This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/5P2AqR4dtygfqcMyJGY9YwMXZmo.roa File: 5P2AqR4dtygfqcMyJGY9YwMXZmo.roa (raw, json) Hash identifier: plYfXtpKsLLxZP4A30RARMsnKevfGvWHOU+I9QD0I+I= Subject key identifier: E4:FD:80:A9:1E:1D:B7:28:1F:A9:C3:32:24:66:3D:63:03:17:66:6A Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233 Certificate serial: 019B7758C3FD35B6D81B95AB43EE2F094451 Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/5P2AqR4dtygfqcMyJGY9YwMXZmo.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56851 IP address blocks: 45.94.156.0/22 maxlen: 24 176.105.232.0/24 maxlen: 24 185.91.72.0/24 maxlen: 24 185.91.73.0/24 maxlen: 24 185.91.74.0/24 maxlen: 24 185.91.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c3:fd:35:b6:d8:1b:95:ab:43:ee:2f:09:44:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4fd80a91e1db7281fa9c33224663d630317666a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:96:d2:a3:30:84:95:fa:fd:9d:c9:11:7f: 79:0f:ed:8c:d9:08:e1:a2:33:49:e4:e7:94:86:2d: 6c:cf:8e:ad:89:0e:19:d4:e6:fa:59:5b:d1:42:da: 93:4d:e6:91:0b:6e:de:1e:98:24:1c:3c:ab:87:21: c1:2e:da:9f:55:92:f8:14:cb:ee:dd:7d:ae:e4:2f: d0:75:51:d5:17:28:dc:89:50:03:10:4e:b7:f3:d5: fd:8a:4b:f8:62:36:80:02:6d:be:ae:0c:7b:e2:ad: 7a:c3:02:a6:2f:44:f5:ee:00:c2:7d:0e:75:6e:92: 0a:ca:5a:eb:4a:c3:62:56:77:4e:7a:e7:ef:7e:98: 8a:54:ea:5e:6a:24:a2:87:b3:98:4b:2b:ee:46:b8: 3b:28:44:a8:63:d2:d5:e9:b7:e1:8e:75:26:99:d6: 86:34:1a:18:2e:ae:bd:e4:64:a8:93:02:c0:12:09: 32:3e:90:34:fc:2d:16:17:b1:19:c3:34:aa:04:86: 17:bf:5a:62:61:ce:d9:ac:4a:60:d3:70:83:20:f2: b3:11:2b:c7:a1:b1:3b:8a:9e:fd:d3:22:55:7b:ff: 39:fb:3d:af:25:7a:2c:e9:b4:a2:9c:3e:b5:72:59: 21:38:73:7d:c3:5b:88:44:14:b8:93:f2:44:f1:ec: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FD:80:A9:1E:1D:B7:28:1F:A9:C3:32:24:66:3D:63:03:17:66:6A X509v3 Authority Key Identifier: keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/5P2AqR4dtygfqcMyJGY9YwMXZmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.156.0/22 176.105.232.0/24 185.91.72.0/22 Signature Algorithm: sha256WithRSAEncryption 78:8d:28:84:f5:b3:80:03:1e:d6:cb:f2:6b:98:a2:5a:3d:d2: 2f:34:71:1d:75:01:08:01:e1:a3:4a:90:30:5f:fb:00:0f:86: 44:d9:60:23:89:78:44:5b:4b:4d:4a:88:c9:45:e4:80:71:3e: 4c:cb:4f:6a:0e:ae:09:8e:b3:6c:fe:20:71:bd:81:e5:63:97: 7f:92:20:b5:4d:2f:25:de:97:30:82:49:3c:07:6a:25:63:0c: df:13:a1:db:10:0d:7e:9b:88:ed:80:cc:b8:50:9d:cc:c3:cc: b1:77:bc:73:f6:e5:46:72:fe:9e:5f:b8:c9:fa:f6:ec:03:96: 3f:e4:ff:df:0a:5c:04:93:04:6e:2c:53:63:82:43:1e:06:99: 68:61:5f:ba:a3:58:e0:07:0e:c4:27:8f:0b:8b:70:8b:88:b0: 9f:85:71:92:25:6d:c7:72:e6:39:4a:9d:e4:82:b1:dd:6b:60: c6:4c:17:a0:14:c2:f6:d4:44:fd:63:9f:c8:3f:48:1d:8e:ea: ff:b8:c2:58:02:7c:51:6b:30:61:13:91:09:32:fd:8d:53:85: cf:45:e0:c4:8b:e8:57:dd:b3:6f:11:8c:78:3e:69:f1:f3:df: fb:4e:42:ca:82:47:8c:65:bc:55:ef:0f:10:7f:97:90:50:f6: 05:10:b3:02 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WMP9NbbYG5WrQ+4vCURRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NDNhZWMyMmY4MTljZjAxZjJjNjM2MzAzNWQ5N2Y4ZTBl MzgyMzMwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGZkODBhOTFlMWRiNzI4MWZhOWMzMzIyNDY2M2Q2MzAzMTc2NjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5OW0qMwhJX6/Z3JEX95D+2M2Qjh ojNJ5OeUhi1sz46tiQ4Z1Ob6WVvRQtqTTeaRC27eHpgkHDyrhyHBLtqfVZL4FMvu 3X2u5C/QdVHVFyjciVADEE6389X9ikv4YjaAAm2+rgx74q16wwKmL0T17gDCfQ51 bpIKylrrSsNiVndOeufvfpiKVOpeaiSih7OYSyvuRrg7KESoY9LV6bfhjnUmmdaG NBoYLq695GSokwLAEgkyPpA0/C0WF7EZwzSqBIYXv1piYc7ZrEpg03CDIPKzESvH obE7ip790yJVe/85+z2vJXos6bSinD61clkhOHN9w1uIRBS4k/JE8eyc+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOT9gKkeHbcoH6nDMiRmPWMDF2ZqMB8GA1UdIwQY MBaAFNZDrsIvgZzwHyxjYwNdl/jg44IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYt ZjZmMzIzZmQ5NmUwLzEvNVAyQXFSNGR0eWdmcWNNeUpHWTlZd01YWm1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYtZjZmMzIzZmQ5NmUw LzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLV6cAwQA sGnoAwQCuVtIMA0GCSqGSIb3DQEBCwUAA4IBAQB4jSiE9bOAAx7Wy/JrmKJaPdIv NHEddQEIAeGjSpAwX/sAD4ZE2WAjiXhEW0tNSojJReSAcT5My09qDq4JjrNs/iBx vYHlY5d/kiC1TS8l3pcwgkk8B2olYwzfE6HbEA1+m4jtgMy4UJ3Mw8yxd7xz9uVG cv6eX7jJ+vbsA5Y/5P/fClwEkwRuLFNjgkMeBploYV+6o1jgBw7EJ48Li3CLiLCf hXGSJW3HcuY5Sp3kgrHda2DGTBegFML21ET9Y5/IP0gdjur/uMJYAnxRazBhE5EJ Mv2NU4XPReDEi+hX3bNvEYx4Pmnx89/7TkLKgkeMZbxV7w8Qf5eQUPYFELMC -----END CERTIFICATE-----Generated at Tue Feb 3 03:31:26 2026 by rpki-client