This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/0mnkoAs85-mIhHxZL8fHwKRjWRc.roa File: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (raw, json) Hash identifier: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM= Subject key identifier: D2:69:E4:A0:0B:3C:E7:E9:88:84:7C:59:2F:C7:C7:C0:A4:63:59:17 Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c Certificate serial: 019B7E387B899C80B32B386BF68CF6D3F78E Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/0mnkoAs85-mIhHxZL8fHwKRjWRc.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35699 IP address blocks: 45.130.132.0/22 maxlen: 24 45.133.138.0/23 maxlen: 24 45.137.240.0/22 maxlen: 24 45.145.244.0/22 maxlen: 24 45.151.224.0/22 maxlen: 24 45.230.12.0/22 maxlen: 24 62.56.192.0/20 maxlen: 24 64.190.114.0/23 maxlen: 24 70.34.224.0/20 maxlen: 24 74.126.176.0/20 maxlen: 24 86.111.60.0/22 maxlen: 24 87.236.180.0/22 maxlen: 24 91.126.16.0/20 maxlen: 24 91.126.32.0/19 maxlen: 24 91.126.64.0/19 maxlen: 24 91.126.96.0/19 maxlen: 24 91.126.128.0/19 maxlen: 24 91.126.160.0/19 maxlen: 24 91.126.192.0/19 maxlen: 24 91.126.224.0/19 maxlen: 24 91.126.232.0/21 maxlen: 24 98.96.184.0/21 maxlen: 24 103.202.232.0/22 maxlen: 24 110.93.8.0/22 maxlen: 24 135.129.224.0/20 maxlen: 24 143.131.192.0/18 maxlen: 24 147.136.252.0/23 maxlen: 24 147.161.64.0/18 maxlen: 24 173.243.32.0/20 maxlen: 24 185.203.208.0/22 maxlen: 24 185.239.36.0/22 maxlen: 24 212.97.88.0/21 maxlen: 24 216.147.96.0/20 maxlen: 24 2a00:1af0::/29 maxlen: 29 2a00:1af0::/32 maxlen: 32 2a00:1af1::/32 maxlen: 32 2a00:1af1::/36 maxlen: 36 2a00:1af2::/32 maxlen: 32 2a00:1af3::/32 maxlen: 32 2a00:1af4::/32 maxlen: 32 2a00:1af4:1000::/48 maxlen: 48 2a00:1af4:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7b:89:9c:80:b3:2b:38:6b:f6:8c:f6:d3:f7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d269e4a00b3ce7e988847c592fc7c7c0a4635917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:c3:37:68:89:1a:c0:1d:93:09:34:3f:cd: 0d:9c:95:c8:7f:7d:24:85:13:8c:96:44:a7:90:64: 7d:cd:6e:4b:66:77:be:e7:06:82:e4:45:3b:cd:62: 02:4a:aa:50:92:02:8d:43:fe:3d:09:ee:c5:5d:5f: 18:6c:e9:d0:7d:cf:af:90:25:62:15:ca:cc:00:d8: 9b:f3:f8:47:ec:ed:e5:89:2a:06:8f:88:e0:b9:74: 8a:08:47:74:40:28:9a:21:68:9d:0c:25:3a:d8:0c: 69:3b:6e:0b:6f:61:bd:61:11:93:c8:5f:6d:f7:12: 9b:24:bd:48:c8:9d:6f:63:76:04:b3:7b:c6:4d:c7: 5f:ca:f9:8c:9d:66:2b:fd:6a:7b:85:db:36:bc:f5: 1f:c1:cd:ad:b5:e8:28:d8:d9:49:33:dd:05:1d:84: 77:dd:d6:eb:3a:da:cc:92:26:ae:18:65:2d:1b:a5: 04:0f:a5:b0:ce:a6:7f:97:39:cf:ef:bf:d5:31:a1: 84:0d:33:c0:0e:e6:2b:99:46:1e:a0:86:6d:aa:fe: f9:20:d7:67:4d:b3:a4:30:85:aa:d6:de:f2:6a:3c: bf:7d:1c:83:35:6a:72:95:e6:56:b3:8b:72:2c:bb: 05:fa:42:19:ae:9e:61:f3:93:be:26:a7:e1:f2:b8: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:69:E4:A0:0B:3C:E7:E9:88:84:7C:59:2F:C7:C7:C0:A4:63:59:17 X509v3 Authority Key Identifier: keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/0mnkoAs85-mIhHxZL8fHwKRjWRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.132.0/22 