This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0Lg3zu3TJgBDsfpeRxz53u8xHCo.roa File: 0Lg3zu3TJgBDsfpeRxz53u8xHCo.roa (raw, json) Hash identifier: JP1iJ25Ln8hxhixlTj5Xdam3QPeDt66leBhsc277eB4= Subject key identifier: D0:B8:37:CE:ED:D3:26:00:43:B1:FA:5E:47:1C:F9:DE:EF:31:1C:2A Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EABBD07631562D8B527A132237F217 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0Lg3zu3TJgBDsfpeRxz53u8xHCo.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 45.9.12.0/24 maxlen: 24 45.9.13.0/24 maxlen: 24 45.9.14.0/24 maxlen: 24 45.9.15.0/24 maxlen: 24 45.9.16.0/24 maxlen: 24 45.12.112.0/24 maxlen: 24 45.12.113.0/24 maxlen: 24 45.12.128.0/24 maxlen: 24 45.15.125.0/24 maxlen: 24 45.15.128.0/24 maxlen: 24 45.15.129.0/24 maxlen: 24 45.15.130.0/24 maxlen: 24 45.15.131.0/24 maxlen: 24 45.15.147.0/24 maxlen: 24 45.15.152.0/24 maxlen: 24 45.15.153.0/24 maxlen: 24 45.83.27.0/24 maxlen: 24 45.83.84.0/24 maxlen: 24 45.83.85.0/24 maxlen: 24 45.83.86.0/24 maxlen: 24 45.83.87.0/24 maxlen: 24 45.83.150.0/24 maxlen: 24 45.83.151.0/24 maxlen: 24 45.86.71.0/24 maxlen: 24 45.86.76.0/24 maxlen: 24 45.86.77.0/24 maxlen: 24 45.86.78.0/24 maxlen: 24 45.86.79.0/24 maxlen: 24 45.88.168.0/24 maxlen: 24 45.88.169.0/24 maxlen: 24 45.88.170.0/24 maxlen: 24 45.88.171.0/24 maxlen: 24 45.88.178.0/24 maxlen: 24 45.88.179.0/24 maxlen: 24 45.88.181.0/24 maxlen: 24 45.89.96.0/24 maxlen: 24 45.89.98.0/24 maxlen: 24 45.89.197.0/24 maxlen: 24 45.89.198.0/24 maxlen: 24 45.89.199.0/24 maxlen: 24 45.128.55.0/24 maxlen: 24 45.128.56.0/24 maxlen: 24 45.128.73.0/24 maxlen: 24 45.128.74.0/24 maxlen: 24 45.128.75.0/24 maxlen: 24 139.28.235.0/24 maxlen: 24 141.98.160.0/24 maxlen: 24 171.22.121.0/24 maxlen: 24 171.22.128.0/24 maxlen: 24 171.22.133.0/24 maxlen: 24 171.22.134.0/24 maxlen: 24 171.22.135.0/24 maxlen: 24 171.22.136.0/24 maxlen: 24 171.22.137.0/24 maxlen: 24 171.22.138.0/24 maxlen: 24 185.106.97.0/24 maxlen: 24 185.161.71.0/24 maxlen: 24 213.59.113.0/24 maxlen: 24 213.59.114.0/24 maxlen: 24 213.59.115.0/24 maxlen: 24 213.59.116.0/24 maxlen: 24 213.59.117.0/24 maxlen: 24 213.59.118.0/24 maxlen: 24 213.59.121.0/24 maxlen: 24 213.59.122.0/24 maxlen: 24 213.59.123.0/24 maxlen: 24 213.59.124.0/24 maxlen: 24 213.59.125.0/24 maxlen: 24 213.59.126.0/24 maxlen: 24 213.59.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bb:d0:76:31:56:2d:8b:52:7a:13:22:37:f2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0b837ceedd3260043b1fa5e471cf9deef311c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0e:e2:16:43:da:42:23:cc:62:2e:e0:25:5e: 7e:b0:e8:62:f5:82:a6:4e:25:86:e1:8c:d7:3e:f6: ee:1c:ba:51:2a:e6:b9:eb:49:0c:c4:ea:6a:9b:b8: 9a:3b:84:4c:c8:46:28:2e:42:e8:f8:a3:f9:66:26: 34:48:b4:00:6c:ae:49:fd:3e:ed:e3:ce:39:e5:37: 5a:48:5e:24:e5:f7:ec:5e:6d:8c:ad:5a:7a:60:0c: 43:84:0f:80:48:91:f3:61:a4:1a:0d:60:44:9f:b9: 1d:5d:1a:30:7a:d6:a7:c1:6a:70:2c:f0:6e:32:0a: aa:08:f3:e2:47:ea:61:01:dc:ef:2b:cc:dd:b5:0f: 92:6f:c3:9d:f4:75:f4:88:ee:24:75:9b:ed:41:31: 5e:8f:37:31:01:ad:90:3f:8f:f6:b4:82:64:5b:aa: 1b:93:3c:e2:be:42:58:d4:eb:f1:e3:7a:9b:1e:3f: de:54:c5:10:3a:fc:f2:bc:76:b5:be:5b:ea:c0:ac: 5c:75:72:e4:fe:5b:17:63:13:4e:60:ff:40:23:ac: 9e:c8:31:2e:37:cf:82:37:05:eb:a6:28:b0:62:6f: d2:dd:11:22:97:e4:70:78:71:d0:d3:d3:86:a3:9e: