This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pQnHpCxDPpV2E6VsRTaBoo_cOjk.roa File: pQnHpCxDPpV2E6VsRTaBoo_cOjk.roa (raw, json) Hash identifier: zY9E1cTwNvVO5hexxS7kMXNoSBvVmw5+km0hCIsC4Do= Subject key identifier: A5:09:C7:A4:2C:43:3E:95:76:13:A5:6C:45:36:81:A2:8F:DC:3A:39 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B7910852BB34BF91DEB20B4244B5DE1DD Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pQnHpCxDPpV2E6VsRTaBoo_cOjk.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209737 IP address blocks: 5.180.105.0/24 maxlen: 24 5.180.106.0/24 maxlen: 24 5.180.107.0/24 maxlen: 24 45.131.0.0/24 maxlen: 24 45.131.1.0/24 maxlen: 24 45.136.4.0/24 maxlen: 24 77.83.200.0/24 maxlen: 24 77.83.201.0/24 maxlen: 24 77.83.202.0/24 maxlen: 24 77.83.203.0/24 maxlen: 24 91.208.204.0/24 maxlen: 24 194.116.237.0/24 maxlen: 24 2a09:8780::/29 maxlen: 29 2a0f:b700::/29 maxlen: 29 2a0f:e900::/29 maxlen: 29 2a0f:eb00::/29 maxlen: 29 2a0f:eb00::/32 maxlen: 32 2a0f:eb07::/32 maxlen: 32 2a0f:ed00::/29 maxlen: 29 2a0f:ed03::/32 maxlen: 32 2a0f:f900::/29 maxlen: 29 2a13:a440::/48 maxlen: 48 2a13:a440:1::/48 maxlen: 48 2a13:a440:2::/48 maxlen: 48 2a13:a440:3::/48 maxlen: 48 2a13:a440:4::/48 maxlen: 48 2a13:a440:5::/48 maxlen: 48 2a13:a440:7::/48 maxlen: 48 2a13:a441::/32 maxlen: 32 2a13:a445::/32 maxlen: 32 2a13:a447::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:85:2b:b3:4b:f9:1d:eb:20:b4:24:4b:5d:e1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a509c7a42c433e957613a56c453681a28fdc3a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:29:19:07:c6:a1:36:bc:ed:98:b0:c0:c6: be:00:7f:b0:90:3e:79:f1:7b:fc:ea:a0:02:ab:84: 2b:80:a7:60:3f:55:9e:d9:31:46:46:3a:05:d9:73: 48:36:16:99:15:ff:cb:fa:89:04:03:86:01:b8:09: 91:d6:96:a6:d4:f9:fa:4a:f6:f3:3b:ce:43:23:a7: 9e:8d:ef:90:cc:14:7a:56:0d:c7:c6:ca:97:d1:ac: 12:dd:bd:9c:bc:d6:f8:4d:91:f5:cc:c4:37:c9:a8: e1:64:3d:2f:b5:45:1a:ea:6d:51:5b:17:62:e8:f3: 57:7d:a3:9f:b7:23:01:91:b7:45:2d:a6:99:74:6b: 81:95:93:07:cc:e4:09:2d:72:0c:e7:d4:dd:aa:ad: a3:67:d0:55:68:1b:8b:14:e0:d3:ab:6d:28:77:e0: c7:0e:8f:7a:52:94:05:36:5d:b7:7b:1d:b1:95:78: 0a:f9:78:43:4a:14:b9:5d:ae:ed:fb:c3:37:45:00: 26:f7:b9:41:fa:50:33:95:83:f3:de:e5:12:75:d6: 55:02:b6:9a:81:b6:c3:5c:0f:ab:16:fb:95:9d:51: e3:15:50:51:41:4e:f0:94:c2:12:37:66:e3:42:3d: 3e:40:5b:bc:f5:64:32:e9:41:f3:2e:e8:86:08:70: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:09:C7:A4:2C:43:3E:95:76:13:A5:6C:45:36:81:A2:8F:DC:3A:39 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pQnHpCxDPpV2E6VsRTaBoo_cOjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.105.0-5.180.107.255 