This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/I-K8cfipkaoMJfdj4-nsznxSQG4.roa File: I-K8cfipkaoMJfdj4-nsznxSQG4.roa (raw, json) Hash identifier: WE6n3C7q4wTO016rhdRAn1joIu74lzhpPRuReQeLrIE= Subject key identifier: 23:E2:BC:71:F8:A9:91:AA:0C:25:F7:63:E3:E9:EC:CE:7C:52:40:6E Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019C0EAE01D984CEC346F26038FA54FB809D Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/I-K8cfipkaoMJfdj4-nsznxSQG4.roa Signing time: Fri 30 Jan 2026 11:33:30 +0000 ROA not before: Fri 30 Jan 2026 11:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56382 IP address blocks: 45.152.124.0/24 maxlen: 24 45.152.125.0/24 maxlen: 24 45.152.126.0/24 maxlen: 24 45.152.127.0/24 maxlen: 24 185.244.27.0/24 maxlen: 24 194.5.96.0/24 maxlen: 24 2a0f:5700::/32 maxlen: 48 2a0f:5700:1220::/44 maxlen: 44 2a0f:5700:fe80::/48 maxlen: 48 2a0f:5701:1220::/44 maxlen: 44 2a0f:5701:fe01::/48 maxlen: 48 2a0f:5701:fe80::/48 maxlen: 48 2a0f:5702::/32 maxlen: 48 2a0f:5707:1220::/44 maxlen: 44 2a0f:5707:aa80::/44 maxlen: 48 2a0f:5707:ab80::/44 maxlen: 48 2a0f:5707:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:ae:01:d9:84:ce:c3:46:f2:60:38:fa:54:fb:80:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 30 11:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23e2bc71f8a991aa0c25f763e3e9ecce7c52406e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:f7:9d:41:c0:63:a4:79:80:2e:1b:41:11: 16:16:13:35:0e:0d:df:41:b3:b8:53:1f:37:d8:86: 43:ba:8e:8f:df:c0:d4:b9:34:61:ba:f4:36:14:4a: ac:e4:66:18:be:49:3b:34:26:b7:df:e4:84:52:f6: de:89:f1:18:7c:d6:3b:ee:b2:b6:5e:82:6a:3c:08: 6a:cf:ce:14:7f:58:f9:2f:a2:7e:e9:99:19:0c:28: 54:d0:53:6c:4d:5a:0a:76:f7:b5:cc:36:5b:f0:d3: d1:cb:16:f3:b5:75:37:97:4f:56:df:9b:8e:a6:8b: 07:97:cd:c8:dc:7d:39:f3:10:f5:a7:d2:37:25:89: 71:81:f3:2a:8e:5f:6a:94:46:ed:ad:c8:08:1f:b3: 33:17:bc:80:e4:21:bc:c0:06:65:6c:c0:ee:64:a1: e3:df:08:df:01:b8:6d:2b:2d:a4:1d:a4:78:b6:cc: ca:4f:5c:fa:7a:43:4a:3b:40:8d:d7:76:2d:a9:07: d7:56:e8:c2:c0:5f:6a:03:1d:0d:47:b9:4e:a9:ef: d2:45:f3:61:7d:37:06:48:37:e1:80:07:84:19:e4: 65:b1:72:7a:13:e0:ca:6f:25:2c:b5:40:4a:e3:1b: 48:9a:db:3b:10:f1:a3:08:92:9a:a0:54:41:b0:f5: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E2:BC:71:F8:A9:91:AA:0C:25:F7:63:E3:E9:EC:CE:7C:52:40:6E X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/I-K8cfipkaoMJfdj4-nsznxSQG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.124.0/22 185.244.27.0/24 194.5.96.0/24 IPv6: 