This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IJTKZSVwK7TQ52Bh4Tb4roc-BLk.roa File: IJTKZSVwK7TQ52Bh4Tb4roc-BLk.roa (raw, json) Hash identifier: +10QLoISz6pMD6h+MHJI2pSuNlhgSSc9Q2yQIhxd89U= Subject key identifier: 20:94:CA:65:25:70:2B:B4:D0:E7:60:61:E1:36:F8:AE:87:3E:04:B9 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BD070E93E9DDD288157D723BF9D233CED Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IJTKZSVwK7TQ52Bh4Tb4roc-BLk.roa Signing time: Sun 18 Jan 2026 09:30:19 +0000 ROA not before: Sun 18 Jan 2026 09:30:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207461 IP address blocks: 45.86.15.0/24 maxlen: 24 45.86.245.0/24 maxlen: 24 45.86.247.0/24 maxlen: 24 45.92.168.0/24 maxlen: 24 45.92.169.0/24 maxlen: 24 45.92.170.0/24 maxlen: 24 45.92.171.0/24 maxlen: 24 45.92.247.0/24 maxlen: 24 45.94.36.0/24 maxlen: 24 45.94.37.0/24 maxlen: 24 45.94.38.0/24 maxlen: 24 45.94.39.0/24 maxlen: 24 45.94.46.0/24 maxlen: 24 45.94.47.0/24 maxlen: 24 45.95.98.0/23 maxlen: 23 45.95.99.0/24 maxlen: 24 45.128.24.0/24 maxlen: 24 45.130.124.0/24 maxlen: 24 45.130.127.0/24 maxlen: 24 45.130.254.0/24 maxlen: 24 45.131.213.0/24 maxlen: 24 45.133.209.0/24 maxlen: 24 45.133.210.0/24 maxlen: 24 45.136.172.0/23 maxlen: 23 45.137.40.0/24 maxlen: 24 45.137.41.0/24 maxlen: 24 45.137.42.0/23 maxlen: 23 45.140.14.0/24 maxlen: 24 45.145.12.0/24 maxlen: 24 45.145.13.0/24 maxlen: 24 45.145.14.0/24 maxlen: 24 45.147.28.0/24 maxlen: 24 45.152.198.0/24 maxlen: 24 192.166.153.0/24 maxlen: 24 193.5.65.0/24 maxlen: 24 193.27.19.0/24 maxlen: 24 2a0f:3d86:44::/48 maxlen: 48 2a0f:3d86:100::/48 maxlen: 48 2a0f:e1c0:a8b9::/48 maxlen: 48 2a13:8c86:120::/48 maxlen: 48 2a13:c900:99::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:70:e9:3e:9d:dd:28:81:57:d7:23:bf:9d:23:3c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 18 09:30:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2094ca6525702bb4d0e76061e136f8ae873e04b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:96:13:d6:2e:43:b1:60:0b:b7:b6:51:e6: 77:00:c3:00:f9:61:d1:5f:d1:ff:1e:bd:83:a2:57: 5a:46:d6:73:ac:25:d9:fe:ac:34:d0:d2:05:85:84: c0:64:6b:7f:e2:0b:43:41:c7:d5:25:66:b6:52:75: 28:89:90:87:7a:96:ad:4f:59:6f:b0:e8:57:27:94: 38:fc:5b:a2:b2:97:ee:22:c2:26:58:d2:06:51:b8: 41:77:42:85:6a:d2:2c:97:68:e8:e7:07:73:4f:ab: 5c:eb:d5:47:30:27:a0:87:eb:44:53:24:4a:30:90: b2:49:26:5e:77:c8:2f:40:96:b8:c6:b1:43:93:32: 50:3a:05:96:27:78:cc:65:6c:a7:a7:58:95:32:26: 04:36:68:82:e8:59:27:41:08:22:fc:34:d3:ca:bc: de:7b:d4:65:9c:c1:fd:83:d8:85:d8:70:fb:d6:e6: 8e:f4:2a:33:7b:49:95:8a:4b:80:b7:6f:e8:4e:4f: f3:fe:5f:80:82:ea:13:fb:7b:82:39:40:d7:15:2d: ea:70:76:20:61:fa:60:85:2c:b4:18:5b:af:09:3d: c8:33:d9:40:3a:1f:4e:fd:b1:cf:a0:21:42:8b:7f: b9:7b:e2:3d:5d:93:d8:71:50:c6:12:50:df:b6:06: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:94:CA:65:25:70:2B:B4:D0:E7:60:61:E1:36:F8:AE:87:3E:04:B9 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IJTKZSVwK7TQ52Bh4Tb4roc-BLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.15.0/24 