This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/dR9tL359Jq4PTUxldPAbPoPg-fw.roa File: dR9tL359Jq4PTUxldPAbPoPg-fw.roa (raw, json) Hash identifier: PUxcMJ2MZAwjyZvVJuJQ3lwg6WIyZODgR7GlmoRaalc= Subject key identifier: 75:1F:6D:2F:7E:7D:26:AE:0F:4D:4C:65:74:F0:1B:3E:83:E0:F9:FC Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd Certificate serial: 019B7CEE2C47D52E7932B184022ECBF7A281 Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/dR9tL359Jq4PTUxldPAbPoPg-fw.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206775 IP address blocks: 45.132.68.0/22 maxlen: 24 185.124.243.0/24 maxlen: 24 2a10:1340::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2c:47:d5:2e:79:32:b1:84:02:2e:cb:f7:a2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=751f6d2f7e7d26ae0f4d4c6574f01b3e83e0f9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:ee:e9:47:ea:41:a1:c7:fa:dc:4c:ba:98: 1e:af:a3:02:5c:d8:5b:4b:b8:2a:4f:71:40:f4:50: 15:2c:df:9f:5d:7c:c6:6c:81:65:9a:7e:06:6f:17: ea:e7:84:00:3d:77:b3:07:fc:3b:41:61:79:b3:d4: 9e:98:18:64:14:cf:df:13:0c:62:ac:2a:24:aa:77: 0f:e5:48:6b:4d:13:f2:7a:31:45:03:07:a3:e0:30: 90:01:3c:ea:25:1a:bf:86:46:a0:00:00:a2:b3:e9: 83:9f:62:38:47:8d:1e:58:78:a5:ae:fb:3f:44:af: 39:70:5b:73:56:87:ad:17:6f:20:05:2e:98:8c:98: b9:09:2d:62:a5:da:1e:71:1c:d0:c0:3c:0e:70:15: 87:45:ac:cc:cb:64:8d:f7:80:17:95:1c:2e:02:eb: 4f:ef:b9:7e:9b:ae:60:2c:a6:4a:c4:95:05:d8:e2: 78:88:15:f1:5a:c0:f0:de:59:da:a1:83:0d:ed:08: 11:27:17:ac:49:50:b4:10:25:d8:43:90:22:85:a2: 51:9c:83:8b:6d:f7:5c:ce:85:6f:ca:27:32:31:93: 8a:1e:94:fa:8e:c7:e9:00:8d:b7:26:6c:b1:3a:45: 38:a6:68:2b:01:1b:d0:62:11:af:4d:53:63:4a:84: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1F:6D:2F:7E:7D:26:AE:0F:4D:4C:65:74:F0:1B:3E:83:E0:F9:FC X509v3 Authority Key Identifier: keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/dR9tL359Jq4PTUxldPAbPoPg-fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.68.0/22 185.124.243.0/24 IPv6: 2a10:1340::/29 Signature Algorithm: sha256WithRSAEncryption 16:2e:24:bd:83:87:89:87:3d:d3:e9:eb:3c:dd:67:a3:65:b6: 9d:88:78:64:10:7a:ac:83:d9:f0:40:6e:1b:5d:ae:c1:47:89: 73:b3:78:1a:b7:d2:ad:0c:6c:f3:cf:8b:c5:4f:6d:d1:2d:16: f3:b8:f3:db:3b:13:2b:2d:46:a8:ab:0d:df:c5:bf:b5:ec:f1: 42:8a:9a:63:65:53:f8:47:98:63:af:c9:ca:9a:f5:54:67:a4: ce:2c:ca:18:e5:e3:0a:ff:09:fc:18:50:a0:c5:ad:d5:26:df: 4a:a0:3b:61:ce:e8:b2:a1:77:e2:83:49:a8:40:2e:75:cf:28: 79:ab:e0:ef:cd:a7:b3:3e:ad:2b:30:32:0b:db:89:8c:b8:eb: dc:07:d4:6f:e6:be:48:28:0e:98:f9:a5:1a:93:c6:c8:9d:f8: 60:db:a8:1a:58:eb:f6:96:19:d9:32:09:ce:b9:8a:e8:6c:71: f4:84:35:0c:bb:f1:a3:e2:4e:4e:cf:37:12:91:5b:6b:1a:f5: 84:11:59:32:ef:8c:29:c6:9e:58:b4:a4:76:0d:49:41:66:7c: ac:b4:aa:d9:21:e3:83:f6:8b:69:ca:5c:34:a4:7d:f9:cc:0e: 90:9e:b5:18:1d:25:a7:09:fc:26:8c:4a:64:8a:db:01:f3:82: 40:46:c8:f2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87ixH1S55MrGEAi7L96KBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzc5Nzk5YTNiOGUwZjBmMWUzYzc0OThjMDVhMzNmODVm YmJiY2QwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTFmNmQyZjdlN2QyNmFlMGY0ZDRjNjU3NGYwMWIzZTgzZTBmOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMXu6UfqQaHH+txMupger6MCXNhb S7gqT3FA9FAVLN+fXXzGbIFlmn4Gbxfq54QAPXezB/w7QWF5s9SemBhkFM/fEwxi rCokqncP5UhrTRPyejFFAwej4DCQATzqJRq/hkagAACis+mDn2I4R40eWHilrvs/ RK85cFtzVoetF28gBS6YjJi5CS1ipdoecRzQwDwOcBWHRazMy2SN94AXlRwuAutP 77l+m65gLKZKxJUF2OJ4iBXxWsDw3lnaoYMN7QgRJxesSVC0ECXYQ5AihaJRnIOL bfdczoVvyicyMZOKHpT6jsfpAI23JmyxOkU4pmgrARvQYhGvTVNjSoSL9QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHUfbS9+fSauD01MZXTwGz6D4Pn8MB8GA1UdIwQY MBaAFFB3l5mjuODw8ePHSYwFoz+F+7vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhlWG1hTzQ0UER4NDhkSmpBV2pQNFg3dTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNDQ5NTgtYWEyZC00NzhjLWIwZmYt NjllZmFkNmMzYTgwLzEvZFI5dEwzNTlKcTRQVFV4bGRQQWJQb1BnLWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yNDQ5NTgtYWEyZC00NzhjLWIwZmYtNjllZmFkNmMzYTgw LzEvVUhlWG1hTzQ0UER4NDhkSmpBV2pQNFg3dTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLYREAwQA uXzzMA0EAgACMAcDBQMqEBNAMA0GCSqGSIb3DQEBCwUAA4IBAQAWLiS9g4eJhz3T 6es83WejZbadiHhkEHqsg9nwQG4bXa7BR4lzs3gat9KtDGzzz4vFT23RLRbzuPPb OxMrLUaoqw3fxb+17PFCippjZVP4R5hjr8nKmvVUZ6TOLMoY5eMK/wn8GFCgxa3V Jt9KoDthzuiyoXfig0moQC51zyh5q+DvzaezPq0rMDIL24mMuOvcB9Rv5r5IKA6Y +aUak8bInfhg26gaWOv2lhnZMgnOuYrobHH0hDUMu/Gj4k5OzzcSkVtrGvWEEVky 74wpxp5YtKR2DUlBZnystKrZIeOD9otpylw0pH35zA6QnrUYHSWnCfwmjEpkitsB 84JARsjy -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:25 2026 by rpki-client