This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/Ra13SMTFBvpWhxXrpfFnFw-OimM.roa File: Ra13SMTFBvpWhxXrpfFnFw-OimM.roa (raw, json) Hash identifier: b0Za2pBFcrD4LJ53MzUO0gNJytzhPTrcz+l8K+RFsRM= Subject key identifier: 45:AD:77:48:C4:C5:06:FA:56:87:15:EB:A5:F1:67:17:0F:8E:8A:63 Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c Certificate serial: 019B7B3547679D5440AB15796896D38DED93 Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/Ra13SMTFBvpWhxXrpfFnFw-OimM.roa Signing time: Thu 01 Jan 2026 20:17:27 +0000 ROA not before: Thu 01 Jan 2026 20:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48252 IP address blocks: 94.198.176.0/21 maxlen: 21 94.198.176.0/24 maxlen: 24 94.198.177.0/24 maxlen: 24 94.198.178.0/24 maxlen: 24 94.198.179.0/24 maxlen: 24 94.198.180.0/24 maxlen: 24 94.198.181.0/24 maxlen: 24 94.198.182.0/24 maxlen: 24 94.198.183.0/24 maxlen: 24 185.21.212.0/22 maxlen: 22 185.21.212.0/24 maxlen: 24 185.21.213.0/24 maxlen: 24 185.21.214.0/24 maxlen: 24 185.21.215.0/24 maxlen: 24 2a04:11c0::/29 maxlen: 29 2a04:11c1::/32 maxlen: 32 2a04:11c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:47:67:9d:54:40:ab:15:79:68:96:d3:8d:ed:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c Validity Not Before: Jan 1 20:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45ad7748c4c506fa568715eba5f167170f8e8a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:3e:d3:12:2f:d0:f3:64:8e:46:cb:aa:8e: 7f:08:cb:eb:ac:82:8a:4c:12:80:e2:fc:21:71:d7: 2d:9f:ce:a9:7f:a8:b0:35:4f:01:57:d5:0c:b1:ad: c2:a7:4d:73:48:c1:05:16:ad:d3:6b:75:58:45:06: 6e:03:73:dd:35:0e:f1:4b:fa:b6:63:55:8e:ae:73: 77:3e:8e:0b:9f:d0:ac:d7:f5:fa:a1:8b:9d:a8:16: 3f:82:5c:d7:f9:27:12:f5:44:c0:24:37:8a:c1:95: d7:d5:55:ce:f6:47:ff:78:d7:96:d9:c7:0b:0f:ca: 43:44:6e:fb:fb:a6:fc:af:be:89:80:07:12:b9:bc: 48:7f:42:b1:f2:fa:4e:8f:11:20:8c:15:e0:2d:ff: 06:f3:0d:40:b2:08:5d:e8:6d:0c:e6:4e:f5:b2:4a: 1f:d3:6f:63:a1:fe:5c:67:dd:42:96:2a:f2:9d:a8: 54:d1:0b:79:ad:aa:34:42:9d:fd:c5:6b:fc:66:4a: 3c:43:48:77:c1:50:8d:e8:27:a8:68:73:03:9d:f5: c1:d1:57:b1:0f:3d:d7:9c:bc:ff:82:e3:f5:bf:dc: 88:81:89:b4:65:97:47:68:7c:5f:a2:86:a5:48:3b: ed:60:0c:db:39:89:15:9c:d2:68:76:6a:a6:d1:28: de:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AD:77:48:C4:C5:06:FA:56:87:15:EB:A5:F1:67:17:0F:8E:8A:63 X509v3 Authority Key Identifier: keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/Ra13SMTFBvpWhxXrpfFnFw-OimM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.198.176.0/21 