This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pP92nXUgnFxyzmxr642WITYfjR8.roa File: pP92nXUgnFxyzmxr642WITYfjR8.roa (raw, json) Hash identifier: TqxUp210JvwrsHlKUxm5AHk6pYYpaSVTd52yZrfvpuk= Subject key identifier: A4:FF:76:9D:75:20:9C:5C:72:CE:6C:6B:EB:8D:96:21:36:1F:8D:1F Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E126E195D32611F3266108EF52FD Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pP92nXUgnFxyzmxr642WITYfjR8.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42864 IP address blocks: 45.9.169.0/24 maxlen: 24 45.9.170.0/24 maxlen: 24 45.9.171.0/24 maxlen: 24 45.14.10.0/24 maxlen: 24 45.14.11.0/24 maxlen: 24 45.88.93.0/24 maxlen: 24 77.242.144.0/24 maxlen: 24 77.242.148.0/24 maxlen: 24 77.242.151.0/24 maxlen: 24 77.242.154.0/24 maxlen: 24 88.209.193.0/24 maxlen: 24 88.209.196.0/24 maxlen: 24 88.209.208.0/24 maxlen: 24 88.209.210.0/24 maxlen: 24 88.209.212.0/24 maxlen: 24 88.209.213.0/24 maxlen: 24 88.209.214.0/24 maxlen: 24 88.209.215.0/24 maxlen: 24 88.209.219.0/24 maxlen: 24 92.52.208.0/24 maxlen: 24 92.52.209.0/24 maxlen: 24 92.52.210.0/23 maxlen: 23 92.52.212.0/22 maxlen: 24 92.52.215.0/24 maxlen: 24 178.248.200.0/21 maxlen: 21 193.138.125.0/24 maxlen: 24 2a00:1f40::/29 maxlen: 29 2a05:f5c0::/29 maxlen: 29 2a05:f5c0::/32 maxlen: 32 2a0c:f1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e1:26:e1:95:d3:26:11:f3:26:61:08:ef:52:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4ff769d75209c5c72ce6c6beb8d9621361f8d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:c2:08:8e:23:30:65:d3:b6:76:db:b8:25: 0c:af:44:c6:3c:6c:c5:dc:32:3a:03:49:01:25:5b: 5c:10:31:4e:a0:c7:70:15:75:a2:37:a6:17:a8:48: 4c:49:e9:72:98:b8:6b:33:6e:c7:7a:14:84:d8:b1: 20:dd:92:08:3a:12:e8:e4:a2:6c:67:28:ce:16:61: d2:1b:07:83:d0:c9:63:f0:96:0e:41:2d:d5:6d:09: f0:73:a8:aa:49:39:f7:e5:3d:d3:5c:b5:e5:84:0a: 7b:78:2b:5d:95:fc:80:18:31:af:53:9f:65:7c:20: ce:46:f0:eb:99:ed:a6:18:ec:2e:60:c5:7e:4b:d8: 40:73:38:be:28:2b:55:11:88:56:5f:a7:2f:45:f1: d4:53:61:d0:4b:9f:e8:09:d9:ca:45:1d:03:a1:22: 4b:2f:e6:ea:c2:ce:d4:8f:df:9e:83:90:68:6b:f4: d9:6f:3a:bb:61:e0:10:8f:57:bc:55:c4:8c:38:3d: 76:bf:65:0d:02:8e:3d:d5:21:58:c8:95:1d:ac:03: 5f:3b:01:a1:42:58:f7:29:bc:1e:a9:19:7b:b8:ce: 07:9e:be:c4:2a:9c:9c:2b:8f:dd:56:34:36:af:b8: c7:ef:e2:ee:82:9d:e8:fe:bb:24:52:cc:10:74:79: ca:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FF:76:9D:75:20:9C:5C:72:CE:6C:6B:EB:8D:96:21:36:1F:8D:1F X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pP92nXUgnFxyzmxr642WITYfjR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.169.0-45.9.171.255 