This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/yIDca_4n_vWlCaLHGyh0ZQJf864.roa File: yIDca_4n_vWlCaLHGyh0ZQJf864.roa (raw, json) Hash identifier: HnwqE8ggCCf2qjihjisCWvzXEQ4Ud1FRMg5ZYuNj078= Subject key identifier: C8:80:DC:6B:FE:27:FE:F5:A5:09:A2:C7:1B:28:74:65:02:5F:F3:AE Certificate issuer: /CN=e740eed28f2d994eb2b831cb8efc6470306d7461 Certificate serial: 019B7E389C1B2DCC0C8F684FDEB0977C5946 Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/yIDca_4n_vWlCaLHGyh0ZQJf864.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42600 IP address blocks: 45.154.140.0/24 maxlen: 24 45.154.141.0/24 maxlen: 24 45.154.142.0/24 maxlen: 24 45.154.143.0/24 maxlen: 24 185.46.88.0/24 maxlen: 24 185.46.89.0/24 maxlen: 24 185.46.90.0/24 maxlen: 24 185.46.91.0/24 maxlen: 24 185.139.200.0/22 maxlen: 24 185.139.200.0/24 maxlen: 24 185.139.201.0/24 maxlen: 24 185.139.202.0/24 maxlen: 24 185.139.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9c:1b:2d:cc:0c:8f:68:4f:de:b0:97:7c:59:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c880dc6bfe27fef5a509a2c71b287465025ff3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:c9:63:dc:03:5b:54:1a:a9:26:f2:47:8a: cd:75:a2:87:c1:db:43:db:ac:ef:a7:2e:e2:2b:6c: 2e:bb:8a:e7:11:37:e3:5d:e2:5d:bc:a0:06:68:0a: 59:ce:68:4c:61:0e:31:35:3b:bf:2a:37:29:4c:63: 07:4e:28:d1:3a:50:b3:33:51:c1:3b:73:81:20:93: 0a:77:dd:07:e7:ec:6a:79:06:b7:3a:f1:84:87:08: be:c8:69:19:e0:2a:ec:88:c0:54:d3:9d:95:62:a7: 77:84:f0:0a:d4:f7:98:c1:d3:3d:8a:f0:85:98:5d: 5c:02:4c:c8:14:8d:b6:72:4b:b6:be:e3:06:36:84: aa:74:90:76:68:50:f8:ad:85:8b:c1:f7:85:d1:09: cf:1c:90:fe:2a:2a:a3:8c:05:0f:9b:12:d3:cd:6f: 96:bb:fd:cc:be:be:66:39:60:10:7c:1a:2c:2c:97: ac:14:c7:c0:10:ef:b8:8d:b5:f7:f6:16:04:44:7b: 81:7f:38:01:ad:d1:51:ca:1d:6a:32:11:a0:16:43: 61:da:e3:9d:60:dc:bb:64:ab:68:21:b5:60:fb:76: 73:eb:76:3e:a2:8c:74:f3:5b:22:5f:62:1d:ee:8c: d4:57:fd:e9:f9:66:05:8f:9d:65:d0:2e:98:da:0b: 21:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:80:DC:6B:FE:27:FE:F5:A5:09:A2:C7:1B:28:74:65:02:5F:F3:AE X509v3 Authority Key Identifier: keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/yIDca_4n_vWlCaLHGyh0ZQJf864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.140.0/22 185.46.88.0/22 185.139.200.0/22 Signature Algorithm: sha256WithRSAEncryption 80:6f:34:54:b0:3b:fe:ef:83:25:e5:51:e3:82:77:88:3c:80: 