This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa File: nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa (raw, json) Hash identifier: o/RSJuyZGLHYsPriUa/ugWwYnH5mecTKfBjhXcICjvA= Subject key identifier: 9D:9D:9D:B7:32:DB:44:D2:B8:92:F3:17:DD:D9:BC:8E:45:C0:78:2C Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c Certificate serial: 019B7EA578C8B281474877B17D3FCC6ED4CE Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa Signing time: Fri 02 Jan 2026 12:18:51 +0000 ROA not before: Fri 02 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61970 IP address blocks: 45.93.88.0/23 maxlen: 24 45.93.90.0/24 maxlen: 24 45.93.91.0/24 maxlen: 24 185.48.144.0/24 maxlen: 24 185.48.145.0/24 maxlen: 24 185.48.146.0/24 maxlen: 24 185.48.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:78:c8:b2:81:47:48:77:b1:7d:3f:cc:6e:d4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c Validity Not Before: Jan 2 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d9d9db732db44d2b892f317ddd9bc8e45c0782c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:ff:4a:ba:c9:3d:7e:67:3c:63:16:6f:03: 32:fe:ae:26:a0:12:49:c4:94:dc:4b:51:91:81:40: 77:b5:f8:1b:1f:91:0b:f9:8c:6f:7e:69:c7:6b:15: 9b:2f:56:42:6f:14:4f:18:9f:f4:6b:c0:44:48:ef: a8:2d:66:6f:8e:ad:44:21:03:3a:2a:0d:5c:c8:8e: 26:a0:0d:e5:e2:e2:c9:57:0a:fd:8c:52:54:bd:39: 36:74:19:a0:b4:16:12:0f:21:29:96:99:ca:5e:c0: f6:db:a5:49:a6:a0:80:c4:f0:97:bf:0c:fd:a3:a9: 64:63:ab:6e:e4:32:2c:07:f4:58:95:76:5c:2f:7c: 43:2f:d6:37:85:c6:a8:be:97:32:a5:e6:ed:c4:55: 41:0c:11:d3:e2:05:36:e3:99:e7:42:69:a8:83:0e: 24:80:8c:16:96:73:66:74:b2:ef:20:58:3d:d1:50: 52:2c:b9:34:73:9a:1e:05:f5:5e:8c:ca:b9:e2:1c: c3:28:8c:2b:6c:5f:88:db:b9:18:6f:00:87:f9:02: ce:7b:b0:c1:e9:e8:39:95:ed:c8:3b:a6:32:73:4b: df:0c:b7:11:bb:2c:55:4d:8c:f0:cf:aa:2c:6c:c8: 3c:f2:ab:c6:c6:bd:c9:70:30:dc:da:9e:b5:73:78: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9D:9D:B7:32:DB:44:D2:B8:92:F3:17:DD:D9:BC:8E:45:C0:78:2C X509v3 Authority Key Identifier: keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.88.0/22 185.48.144.0/22 Signature Algorithm: sha256WithRSAEncryption 99:31:c1:0a:dc:05:6d:15:85:28:94:0e:7b:46:da:ae:05:a7: c4:a3:8f:bc:1c:79:6c:66:98:c1:7b:b6:8a:be:11:5d:fe:6e: ae:b7:7c:66:d1:31:b7:84:00:07:62:90:5b:cf:6a:db:d2:30: 5b:99:65:10:1e:8a:0e:21:c9:6b:04:7e:af:d3:19:be:7c:ad: c2:11:c7:cf:6e:2b:23:bc:d4:a4:50:df:60:95:3b:44:1c:90: 0b:c7:69:80:51:c4:2d:e1:83:22:83:4d:cd:3c:fa:a2:c6:10: a0:88:31:b5:1d:76:7f:a6:82:cc:d5:6e:a0:14:0e:68:df:88: a5:66:28:16:c0:c8:a8:a9:9f:93:69:74:10:d3:b1:d8:2b:77: d1:67:3f:47:0f:04:a5:e8:1d:90:66:11:52:01:da:57:2c:bd: 2a:e3:85:98:a9:93:97:f1:17:f8:a7:1b:6f:73:8f:46:59:fa: c0:f0:bd:a5:af:10:17:63:69:31:6e:3a:c6:76:61:0f:43:1b: 7b:f1:e3:fe:e3:84:16:27:22:dc:ce:20:bf:15:77:08:fa:c5: b3:2c:b1:dc:42:44:f7:a6:7a:96:b0:ea:74:ad:6f:e5:16:c6: 36:64:7f:fc:84:93:40:b8:0a:1f:e8:34:c9:65:34:63:7d:a9: f7:69:0a:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pXjIsoFHSHexfT/MbtTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDMxYjJkODk5ZDZlYjJiY2I3YTRkNzhjYzMxMDBkY2Uz MGM5MGMwHhcNMjYwMTAyMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDlkOWRiNzMyZGI0NGQyYjg5MmYzMTdkZGQ5YmM4ZTQ1YzA3ODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUP/SrrJPX5nPGMWbwMy/q4moBJJ xJTcS1GRgUB3tfgbH5EL+YxvfmnHaxWbL1ZCbxRPGJ/0a8BESO+oLWZvjq1EIQM6 Kg1cyI4moA3l4uLJVwr9jFJUvTk2dBmgtBYSDyEplpnKXsD226VJpqCAxPCXvwz9 o6lkY6tu5DIsB/RYlXZcL3xDL9Y3hcaovpcypebtxFVBDBHT4gU245nnQmmogw4k gIwWlnNmdLLvIFg90VBSLLk0c5oeBfVejMq54hzDKIwrbF+I27kYbwCH+QLOe7DB 6eg5le3IO6Yyc0vfDLcRuyxVTYzwz6osbMg88qvGxr3JcDDc2p61c3hA+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ2dnbcy20TSuJLzF93ZvI5FwHgsMB8GA1UdIwQY MBaAFBbTGy2JnW6yvLek14zDEA3OMMkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEt NTIwN2Y2NjRkZjIxLzEvbloyZHR6TGJSTks0a3ZNWDNkbThqa1hBZUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEtNTIwN2Y2NjRkZjIx LzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLV1YAwQC uTCQMA0GCSqGSIb3DQEBCwUAA4IBAQCZMcEK3AVtFYUolA57RtquBafEo4+8HHls ZpjBe7aKvhFd/m6ut3xm0TG3hAAHYpBbz2rb0jBbmWUQHooOIclrBH6v0xm+fK3C EcfPbisjvNSkUN9glTtEHJALx2mAUcQt4YMig03NPPqixhCgiDG1HXZ/poLM1W6g FA5o34ilZigWwMioqZ+TaXQQ07HYK3fRZz9HDwSl6B2QZhFSAdpXLL0q44WYqZOX 8Rf4pxtvc49GWfrA8L2lrxAXY2kxbjrGdmEPQxt78eP+44QWJyLcziC/FXcI+sWz LLHcQkT3pnqWsOp0rW/lFsY2ZH/8hJNAuAof6DTJZTRjfan3aQom -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:50 2026 by rpki-client