This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/1bETOn4u2gjUznUVtc2UJFR0MNE.roa File: 1bETOn4u2gjUznUVtc2UJFR0MNE.roa (raw, json) Hash identifier: Se377+qulLt1rOwEhiw29dlkwUaw9wX23jWkxc/skO8= Subject key identifier: D5:B1:13:3A:7E:2E:DA:08:D4:CE:75:15:B5:CD:94:24:54:74:30:D1 Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413 Certificate serial: 019B77596643C3F308729C55C2A03797E0BB Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/1bETOn4u2gjUznUVtc2UJFR0MNE.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211768 IP address blocks: 45.83.160.0/22 maxlen: 24 185.86.188.0/22 maxlen: 24 185.124.192.0/22 maxlen: 24 193.19.128.0/22 maxlen: 24 193.148.188.0/24 maxlen: 24 193.148.190.0/24 maxlen: 24 2a06:b500::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:66:43:c3:f3:08:72:9c:55:c2:a0:37:97:e0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5b1133a7e2eda08d4ce7515b5cd9424547430d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e1:de:86:34:75:49:2e:cc:9c:6d:f9:63:96: 73:54:4e:c9:41:8b:14:8c:65:e4:bf:8f:09:e4:29: 04:39:a4:30:25:99:03:14:bd:34:0c:88:84:28:8d: 7b:81:3a:06:b1:50:d5:17:30:4c:ec:70:71:49:47: 62:84:67:b1:57:02:f6:84:7d:bd:72:db:b8:3b:40: bf:62:53:d1:c3:d3:8a:2c:c0:71:c5:8c:bf:63:b7: 55:c5:6c:f1:5e:fb:5d:5d:c7:d1:f7:cc:b5:c5:8f: 57:36:54:7d:d2:a2:b0:fa:1e:bd:b8:0c:55:57:a9: 66:20:e0:e7:2a:84:2b:20:e6:4f:2d:46:7f:2a:67: f6:d3:ee:2c:46:47:d6:90:1e:b8:87:e5:24:f1:b8: 4d:23:0d:25:4e:c1:c8:3c:a2:7e:d1:a3:18:4f:fb: 96:a4:d4:1a:a1:c2:f6:67:27:68:8c:df:22:f0:99: dc:31:e3:7e:7d:00:21:0e:35:a3:9b:a2:99:04:73: 5b:9f:6f:d6:a7:fb:a0:e7:d3:fd:79:88:27:ad:a8: 3d:a9:92:99:54:e7:81:11:3c:a6:9f:99:25:96:a2: b3:25:0f:f5:82:52:1e:fd:45:78:9b:49:36:e5:91: 61:8b:a8:35:a8:0b:1e:d9:e9:0d:13:3d:d2:c5:dd: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:13:3A:7E:2E:DA:08:D4:CE:75:15:B5:CD:94:24:54:74:30:D1 X509v3 Authority Key Identifier: keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/1bETOn4u2gjUznUVtc2UJFR0MNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.160.0/22 185.86.188.0/22 185.124.192.0/22 193.19.128.0/22 193.148.188.0/24 193.148.190.0/24 IPv6: 2a06:b500::/29 Signature Algorithm: sha256WithRSAEncryption 1a:71:ce:25:a3:d4:3c:04:0b:03:51:8f:7e:9d:7e:b5:89:c2: 9e:83:db:f4:a7:28:33:56:2c:1b:c3:78:fb:8b:c9:12:54:1d: e1:b0:66:1a:5a:79:70:5e:03:3c:70:99:53:fe:47:86:36:8f: 63:93:9d:18:9b:f7:72:89:53:c7:af:ff:0f:c1:14:2c:64:34: d6:ee:9d:eb:db:bd:49:3e:d6:c7:41:f6:b9:a1:ed:5d:1b:f8: 6c:bf:bf:3f:e9:52:c1:88:9f:53:c2:39:4b:e0:71:3d:da:57: 7a:aa:5b:b4:f8:28:e4:85:db:69:34:88:0b:06:c6:61:30:8a: c9:2d:3e:24:3f:29:1f:cd:09:47:49:de:1a:31:c9:7e:ff:d2: 3c:58:55:aa:7f:d2:ac:ac:96:83:9a:2b:ab:6f:8d:40:c8:65: 47:c5:b5:e3:92:fe:52:ce:08:0b:0e:50:27:04:0b:d5:d8:00: 97:c3:68:6e:bb:cd:1a:1c:bd:e1:0b:d6:a5:5a:af:b1:71:1f: 9d:d0:54:c7:53:de:44:a1:7c:cb:6b:ab:5f:1e:57:3f:c6:c0: 38:ac:32:e7:bd:e7:f3:4a:ff:81:68:8a:a6:d2:46:bd:27:94: f7:f9:b3:3a:e4:31:c4:99:13:ff:57:d2:be:dc:6a:27:09:9c: c2:42:fd:ac -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt3WWZDw/MIcpxVwqA3l+C7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjYwYjIzZmUzYjg2NDJkNmJmNDc1ZjhlYjdmY2FkOWQx M2M0MTMwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWIxMTMzYTdlMmVkYTA4ZDRjZTc1MTViNWNkOTQyNDU0NzQzMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+HehjR1SS7MnG35Y5ZzVE7JQYsU jGXkv48J5CkEOaQwJZkDFL00DIiEKI17gToGsVDVFzBM7HBxSUdihGexVwL2hH29 ctu4O0C/YlPRw9OKLMBxxYy/Y7dVxWzxXvtdXcfR98y1xY9XNlR90qKw+h69uAxV V6lmIODnKoQrIOZPLUZ/Kmf20+4sRkfWkB64h+Uk8bhNIw0lTsHIPKJ+0aMYT/uW pNQaocL2ZydojN8i8JncMeN+fQAhDjWjm6KZBHNbn2/Wp/ug59P9eYgnrag9qZKZ VOeBETymn5kllqKzJQ/1glIe/UV4m0k25ZFhi6g1qAse2ekNEz3Sxd0JFwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFNWxEzp+LtoI1M51FbXNlCRUdDDRMB8GA1UdIwQY MBaAFJJmCyP+O4ZC1r9HX463/K2dE8QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWIt MTNlZjFjNDU1Y2M0LzEvMWJFVE9uNHUyZ2pVem5VVnRjMlVKRlIwTU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWItMTNlZjFjNDU1Y2M0 LzEva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLVOgAwQC uVa8AwQCuXzAAwQCwROAAwQAwZS8AwQAwZS+MA0EAgACMAcDBQMqBrUAMA0GCSqG SIb3DQEBCwUAA4IBAQAacc4lo9Q8BAsDUY9+nX61icKeg9v0pygzViwbw3j7i8kS VB3hsGYaWnlwXgM8cJlT/keGNo9jk50Ym/dyiVPHr/8PwRQsZDTW7p3r271JPtbH Qfa5oe1dG/hsv78/6VLBiJ9TwjlL4HE92ld6qlu0+CjkhdtpNIgLBsZhMIrJLT4k PykfzQlHSd4aMcl+/9I8WFWqf9KsrJaDmiurb41AyGVHxbXjkv5SzggLDlAnBAvV 2ACXw2huu80aHL3hC9alWq+xcR+d0FTHU95EoXzLa6tfHlc/xsA4rDLnvefzSv+B aIqm0ka9J5T3+bM65DHEmRP/V9K+3GonCZzCQv2s -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:48 2026 by rpki-client