This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/XduW4CBIQXx5gf7im8c_KWeejns.roa File: XduW4CBIQXx5gf7im8c_KWeejns.roa (raw, json) Hash identifier: khvq/3b+OvcvNxVFIdvoIzkoKq7bskcSfHtiGKsUD3M= Subject key identifier: 5D:DB:96:E0:20:48:41:7C:79:81:FE:E2:9B:C7:3F:29:67:9E:8E:7B Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037 Certificate serial: 019B78351BEDBD4211675B6C5DA6BE671772 Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/XduW4CBIQXx5gf7im8c_KWeejns.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28756 IP address blocks: 145.64.128.0/21 maxlen: 21 145.64.128.0/22 maxlen: 22 145.64.130.0/24 maxlen: 24 145.64.132.0/22 maxlen: 22 145.64.132.0/23 maxlen: 23 145.64.134.0/24 maxlen: 24 145.64.135.0/24 maxlen: 24 145.64.136.0/22 maxlen: 22 145.64.136.0/24 maxlen: 24 145.64.137.0/24 maxlen: 24 145.64.138.0/24 maxlen: 24 145.64.140.0/22 maxlen: 22 145.64.144.0/20 maxlen: 20 145.64.144.0/23 maxlen: 23 145.64.146.0/24 maxlen: 24 145.64.147.0/24 maxlen: 24 145.64.148.0/24 maxlen: 24 145.64.149.0/24 maxlen: 24 145.64.152.0/23 maxlen: 23 145.64.157.0/24 maxlen: 24 145.64.158.0/24 maxlen: 24 145.64.159.0/24 maxlen: 24 145.64.160.0/20 maxlen: 20 145.64.160.0/24 maxlen: 24 145.64.161.0/24 maxlen: 24 145.64.162.0/24 maxlen: 24 145.64.170.0/24 maxlen: 24 145.64.240.0/21 maxlen: 21 145.64.240.0/22 maxlen: 22 145.64.241.0/24 maxlen: 24 145.64.242.0/24 maxlen: 24 145.64.244.0/22 maxlen: 22 145.64.245.0/24 maxlen: 24 145.64.246.0/24 maxlen: 24 145.64.248.0/21 maxlen: 21 145.64.248.0/22 maxlen: 22 145.64.248.0/24 maxlen: 24 145.64.250.0/24 maxlen: 24 145.64.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1b:ed:bd:42:11:67:5b:6c:5d:a6:be:67:17:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037 Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ddb96e02048417c7981fee29bc73f29679e8e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:58:10:a8:8a:f2:21:78:8a:16:5f:b3:a5:5f: f4:2c:9f:51:ef:e1:85:8d:06:5a:ce:dc:5b:f3:fb: 37:1d:a3:90:ea:db:2f:7e:80:3f:08:ad:9e:29:d8: 15:ca:01:f7:c7:94:69:d2:cc:9c:45:6a:82:45:72: 5f:39:12:63:b9:1a:fd:6f:dd:7f:b3:4a:08:3f:0e: 07:0e:64:49:4e:38:b3:48:9c:39:74:01:e8:f4:fb: d0:22:da:d0:d1:26:54:34:ad:a9:cd:53:fd:b8:15: 73:52:07:ed:a0:4c:24:9d:59:0c:3d:8b:43:92:00: 0c:12:4a:dc:a9:d9:6b:23:e5:9c:71:48:ee:03:e3: b2:fc:21:86:01:ab:1c:fe:ae:4b:d1:74:75:66:3a: 91:cd:80:0c:ec:69:6e:ee:e2:b1:a9:cf:9a:64:4d: 6c:e1:8e:17:7e:54:4c:19:8c:ef:78:f2:05:58:00: 0b:3a:73:a7:5c:28:1e:82:eb:b0:ca:3f:b8:1c:c1: d1:4e:68:0d:1d:9b:1b:df:a7:71:78:d2:00:45:b8: b2:83:b0:94:46:2d:46:3d:43:e1:c5:82:1c:95:88: 40:f3:5f:7a:fc:2c:7a:23:3f:14:0f:1d:7f:3f:b1: 