This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1v6c8AI86U8vgDcTEM7jmqJZtt4.roa File: 1v6c8AI86U8vgDcTEM7jmqJZtt4.roa (raw, json) Hash identifier: q28gVDA7CyhB6dG54ekkgrVz9mZPOLh4vZz1Suizbv4= Subject key identifier: D6:FE:9C:F0:02:3C:E9:4F:2F:80:37:13:10:CE:E3:9A:A2:59:B6:DE Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1D4600DAEECC9CC2AD8288DCC50E0 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1v6c8AI86U8vgDcTEM7jmqJZtt4.roa Signing time: Fri 02 Jan 2026 18:21:53 +0000 ROA not before: Fri 02 Jan 2026 18:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395954 IP address blocks: 45.145.58.0/24 maxlen: 24 45.147.100.0/24 maxlen: 24 45.147.101.0/24 maxlen: 24 45.147.102.0/24 maxlen: 24 45.147.103.0/24 maxlen: 24 45.152.201.0/24 maxlen: 24 45.155.200.0/24 maxlen: 24 45.155.201.0/24 maxlen: 24 45.155.202.0/24 maxlen: 24 45.155.203.0/24 maxlen: 24 193.8.8.0/24 maxlen: 24 194.41.56.0/24 maxlen: 24 2a0e:c782::/32 maxlen: 32 2a0f:e1c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d4:60:0d:ae:ec:c9:cc:2a:d8:28:8d:cc:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6fe9cf0023ce94f2f80371310cee39aa259b6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:e9:ec:32:e1:80:2b:2f:d1:8a:b3:7b:f9: cc:50:73:b2:f5:c4:a5:b8:2c:4d:2f:c7:fc:61:1f: 74:4c:74:19:17:93:c5:92:92:f8:a5:ae:70:aa:8c: df:d4:27:9e:3b:1d:0a:32:ec:85:7f:fd:89:25:2a: 38:47:6d:ea:72:8f:95:de:59:b0:d4:e8:86:6b:f0: a1:0a:05:16:d3:81:d2:0c:1d:4b:45:ec:5d:ce:92: 24:a6:bd:d3:75:d4:04:92:43:00:be:c7:97:18:72: 10:22:2d:8c:c3:b9:d6:ff:1b:2c:10:56:e1:59:68: 9f:05:2d:e8:dd:26:f7:8a:a8:10:c7:c5:c0:f2:f1: b6:8d:05:46:a6:92:d3:21:1d:63:95:76:a1:b4:41: b9:d8:a0:38:88:2b:2d:b0:46:41:fb:be:e2:b3:5d: b2:08:e7:8a:8f:23:02:1f:f4:7d:b2:2c:6c:4f:41: 06:c3:0c:d4:af:8f:a6:6d:92:45:a8:93:a5:f0:99: 00:4d:ad:cf:35:9b:d8:bf:df:bc:10:5d:11:ab:75: c1:b1:86:ff:88:c8:22:02:30:05:b5:fe:c1:9d:cd: 79:c3:8b:3e:dc:39:58:9d:dc:b3:2f:90:a8:b5:13: 60:7f:dc:bc:88:bb:bd:8d:14:da:3c:a5:26:a2:c3: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FE:9C:F0:02:3C:E9:4F:2F:80:37:13:10:CE:E3:9A:A2:59:B6:DE X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1v6c8AI86U8vgDcTEM7jmqJZtt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.58.0/24 45.147.100.0/22 45.152.201.0/24 45.155.200.0/22 193.8.8.0/24 194.41.56.0/24 IPv6: 2a0e:c782::/32 2a0f:e1c5::/32 Signature Algorithm: sha256WithRSAEncryption 50:07:8b:86:b7:16:46:22:bd:94:07:59:b1:8d:8c:d4:ea:41: 90:cb:95:75:0e:09:b6:74:0e:a2:df:74:2b:e3:b0:63:89:eb: 84:75:2d:46:43:fd:ac:57:a9:1e:4d:c8:f8:1d:1f:11:19:4f: b3:90:19:72:8d:d6:9c:e9:d2:61:fb:a2:5e:b9:bb:b0:5a:e3: 2c:88:86:5a:0c:cf:61:89:51:ae:48:bc:d2:98:34:9a:01:7b: 1c:02:45:7b:8f:b1:68:7e:00:96:71:bb:97:9b:0d:7b:54:8d: 79:37:19:90:e4:88:3a:a7:7d:fd:c1:bb:de:7a:4c:1c:3f:a2: 88:89:61:0a:d7:7f:89:ac:0a:21:46:43:7c:68:74:97:3c:b3: 91:bd:2c:6c:95:6f:16:1e:43:70:d4:17:c8:cb:b6:71:7f:fd: 62:52:91:ef:af:04:5f:d1:d9:01:13:08:3e:03:c1:f0:7e:bd: e9:53:72:00:a7:7c:6d:1f:7e:97:c1:b4:6f:e1:ca:ef:29:ad: 58:18:34:08:96:e6:9f:48:0d:7f:fe:13:00:fa:ff:70:42:16: 84:26:89:de:c6:02:15:bc:43:3a:6e:26:9d:87:0a:3a:cd:b3: 9a:d2:e8:e9:66:17:14:30:ee:ce:74:31:6e:7f:5a:92:32:6b: 0f:e4:37:1c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt/8dRgDa7sycwq2CiNzFDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmZlOWNmMDAyM2NlOTRmMmY4MDM3MTMxMGNlZTM5YWEyNTliNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BXp7DLhgCsv0Yqze/nMUHOy9cSl uCxNL8f8YR90THQZF5PFkpL4pa5wqozf1CeeOx0KMuyFf/2JJSo4R23qco+V3lmw 1OiGa/ChCgUW04HSDB1LRexdzpIkpr3TddQEkkMAvseXGHIQIi2Mw7nW/xssEFbh WWifBS3o3Sb3iqgQx8XA8vG2jQVGppLTIR1jlXahtEG52KA4iCstsEZB+77is12y COeKjyMCH/R9sixsT0EGwwzUr4+mbZJFqJOl8JkATa3PNZvYv9+8EF0Rq3XBsYb/ iMgiAjAFtf7Bnc15w4s+3DlYndyzL5CotRNgf9y8iLu9jRTaPKUmosOevQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFNb+nPACPOlPL4A3ExDO45qiWbbeMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMXY2YzhBSTg2VTh2Z0RjVEVNN2ptcUpadHQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQALZE6AwQC LZNkAwQALZjJAwQCLZvIAwQAwQgIAwQAwik4MBQEAgACMA4DBQAqDseCAwUAKg/h xTANBgkqhkiG9w0BAQsFAAOCAQEAUAeLhrcWRiK9lAdZsY2M1OpBkMuVdQ4JtnQO ot90K+OwY4nrhHUtRkP9rFepHk3I+B0fERlPs5AZco3WnOnSYfuiXrm7sFrjLIiG WgzPYYlRrki80pg0mgF7HAJFe4+xaH4AlnG7l5sNe1SNeTcZkOSIOqd9/cG73npM HD+iiIlhCtd/iawKIUZDfGh0lzyzkb0sbJVvFh5DcNQXyMu2cX/9YlKR768EX9HZ ARMIPgPB8H696VNyAKd8bR9+l8G0b+HK7ymtWBg0CJbmn0gNf/4TAPr/cEIWhCaJ 3sYCFbxDOm4mnYcKOs2zmtLo6WYXFDDuznQxbn9akjJrD+Q3HA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:37 2026 by rpki-client