45.14.10.0/23 45.88.93.0/24 77.242.144.0/24 77.242.148.0/24 77.242.151.0/24 77.242.154.0/24 88.209.193.0/24 88.209.196.0/24 88.209.208.0/24 88.209.210.0/24 88.209.212.0/22 88.209.219.0/24 92.52.208.0/21 178.248.200.0/21 193.138.125.0/24 IPv6: 2a00:1f40::/29 2a05:f5c0::/29 2a0c:f1c0::/29 Signature Algorithm: sha256WithRSAEncryption 7b:7d:d4:62:42:df:f6:8b:52:e0:01:c5:bb:6f:59:a0:3c:22: 79:44:5a:d4:ed:58:5c:f2:ea:6d:5f:a3:6b:36:b7:87:98:ff: 5e:4a:13:ca:e7:62:fe:d4:0c:f5:d6:01:6e:2d:93:49:f2:6a: 7a:b6:ec:bb:3f:73:22:26:58:cb:e8:8b:f8:1c:3c:e6:1f:89: 6d:86:3c:d3:1f:28:1c:3e:09:6d:53:91:59:74:a4:45:6f:c6: ae:9e:cc:41:cf:61:78:b7:b9:c3:cf:29:1e:8a:ae:92:2e:55: 0b:d7:5e:f1:f1:7d:f7:0e:c7:1c:f8:39:54:81:e2:34:92:43: fd:70:07:4d:58:6f:1d:73:e3:99:df:33:5e:20:7b:31:52:9e: e2:1d:64:c9:00:38:4c:c2:ba:da:43:4f:82:09:6e:8a:27:d4: 9a:f4:0b:27:38:46:d4:a6:a4:5e:87:9d:57:3e:b3:63:c4:25: 02:0f:12:7c:83:1e:73:a5:42:ba:57:55:e2:b5:77:4a:d0:24: cd:f8:96:3d:ac:5d:bd:7b:39:3e:e2:e3:50:e5:16:32:73:95: a8:88:cf:c8:b9:31:af:4d:77:55:78:0f:c0:03:c9:6f:2b:0b: 58:00:6a:03:e6:bb:1a:07:ab:07:d0:65:2f:fb:a0:32:98:76: 52:1c:0e:c9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZt/hOEm4ZXTJhHzJmEI71L9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGZmNzY5ZDc1MjA5YzVjNzJjZTZjNmJlYjhkOTYyMTM2MWY4ZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF7CCI4jMGXTtnbbuCUMr0TGPGzF 3DI6A0kBJVtcEDFOoMdwFXWiN6YXqEhMSelymLhrM27HehSE2LEg3ZIIOhLo5KJs ZyjOFmHSGweD0Mlj8JYOQS3VbQnwc6iqSTn35T3TXLXlhAp7eCtdlfyAGDGvU59l fCDORvDrme2mGOwuYMV+S9hAczi+KCtVEYhWX6cvRfHUU2HQS5/oCdnKRR0DoSJL L+bqws7Uj9+eg5Boa/TZbzq7YeAQj1e8VcSMOD12v2UNAo491SFYyJUdrANfOwGh Qlj3KbweqRl7uM4Hnr7EKpycK4/dVjQ2r7jH7+Lugp3o/rskUswQdHnK9wIDAQAB o4ICizCCAocwHQYDVR0OBBYEFKT/dp11IJxccs5sa+uNliE2H40fMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvcFA5Mm5YVWduRnh5em14cjY0MldJVFlmalI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTBuBAIAATBoMAwDBAAt CakDBAItCagDBAEtDgoDBAAtWF0DBABN8pADBABN8pQDBABN8pcDBABN8poDBABY 0cEDBABY0cQDBABY0dADBABY0dIDBAJY0dQDBABY0dsDBANcNNADBAOy+MgDBADB in0wGwQCAAIwFQMFAyoAH0ADBQMqBfXAAwUDKgzxwDANBgkqhkiG9w0BAQsFAAOC AQEAe33UYkLf9otS4AHFu29ZoDwieURa1O1YXPLqbV+jaza3h5j/XkoTyudi/tQM 9dYBbi2TSfJqerbsuz9zIiZYy+iL+Bw85h+JbYY80x8oHD4JbVORWXSkRW/Grp7M Qc9heLe5w88pHoquki5VC9de8fF99w7HHPg5VIHiNJJD/XAHTVhvHXPjmd8zXiB7 MVKe4h1kyQA4TMK62kNPggluiifUmvQLJzhG1KakXoedVz6zY8QlAg8SfIMec6VC uldV4rV3StAkzfiWPaxdvXs5PuLjUOUWMnOVqIjPyLkxr013VXgPwAPJbysLWABq A+a7GgerB9BlL/ugMph2UhwOyQ== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:50 2026 by rpki-client