d4:58:24:ff:eb:ed:0a:d0:3f:bb:c3:ea:a1:a4:18: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B8:37:CE:ED:D3:26:00:43:B1:FA:5E:47:1C:F9:DE:EF:31:1C:2A X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0Lg3zu3TJgBDsfpeRxz53u8xHCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.12.0-45.9.16.255 45.12.112.0/23 45.12.128.0/24 45.15.125.0/24 45.15.128.0/22 45.15.147.0/24 45.15.152.0/23 45.83.27.0/24 45.83.84.0/22 45.83.150.0/23 45.86.71.0/24 45.86.76.0/22 45.88.168.0/22 45.88.178.0/23 45.88.181.0/24 45.89.96.0/24 45.89.98.0/24 45.89.197.0-45.89.199.255 45.128.55.0-45.128.56.255 45.128.73.0-45.128.75.255 139.28.235.0/24 141.98.160.0/24 171.22.121.0/24 171.22.128.0/24 171.22.133.0-171.22.138.255 185.106.97.0/24 185.161.71.0/24 213.59.113.0-213.59.118.255 213.59.121.0-213.59.127.255 Signature Algorithm: sha256WithRSAEncryption 68:2c:4a:f3:17:0a:d5:6d:dc:2e:c1:45:bb:63:01:0f:84:01: d7:cb:f8:03:33:04:4d:b0:e3:f2:7f:c7:e8:75:3e:b5:62:fb: c4:38:8e:d0:8c:22:60:3b:1c:e5:90:ea:12:b7:5e:cb:ca:3c: 67:0e:a0:0c:e5:a0:c6:8b:21:d0:14:8e:11:a2:22:1b:0f:c9: 7c:46:4f:20:3a:34:12:88:28:75:9d:77:ac:f8:32:36:d5:07: 3e:2f:9b:02:a8:1a:85:0f:bc:0c:a1:54:81:61:b4:06:84:ad: 4d:5a:73:75:6d:49:e4:f9:1f:6c:dd:73:d9:02:cb:30:6c:86: 86:3d:45:29:ef:11:93:25:68:03:f2:7b:d7:4a:90:0f:f8:d4: 37:ce:46:96:17:c8:c4:02:0e:33:86:bd:54:77:ed:ae:d8:c8: d5:7e:53:f9:2a:91:06:2b:23:cd:a7:2d:1c:67:a0:f6:5f:9b: 0d:e3:b2:3e:a1:c2:a3:ac:d5:e9:86:85:06:80:d6:f4:a9:e8: 80:3c:9b:03:94:1c:04:c3:c9:ba:cc:c4:f3:2b:03:85:d3:29: 6f:2b:8b:94:eb:39:c4:31:99:aa:b5:de:e7:ac:6f:d4:85:02: d0:21:07:0c:23:83:04:59:7d:7e:20:dd:29:b1:cb:44:7b:71: bb:52:09:46 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZt26rvQdjFWLYtSehMiN/IXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGI4MzdjZWVkZDMyNjAwNDNiMWZhNWU0NzFjZjlkZWVmMzExYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g7iFkPaQiPMYi7gJV5+sOhi9YKm TiWG4YzXPvbuHLpRKua560kMxOpqm7iaO4RMyEYoLkLo+KP5ZiY0SLQAbK5J/T7t 48455TdaSF4k5ffsXm2MrVp6YAxDhA+ASJHzYaQaDWBEn7kdXRowetanwWpwLPBu MgqqCPPiR+phAdzvK8zdtQ+Sb8Od9HX0iO4kdZvtQTFejzcxAa2QP4/2tIJkW6ob kzzivkJY1Ovx43qbHj/eVMUQOvzyvHa1vlvqwKxcdXLk/lsXYxNOYP9AI6yeyDEu N8+CNwXrpiiwYm/S3REil+RweHHQ09OGo57UWCT/6+0K0D+7w+qhpBjD5QIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFNC4N87t0yYAQ7H6Xkcc+d7vMRwqMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvMExnM3p1M1RKZ0JEc2ZwZVJ4ejUzdTh4SENvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAwYIKwYBBQUHAQcBAf8EgfMwgfAwge0EAgABMIHmMAwD BAItCQwDBAAtCRADBAEtDHADBAAtDIADBAAtD30DBAItD4ADBAAtD5MDBAEtD5gD BAAtUxsDBAItU1QDBAEtU5YDBAAtVkcDBAItVkwDBAItWKgDBAEtWLIDBAAtWLUD BAAtWWADBAAtWWIwDAMEAC1ZxQMEAy1ZwDAMAwQALYA3AwQALYA4MAwDBAAtgEkD BAItgEgDBACLHOsDBACNYqADBACrFnkDBACrFoAwDAMEAKsWhQMEAKsWigMEALlq YQMEALmhRzAMAwQA1TtxAwQA1Tt2MAwDBADVO3kDBAfVOwAwDQYJKoZIhvcNAQEL BQADggEBAGgsSvMXCtVt3C7BRbtjAQ+EAdfL+AMzBE2w4/J/x+h1PrVi+8Q4jtCM ImA7HOWQ6hK3XsvKPGcOoAzloMaLIdAUjhGiIhsPyXxGTyA6NBKIKHWdd6z4MjbV Bz4vmwKoGoUPvAyhVIFhtAaErU1ac3VtSeT5H2zdc9kCyzBshoY9RSnvEZMlaAPy e9dKkA/41DfORpYXyMQCDjOGvVR37a7YyNV+U/kqkQYrI82nLRxnoPZfmw3jsj6h wqOs1emGhQaA1vSp6IA8mwOUHATDybrMxPMrA4XTKW8ri5TrOcQxmaq13uesb9SF AtAhBwwjgwRZfX4g3Smxy0R7cbtSCUY= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:06 2026 by rpki-client