This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/BAcJe-19lYOvYihsq39lbaP8oGs.roa File: BAcJe-19lYOvYihsq39lbaP8oGs.roa (raw, json) Hash identifier: ECeRBoRLHOCn/TR8MMhvCUtYLPwMPepDaPSKaAfRuGY= Subject key identifier: 04:07:09:7B:ED:7D:95:83:AF:62:28:6C:AB:7F:65:6D:A3:FC:A0:6B Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413 Certificate serial: 019B775965BE5631C2328687BBFD200830B0 Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/BAcJe-19lYOvYihsq39lbaP8oGs.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44076 IP address blocks: 45.129.40.0/21 maxlen: 24 45.135.244.0/22 maxlen: 24 45.137.172.0/22 maxlen: 24 45.141.72.0/22 maxlen: 24 45.142.4.0/22 maxlen: 24 188.34.64.0/18 maxlen: 24 192.214.160.0/19 maxlen: 24 193.19.129.0/24 maxlen: 24 193.19.130.0/24 maxlen: 24 193.148.160.0/19 maxlen: 24 213.17.0.0/18 maxlen: 24 2a05:b540::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:65:be:56:31:c2:32:86:87:bb:fd:20:08:30:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0407097bed7d9583af62286cab7f656da3fca06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:40:d2:2a:e9:a2:da:49:11:7f:72:89:e2: ed:6f:37:0e:c5:d0:2c:80:cd:dc:06:3c:de:3f:c9: e8:5b:c2:a2:d2:ab:c5:c3:92:20:36:db:a1:ee:17: de:3a:1c:f2:fd:06:6e:a5:b3:68:70:ac:ef:5a:e6: 54:88:27:f0:49:e1:70:48:06:f4:49:70:da:97:15: 2d:02:3d:88:b6:c1:cc:b1:86:2e:76:40:bd:0f:b4: 51:8c:e4:1c:47:93:35:c6:d0:a9:3a:55:eb:c2:8d: ad:91:d0:66:82:c8:9f:66:21:e4:f3:b8:c7:0f:b4: c7:dc:43:0a:20:30:6a:20:67:34:2a:28:eb:1f:9d: b9:1b:5b:e0:5e:ce:c8:a6:a3:b0:be:e0:11:86:e5: 81:a3:83:06:37:3d:cc:dd:76:cf:0f:c4:e0:68:21: f1:84:ad:d5:ea:7f:af:57:99:e5:8d:e8:57:cf:57: 95:7d:d2:ca:72:04:d9:ec:b2:a6:e8:52:86:ad:42: e0:10:65:6b:11:12:d8:d5:df:c5:2b:5a:82:e6:2a: 3b:37:53:fd:69:e6:61:9b:76:25:c5:c7:5f:72:0a: 12:63:18:48:df:fb:b7:94:2a:16:db:2c:ea:58:33: 54:d2:7b:da:5d:eb:e8:9c:c9:68:01:2a:f5:d6:2f: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:07:09:7B:ED:7D:95:83:AF:62:28:6C:AB:7F:65:6D:A3:FC:A0:6B X509v3 Authority Key Identifier: keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/BAcJe-19lYOvYihsq39lbaP8oGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.40.0/21 45.135.244.0/22 45.137.172.0/22 45.141.72.0/22 45.142.4.0/22 188.34.64.0/18 192.214.160.0/19 193.19.129.0-193.19.130.255 193.148.160.0/19 213.17.0.0/18 IPv6: 2a05:b540::/29 Signature Algorithm: sha256WithRSAEncryption 