45.86.245.0/24 45.86.247.0/24 45.92.168.0/22 45.92.247.0/24 45.94.36.0/22 45.94.46.0/23 45.95.98.0/23 45.128.24.0/24 45.130.124.0/24 45.130.127.0/24 45.130.254.0/24 45.131.213.0/24 45.133.209.0-45.133.210.255 45.136.172.0/23 45.137.40.0/22 45.140.14.0/24 45.145.12.0-45.145.14.255 45.147.28.0/24 45.152.198.0/24 192.166.153.0/24 193.5.65.0/24 193.27.19.0/24 IPv6: 2a0f:3d86:44::/48 2a0f:3d86:100::/48 2a0f:e1c0:a8b9::/48 2a13:8c86:120::/48 2a13:c900:99::/48 Signature Algorithm: sha256WithRSAEncryption 49:78:72:28:ac:74:1b:8a:6f:9b:bc:46:0e:65:cf:9c:45:d3: 3a:22:04:44:2a:7e:2a:e3:0b:d6:2f:b4:00:11:31:1b:e4:14: 89:9b:f8:30:fb:ac:e7:7d:5d:e9:11:9b:95:22:fd:28:ff:07: 33:4d:69:e9:a9:d4:b8:d3:50:4e:18:8d:ac:80:02:b9:b5:c0: 2f:07:d6:4d:5a:6e:2e:01:66:a8:45:c9:8d:79:6f:33:93:0e: 9a:ac:4a:e9:38:a9:bd:b3:11:f0:20:5d:a7:c7:fb:6f:67:33: 64:dd:4a:4f:50:26:bb:1a:77:f0:53:05:3e:c5:f9:da:71:a4: df:06:8e:01:3b:5f:62:52:15:77:aa:3e:7e:8a:d0:9f:e2:45: 48:64:9d:2a:96:18:1f:20:d7:b8:9d:a6:7e:43:ec:64:72:bd: ee:01:47:1f:de:75:ee:0a:ad:1a:93:02:d8:48:d1:a4:83:82: cf:6f:fb:a0:7a:be:8c:8d:9e:48:eb:5e:19:23:95:95:91:cb: ab:d3:e6:9f:84:64:1b:e0:69:d5:bb:2a:a1:e0:dd:6e:b1:70: 4e:9e:b0:72:52:c3:e4:aa:86:e2:2d:de:7e:23:6d:3b:a9:1c: c1:2e:6b:f8:33:ed:04:f2:32:0d:7b:d5:f1:16:19:e9:db:9f: ec:3d:0d:63 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZvQcOk+nd0ogVfXI7+dIzztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTE4MDkzMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDk0Y2E2NTI1NzAyYmI0ZDBlNzYwNjFlMTM2ZjhhZTg3M2UwNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5aWE9YuQ7FgC7e2UeZ3AMMA+WHR X9H/Hr2DoldaRtZzrCXZ/qw00NIFhYTAZGt/4gtDQcfVJWa2UnUoiZCHepatT1lv sOhXJ5Q4/FuispfuIsImWNIGUbhBd0KFatIsl2jo5wdzT6tc69VHMCegh+tEUyRK MJCySSZed8gvQJa4xrFDkzJQOgWWJ3jMZWynp1iVMiYENmiC6FknQQgi/DTTyrze e9RlnMH9g9iF2HD71uaO9Coze0mVikuAt2/oTk/z/l+AguoT+3uCOUDXFS3qcHYg YfpghSy0GFuvCT3IM9lAOh9O/bHPoCFCi3+5e+I9XZPYcVDGElDftgYm8QIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFCCUymUlcCu00OdgYeE2+K6HPgS5MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvSUpUS1pTVndLN1RRNTJCaDRUYjRyb2MtQkxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHsBggrBgEFBQcBBwEB/wSB3DCB2TCBoQQCAAEwgZoDBAAt Vg8DBAAtVvUDBAAtVvcDBAItXKgDBAAtXPcDBAItXiQDBAEtXi4DBAEtX2IDBAAt gBgDBAAtgnwDBAAtgn8DBAAtgv4DBAAtg9UwDAMEAC2F0QMEAC2F0gMEAS2IrAME Ai2JKAMEAC2MDjAMAwQCLZEMAwQALZEOAwQALZMcAwQALZjGAwQAwKaZAwQAwQVB AwQAwRsTMDMEAgACMC0DBwAqDz2GAEQDBwAqDz2GAQADBwAqD+HAqLkDBwAqE4yG ASADBwAqE8kAAJkwDQYJKoZIhvcNAQELBQADggEBAEl4ciisdBuKb5u8Rg5lz5xF 0zoiBEQqfirjC9YvtAARMRvkFImb+DD7rOd9XekRm5Ui/Sj/BzNNaemp1LjTUE4Y jayAArm1wC8H1k1abi4BZqhFyY15bzOTDpqsSuk4qb2zEfAgXafH+29nM2TdSk9Q Jrsad/BTBT7F+dpxpN8GjgE7X2JSFXeqPn6K0J/iRUhknSqWGB8g17idpn5D7GRy ve4BRx/ede4KrRqTAthI0aSDgs9v+6B6voyNnkjrXhkjlZWRy6vT5p+EZBvgadW7 KqHg3W6xcE6esHJSw+SqhuIt3n4jbTupHMEua/gz7QTyMg171fEWGenbn+w9DWM= -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:53 2026 by rpki-client