This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/a1xgjXAhseZu7nFnf5HzZCndeXI.roa File: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (raw, json) Hash identifier: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4= Subject key identifier: 6B:5C:60:8D:70:21:B1:E6:6E:EE:71:67:7F:91:F3:64:29:DD:79:72 Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1 Certificate serial: 019B7BA32837AF0963A02E12DB45DD5AB1B3 Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/a1xgjXAhseZu7nFnf5HzZCndeXI.roa Signing time: Thu 01 Jan 2026 22:17:28 +0000 ROA not before: Thu 01 Jan 2026 22:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205285 IP address blocks: 45.11.224.0/22 maxlen: 22 45.14.136.0/22 maxlen: 22 45.84.78.0/23 maxlen: 23 185.223.4.0/22 maxlen: 22 194.110.140.0/23 maxlen: 23 194.110.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:28:37:af:09:63:a0:2e:12:db:45:dd:5a:b1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1 Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b5c608d7021b1e66eee71677f91f36429dd7972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:8c:a7:aa:69:fa:31:a2:cb:79:6e:50:20: 8a:80:54:25:23:1b:27:78:9e:01:89:ca:6f:01:d9: dd:b9:56:c3:31:07:16:21:ed:22:02:30:fb:fa:25: 55:45:83:9f:19:5f:1b:65:e0:1a:2f:80:0d:6d:a8: 0a:e1:c5:54:3c:e4:da:21:dd:99:45:1f:61:a2:32: 90:34:4c:45:b8:7b:83:72:3a:4e:68:7d:cb:e8:c4: 26:93:86:e5:35:61:5b:23:60:24:01:4a:7d:de:75: be:a7:aa:8a:7b:7d:ac:9a:70:dc:04:db:f3:b7:4c: 45:53:a7:f2:d4:22:9a:42:d4:1d:d1:b7:d2:5b:23: ec:0e:e0:a2:d2:31:57:fe:27:0a:fb:97:06:fb:91: 75:36:df:9e:67:e2:96:6c:a5:1a:b6:94:20:47:0f: 91:c5:82:72:a2:21:7b:67:fa:7d:93:90:f7:1a:61: b1:e9:cd:fb:ff:c0:03:4e:58:74:12:4c:5c:d7:2c: 3f:35:35:5c:c1:0b:53:ab:56:f7:72:a0:dd:f1:ab: 89:fe:32:b1:27:3a:54:09:70:84:74:23:cd:bb:76: 8b:3a:50:08:1e:eb:61:15:ad:18:8b:b4:25:33:03: d3:0f:41:47:f2:4b:1b:c4:1b:33:7e:c9:b3:4f:a5: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5C:60:8D:70:21:B1:E6:6E:EE:71:67:7F:91:F3:64:29:DD:79:72 X509v3 Authority Key Identifier: keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/a1xgjXAhseZu7nFnf5HzZCndeXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.224.0/22 45.14.136.0/22 45.84.78.0/23 185.223.4.0/22 194.110.140.0/23 194.110.148.0/23 Signature Algorithm: sha256WithRSAEncryption 09:3a:3f:90:70:74:67:fc:de:ca:cb:01:1f:54:af:a4:19:29: e4:0f:d1:26:88:6a:e8:07:dd:8a:3a:13:90:01:86:b3:7d:9f: 1b:54:a4:a0:2b:a6:84:6f:69:ea:ab:a3:24:1d:b3:60:ea:a8: 76:1d:f5:1c:e2:3d:24:2b:24:6f:55:de:7d:7b:a7:2a:f7:66: f5:04:12:95:e1:57:3b:44:88:6f:37:d5:a4:39:f8:57:ec:54: 63:92:48:2a:c8:cc:06:bc:84:bb:de:68:90:46:ff:9e:d2:93: 38:82:40:86:d3:54:63:95:89:d5:91:8f:0a:11:3a:6a:5c:e6: 11:b0:e0:14:9c:e0:66:75:f7:12:c3:5f:d8:b4:9b:4d:db:74: 69:1d:f7:00:8d:f0:41:97:c4:59:75:9d:11:fa:68:71:11:93: 65:0b:fa:30:10:54:f0:5e:37:35:5d:a3:df:d3:d4:aa:31:9c: f7:5d:43:d3:24:b4:ab:cc:e7:4e:53:55:fd:dd:a5:c2:2e:86: f7:6b:b0:31:78:47:aa:69:e1:de:b0:ae:76:dd:ef:40:24:60: 44:cd:7f:3f:60:97:d6:6a:0f:3d:c0:9f:ec:77:f5:c2:e0:5c: f6:3a:0f:15:79:b7:2e:23:eb:37:7d:00:df:9f:5b:d0:61:70: ec:8f:fe:6a -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7oyg3rwljoC4S20XdWrGzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzcxMDMwZmUwODFlMDJiYWI0ODIzZDA1NjhmZmIyYTMz MjY1ZTEwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjVjNjA4ZDcwMjFiMWU2NmVlZTcxNjc3ZjkxZjM2NDI5ZGQ3OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKqMp6pp+jGiy3luUCCKgFQlIxsn eJ4BicpvAdnduVbDMQcWIe0iAjD7+iVVRYOfGV8bZeAaL4ANbagK4cVUPOTaId2Z RR9hojKQNExFuHuDcjpOaH3L6MQmk4blNWFbI2AkAUp93nW+p6qKe32smnDcBNvz t0xFU6fy1CKaQtQd0bfSWyPsDuCi0jFX/icK+5cG+5F1Nt+eZ+KWbKUatpQgRw+R xYJyoiF7Z/p9k5D3GmGx6c37/8ADTlh0Ekxc1yw/NTVcwQtTq1b3cqDd8auJ/jKx JzpUCXCEdCPNu3aLOlAIHuthFa0Yi7QlMwPTD0FH8ksbxBszfsmzT6W6QQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFGtcYI1wIbHmbu5xZ3+R82Qp3XlyMB8GA1UdIwQY MBaAFNrHEDD+CB4CurSCPQVo/7KjMmXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUt YzgyMDFiOTFhZWMzLzEvYTF4Z2pYQWhzZVp1N25GbmY1SHpaQ25kZVhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUtYzgyMDFiOTFhZWMz LzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLQvgAwQC LQ6IAwQBLVROAwQCud8EAwQBwm6MAwQBwm6UMA0GCSqGSIb3DQEBCwUAA4IBAQAJ Oj+QcHRn/N7KywEfVK+kGSnkD9EmiGroB92KOhOQAYazfZ8bVKSgK6aEb2nqq6Mk HbNg6qh2HfUc4j0kKyRvVd59e6cq92b1BBKV4Vc7RIhvN9WkOfhX7FRjkkgqyMwG vIS73miQRv+e0pM4gkCG01RjlYnVkY8KETpqXOYRsOAUnOBmdfcSw1/YtJtN23Rp HfcAjfBBl8RZdZ0R+mhxEZNlC/owEFTwXjc1XaPf09SqMZz3XUPTJLSrzOdOU1X9 3aXCLob3a7AxeEeqaeHesK523e9AJGBEzX8/YJfWag89wJ/sd/XC4Fz2Og8Vebcu I+s3fQDfn1vQYXDsj/5q -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:08 2026 by rpki-client