185.21.212.0/22 IPv6: 2a04:11c0::/29 Signature Algorithm: sha256WithRSAEncryption 86:f8:95:17:5d:3d:fe:11:44:69:22:4c:3b:b8:e5:7e:58:09: e7:fa:a4:9a:cd:75:5d:d1:33:7b:0d:6c:36:52:98:e1:b8:56: 82:bd:6d:64:ec:58:77:35:2f:58:b5:0a:ad:5a:d8:f3:8b:f9: 63:99:13:8b:f8:b7:59:d5:00:15:d1:d2:fb:db:31:e3:c7:b9: 1b:f4:74:2b:d7:4a:bd:5a:5d:e8:fa:96:3f:55:c0:7c:16:a1: 88:dc:aa:a3:17:46:ec:68:50:44:8f:32:5c:42:a9:b8:50:42: a3:02:18:54:5d:9f:3d:d2:aa:25:9b:1b:54:14:2d:c3:3d:f6: b8:b6:0f:ea:ff:bd:85:7a:f7:0e:e9:23:1e:1d:38:df:3b:c9: 5d:72:55:41:e7:b2:ac:48:69:36:7b:e6:51:4d:27:5d:d2:a2: e1:f5:7b:1e:e4:88:bd:ae:c1:b0:f2:96:f4:63:c6:7c:e5:d2: 65:63:bc:89:ec:34:2b:dc:b4:06:e1:fb:b1:74:b8:b4:b7:7a: cc:9d:e9:0a:b0:58:42:e3:1a:f6:0b:3c:b6:26:40:55:3f:48: 05:cb:7a:48:3f:5f:4d:6e:d7:a0:2d:5a:5a:f4:46:f2:ad:1e: 5a:12:9e:cb:9a:c1:87:8c:e8:7c:79:b4:c8:6e:86:1a:5b:21: 7b:b4:44:8b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NUdnnVRAqxV5aJbTje2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYjc3MzgxODUxMjQ5MGE1MDBhZDg0M2VhMmFlNzE3ZWYy MWIxNGMwHhcNMjYwMTAxMjAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWFkNzc0OGM0YzUwNmZhNTY4NzE1ZWJhNWYxNjcxNzBmOGU4YTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlc+0xIv0PNkjkbLqo5/CMvrrIKK TBKA4vwhcdctn86pf6iwNU8BV9UMsa3Cp01zSMEFFq3Ta3VYRQZuA3PdNQ7xS/q2 Y1WOrnN3Po4Ln9Cs1/X6oYudqBY/glzX+ScS9UTAJDeKwZXX1VXO9kf/eNeW2ccL D8pDRG77+6b8r76JgAcSubxIf0Kx8vpOjxEgjBXgLf8G8w1Asghd6G0M5k71skof 029jof5cZ91ClirynahU0Qt5rao0Qp39xWv8Zko8Q0h3wVCN6CeoaHMDnfXB0Vex Dz3XnLz/guP1v9yIgYm0ZZdHaHxfooalSDvtYAzbOYkVnNJodmqm0SjelQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEWtd0jExQb6VocV66XxZxcPjopjMB8GA1UdIwQY MBaAFIu3c4GFEkkKUArYQ+oq5xfvIbFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUt NTJiM2Y2OGRjMGMyLzEvUmExM1NNVEZCdnBXaHhYcnBmRm5Gdy1PaW1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUtNTJiM2Y2OGRjMGMy LzEvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXsawAwQC uRXUMA0EAgACMAcDBQMqBBHAMA0GCSqGSIb3DQEBCwUAA4IBAQCG+JUXXT3+EURp Ikw7uOV+WAnn+qSazXVd0TN7DWw2UpjhuFaCvW1k7Fh3NS9YtQqtWtjzi/ljmROL +LdZ1QAV0dL72zHjx7kb9HQr10q9Wl3o+pY/VcB8FqGI3KqjF0bsaFBEjzJcQqm4 UEKjAhhUXZ890qolmxtUFC3DPfa4tg/q/72FevcO6SMeHTjfO8ldclVB57KsSGk2 e+ZRTSdd0qLh9Xse5Ii9rsGw8pb0Y8Z85dJlY7yJ7DQr3LQG4fuxdLi0t3rMnekK sFhC4xr2Czy2JkBVP0gFy3pIP19NbtegLVpa9EbyrR5aEp7LmsGHjOh8ebTIboYa WyF7tESL -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:38 2026 by rpki-client