This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/p0ShZyZrwUY3Z8d8i-UzhwWKWVc.roa File: p0ShZyZrwUY3Z8d8i-UzhwWKWVc.roa (raw, json) Hash identifier: Xb9kX/JSqQvcz9Un5jVk/fOLkQYgqLNMso1gG+CAwN8= Subject key identifier: A7:44:A1:67:26:6B:C1:46:37:67:C7:7C:8B:E5:33:87:05:8A:59:57 Certificate issuer: /CN=5707223a62887967974d74df4e58e28d5e437d86 Certificate serial: 019B7A599B57553C821182A2DC6BCEC9A6F8 Authority key identifier: 57:07:22:3A:62:88:79:67:97:4D:74:DF:4E:58:E2:8D:5E:43:7D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/p0ShZyZrwUY3Z8d8i-UzhwWKWVc.roa Signing time: Thu 01 Jan 2026 16:17:31 +0000 ROA not before: Thu 01 Jan 2026 16:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21476 IP address blocks: 45.83.156.0/22 maxlen: 22 45.83.156.0/24 maxlen: 24 45.83.157.0/24 maxlen: 24 45.83.158.0/24 maxlen: 24 45.83.159.0/24 maxlen: 24 80.254.128.0/20 maxlen: 20 80.254.128.0/24 maxlen: 24 80.254.129.0/24 maxlen: 24 80.254.130.0/24 maxlen: 24 80.254.131.0/24 maxlen: 24 80.254.132.0/24 maxlen: 24 80.254.133.0/24 maxlen: 24 80.254.134.0/24 maxlen: 24 80.254.135.0/24 maxlen: 24 80.254.136.0/24 maxlen: 24 80.254.137.0/24 maxlen: 24 80.254.138.0/24 maxlen: 24 80.254.139.0/24 maxlen: 24 80.254.140.0/24 maxlen: 24 80.254.141.0/24 maxlen: 24 80.254.142.0/24 maxlen: 24 80.254.143.0/24 maxlen: 24 2a00:cba0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:9b:57:55:3c:82:11:82:a2:dc:6b:ce:c9:a6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5707223a62887967974d74df4e58e28d5e437d86 Validity Not Before: Jan 1 16:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a744a167266bc1463767c77c8be53387058a5957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:bb:7a:89:0e:08:5c:5b:b9:37:e7:c4:20: 79:e3:9f:08:80:80:42:7e:b0:2f:5c:d2:4d:42:cf: f4:2c:53:9e:e5:fc:ff:1d:ae:38:0a:f7:4d:69:c1: 6e:9a:9b:91:50:d3:3b:ab:91:bd:7b:a2:aa:a1:e0: 33:fe:fe:53:50:e3:b7:c1:3f:cf:62:4d:cf:4c:6f: 13:f2:1b:ce:c9:27:98:b7:36:b1:be:b2:40:bc:0f: e9:48:47:45:13:7d:af:9e:de:e7:d9:41:57:df:40: 60:48:a1:03:ea:7b:34:88:62:5a:ca:9a:82:ce:58: 4a:1f:fd:69:4c:ac:25:1a:87:ed:33:f4:95:48:44: e4:71:64:ba:de:f9:ac:4e:d8:a3:af:e7:da:49:56: 31:53:c0:e0:19:02:c6:f3:7a:43:90:93:ad:36:5c: 75:aa:c9:18:7b:0b:87:47:20:df:4c:d6:a0:13:83: b1:ad:83:85:60:78:78:f0:fb:72:e1:f6:8a:fd:c0: a4:c6:8a:e4:64:1f:c7:42:09:ce:05:77:8d:fa:06: aa:be:9e:0c:a1:d0:23:55:3c:24:76:28:43:eb:60: c2:c6:68:80:36:2c:80:6f:c7:86:8e:1b:24:a5:2e: 15:8a:f2:d5:34:83:94:a1:f7:84:3b:70:d7:82:a2: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:44:A1:67:26:6B:C1:46:37:67:C7:7C:8B:E5:33:87:05:8A:59:57 X509v3 Authority Key Identifier: