This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/__9VedluN1sWd7ruf5_gxA1gv9U.roa File: __9VedluN1sWd7ruf5_gxA1gv9U.roa (raw, json) Hash identifier: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U= Subject key identifier: FF:FF:55:79:D9:6E:37:5B:16:77:BA:EE:7F:9F:E0:C4:0D:60:BF:D5 Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0 Certificate serial: 019B7AC90EB6377F08BC3F7B9CD351301255 Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/__9VedluN1sWd7ruf5_gxA1gv9U.roa Signing time: Thu 01 Jan 2026 18:19:15 +0000 ROA not before: Thu 01 Jan 2026 18:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57389 IP address blocks: 45.14.92.0/22 maxlen: 22 45.146.0.0/22 maxlen: 22 81.16.192.0/20 maxlen: 20 81.16.204.0/22 maxlen: 22 81.16.204.0/23 maxlen: 23 81.16.206.0/23 maxlen: 23 141.98.248.0/22 maxlen: 22 185.5.228.0/22 maxlen: 22 185.5.228.0/23 maxlen: 23 185.5.230.0/23 maxlen: 23 185.106.112.0/22 maxlen: 22 185.130.176.0/23 maxlen: 23 185.130.178.0/24 maxlen: 24 185.174.16.0/22 maxlen: 22 185.180.88.0/22 maxlen: 22 185.182.212.0/22 maxlen: 22 185.182.212.0/23 maxlen: 23 185.182.214.0/23 maxlen: 23 185.205.248.0/22 maxlen: 22 185.221.140.0/22 maxlen: 23 185.232.80.0/22 maxlen: 22 194.48.174.0/23 maxlen: 23 194.48.188.0/23 maxlen: 23 2a07:1100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0e:b6:37:7f:08:bc:3f:7b:9c:d3:51:30:12:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0 Validity Not Before: Jan 1 18:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffff5579d96e375b1677baee7f9fe0c40d60bfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:03:59:bc:f2:9d:23:e5:08:54:20:fb:89: 5c:0a:dc:d7:3f:72:dc:2f:c9:db:43:38:81:f0:68: f6:58:4e:1d:7f:4b:74:d0:d4:70:a2:92:53:ee:b1: 0c:d3:1b:2d:36:2d:ac:c6:bd:d0:21:6f:01:e3:41: 4f:bd:a5:9c:7c:e4:c4:de:fa:35:20:52:da:9a:00: 6e:e5:c8:b9:b2:c4:9f:1d:87:fc:37:85:3f:03:a0: c0:8e:cb:e4:b7:2b:67:17:22:b1:87:3f:88:df:30: 4b:f9:ad:1d:a5:5d:fa:19:81:88:9d:7a:1e:dd:37: 91:74:1b:27:bd:07:a4:d7:40:6a:8f:8d:bd:26:52: dd:32:a9:e5:1d:80:68:b5:c0:1c:dc:98:54:09:31: 89:5a:ef:f0:87:a1:7e:e5:da:65:78:5f:89:37:a6: 5d:bf:73:6b:49:f6:9e:f0:93:ec:55:4f:2b:eb:13: 9d:84:61:ee:84:e8:de:39:4d:a3:09:54:ad:6b:21: 62:d1:ab:2b:a7:39:9c:2f:7d:b7:40:f2:86:c0:4a: 8e:1f:18:5e:15:20:f7:2e:f2:74:ee:5c:9a:da:10: 11:05:18:3d:0f:e6:3f:41:c5:af:2e:34:25:1f:2c: e3:39:e2:80:80:01:00:69:2d:26:99:77:a9:10:bd: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FF:55:79:D9:6E:37:5B:16:77:BA:EE:7F:9F:E0:C4:0D:60:BF:D5 X509v3 Authority Key Identifier: keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/__9VedluN1sWd7ruf5_gxA1gv9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.92.0/22 