This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/darhr2jXl3Y2Sj0q2YhpErawJTA.roa File: darhr2jXl3Y2Sj0q2YhpErawJTA.roa (raw, json) Hash identifier: +2YSXVZu56cjmNQqpda6l8hnoAubEs72p1pcn5+Ljy8= Subject key identifier: 75:AA:E1:AF:68:D7:97:76:36:4A:3D:2A:D9:88:69:12:B6:B0:25:30 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA320FF959F774302C9A13FEE8B65E2 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/darhr2jXl3Y2Sj0q2YhpErawJTA.roa Signing time: Thu 01 Jan 2026 22:17:26 +0000 ROA not before: Thu 01 Jan 2026 22:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203847 IP address blocks: 45.142.15.0/24 maxlen: 24 62.112.200.0/22 maxlen: 22 89.222.64.0/20 maxlen: 20 185.122.44.0/22 maxlen: 22 185.122.44.0/24 maxlen: 24 185.122.45.0/24 maxlen: 24 185.122.46.0/24 maxlen: 24 185.122.47.0/24 maxlen: 24 185.206.52.0/23 maxlen: 23 193.162.128.0/24 maxlen: 24 2a01:57e0:1::/48 maxlen: 48 2a01:57e0:200::/39 maxlen: 39 2a01:57e0:400::/39 maxlen: 39 2a01:57e0:600::/39 maxlen: 39 2a01:57e0:800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:20:ff:95:9f:77:43:02:c9:a1:3f:ee:8b:65:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75aae1af68d79776364a3d2ad9886912b6b02530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:4f:04:48:66:ff:73:c2:db:3d:67:f5:7c: 6d:0a:87:60:53:f2:7b:c5:f3:86:7f:c9:a8:1a:aa: 4f:9a:34:2f:ee:37:8b:ac:d8:a5:1c:e3:d7:f9:b9: 73:75:d0:55:20:c7:73:5e:81:a9:29:43:2c:4b:ee: 92:16:fa:2b:62:54:b5:e0:13:21:fe:2e:a9:ce:c2: 8b:c7:58:06:bb:4a:a0:c5:be:57:d0:2c:0c:c2:f6: 6b:2c:e1:2a:ce:3a:05:3b:9b:31:c6:7b:6f:e7:09: 4f:8d:e3:29:d1:d3:47:49:15:2a:58:84:28:43:d3: 9a:6c:ac:9c:7f:ec:8d:31:94:16:a8:2e:5f:a7:4d: d6:ca:ae:5f:f2:8d:08:90:08:c0:2d:05:56:4b:3c: df:29:5e:f3:d9:bd:35:f6:92:3c:73:6c:d5:ae:5d: a3:52:b2:2e:d2:17:f1:ca:47:e1:5e:aa:ba:4b:30: ae:3c:3d:c4:e3:fd:29:e4:a8:42:a9:46:d7:87:db: 42:c3:d0:75:cb:dc:72:67:85:36:e8:05:4e:2e:a3: 0a:7a:89:7a:30:a8:32:17:45:14:7a:ca:2a:24:da: aa:00:7a:ef:65:c5:9b:9f:ab:2d:c5:96:30:87:24: 76:4f:87:1c:10:45:38:0e:a8:6c:04:1c:8b:18:80: dd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AA:E1:AF:68:D7:97:76:36:4A:3D:2A:D9:88:69:12:B6:B0:25:30 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/darhr2jXl3Y2Sj0q2YhpErawJTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.15.0/24 62.112.200.0/22 