8e:64:06:50:cd:6f:ba:32:6d:d2:bc:19:7c:6a:9b:be:16:1e: e1:41:cb:e5:27:d8:3c:16:83:9f:72:f6:a9:6d:5c:5d:cd:22: d0:cd:be:63:c9:b6:32:5d:7c:0e:11:e9:a4:8a:a4:e2:6b:f2: 4a:f7:67:ac:87:b4:18:a6:68:fe:52:97:22:86:1d:78:0e:01: 38:e0:3b:d8:c0:31:f2:d5:43:c8:1d:6a:d5:94:61:41:99:25: e4:c2:7e:73:8b:d3:91:1c:c2:ef:69:63:ed:03:47:17:5e:b3: 0d:93:56:60:98:2f:58:4c:fb:88:68:1d:e5:26:d0:3b:08:e0: b3:89:a0:a4:4b:52:9d:26:c6:c8:a6:f2:7b:a9:c0:5c:1a:4a: c2:14:36:36:7a:ac:ba:bc:e6:d3:b6:a8:74:ab:77:b3:41:b6: 46:ba:17:0d:41:a3:da:a3:a3:a9:58:69:0d:c4:d4:ce:54:ab: 1c:9c:a7:54:2a:b1:e9:99:22:71:14:da:89:ef:a2:6f:6f:11: ac:d4:7a:ef:9b:c2:4d:15:46:e9:94:73:13:41:df:e8:09:07: 53:35:28:f9:1e:39:34:2d:56:2e:06:68:73:3f:e5:e0:89:39: f6:d4:f6:29 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OJwbLcwMj2hP3rCXfFlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NDBlZWQyOGYyZDk5NGViMmI4MzFjYjhlZmM2NDcwMzA2 ZDc0NjEwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODgwZGM2YmZlMjdmZWY1YTUwOWEyYzcxYjI4NzQ2NTAyNWZmM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz7JY9wDW1QaqSbyR4rNdaKHwdtD 26zvpy7iK2wuu4rnETfjXeJdvKAGaApZzmhMYQ4xNTu/KjcpTGMHTijROlCzM1HB O3OBIJMKd90H5+xqeQa3OvGEhwi+yGkZ4CrsiMBU052VYqd3hPAK1PeYwdM9ivCF mF1cAkzIFI22cku2vuMGNoSqdJB2aFD4rYWLwfeF0QnPHJD+KiqjjAUPmxLTzW+W u/3Mvr5mOWAQfBosLJesFMfAEO+4jbX39hYERHuBfzgBrdFRyh1qMhGgFkNh2uOd YNy7ZKtoIbVg+3Zz63Y+oox081siX2Id7ozUV/3p+WYFj51l0C6Y2gshMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMiA3Gv+J/71pQmixxsodGUCX/OuMB8GA1UdIwQY MBaAFOdA7tKPLZlOsrgxy478ZHAwbXRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ZDIwMGQtZWFlNS00NGRhLThlZTMt MDk1OTVlOWNkNmMyLzEveUlEY2FfNG5fdldsQ2FMSEd5aDBaUUpmODY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80ZDIwMGQtZWFlNS00NGRhLThlZTMtMDk1OTVlOWNkNmMy LzEvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZqMAwQC uS5YAwQCuYvIMA0GCSqGSIb3DQEBCwUAA4IBAQCAbzRUsDv+74Ml5VHjgneIPICO ZAZQzW+6Mm3SvBl8apu+Fh7hQcvlJ9g8FoOfcvapbVxdzSLQzb5jybYyXXwOEemk iqTia/JK92esh7QYpmj+Upcihh14DgE44DvYwDHy1UPIHWrVlGFBmSXkwn5zi9OR HMLvaWPtA0cXXrMNk1ZgmC9YTPuIaB3lJtA7COCziaCkS1KdJsbIpvJ7qcBcGkrC FDY2eqy6vObTtqh0q3ezQbZGuhcNQaPao6OpWGkNxNTOVKscnKdUKrHpmSJxFNqJ 76JvbxGs1Hrvm8JNFUbplHMTQd/oCQdTNSj5Hjk0LVYuBmhzP+XgiTn21PYp -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:40 2026 by rpki-client