0c:d0:9e:7e:b3:95:5d:c1:de:bf:d5:47:c2:77:a5: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DB:96:E0:20:48:41:7C:79:81:FE:E2:9B:C7:3F:29:67:9E:8E:7B X509v3 Authority Key Identifier: keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/XduW4CBIQXx5gf7im8c_KWeejns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.64.128.0-145.64.175.255 145.64.240.0/20 Signature Algorithm: sha256WithRSAEncryption a5:4c:23:c2:17:f4:67:9a:72:9f:ee:74:20:32:59:18:18:63: 52:48:aa:62:d7:31:d4:e9:cc:cb:67:22:61:44:42:e0:c7:8e: ea:39:8b:6d:df:1a:b8:d6:bd:64:30:f2:fc:7a:b9:93:14:76: 2e:de:58:57:be:95:f9:78:a8:06:fb:c5:0c:8c:2a:9a:ad:db: 83:d8:87:b8:40:1d:a9:cb:e9:d5:0c:a5:5e:e1:92:a8:f7:4b: 0e:be:08:09:af:23:b6:64:60:41:a7:42:e7:f5:72:d3:8e:2d: 50:12:62:75:32:dd:2f:ad:dc:70:cc:af:25:7e:b0:a7:bb:a4: 96:ab:88:b2:77:34:95:82:a2:93:b0:c2:8a:a3:17:58:0d:a9: ca:9a:92:3a:0a:df:a0:ad:7e:17:63:c5:26:9b:8d:7f:9f:d0: 12:25:3f:c1:ee:7f:11:ea:8a:a8:b9:da:a5:83:57:f6:d3:b1: ef:63:66:dc:84:42:10:42:9c:7b:53:6f:12:e4:11:5c:62:ea: 79:2f:15:5e:9b:a9:d6:27:d6:71:a9:1a:ec:c0:8f:2d:1d:16: 74:be:77:27:aa:94:20:fc:a3:52:4a:0f:85:8e:6c:9e:a4:9f: 53:78:b8:df:dd:da:2c:cc:0c:bc:bb:99:0d:1f:51:e1:38:df: 5e:b7:74:9b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NRvtvUIRZ1tsXaa+ZxdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzc3YjVkMDIyYmYwYmU0YTYyMjRiNDdlZWE2Y2EwYjgx YmYwMzcwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGRiOTZlMDIwNDg0MTdjNzk4MWZlZTI5YmM3M2YyOTY3OWU4ZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FgQqIryIXiKFl+zpV/0LJ9R7+GF jQZaztxb8/s3HaOQ6tsvfoA/CK2eKdgVygH3x5Rp0sycRWqCRXJfORJjuRr9b91/ s0oIPw4HDmRJTjizSJw5dAHo9PvQItrQ0SZUNK2pzVP9uBVzUgftoEwknVkMPYtD kgAMEkrcqdlrI+WccUjuA+Oy/CGGAasc/q5L0XR1ZjqRzYAM7Glu7uKxqc+aZE1s 4Y4XflRMGYzvePIFWAALOnOnXCgeguuwyj+4HMHRTmgNHZsb36dxeNIARbiyg7CU Ri1GPUPhxYIclYhA8196/Cx6Iz8UDx1/P7EM0J5+s5Vdwd6/1UfCd6UpowIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFF3bluAgSEF8eYH+4pvHPylnno57MB8GA1UdIwQY MBaAFNw3e10CK/C+SmIktH7qbKC4G/A3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jYzU1OGMtMzVlNS00ZGQ2LTg2N2It OGIwNWI3NzhlMGQ1LzEvWGR1VzRDQklRWHg1Z2Y3aW04Y19LV2Vlam5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jYzU1OGMtMzVlNS00ZGQ2LTg2N2ItOGIwNWI3NzhlMGQ1 LzEvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAeRQIAD BASRQKADBASRQPAwDQYJKoZIhvcNAQELBQADggEBAKVMI8IX9Geacp/udCAyWRgY Y1JIqmLXMdTpzMtnImFEQuDHjuo5i23fGrjWvWQw8vx6uZMUdi7eWFe+lfl4qAb7 xQyMKpqt24PYh7hAHanL6dUMpV7hkqj3Sw6+CAmvI7ZkYEGnQuf1ctOOLVASYnUy 3S+t3HDMryV+sKe7pJariLJ3NJWCopOwwoqjF1gNqcqakjoK36CtfhdjxSabjX+f 0BIlP8HufxHqiqi52qWDV/bTse9jZtyEQhBCnHtTbxLkEVxi6nkvFV6bqdYn1nGp GuzAjy0dFnS+dyeqlCD8o1JKD4WObJ6kn1N4uN/d2izMDLy7mQ0fUeE43163dJs= -----END CERTIFICATE-----Generated at Tue Feb 10 07:53:09 2026 by rpki-client