89.222.64.0/20 185.122.44.0/22 185.206.52.0/23 193.162.128.0/24 IPv6: 2a01:57e0:1::/48 2a01:57e0:200::-2a01:57e0:fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 42:73:56:16:a7:d0:dc:4c:e1:0a:55:79:8d:b3:c9:5b:1d:f7: 08:43:7a:9b:91:8e:01:0d:f5:45:e2:7f:f4:2b:77:6a:b0:45: 7d:8d:bc:96:79:00:cc:38:58:01:83:aa:c7:6f:85:fb:4f:58: 0b:68:da:ac:ff:04:8a:11:06:f9:fb:d8:68:dc:73:48:eb:5c: 7b:ea:76:fe:91:22:ff:3c:ff:0f:91:7a:58:49:52:2e:88:bf: 3c:db:46:03:1b:15:19:1b:be:0d:4e:76:91:d9:95:11:c5:de: e0:7c:96:8f:e5:e0:bf:f6:ca:f9:11:93:ee:4c:c4:61:b6:7e: 94:49:5c:4e:d5:00:13:f6:b2:b9:c3:9a:9e:23:e1:d0:de:32: 1e:02:5c:d5:a6:db:97:dc:aa:7c:11:56:05:5d:e5:9d:92:83: aa:d5:28:19:ef:19:59:e8:5a:bf:55:13:36:e5:ca:ed:9a:02: ff:c1:76:5f:ab:7e:8c:f3:1d:84:ca:16:94:a3:88:56:6c:d8: dc:a2:47:e5:54:28:34:70:3d:01:0a:63:e9:0c:94:6a:92:b5: 20:67:e1:26:20:bb:f0:86:71:b3:37:d4:79:6a:25:83:4c:b7: eb:8e:3a:d6:3c:f5:02:43:a4:42:a3:d1:e1:3d:bf:60:b4:9a: 5c:e7:58:cf -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt7oyD/lZ93QwLJoT/ui2XiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWFhZTFhZjY4ZDc5Nzc2MzY0YTNkMmFkOTg4NjkxMmI2YjAyNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14BPBEhm/3PC2z1n9XxtCodgU/J7 xfOGf8moGqpPmjQv7jeLrNilHOPX+blzddBVIMdzXoGpKUMsS+6SFvorYlS14BMh /i6pzsKLx1gGu0qgxb5X0CwMwvZrLOEqzjoFO5sxxntv5wlPjeMp0dNHSRUqWIQo Q9OabKycf+yNMZQWqC5fp03Wyq5f8o0IkAjALQVWSzzfKV7z2b019pI8c2zVrl2j UrIu0hfxykfhXqq6SzCuPD3E4/0p5KhCqUbXh9tCw9B1y9xyZ4U26AVOLqMKeol6 MKgyF0UUesoqJNqqAHrvZcWbn6stxZYwhyR2T4ccEEU4DqhsBByLGIDdwwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHWq4a9o15d2Nko9KtmIaRK2sCUwMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvZGFyaHIyalhsM1kyU2owcTJZaHBFcmF3SlRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAqBAIAATAkAwQALY4PAwQC PnDIAwQEWd5AAwQCuXosAwQBuc40AwQAwaKAMCEEAgACMBsDBwAqAVfgAAEwEAMG ASoBV+ACAwYEKgFX4AAwDQYJKoZIhvcNAQELBQADggEBAEJzVhan0NxM4QpVeY2z yVsd9whDepuRjgEN9UXif/Qrd2qwRX2NvJZ5AMw4WAGDqsdvhftPWAto2qz/BIoR Bvn72Gjcc0jrXHvqdv6RIv88/w+RelhJUi6IvzzbRgMbFRkbvg1OdpHZlRHF3uB8 lo/l4L/2yvkRk+5MxGG2fpRJXE7VABP2srnDmp4j4dDeMh4CXNWm25fcqnwRVgVd 5Z2Sg6rVKBnvGVnoWr9VEzblyu2aAv/Bdl+rfozzHYTKFpSjiFZs2NyiR+VUKDRw PQEKY+kMlGqStSBn4SYgu/CGcbM31HlqJYNMt+uOOtY89QJDpEKj0eE9v2C0mlzn WM8= -----END CERTIFICATE-----Generated at Fri Jan 9 21:27:44 2026 by rpki-client