This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/9XRLK1OdgukwixTDk2AKzFzTzbs.roa File: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (raw, json) Hash identifier: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww= Subject key identifier: F5:74:4B:2B:53:9D:82:E9:30:8B:14:C3:93:60:0A:CC:5C:D3:CD:BB Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7C90A5C8E2A89581F59F938EEE81F Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/9XRLK1OdgukwixTDk2AKzFzTzbs.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 45.81.129.0/24 maxlen: 24 45.81.130.0/23 maxlen: 23 45.128.144.0/24 maxlen: 24 45.128.145.0/24 maxlen: 24 45.131.176.0/24 maxlen: 24 45.131.177.0/24 maxlen: 24 45.132.236.0/24 maxlen: 24 45.132.237.0/24 maxlen: 24 45.133.236.0/24 maxlen: 24 45.133.237.0/24 maxlen: 24 45.134.80.0/24 maxlen: 24 45.134.81.0/24 maxlen: 24 45.137.8.0/24 maxlen: 24 45.137.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c9:0a:5c:8e:2a:89:58:1f:59:f9:38:ee:e8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5744b2b539d82e9308b14c393600acc5cd3cdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8d:f1:a0:d9:ff:6a:71:2e:5c:de:31:7a:ff: c0:a4:6f:a6:4d:a2:f2:3f:3a:75:81:ba:68:52:cb: f6:a6:7c:85:24:fb:d9:51:c6:3d:1a:1e:60:10:db: 1d:07:07:9b:c6:fd:d0:89:77:bf:7e:ee:30:4a:58: 37:ed:92:7a:ce:76:7d:10:de:46:68:4e:3b:ab:78: 71:d6:e6:58:a3:9e:db:19:d8:a5:9b:36:8a:d5:5a: 68:4e:47:81:d7:98:8e:2d:c5:69:82:52:a9:7b:ef: 6e:db:09:09:f2:4a:10:3f:b5:3c:b5:e0:13:6c:27: 37:b4:99:11:a4:07:42:7b:d8:f8:1c:10:06:ef:6c: 0f:4a:ad:7a:f4:41:23:60:a6:46:07:37:5a:53:05: 3d:18:8f:ca:fd:8b:29:fb:59:f4:71:c2:e6:86:1f: 99:83:c7:4d:b7:08:7f:4d:99:4d:3b:be:bc:16:8f: 7b:d0:84:b1:24:ab:a3:b9:48:16:0e:44:8d:5c:da: 70:eb:b0:11:e8:63:00:7f:40:69:12:ab:67:ea:cd: 11:47:e3:aa:2f:b5:32:ed:0e:0c:62:6c:bd:db:f8: 59:4b:c1:f4:b3:b8:34:67:34:31:15:62:a0:a7:23: cd:c1:88:ba:bc:a1:1e:c1:1c:78:8a:b3:71:fd:8b: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:74:4B:2B:53:9D:82:E9:30:8B:14:C3:93:60:0A:CC:5C:D3:CD:BB X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/9XRLK1OdgukwixTDk2AKzFzTzbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.129.0-45.81.131.255 45.128.144.0/23 45.131.176.0/23 45.132.236.0/23 45.133.236.0/23 45.134.80.0/23 45.137.8.0/23 Signature Algorithm: sha256WithRSAEncryption c6:8e:b3:45:df:ba:fc:68:75:19:0a:f3:d0:37:0f:3e:73:9f: b5:92:f6:49:a9:31:bc:6f:dc:bb:86:ed:2c:45:b3:f7:0c:d3: 19:67:4d:2c:d7:e7:ba:4c:cd:6c:fe:bd:d1:46:a2:87:b5:8d: af:98:36:dc:37:c8:f0:7b:1e:10:7c:43:95:53:ce:d3:e9:96: 3f:63:fb:8d:81:88:cf:ae:9e:f3:3a:78:47:4e:c5:46:b3:97: 9b:64:6b:62:4c:5c:14:d4:28:43:78:13:a4:ab:1a:83:fb:95: 7d:03:34:5f:5f:8e:3d:b4:a7:e8:99:72:4f:11:df:c1:7d:6a: 65:19:2a:8a:2b:a1:79:ef:ca:aa:83:49:26:88:31:45:d0:09: ef:13:98:62:54:0a:aa:52:c9:18:61:2e:51:00:b5:e4:41:37: 38:46:a7:41:74:1a:b0:96:95:bc:61:c5:ae:6d:a4:fd:56:cd: cd:4e:fa:4f:05:77:22:8a:04:2d:18:be:c0:c6:91:b5:b5:0a: 7d:d7:7c:ba:fc:4a:71:3b:8f:86:86:36:a7:36:fe:b8:0f:04: ea:b5:2d:90:8d:f0:bc:12:be:e8:e5:ed:d1:b8:1e:56:21:c9: 7c:c0:ed:d0:75:02:7c:88:dd:2c:68:fc:40:26:6e:00:71:f2: 80:95:ea:0c -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt6x8kKXI4qiVgfWfk47ugfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTc0NGIyYjUzOWQ4MmU5MzA4YjE0YzM5MzYwMGFjYzVjZDNjZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI3xoNn/anEuXN4xev/ApG+mTaLy Pzp1gbpoUsv2pnyFJPvZUcY9Gh5gENsdBwebxv3QiXe/fu4wSlg37ZJ6znZ9EN5G aE47q3hx1uZYo57bGdilmzaK1VpoTkeB15iOLcVpglKpe+9u2wkJ8koQP7U8teAT bCc3tJkRpAdCe9j4HBAG72wPSq169EEjYKZGBzdaUwU9GI/K/Ysp+1n0ccLmhh+Z g8dNtwh/TZlNO768Fo970ISxJKujuUgWDkSNXNpw67AR6GMAf0BpEqtn6s0RR+Oq L7Uy7Q4MYmy92/hZS8H0s7g0ZzQxFWKgpyPNwYi6vKEewRx4irNx/YtfEQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFPV0SytTnYLpMIsUw5NgCsxc0827MB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvOVhSTEsxT2RndWt3aXhURGsyQUt6RnpUemJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBAAtUYED BAItUYADBAEtgJADBAEtg7ADBAEthOwDBAEthewDBAEthlADBAEtiQgwDQYJKoZI hvcNAQELBQADggEBAMaOs0XfuvxodRkK89A3Dz5zn7WS9kmpMbxv3LuG7SxFs/cM 0xlnTSzX57pMzWz+vdFGooe1ja+YNtw3yPB7HhB8Q5VTztPplj9j+42BiM+unvM6 eEdOxUazl5tka2JMXBTUKEN4E6SrGoP7lX0DNF9fjj20p+iZck8R38F9amUZKoor oXnvyqqDSSaIMUXQCe8TmGJUCqpSyRhhLlEAteRBNzhGp0F0GrCWlbxhxa5tpP1W zc1O+k8FdyKKBC0YvsDGkbW1Cn3XfLr8SnE7j4aGNqc2/rgPBOq1LZCN8LwSvujl 7dG4HlYhyXzA7dB1AnyI3Sxo/EAmbgBx8oCV6gw= -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:06 2026 by rpki-client