This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/AcIyLDeXWbTkmiCjU90tuYBNwV8.roa File: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (raw, json) Hash identifier: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM= Subject key identifier: 01:C2:32:2C:37:97:59:B4:E4:9A:20:A3:53:DD:2D:B9:80:4D:C1:5F Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e Certificate serial: 019B7D5AB263A7E027D52322F0AA0057F323 Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/AcIyLDeXWbTkmiCjU90tuYBNwV8.roa Signing time: Fri 02 Jan 2026 06:17:34 +0000 ROA not before: Fri 02 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44489 IP address blocks: 45.85.172.0/22 maxlen: 22 95.129.240.0/21 maxlen: 21 213.129.128.0/19 maxlen: 19 213.129.128.0/21 maxlen: 21 213.129.136.0/21 maxlen: 21 213.129.144.0/21 maxlen: 21 213.129.152.0/21 maxlen: 21 2a03:f300::/29 maxlen: 29 2a03:f300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:b2:63:a7:e0:27:d5:23:22:f0:aa:00:57:f3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e Validity Not Before: Jan 2 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01c2322c379759b4e49a20a353dd2db9804dc15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:b6:25:36:34:32:fa:11:d5:ba:56:a5:1f: 73:54:ee:4b:20:04:9c:0b:e7:c3:10:7d:5d:8f:f2: 3a:70:37:50:f4:96:42:e3:4f:86:57:d5:35:bf:3c: 8c:92:51:dc:91:dd:44:3b:dc:a9:62:f5:12:76:c9: 48:2d:7a:7a:18:44:cf:6a:71:a8:68:c9:07:35:d0: e7:7a:a2:47:da:2a:3b:d6:a9:a0:6d:ef:7d:19:2a: b1:b1:d7:2b:4d:1d:ca:31:3b:f9:6b:35:b1:b5:81: cb:75:cb:45:58:92:a9:51:94:50:78:a4:d7:f7:fc: 15:30:1e:5e:7e:4f:2a:f8:e9:be:da:78:30:9e:82: f3:c3:b8:45:77:fb:cf:3f:27:34:f5:35:9a:a3:26: 79:24:05:c9:7c:4b:69:b3:f2:1b:bd:98:6b:db:3c: 39:33:26:9c:1c:37:57:4e:86:8c:4a:ca:cf:b2:08: bf:9c:f6:d4:ec:5b:33:81:49:77:9e:70:7c:58:6f: 73:fc:46:8b:c7:c7:2f:02:41:34:50:2d:d9:81:a9: ed:f2:6c:9a:65:75:b0:59:59:b1:38:a7:63:a0:b2: 05:6e:d8:18:4a:0b:82:95:e9:e2:22:5c:26:69:ce: 9a:3a:d8:08:89:e6:63:2e:22:3e:64:5a:c7:72:58: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C2:32:2C:37:97:59:B4:E4:9A:20:A3:53:DD:2D:B9:80:4D:C1:5F X509v3 Authority Key Identifier: keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/AcIyLDeXWbTkmiCjU90tuYBNwV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.172.0/22 95.129.240.0/21 213.129.128.0/19 IPv6: 2a03:f300::/29 Signature Algorithm: sha256WithRSAEncryption 05:a3:a9:54:8e:d4:3e:b4:c3:10:18:59:96:ec:f4:6d:75:59: 23:0a:96:1f:4c:71:40:d5:16:05:99:84:11:da:7b:83:c6:1b: 3b:74:0b:48:f5:aa:c5:cc:ab:a8:0e:b9:21:a1:7f:f5:22:81: 3c:f7:5a:2e:cf:30:30:32:63:5c:3f:31:16:4e:9d:da:d3:dd: 79:8c:9d:ba:0f:3a:16:b7:96:9e:af:4d:04:83:ab:5d:69:c3: 12:fa:94:4b:3b:b2:95:8f:05:3d:92:9d:a0:41:c3:12:5a:6d: be:ca:ad:29:23:6f:b6:db:74:3e:56:d8:ea:41:2e:51:64:2e: 6e:f4:8e:c8:26:d8:d6:1b:ca:f7:94:be:a3:73:e2:69:52:ad: e9:8f:71:96:83:e7:17:87:b8:43:39:ae:fe:c8:f5:96:a2:71: 68:1b:18:2d:d8:02:c5:05:ed:78:1a:77:27:40:c9:ca:38:cc: 7f:e0:5e:09:52:a6:2b:f3:6d:5b:f9:0c:9b:5d:0f:73:9f:84: 02:c6:c0:9d:62:6e:43:e0:16:ed:aa:65:1d:7b:57:00:2e:9c: c8:46:e9:bd:69:da:12:81:01:2a:6b:7f:a6:47:da:db:7b:ed: 46:52:2a:4a:b1:b3:32:f8:e8:30:df:66:9c:28:e4:ed:58:28: 47:97:90:c5 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9WrJjp+An1SMi8KoAV/MjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj MDUxNGUwHhcNMjYwMTAyMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWMyMzIyYzM3OTc1OWI0ZTQ5YTIwYTM1M2RkMmRiOTgwNGRjMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiru2JTY0MvoR1bpWpR9zVO5LIASc C+fDEH1dj/I6cDdQ9JZC40+GV9U1vzyMklHckd1EO9ypYvUSdslILXp6GETPanGo aMkHNdDneqJH2io71qmgbe99GSqxsdcrTR3KMTv5azWxtYHLdctFWJKpUZRQeKTX 9/wVMB5efk8q+Om+2ngwnoLzw7hFd/vPPyc09TWaoyZ5JAXJfEtps/IbvZhr2zw5 MyacHDdXToaMSsrPsgi/nPbU7FszgUl3nnB8WG9z/EaLx8cvAkE0UC3Zgant8mya ZXWwWVmxOKdjoLIFbtgYSguCleniIlwmac6aOtgIieZjLiI+ZFrHclhi5wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAHCMiw3l1m05Jogo1PdLbmATcFfMB8GA1UdIwQY MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt NjkzNjc2MmQyZmNlLzEvQWNJeUxEZVhXYlRrbWlDalU5MHR1WUJOd1Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVWsAwQD X4HwAwQF1YGAMA0EAgACMAcDBQMqA/MAMA0GCSqGSIb3DQEBCwUAA4IBAQAFo6lU jtQ+tMMQGFmW7PRtdVkjCpYfTHFA1RYFmYQR2nuDxhs7dAtI9arFzKuoDrkhoX/1 IoE891ouzzAwMmNcPzEWTp3a0915jJ26DzoWt5aer00Eg6tdacMS+pRLO7KVjwU9 kp2gQcMSWm2+yq0pI2+223Q+VtjqQS5RZC5u9I7IJtjWG8r3lL6jc+JpUq3pj3GW g+cXh7hDOa7+yPWWonFoGxgt2ALFBe14GncnQMnKOMx/4F4JUqYr821b+QybXQ9z n4QCxsCdYm5D4BbtqmUde1cALpzIRum9adoSgQEqa3+mR9rbe+1GUipKsbMy+Ogw 32acKOTtWChHl5DF -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:32 2026 by rpki-client