keyid:57:07:22:3A:62:88:79:67:97:4D:74:DF:4E:58:E2:8D:5E:43:7D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/p0ShZyZrwUY3Z8d8i-UzhwWKWVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.156.0/22 80.254.128.0/20 IPv6: 2a00:cba0::/32 Signature Algorithm: sha256WithRSAEncryption 65:91:50:4d:e8:39:fe:aa:52:9b:35:cb:5f:c3:2a:79:19:be: 4c:e7:c7:12:03:59:0c:d8:e9:46:56:3b:ee:19:33:6e:ea:14: 6f:eb:58:14:6c:9a:24:ff:f2:22:66:ed:bc:6f:d7:9f:26:c8: e5:f8:3d:4f:08:96:84:b1:d9:8f:e1:cf:a2:b8:d3:7c:44:3d: dc:05:b0:d0:a1:45:00:65:09:ea:b7:7c:31:2a:62:98:9b:02: 2d:83:77:05:83:ea:97:d7:b9:13:51:44:9d:fb:4c:61:f1:8a: 4b:9e:f9:cc:48:33:3f:34:18:63:7e:c3:c7:e2:84:79:79:d7: d0:ab:e6:6e:67:d4:ae:7d:ee:42:bc:b1:1b:1c:e8:38:35:b6: 7f:bf:a4:fe:4a:47:55:4e:92:b6:e4:8c:1f:a7:4f:e3:08:79: b2:76:c0:87:71:10:b3:ac:6d:5a:3d:06:28:96:21:00:a4:0c: c2:b5:41:3c:9b:43:ca:28:25:80:87:ca:60:5e:21:f5:f3:8d: ac:72:aa:70:1f:2c:ad:f1:83:37:10:9d:a6:fa:cb:86:92:d9: 02:10:fe:41:12:4a:0c:59:36:68:26:a4:b8:26:85:1a:e3:fd: df:fc:1c:be:42:3f:e0:0d:68:55:ee:26:7a:a3:ab:05:b1:15: b5:d7:45:49 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WZtXVTyCEYKi3GvOyab4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MDcyMjNhNjI4ODc5Njc5NzRkNzRkZjRlNThlMjhkNWU0 MzdkODYwHhcNMjYwMTAxMTYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzQ0YTE2NzI2NmJjMTQ2Mzc2N2M3N2M4YmU1MzM4NzA1OGE1OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFO7eokOCFxbuTfnxCB5458IgIBC frAvXNJNQs/0LFOe5fz/Ha44CvdNacFumpuRUNM7q5G9e6KqoeAz/v5TUOO3wT/P Yk3PTG8T8hvOySeYtzaxvrJAvA/pSEdFE32vnt7n2UFX30BgSKED6ns0iGJaypqC zlhKH/1pTKwlGoftM/SVSETkcWS63vmsTtijr+faSVYxU8DgGQLG83pDkJOtNlx1 qskYewuHRyDfTNagE4OxrYOFYHh48Pty4faK/cCkxorkZB/HQgnOBXeN+gaqvp4M odAjVTwkdihD62DCxmiANiyAb8eGjhskpS4VivLVNIOUofeEO3DXgqL0qwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKdEoWcma8FGN2fHfIvlM4cFillXMB8GA1UdIwQY MBaAFFcHIjpiiHlnl010305Y4o1eQ32GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVndjaU9tS0llV2VYVFhUZlRsamlqVjVEZllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kMDU2ZDYtODg1MC00ZmMyLWI2YWYt ZWQyZDJkN2U5NzgzLzEvcDBTaFp5WnJ3VVkzWjhkOGktVXpod1dLV1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kMDU2ZDYtODg1MC00ZmMyLWI2YWYtZWQyZDJkN2U5Nzgz LzEvVndjaU9tS0llV2VYVFhUZlRsamlqVjVEZllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVOcAwQE UP6AMA0EAgACMAcDBQAqAMugMA0GCSqGSIb3DQEBCwUAA4IBAQBlkVBN6Dn+qlKb Nctfwyp5Gb5M58cSA1kM2OlGVjvuGTNu6hRv61gUbJok//IiZu28b9efJsjl+D1P CJaEsdmP4c+iuNN8RD3cBbDQoUUAZQnqt3wxKmKYmwItg3cFg+qX17kTUUSd+0xh 8YpLnvnMSDM/NBhjfsPH4oR5edfQq+ZuZ9Sufe5CvLEbHOg4NbZ/v6T+SkdVTpK2 5Iwfp0/jCHmydsCHcRCzrG1aPQYoliEApAzCtUE8m0PKKCWAh8pgXiH1842scqpw Hyyt8YM3EJ2m+suGktkCEP5BEkoMWTZoJqS4JoUa4/3f/By+Qj/gDWhV7iZ6o6sF sRW110VJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:21 2026 by rpki-client