This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mDedlg8i3uB-rbubRByPB2yRj44.roa File: mDedlg8i3uB-rbubRByPB2yRj44.roa (raw, json) Hash identifier: lPXfwNlfovkqIuVhtdTZ6zTYQBYxK/9ri0Egshfxn+4= Subject key identifier: 98:37:9D:96:0F:22:DE:E0:7E:AD:BB:9B:44:1C:8F:07:6C:91:8F:8E Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1390589F0E1B5F92D4444B27C37B5A Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mDedlg8i3uB-rbubRByPB2yRj44.roa Signing time: Fri 02 Jan 2026 00:20:15 +0000 ROA not before: Fri 02 Jan 2026 00:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210876 IP address blocks: 45.134.84.0/22 maxlen: 24 45.134.84.0/23 maxlen: 23 45.147.116.0/22 maxlen: 24 45.159.76.0/22 maxlen: 24 93.189.123.0/24 maxlen: 24 109.107.149.0/24 maxlen: 24 185.216.30.0/24 maxlen: 24 185.216.31.0/24 maxlen: 24 185.226.8.0/24 maxlen: 24 185.247.6.0/24 maxlen: 24 194.35.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:90:58:9f:0e:1b:5f:92:d4:44:4b:27:c3:7b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98379d960f22dee07eadbb9b441c8f076c918f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:73:89:4f:41:c3:04:42:a6:79:03:a6:f9: 92:0d:c4:30:f2:6b:53:ef:58:78:24:05:65:21:9d: aa:1a:b8:64:98:59:8a:60:20:ea:e8:e0:cc:e2:77: a8:c0:48:c6:84:67:43:c2:e7:fc:17:0a:5f:fc:09: d6:5f:3d:3c:6f:e7:36:b7:d4:7d:04:79:cb:6c:4a: 3f:e3:e5:7b:fd:7f:f5:d5:78:a1:6b:80:cb:36:aa: 7d:45:39:f5:76:50:fc:e1:1b:7a:be:a4:91:b7:ee: fa:af:06:ff:19:84:26:c4:76:af:0c:1d:64:a3:bf: cb:ea:ae:69:a8:1b:d7:ac:cb:46:df:04:7f:5a:4b: f3:de:f2:9e:c7:22:41:dd:89:53:16:d1:f9:02:56: c4:3b:5b:69:15:19:4d:23:34:bf:75:42:c0:e8:93: 17:a9:f2:80:98:11:37:43:c0:a9:f6:7c:8f:4c:9a: ef:04:ca:b5:b8:b3:e4:a6:a6:f1:3e:75:2b:04:54: e5:94:64:af:97:b6:a5:ae:d7:bc:7a:2b:e8:84:bc: 3e:7f:81:08:d2:0b:37:d3:d4:90:25:90:5b:b3:60: ce:49:3c:e9:7d:f3:51:29:df:3c:ca:63:22:16:a2: 48:d6:3a:06:5f:f5:2e:09:38:08:63:ca:e4:a4:ca: 04:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:37:9D:96:0F:22:DE:E0:7E:AD:BB:9B:44:1C:8F:07:6C:91:8F:8E X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mDedlg8i3uB-rbubRByPB2yRj44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.84.0/22 45.147.116.0/22 45.159.76.0/22 93.189.123.0/24 109.107.149.0/24 185.216.30.0/23 185.226.8.0/24 185.247.6.0/24 194.35.40.0/24 Signature Algorithm: sha256WithRSAEncryption 55:73:10:d0:38:74:37:8a:d6:18:56:b6:da:2b:57:b2:f1:2b: 66:24:bc:de:d1:f8:67:af:75:28:81:03:fa:41:3a:99:96:52: 1e:56:eb:08:ab:d9:4a:5b:1b:1a:d5:12:eb:87:1c:08:a4:a3: 10:4b:36:b3:97:19:bf:50:d7:ab:54:33:83:af:d0:6f:8d:13: 39:a6:16:0c:b7:4d:56:63:3b:4c:b2:cf:e2:6b:b5:be:f1:bf: 16:39:98:60:9a:a5:4a:fe:bc:f7:9f:95:38:26:ea:5f:79:a9: 38:f9:03:d3:26:ec:c8:e8:2d:71:47:cb:fe:97:84:0f:00:3b: 24:6c:04:4b:c0:c5:9b:82:b1:a6:45:d7:76:8c:92:70:85:b4: 93:25:c4:f9:51:b7:07:5c:f8:5e:2a:d2:1c:a5:c1:cf:f8:c8: 58:28:b6:f1:e0:8a:2f:96:e5:ba:8e:49:26:35:04:ca:4e:0b: 4e:bb:b2:01:04:de:2c:d4:c7:85:a5:53:e9:72:9c:29:cf:fb: 99:3a:23:60:d7:f4:a2:bf:dd:2d:53:e5:86:a9:91:de:a3:70: 52:3c:0d:62:b2:c2:66:d3:c7:e2:f5:2b:ad:17:a7:3b:fc:1e: 61:5e:f6:35:8c:bb:4a:92:c7:80:a3:61:f7:48:9f:9b:ab:f3: 2e:1c:a1:d1 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt8E5BYnw4bX5LUREsnw3taMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODM3OWQ5NjBmMjJkZWUwN2VhZGJiOWI0NDFjOGYwNzZjOTE4ZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgVziU9BwwRCpnkDpvmSDcQw8mtT 71h4JAVlIZ2qGrhkmFmKYCDq6ODM4neowEjGhGdDwuf8Fwpf/AnWXz08b+c2t9R9 BHnLbEo/4+V7/X/11Xiha4DLNqp9RTn1dlD84Rt6vqSRt+76rwb/GYQmxHavDB1k o7/L6q5pqBvXrMtG3wR/Wkvz3vKexyJB3YlTFtH5AlbEO1tpFRlNIzS/dULA6JMX qfKAmBE3Q8Cp9nyPTJrvBMq1uLPkpqbxPnUrBFTllGSvl7alrte8eivohLw+f4EI 0gs309SQJZBbs2DOSTzpffNRKd88ymMiFqJI1joGX/UuCTgIY8rkpMoEJwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFJg3nZYPIt7gfq27m0QcjwdskY+OMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvbURlZGxnOGkzdUItcmJ1YlJCeVBCMnlSajQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCLYZUAwQC LZN0AwQCLZ9MAwQAXb17AwQAbWuVAwQBudgeAwQAueIIAwQAufcGAwQAwiMoMA0G CSqGSIb3DQEBCwUAA4IBAQBVcxDQOHQ3itYYVrbaK1ey8StmJLze0fhnr3UogQP6 QTqZllIeVusIq9lKWxsa1RLrhxwIpKMQSzazlxm/UNerVDODr9BvjRM5phYMt01W YztMss/ia7W+8b8WOZhgmqVK/rz3n5U4Jupfeak4+QPTJuzI6C1xR8v+l4QPADsk bARLwMWbgrGmRdd2jJJwhbSTJcT5UbcHXPheKtIcpcHP+MhYKLbx4IovluW6jkkm NQTKTgtOu7IBBN4s1MeFpVPpcpwpz/uZOiNg1/Siv90tU+WGqZHeo3BSPA1issJm 08fi9SutF6c7/B5hXvY1jLtKkseAo2H3SJ+bq/MuHKHR -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:18 2026 by rpki-client