45.133.138.0/23 45.137.240.0/22 45.145.244.0/22 45.151.224.0/22 45.230.12.0/22 62.56.192.0/20 64.190.114.0/23 70.34.224.0/20 74.126.176.0/20 86.111.60.0/22 87.236.180.0/22 91.126.16.0-91.126.255.255 98.96.184.0/21 103.202.232.0/22 110.93.8.0/22 135.129.224.0/20 143.131.192.0/18 147.136.252.0/23 147.161.64.0/18 173.243.32.0/20 185.203.208.0/22 185.239.36.0/22 212.97.88.0/21 216.147.96.0/20 IPv6: 2a00:1af0::/29 Signature Algorithm: sha256WithRSAEncryption 8a:22:61:52:10:a8:09:54:4e:db:18:22:42:44:61:7b:7f:4a: 42:28:d8:7e:6f:71:2b:65:33:33:0a:cd:9b:73:74:f9:67:0e: 8b:74:16:ff:ce:79:62:3b:2a:4e:df:45:c4:d0:52:81:6b:64: 59:88:6d:07:ee:4f:19:81:0a:3b:79:6e:d0:25:96:ef:69:2e: 36:25:de:aa:4a:6b:c5:e9:a3:3d:00:7b:ff:56:8d:2e:b4:61: 11:bd:7a:71:04:f3:61:57:31:c1:3a:2e:9b:5d:c3:09:2a:42: c8:52:36:1e:6f:6a:54:2f:60:21:08:40:a8:69:57:fe:0e:f6: 40:f4:b5:f3:1f:c1:d7:20:12:11:91:44:01:83:32:c5:e1:08: c0:cc:05:7d:1e:57:b7:14:df:26:c5:e9:95:40:06:76:bd:0e: 99:da:34:16:8b:af:13:04:0a:2c:23:2a:01:d2:87:cd:eb:42: 45:d5:41:a0:67:5f:8f:a5:0c:61:cc:d4:d5:b2:b4:94:fa:0d: f9:c8:32:58:89:f9:19:66:38:e8:d5:f8:53:22:45:17:0c:a5: 4f:85:b4:4c:d9:21:a3:f6:23:a1:32:a2:fc:04:9b:cb:19:02: ff:44:c0:e3:48:85:f2:ad:e1:81:b2:10:ba:ef:30:ad:dd:b1: 82:c2:c2:57 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt+OHuJnICzKzhr9oz20/eOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1 NGFiMWMwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjY5ZTRhMDBiM2NlN2U5ODg4NDdjNTkyZmM3YzdjMGE0NjM1OTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MDDN2iJGsAdkwk0P80NnJXIf30k hROMlkSnkGR9zW5LZne+5waC5EU7zWICSqpQkgKNQ/49Ce7FXV8YbOnQfc+vkCVi FcrMANib8/hH7O3liSoGj4jguXSKCEd0QCiaIWidDCU62AxpO24Lb2G9YRGTyF9t 9xKbJL1IyJ1vY3YEs3vGTcdfyvmMnWYr/Wp7hds2vPUfwc2ttego2NlJM90FHYR3 3dbrOtrMkiauGGUtG6UED6WwzqZ/lznP77/VMaGEDTPADuYrmUYeoIZtqv75INdn TbOkMIWq1t7yajy/fRyDNWpyleZWs4tyLLsF+kIZrp5h85O+Jqfh8rhxewIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFNJp5KALPOfpiIR8WS/Hx8CkY1kXMB8GA1UdIwQY MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt N2Q0YmIyMzgwNDg3LzEvMG1ua29Bczg1LW1JaEh4Wkw4Zkh3S1JqV1JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3 LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBpAQCAAEwgZ0DBAIt goQDBAEthYoDBAItifADBAItkfQDBAItl+ADBAIt5gwDBAQ+OMADBAFAvnIDBARG IuADBARKfrADBAJWbzwDBAJX7LQwCwMEBFt+EAMDAFt+AwQDYmC4AwQCZ8roAwQC bl0IAwQEh4HgAwQGj4PAAwQBk4j8AwQGk6FAAwQErfMgAwQCucvQAwQCue8kAwQD 1GFYAwQE2JNgMA0EAgACMAcDBQMqABrwMA0GCSqGSIb3DQEBCwUAA4IBAQCKImFS EKgJVE7bGCJCRGF7f0pCKNh+b3ErZTMzCs2bc3T5Zw6LdBb/znliOypO30XE0FKB a2RZiG0H7k8ZgQo7eW7QJZbvaS42Jd6qSmvF6aM9AHv/Vo0utGERvXpxBPNhVzHB Oi6bXcMJKkLIUjYeb2pUL2AhCECoaVf+DvZA9LXzH8HXIBIRkUQBgzLF4QjAzAV9 Hle3FN8mxemVQAZ2vQ6Z2jQWi68TBAosIyoB0ofN60JF1UGgZ1+PpQxhzNTVsrSU +g35yDJYifkZZjjo1fhTIkUXDKVPhbRM2SGj9iOhMqL8BJvLGQL/RMDjSIXyreGB shC67zCt3bGCwsJX -----END CERTIFICATE-----Generated at Mon Jan 26 19:55:30 2026 by rpki-client