This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iaGHa9NBX2CUhmomDkThllP7IiA.roa File: iaGHa9NBX2CUhmomDkThllP7IiA.roa (raw, json) Hash identifier: Jyz+UqBSQC42s4ljd5Kv5RwAx6bwWxy2n/drWwuyOvs= Subject key identifier: 89:A1:87:6B:D3:41:5F:60:94:86:6A:26:0E:44:E1:96:53:FB:22:20 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019C03F9D6D9BA1C9C80D39A47305D788BF7 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iaGHa9NBX2CUhmomDkThllP7IiA.roa Signing time: Wed 28 Jan 2026 09:40:30 +0000 ROA not before: Wed 28 Jan 2026 09:40:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 45.145.56.0/24 maxlen: 24 45.149.147.0/24 maxlen: 24 185.126.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 16:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:f9:d6:d9:ba:1c:9c:80:d3:9a:47:30:5d:78:8b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 28 09:40:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89a1876bd3415f6094866a260e44e19653fb2220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:12:a9:ae:ad:a3:b5:63:4d:dc:7e:87:c8: 72:f7:e2:95:5d:df:17:10:8a:21:62:c7:32:c1:90: f7:4c:b1:ee:95:a8:69:90:32:c4:e9:6a:8f:61:87: 74:67:6c:dd:7f:f9:23:d7:38:5e:f7:01:b9:51:5b: 33:92:26:cd:34:ad:f4:15:42:2b:2e:b4:8d:f8:7c: be:d0:35:36:a4:68:fa:a5:41:e4:fb:8d:d7:7d:39: 4c:35:23:a6:54:ba:ec:1c:95:df:e9:ac:3c:c8:14: 49:1f:51:4a:0d:2f:a6:8e:2c:37:42:3f:8b:b8:ba: dc:2c:e5:54:4c:55:d9:5d:28:70:3a:be:c2:c6:85: 0a:af:82:18:1b:ee:d7:84:1f:48:62:60:77:29:83: e8:8f:59:fd:f8:97:ce:34:3e:e9:b8:79:6d:2e:f6: 75:5e:7e:cd:8c:63:e0:a5:e9:a9:31:c0:4a:19:ed: 14:d3:f9:52:35:fe:a9:c7:fa:33:db:75:0c:db:be: dd:2e:05:0f:3e:fb:50:71:bc:ed:23:7d:3c:f0:05: 10:69:e5:e4:1e:fb:5d:85:64:b2:fd:e3:e5:8f:89: ae:5c:ee:ac:c8:d1:6b:a9:13:41:ad:e6:f9:60:4a: b0:6d:bb:5d:e2:e8:b1:5c:a2:ce:56:19:b8:0f:23: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A1:87:6B:D3:41:5F:60:94:86:6A:26:0E:44:E1:96:53:FB:22:20 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iaGHa9NBX2CUhmomDkThllP7IiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.56.0/24 45.149.147.0/24 185.126.67.0/24 Signature Algorithm: sha256WithRSAEncryption be:95:c7:b1:9c:cb:87:b8:36:45:8e:9e:ff:ce:b8:7f:f1:b3: a1:01:50:bd:f8:a7:48:0a:32:73:41:67:61:7f:a2:83:18:e5: 6c:b3:10:dd:b3:63:da:66:db:06:9f:89:76:09:fb:e4:67:50: e8:6d:83:8a:b5:88:0b:42:a3:1c:11:37:ab:33:40:cb:64:ca: 5f:e2:df:13:2f:4e:43:13:58:e8:cd:7e:a6:af:4f:de:1f:3b: 27:fc:ef:c4:f0:04:f6:ee:a4:61:8f:75:bd:d1:4b:00:40:a3: 2a:e1:b8:9e:de:33:d8:12:42:4e:0b:77:6c:ff:cd:55:42:df: fe:5e:3b:7e:7a:d2:85:40:d5:d5:c4:f1:4a:17:f2:fb:19:17: f3:91:45:1b:3a:b9:ce:b0:d9:41:09:a4:0a:8f:e0:71:ac:5e: 23:0b:b4:43:d4:a2:60:40:7a:3a:1b:5b:83:ad:a8:d5:5e:f6: c3:12:c4:d2:a6:d9:cc:27:7a:bb:c1:8d:4a:36:e7:e7:b1:1e: f7:33:37:b8:8e:70:7b:93:7e:65:ab:0c:9f:92:01:3a:ab:f9: 39:bd:13:60:11:18:63:0a:22:9a:2a:cb:0e:72:69:c8:d5:b2: a6:ff:bf:20:39:ea:68:46:7f:89:3f:5b:55:0c:20:b6:05:ba: 0b:f6:7f:c4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwD+dbZuhycgNOaRzBdeIv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTI4MDk0MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWExODc2YmQzNDE1ZjYwOTQ4NjZhMjYwZTQ0ZTE5NjUzZmIyMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkESqa6to7VjTdx+h8hy9+KVXd8X EIohYscywZD3TLHulahpkDLE6WqPYYd0Z2zdf/kj1zhe9wG5UVszkibNNK30FUIr LrSN+Hy+0DU2pGj6pUHk+43XfTlMNSOmVLrsHJXf6aw8yBRJH1FKDS+mjiw3Qj+L uLrcLOVUTFXZXShwOr7CxoUKr4IYG+7XhB9IYmB3KYPoj1n9+JfOND7puHltLvZ1 Xn7NjGPgpempMcBKGe0U0/lSNf6px/oz23UM277dLgUPPvtQcbztI3088AUQaeXk HvtdhWSy/ePlj4muXO6syNFrqRNBreb5YEqwbbtd4uixXKLOVhm4DyMKuQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFImhh2vTQV9glIZqJg5E4ZZT+yIgMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvaWFHSGE5TkJYMkNVaG1vbURrVGhsbFA3SWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZE4AwQA LZWTAwQAuX5DMA0GCSqGSIb3DQEBCwUAA4IBAQC+lcexnMuHuDZFjp7/zrh/8bOh AVC9+KdICjJzQWdhf6KDGOVssxDds2PaZtsGn4l2CfvkZ1DobYOKtYgLQqMcETer M0DLZMpf4t8TL05DE1jozX6mr0/eHzsn/O/E8AT27qRhj3W90UsAQKMq4bie3jPY EkJOC3ds/81VQt/+Xjt+etKFQNXVxPFKF/L7GRfzkUUbOrnOsNlBCaQKj+BxrF4j C7RD1KJgQHo6G1uDrajVXvbDEsTSptnMJ3q7wY1KNufnsR73Mze4jnB7k35lqwyf kgE6q/k5vRNgERhjCiKaKssOcmnI1bKm/78gOepoRn+JP1tVDCC2BboL9n/E -----END CERTIFICATE-----Generated at Wed Feb 4 20:15:58 2026 by rpki-client