This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/Hf9SE1c9_AO3kFICjo06WD1ExT4.roa File: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (raw, json) Hash identifier: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU= Subject key identifier: 1D:FF:52:13:57:3D:FC:03:B7:90:52:02:8E:8D:3A:58:3D:44:C5:3E Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019B78A33826E5D6CACA58426DC7FEBC84F8 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/Hf9SE1c9_AO3kFICjo06WD1ExT4.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.11.232.0/24 maxlen: 24 45.11.234.0/23 maxlen: 23 45.91.188.0/22 maxlen: 22 45.147.61.0/24 maxlen: 24 45.147.62.0/24 maxlen: 24 45.153.236.0/24 maxlen: 24 45.153.238.0/24 maxlen: 24 77.83.46.0/23 maxlen: 23 77.83.68.0/24 maxlen: 24 77.83.69.0/24 maxlen: 24 77.83.70.0/24 maxlen: 24 77.83.71.0/24 maxlen: 24 84.252.84.0/23 maxlen: 23 84.252.86.0/24 maxlen: 24 84.252.87.0/24 maxlen: 24 95.214.100.0/22 maxlen: 22 171.22.188.0/24 maxlen: 24 171.22.189.0/24 maxlen: 24 171.22.190.0/24 maxlen: 24 185.15.176.0/22 maxlen: 22 185.164.66.0/23 maxlen: 23 193.36.124.0/22 maxlen: 22 194.110.88.0/22 maxlen: 22 212.81.41.0/24 maxlen: 24 212.81.42.0/24 maxlen: 24 212.81.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:38:26:e5:d6:ca:ca:58:42:6d:c7:fe:bc:84:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dff5213573dfc03b79052028e8d3a583d44c53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:e3:fe:6f:b5:2b:26:dc:ef:79:46:1c:c7: 36:1d:c0:98:48:6a:4f:a1:28:2a:c4:a4:3e:7c:34: 1d:45:7e:e7:3a:b8:2e:66:23:42:87:8d:dd:85:85: 80:ff:2b:66:80:0f:8f:db:97:0b:80:25:cf:b7:5a: ac:2d:53:a0:a6:46:e5:66:cb:ef:df:a6:37:27:72: 13:45:7e:10:d0:82:a1:5c:84:b6:7f:4b:89:51:ca: ad:4b:ea:29:d2:60:85:25:ac:2e:f4:55:7a:27:3b: 5b:21:ec:9a:1d:a6:8f:b8:49:6d:17:ee:8b:17:c2: fe:1e:6b:23:30:5e:5c:45:e1:7c:6d:e5:ef:31:9d: 9c:38:5b:03:63:69:11:29:4d:41:b6:d0:93:45:77: 01:ff:3d:09:78:fa:b5:4c:83:dc:ab:5b:1e:c4:82: 7a:f7:40:89:b3:2c:e4:33:5c:4f:97:9b:ee:a2:ab: 49:56:84:83:27:d4:30:60:2c:a5:01:ee:de:9f:16: 5a:86:b7:7e:14:47:bc:0b:b4:47:11:81:57:b7:cb: 87:d4:bf:c8:0d:3b:ea:66:61:1b:63:9a:13:09:23: 57:b1:c7:d9:a0:e1:6f:1d:fe:fa:ea:30:64:51:50: 38:2f:3a:39:21:da:92:28:41:69:25:70:0b:16:07: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FF:52:13:57:3D:FC:03:B7:90:52:02:8E:8D:3A:58:3D:44:C5:3E X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/Hf9SE1c9_AO3kFICjo06WD1ExT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.232.0/24 45.11.234.0/23 