2a0f:5700::/32 2a0f:5701:1220::/44 2a0f:5701:fe01::/48 2a0f:5701:fe80::/48 2a0f:5702::/32 2a0f:5707:1220::/44 2a0f:5707:aa80::/44 2a0f:5707:ab80::/44 2a0f:5707:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 8a:15:59:7d:d0:1c:29:82:ea:a9:fd:e3:37:da:4c:15:61:3a: f9:06:60:31:b2:a0:74:d8:58:b2:c0:2f:53:9c:31:33:80:15: 6f:5e:80:e5:db:1f:b4:f3:ed:3e:ba:d0:53:2a:62:59:2d:d7: a3:be:06:35:4f:f8:d0:81:4c:1a:46:b8:a0:11:31:a6:e1:60: 01:ef:ac:ad:e5:35:5a:d8:96:63:15:70:f6:e7:57:8d:c7:66: a3:87:45:d5:4e:0f:22:e3:84:ef:81:ca:d3:c0:d5:20:0c:da: 3b:17:07:e1:92:5b:2c:4e:02:b6:75:a1:bc:c2:d2:d0:d1:8c: 5a:25:0a:e5:3c:e7:32:e1:19:7d:d9:ae:98:e5:7e:22:c3:07: a8:81:80:15:64:04:b8:df:e5:90:33:35:84:30:18:ed:dd:5f: 1c:40:06:f5:1c:f6:29:06:16:33:3e:5e:f1:88:67:d5:0c:4f: d6:5d:13:44:b5:24:49:3a:3b:a1:d9:b9:ea:24:64:61:bf:3d: 1a:c4:e3:7e:95:27:17:84:0c:e5:50:0c:82:7a:aa:06:57:72: a1:25:eb:ad:74:58:6c:91:ec:69:85:ee:6e:11:25:35:08:7b: 6e:e6:f2:ae:9f:0f:03:86:16:14:db:3c:59:57:81:00:1c:56: 46:77:dd:76 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZwOrgHZhM7DRvJgOPpU+4CdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTMwMTEzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2UyYmM3MWY4YTk5MWFhMGMyNWY3NjNlM2U5ZWNjZTdjNTI0MDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaP3nUHAY6R5gC4bQREWFhM1Dg3f QbO4Ux832IZDuo6P38DUuTRhuvQ2FEqs5GYYvkk7NCa33+SEUvbeifEYfNY77rK2 XoJqPAhqz84Uf1j5L6J+6ZkZDChU0FNsTVoKdve1zDZb8NPRyxbztXU3l09W35uO posHl83I3H058xD1p9I3JYlxgfMqjl9qlEbtrcgIH7MzF7yA5CG8wAZlbMDuZKHj 3wjfAbhtKy2kHaR4tszKT1z6ekNKO0CN13YtqQfXVujCwF9qAx0NR7lOqe/SRfNh fTcGSDfhgAeEGeRlsXJ6E+DKbyUstUBK4xtImts7EPGjCJKaoFRBsPXBpwIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFCPivHH4qZGqDCX3Y+Pp7M58UkBuMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvSS1LOGNmaXBrYW9NSmZkajQtbnN6bnhTUUc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wGAQCAAEwEgMEAi2YfAME ALn0GwMEAMIFYDBTBAIAAjBNAwUAKg9XAAMHBCoPVwESIAMHACoPVwH+AQMHACoP VwH+gAMFACoPVwIDBwQqD1cHEiADBwQqD1cHqoADBwQqD1cHq4ADBwAqD1cH//8w DQYJKoZIhvcNAQELBQADggEBAIoVWX3QHCmC6qn94zfaTBVhOvkGYDGyoHTYWLLA L1OcMTOAFW9egOXbH7Tz7T660FMqYlkt16O+BjVP+NCBTBpGuKARMabhYAHvrK3l NVrYlmMVcPbnV43HZqOHRdVODyLjhO+BytPA1SAM2jsXB+GSWyxOArZ1obzC0tDR jFolCuU85zLhGX3ZrpjlfiLDB6iBgBVkBLjf5ZAzNYQwGO3dXxxABvUc9ikGFjM+ XvGIZ9UMT9ZdE0S1JEk6O6HZueokZGG/PRrE436VJxeEDOVQDIJ6qgZXcqEl6610 WGyR7GmF7m4RJTUIe27m8q6fDwOGFhTbPFlXgQAcVkZ33XY= -----END CERTIFICATE-----Generated at Mon Feb 2 14:10:30 2026 by rpki-client