPaUvEbMGexPGP /2+02toj7i+GcDP+I2ueVa03WZFec8WjrUHC/3cvr9NTtkb+5715OiyB2/w12ZWr MTgq/obtiixX1lUZDtr+3GYTRB9RLzNy8FXAdeLKky76XBjU/cYJaM77R6dNeenS mIpKOHksudcMHBv7GcX0vWBqBxeW5kd3xe0Ox/iTeSrG0c87KSQc5eaS6AUDCAc2 JvBWzVJmrpUMrMitSGEcVpZpbb+iYevenIAaWPanL3x1TZVPT2hwjJym600+pKKk qBiynu60VzIK/u0XGvKh+h9ZJJY8R13clcw4RjGrkwFwY7MP8RXwGvYbKwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFMRNst0SN57s2QDVpl+n8cH/W5DIMB8GA1UdIwQY MBaAFLYwtztRy8U4DdSts9Wq/016M0xeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQt MGQ0OGU2ODk1ZjEyLzEveEUyeTNSSTNudXpaQU5XbVg2Znh3Zjlia01nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQtMGQ0OGU2ODk1ZjEy LzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBSBAIAATBMAwQALYhqAwQB LYvcAwQALYvfMAwDBAAtkRUDBAMtkRADBAJRyIwDBABbwjQDBABbwjYDBAK5Utww DAMEALl+sQMEArl+sAMEArnJ1DAYBAIAAjASAwcCKgrEwAAAAwcAKgrEwAEAMA0G CSqGSIb3DQEBCwUAA4IBAQAK7yM4YhKCH0E5a5qk5t3Yddz2Vav4MlVPJ5xLgrpO pEqwNk5oZ2JY+9QbCzyGDk0++Qw2/+L2WPb20lC016XarW18gsuWKQnEraKT6YoZ /z+i4Qq9ue8TaJLPtggyfTVjE/lDEMPYr6JGQf7V0fdM6MT5ZdV0EFfsQ/jLRKD9 dDRtwTG/n9SfQB95EXDVK2+CBR52u/y6cIq9e0nhclblDYJvyjfqMX40gya024VM UokWucox/bdkrm9HhZOmWZ0Dr2KYIbRe/NiqdLC6G2QUvoQr6SqCtbfY0AKn4Sp/ sKRyNGx3oddLwOYzWPgg/blaNvNw3Fcrwh6oi+ETJTVd -----END CERTIFICATE-----Generated at Wed Jan 21 17:15:38 2026 by rpki-client