45.91.188.0/22 45.147.61.0-45.147.62.255 45.153.236.0/24 45.153.238.0/24 77.83.46.0/23 77.83.68.0/22 84.252.84.0/22 95.214.100.0/22 171.22.188.0-171.22.190.255 185.15.176.0/22 185.164.66.0/23 193.36.124.0/22 194.110.88.0/22 212.81.41.0-212.81.43.255 Signature Algorithm: sha256WithRSAEncryption 0d:79:86:11:d8:80:08:a3:5e:b5:59:0e:00:24:e4:d3:9a:e5: d8:b4:20:89:d2:30:2b:1d:01:b0:d4:bd:6c:ae:06:28:1f:8b: 0d:0c:3d:e7:6f:8b:cd:e4:e5:90:01:75:35:15:cf:b2:3a:bd: 14:90:d6:5c:c4:ce:cb:82:2e:b3:0f:4a:f5:44:41:bc:f0:03: 84:51:5e:b0:61:de:33:bd:c1:82:47:87:cd:9e:e1:8f:49:aa: bf:f9:94:40:85:74:36:ba:e1:37:cf:74:ab:1f:fc:8f:84:06: dd:0f:d0:c7:00:ae:42:67:01:bb:0b:1d:19:60:ab:56:ff:60: a1:b9:c3:3f:15:b5:b0:7b:83:f7:d3:c7:e3:63:45:0a:47:ae: 14:56:6d:92:d1:7b:a7:2e:7a:40:e4:5b:c6:bc:5c:f1:bc:96: 92:98:54:8a:23:ec:97:dc:86:10:08:ce:b7:76:c8:cd:bb:cb: dc:58:25:77:59:f8:7f:3f:1b:2a:0f:b4:bf:d0:01:db:38:1a: c6:4f:46:57:e5:b3:25:f0:9a:39:c8:4b:61:51:9a:8a:1d:2b: b9:59:d1:7a:e8:f0:8e:fe:2f:70:29:ef:fa:5e:3e:2c:99:7d: f6:cd:87:a7:77:31:f5:88:aa:60:e1:54:80:8d:90:08:e8:dd: 27:56:90:ef -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt4ozgm5dbKylhCbcf+vIT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGZmNTIxMzU3M2RmYzAzYjc5MDUyMDI4ZThkM2E1ODNkNDRjNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsTj/m+1Kybc73lGHMc2HcCYSGpP oSgqxKQ+fDQdRX7nOrguZiNCh43dhYWA/ytmgA+P25cLgCXPt1qsLVOgpkblZsvv 36Y3J3ITRX4Q0IKhXIS2f0uJUcqtS+op0mCFJawu9FV6JztbIeyaHaaPuEltF+6L F8L+HmsjMF5cReF8beXvMZ2cOFsDY2kRKU1BttCTRXcB/z0JePq1TIPcq1sexIJ6 90CJsyzkM1xPl5vuoqtJVoSDJ9QwYCylAe7enxZahrd+FEe8C7RHEYFXt8uH1L/I DTvqZmEbY5oTCSNXscfZoOFvHf766jBkUVA4Lzo5IdqSKEFpJXALFgf7RwIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFB3/UhNXPfwDt5BSAo6NOlg9RMU+MB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSGY5U0UxYzlfQU8za0ZJQ2pvMDZXRDFFeFQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQALQvo AwQBLQvqAwQCLVu8MAwDBAAtkz0DBAAtkz4DBAAtmewDBAAtme4DBAFNUy4DBAJN U0QDBAJU/FQDBAJf1mQwDAMEAqsWvAMEAKsWvgMEArkPsAMEAbmkQgMEAsEkfAME AsJuWDAMAwQA1FEpAwQC1FEoMA0GCSqGSIb3DQEBCwUAA4IBAQANeYYR2IAIo161 WQ4AJOTTmuXYtCCJ0jArHQGw1L1srgYoH4sNDD3nb4vN5OWQAXU1Fc+yOr0UkNZc xM7Lgi6zD0r1REG88AOEUV6wYd4zvcGCR4fNnuGPSaq/+ZRAhXQ2uuE3z3SrH/yP hAbdD9DHAK5CZwG7Cx0ZYKtW/2ChucM/FbWwe4P308fjY0UKR64UVm2S0XunLnpA 5FvGvFzxvJaSmFSKI+yX3IYQCM63dsjNu8vcWCV3Wfh/PxsqD7S/0AHbOBrGT0ZX 5bMl8Jo5yEthUZqKHSu5WdF66PCO/i9wKe/6Xj4smX32zYendzH1iKpg4VSAjZAI 6N0nVpDv -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:43 2026 by rpki-client