45.131.0.0/23 45.136.4.0/24 77.83.200.0/22 91.208.204.0/24 194.116.237.0/24 IPv6: 2a09:8780::/29 2a0f:b700::/29 2a0f:e900::/29 2a0f:eb00::/29 2a0f:ed00::/29 2a0f:f900::/29 2a13:a440::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff 2a13:a440:7::/48 2a13:a441::/32 2a13:a445::/32 2a13:a447::/32 Signature Algorithm: sha256WithRSAEncryption 7d:15:62:75:58:b4:73:8a:40:86:ad:48:46:69:52:6d:33:61: 32:59:b7:5e:de:13:48:3f:61:02:55:1a:21:14:3f:3b:98:ab: 34:d2:50:c0:19:c6:e8:30:eb:e1:c9:7a:4b:e6:63:18:21:5d: 20:d2:4c:4a:b9:09:b0:07:3a:ca:85:2d:2b:47:ba:e5:f5:09: 0c:27:85:40:19:56:53:4d:cd:c3:5a:64:6c:a1:3f:27:8e:12: 3a:f3:a0:2e:b9:ca:ad:0d:bc:5f:66:04:2f:d1:7f:e4:d0:6a: a7:25:b8:88:2d:6c:89:ea:c3:35:e5:5c:2f:3e:5c:ca:ed:21: e6:ba:14:25:e6:8f:84:2b:b5:b8:fc:36:e7:c3:5c:9c:b7:b6: 27:67:db:02:ec:c2:7d:d9:ba:46:d0:b1:fa:7a:58:87:b5:2a: a6:f2:71:e9:85:3f:49:6b:7d:23:12:48:74:f6:ef:cc:40:b6: b4:b4:58:af:37:0e:86:b2:0d:b9:7b:63:24:91:99:6a:0a:6c: fc:bc:a9:d3:be:59:ee:ef:2b:21:48:50:19:9c:b8:0b:05:2a: 8b:98:07:6b:1f:1a:d0:3d:fe:08:80:d5:c5:af:53:b0:14:c9: 61:90:73:3b:f5:a9:af:05:1a:f4:e5:d2:f6:2a:3d:08:9f:05: e9:1e:cb:3e -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZt5EIUrs0v5HesgtCRLXeHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTA5YzdhNDJjNDMzZTk1NzYxM2E1NmM0NTM2ODFhMjhmZGMzYTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUwpGQfGoTa87ZiwwMa+AH+wkD55 8Xv86qACq4QrgKdgP1We2TFGRjoF2XNINhaZFf/L+okEA4YBuAmR1pam1Pn6Svbz O85DI6eeje+QzBR6Vg3HxsqX0awS3b2cvNb4TZH1zMQ3yajhZD0vtUUa6m1RWxdi 6PNXfaOftyMBkbdFLaaZdGuBlZMHzOQJLXIM59Tdqq2jZ9BVaBuLFODTq20od+DH Do96UpQFNl23ex2xlXgK+XhDShS5Xa7t+8M3RQAm97lB+lAzlYPz3uUSddZVAraa gbbDXA+rFvuVnVHjFVBRQU7wlMISN2bjQj0+QFu89WQy6UHzLuiGCHBXEQIDAQAB o4IClDCCApAwHQYDVR0OBBYEFKUJx6QsQz6VdhOlbEU2gaKP3Do5MB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvcFFuSHBDeERQcFYyRTZWc1JUYUJvb19jT2prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljAyBAIAATAsMAwDBAAF tGkDBAIFtGgDBAEtgwADBAAtiAQDBAJNU8gDBABb0MwDBADCdO0wYAQCAAIwWgMF AyoJh4ADBQMqD7cAAwUDKg/pAAMFAyoP6wADBQMqD+0AAwUDKg/5ADAQAwUGKhOk QAMHASoTpEAABAMHACoTpEAABwMFACoTpEEDBQAqE6RFAwUAKhOkRzANBgkqhkiG 9w0BAQsFAAOCAQEAfRVidVi0c4pAhq1IRmlSbTNhMlm3Xt4TSD9hAlUaIRQ/O5ir NNJQwBnG6DDr4cl6S+ZjGCFdINJMSrkJsAc6yoUtK0e65fUJDCeFQBlWU03Nw1pk bKE/J44SOvOgLrnKrQ28X2YEL9F/5NBqpyW4iC1sierDNeVcLz5cyu0h5roUJeaP hCu1uPw258NcnLe2J2fbAuzCfdm6RtCx+npYh7UqpvJx6YU/SWt9IxJIdPbvzEC2 tLRYrzcOhrINuXtjJJGZagps/Lyp075Z7u8rIUhQGZy4CwUqi5gHax8a0D3+CIDV xa9TsBTJYZBzO/WprwUa9OXS9io9CJ8F6R7LPg== -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:01 2026 by rpki-client