45.146.0.0/22 81.16.192.0/20 141.98.248.0/22 185.5.228.0/22 185.106.112.0/22 185.130.176.0-185.130.178.255 185.174.16.0/22 185.180.88.0/22 185.182.212.0/22 185.205.248.0/22 185.221.140.0/22 185.232.80.0/22 194.48.174.0/23 194.48.188.0/23 IPv6: 2a07:1100::/29 Signature Algorithm: sha256WithRSAEncryption 00:0e:6c:35:5c:3c:ef:62:15:a9:a3:e1:fe:24:87:3d:2f:40: 0c:0b:38:32:54:9d:ae:31:8a:7e:1c:53:f4:b1:22:79:aa:6e: 50:38:62:a3:be:0d:84:f7:e9:b5:8c:b4:81:ef:e5:48:ed:e6: a3:43:06:a2:55:3f:16:f5:f6:22:d7:2b:66:4f:66:90:3a:4d: 83:57:e7:ae:9d:cf:9f:2e:84:00:19:cd:96:2b:51:28:a0:11: 50:8b:e2:1c:e9:38:e1:ad:04:e8:93:29:db:bc:4c:74:86:03: f4:7f:21:f6:73:dd:d6:92:1b:ba:a1:81:30:42:f3:15:d5:0d: 1b:d0:2a:eb:b2:62:ed:c5:e9:a9:ea:5f:d1:8e:3e:a4:3a:68: 85:7e:cc:0d:86:c0:78:c6:f4:b7:4a:51:33:5e:6c:2f:24:61: 56:70:f6:2e:d8:0a:43:ca:9d:8a:49:df:9a:b9:3d:9e:70:66: 36:ea:e1:b8:86:56:62:a0:4f:97:81:a4:d9:fc:6c:18:f7:a5: 27:91:25:b7:f7:bb:58:6d:54:bb:a0:fe:37:40:70:47:6f:95: 0f:0c:65:e4:72:7c:b5:ff:56:75:82:c3:24:72:3d:b7:d0:39: de:76:5d:9f:6f:03:3b:8c:3d:91:b3:dd:44:d9:d1:64:c3:29: 0b:a7:a4:78 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISAZt6yQ62N38IvD97nNNRMBJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0 YTM4ZTAwHhcNMjYwMTAxMTgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmZmNTU3OWQ5NmUzNzViMTY3N2JhZWU3ZjlmZTBjNDBkNjBiZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTkDWbzynSPlCFQg+4lcCtzXP3Lc L8nbQziB8Gj2WE4df0t00NRwopJT7rEM0xstNi2sxr3QIW8B40FPvaWcfOTE3vo1 IFLamgBu5ci5ssSfHYf8N4U/A6DAjsvktytnFyKxhz+I3zBL+a0dpV36GYGInXoe 3TeRdBsnvQek10Bqj429JlLdMqnlHYBotcAc3JhUCTGJWu/wh6F+5dpleF+JN6Zd v3NrSfae8JPsVU8r6xOdhGHuhOjeOU2jCVStayFi0asrpzmcL323QPKGwEqOHxhe FSD3LvJ07lya2hARBRg9D+Y/QcWvLjQlHyzjOeKAgAEAaS0mmXepEL29twIDAQAB o4ICdTCCAnEwHQYDVR0OBBYEFP//VXnZbjdbFne67n+f4MQNYL/VMB8GA1UdIwQY MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt MmRiMjI0NWYyOTg1LzEvX185VmVkbHVOMXNXZDdydWY1X2d4QTFndjlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1 LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwaAQCAAEwYgMEAi0OXAME Ai2SAAMEBFEQwAMEAo1i+AMEArkF5AMEArlqcDAMAwQEuYKwAwQAuYKyAwQCua4Q AwQCubRYAwQCubbUAwQCuc34AwQCud2MAwQCuehQAwQBwjCuAwQBwjC8MA0EAgAC MAcDBQMqBxEAMA0GCSqGSIb3DQEBCwUAA4IBAQAADmw1XDzvYhWpo+H+JIc9L0AM CzgyVJ2uMYp+HFP0sSJ5qm5QOGKjvg2E9+m1jLSB7+VI7eajQwaiVT8W9fYi1ytm T2aQOk2DV+eunc+fLoQAGc2WK1EooBFQi+Ic6TjhrQTokynbvEx0hgP0fyH2c93W khu6oYEwQvMV1Q0b0CrrsmLtxemp6l/Rjj6kOmiFfswNhsB4xvS3SlEzXmwvJGFW cPYu2ApDyp2KSd+auT2ecGY26uG4hlZioE+XgaTZ/GwY96UnkSW397tYbVS7oP43 QHBHb5UPDGXkcny1/1Z1gsMkcj230Dnedl2fbwM7jD2Rs91E2dFkwykLp6R4 -----END CERTIFICATE-----Generated at Tue Feb 3 03:17:56 2026 by rpki-client