2a:a3:35:13:d9:61:77:4b:88:b4:0d:e7:73:4e:5f:61:dc:fd: 5f:33:b8:43:f7:ae:e8:c1:5e:0b:1a:74:f0:a8:e8:10:04:14: ea:00:7c:d6:74:d1:ae:b0:1f:35:7a:41:8f:78:f4:9a:ec:dd: ca:07:f5:a0:5c:b6:e5:e8:24:cd:76:2d:45:33:56:8a:be:d3: c6:c3:44:dc:3f:ed:fa:61:d1:e1:a5:f6:45:54:1b:3a:41:93: 6d:32:d1:bf:b1:44:57:06:0a:a7:ee:fe:87:06:8f:2a:d4:91: 89:1b:d8:68:97:2c:6c:7e:57:7f:c4:35:15:31:a7:64:31:b0: 19:76:31:fe:1a:31:12:c6:86:90:3b:bb:40:83:8e:ff:d3:84: d7:14:33:31:35:9d:c2:8f:56:c5:13:da:24:4d:49:b3:b2:72: a5:ec:fc:00:ae:cb:bb:ca:9b:ee:0c:6b:bc:20:fb:c5:2d:7f: 1b:93:2e:c3:4a:c2:4b:90:2f:25:63:aa:bc:0b:f7:e3:16:0e: 2f:30:cf:61:fb:aa:44:0a:cd:8b:77:5a:29:c8:83:1a:9c:f8: 57:38:7d:0b:05:46:02:44:03:ca:9d:63:c3:8f:83:a7:de:6f: 3d:62:54:20:3d:11:3b:7d:95:59:d7:ce:99:80:23:7a:3a:d6: 0b:33:32:d6 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt3WWW+VjHCMoaHu/0gCDCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjYwYjIzZmUzYjg2NDJkNmJmNDc1ZjhlYjdmY2FkOWQx M2M0MTMwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDA3MDk3YmVkN2Q5NTgzYWY2MjI4NmNhYjdmNjU2ZGEzZmNhMDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjldA0irpotpJEX9yieLtbzcOxdAs gM3cBjzeP8noW8Ki0qvFw5IgNtuh7hfeOhzy/QZupbNocKzvWuZUiCfwSeFwSAb0 SXDalxUtAj2ItsHMsYYudkC9D7RRjOQcR5M1xtCpOlXrwo2tkdBmgsifZiHk87jH D7TH3EMKIDBqIGc0KijrH525G1vgXs7IpqOwvuARhuWBo4MGNz3M3XbPD8TgaCHx hK3V6n+vV5nljehXz1eVfdLKcgTZ7LKm6FKGrULgEGVrERLY1d/FK1qC5io7N1P9 aeZhm3YlxcdfcgoSYxhI3/u3lCoW2yzqWDNU0nvaXevonMloASr11i98fQIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFAQHCXvtfZWDr2IobKt/ZW2j/KBrMB8GA1UdIwQY MBaAFJJmCyP+O4ZC1r9HX463/K2dE8QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWIt MTNlZjFjNDU1Y2M0LzEvQkFjSmUtMTlsWU92WWloc3EzOWxiYVA4b0dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWItMTNlZjFjNDU1Y2M0 LzEva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQDLYEoAwQC LYf0AwQCLYmsAwQCLY1IAwQCLY4EAwQGvCJAAwQFwNagMAwDBADBE4EDBADBE4ID BAXBlKADBAbVEQAwDQQCAAIwBwMFAyoFtUAwDQYJKoZIhvcNAQELBQADggEBACqj NRPZYXdLiLQN53NOX2Hc/V8zuEP3rujBXgsadPCo6BAEFOoAfNZ00a6wHzV6QY94 9Jrs3coH9aBctuXoJM12LUUzVoq+08bDRNw/7fph0eGl9kVUGzpBk20y0b+xRFcG Cqfu/ocGjyrUkYkb2GiXLGx+V3/ENRUxp2QxsBl2Mf4aMRLGhpA7u0CDjv/ThNcU MzE1ncKPVsUT2iRNSbOycqXs/ACuy7vKm+4Ma7wg+8UtfxuTLsNKwkuQLyVjqrwL 9+MWDi8wz2H7qkQKzYt3WinIgxqc+Fc4fQsFRgJEA8qdY8OPg6febz1iVCA9ETt9 lVnXzpmAI3o61gszMtY= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:38 2026 by rpki-client