This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/xk7gnuwRExVZ3WpkBbinksRcNPA.roa File: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (raw, json) Hash identifier: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4= Subject key identifier: C6:4E:E0:9E:EC:11:13:15:59:DD:6A:64:05:B8:A7:92:C4:5C:34:F0 Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa Certificate serial: 019B7EA6742F05C86D471BE86F9674CEA6CC Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/xk7gnuwRExVZ3WpkBbinksRcNPA.roa Signing time: Fri 02 Jan 2026 12:19:56 +0000 ROA not before: Fri 02 Jan 2026 12:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62336 IP address blocks: 45.81.44.0/22 maxlen: 22 45.89.92.0/22 maxlen: 22 45.93.104.0/22 maxlen: 22 45.130.92.0/22 maxlen: 22 45.138.40.0/22 maxlen: 22 45.148.112.0/22 maxlen: 22 91.212.40.0/23 maxlen: 23 91.212.54.0/23 maxlen: 23 194.99.82.0/24 maxlen: 24 194.99.85.0/24 maxlen: 24 194.99.91.0/24 maxlen: 24 194.99.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:74:2f:05:c8:6d:47:1b:e8:6f:96:74:ce:a6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa Validity Not Before: Jan 2 12:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c64ee09eec11131559dd6a6405b8a792c45c34f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:02:f7:76:89:68:0a:ba:fb:43:cc:51:9c: 38:7a:cb:56:ea:55:7a:93:df:b3:34:81:80:9e:f4: c4:17:77:25:26:37:e3:e2:21:2c:cd:8c:f0:84:fe: 0c:6d:df:a2:b3:a8:15:cc:37:a6:46:94:ab:0a:c2: 65:58:93:f1:a5:84:06:27:5b:1c:c8:61:0d:22:0e: fb:ae:0f:0b:18:5d:ad:68:8f:ad:68:9f:51:3d:07: 03:22:fa:a3:76:01:65:e6:c0:78:63:a6:ec:f1:7c: 78:10:57:57:11:ff:52:c2:27:79:65:4d:0d:fc:2d: 84:13:f3:63:92:1a:14:35:05:32:2f:39:44:88:65: fc:ac:7e:89:5e:6a:37:30:fd:84:40:20:67:e5:ca: 43:82:8f:83:40:ca:83:b2:21:29:c1:f8:4f:c3:95: 3a:92:27:e2:17:43:e1:db:7e:f8:41:1a:e4:9d:fa: f5:e8:a5:ee:78:fc:cb:32:bf:f4:ef:59:ea:9c:07: 25:a4:8d:b9:ff:6f:00:12:2f:7f:f5:f4:09:a8:cf: 44:d3:cb:d7:53:b5:8a:2b:34:2f:c3:cd:fe:a8:5e: e4:a8:b8:37:94:28:ae:2e:90:ee:cc:e8:d2:2f:29: 03:f3:c5:4a:4b:98:77:97:6a:ec:46:3e:06:f3:32: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4E:E0:9E:EC:11:13:15:59:DD:6A:64:05:B8:A7:92:C4:5C:34:F0 X509v3 Authority Key Identifier: keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/xk7gnuwRExVZ3WpkBbinksRcNPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.44.0/22 45.89.92.0/22 45.93.104.0/22 45.130.92.0/22 45.138.40.0/22 45.148.112.0/22 91.212.40.0/23 91.212.54.0/23 194.99.82.0/24 194.99.85.0/24 194.99.91.0/24 194.99.110.0/24 Signature Algorithm: sha256WithRSAEncryption b4:d8:1f:e7:08:39:14:1d:13:79:45:05:65:41:95:b9:7d:29: 35:c4:a4:db:93:9e:cb:24:f0:48:cd:d0:29:05:88:89:9b:fa: 1f:f7:7b:ac:2a:7f:5a:9d:98:a0:34:16:4c:7f:7f:1a:2f:07: 39:6b:61:02:ae:b7:66:52:c0:96:3f:15:19:0e:0e:d0:c4:df: 9b:d9:ed:7d:b3:f2:f3:19:e1:1d:b0:af:1c:12:ae:20:f3:eb: 80:91:c4:80:ba:71:d5:35:1e:1a:7a:1f:29:d8:33:3d:ec:0c: b6:15:e5:19:ee:f7:17:97:b7:db:49:65:4d:3f:18:4e:48:88: ce:b4:40:5e:dd:11:76:57:ce:36:f9:26:d3:f7:d4:e1:a6:70: 58:25:49:0f:e6:fc:fb:ee:88:85:48:5f:ce:79:17:de:cd:a9: 4d:57:e6:bd:60:7c:71:fa:17:65:c1:dc:61:d3:c8:9f:45:a3: 74:48:52:60:26:3b:53:68:86:d4:d8:95:5b:61:60:ec:ed:1d: 40:42:2e:6a:de:c3:a9:24:f2:29:c8:b1:14:3f:07:0f:ec:d7: 1c:e3:8a:47:b5:94:cb:fd:5b:91:00:c9:d6:35:a9:c3:d6:de: 90:5b:99:83:c2:59:a5:aa:c3:f7:11:97:8c:1f:07:26:65:75: fe:64:9e:f9 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt+pnQvBchtRxvob5Z0zqbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw MzkzYWEwHhcNMjYwMTAyMTIxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRlZTA5ZWVjMTExMzE1NTlkZDZhNjQwNWI4YTc5MmM0NWMzNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2QC93aJaAq6+0PMUZw4estW6lV6 k9+zNIGAnvTEF3clJjfj4iEszYzwhP4Mbd+is6gVzDemRpSrCsJlWJPxpYQGJ1sc yGENIg77rg8LGF2taI+taJ9RPQcDIvqjdgFl5sB4Y6bs8Xx4EFdXEf9Swid5ZU0N /C2EE/NjkhoUNQUyLzlEiGX8rH6JXmo3MP2EQCBn5cpDgo+DQMqDsiEpwfhPw5U6 kifiF0Ph2374QRrknfr16KXuePzLMr/071nqnAclpI25/28AEi9/9fQJqM9E08vX U7WKKzQvw83+qF7kqLg3lCiuLpDuzOjSLykD88VKS5h3l2rsRj4G8zLwDwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMZO4J7sERMVWd1qZAW4p5LEXDTwMB8GA1UdIwQY MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt YWRmNDNmMDRlYzljLzEveGs3Z251d1JFeFZaM1dwa0JiaW5rc1JjTlBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCLVEsAwQC LVlcAwQCLV1oAwQCLYJcAwQCLYooAwQCLZRwAwQBW9QoAwQBW9Q2AwQAwmNSAwQA wmNVAwQAwmNbAwQAwmNuMA0GCSqGSIb3DQEBCwUAA4IBAQC02B/nCDkUHRN5RQVl QZW5fSk1xKTbk57LJPBIzdApBYiJm/of93usKn9anZigNBZMf38aLwc5a2ECrrdm UsCWPxUZDg7QxN+b2e19s/LzGeEdsK8cEq4g8+uAkcSAunHVNR4aeh8p2DM97Ay2 FeUZ7vcXl7fbSWVNPxhOSIjOtEBe3RF2V842+SbT99ThpnBYJUkP5vz77oiFSF/O eRfezalNV+a9YHxx+hdlwdxh08ifRaN0SFJgJjtTaIbU2JVbYWDs7R1AQi5q3sOp JPIpyLEUPwcP7Ncc44pHtZTL/VuRAMnWNanD1t6QW5mDwlmlqsP3EZeMHwcmZXX+ ZJ75 -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:21 2026 by rpki-client