This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/1AKA9ICtH2sefFDvLoJsK9ePE54.roa File: 1AKA9ICtH2sefFDvLoJsK9ePE54.roa (raw, json) Hash identifier: 4v9nHWweB0nvxv/LfJiO5A7Jex4IvVHgN7szjLpSCK4= Subject key identifier: D4:02:80:F4:80:AD:1F:6B:1E:7C:50:EF:2E:82:6C:2B:D7:8F:13:9E Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039 Certificate serial: 019B7C1286F76FCFCEB5CC8FE0D27758CBB1 Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/1AKA9ICtH2sefFDvLoJsK9ePE54.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48399 IP address blocks: 45.15.254.0/24 maxlen: 24 45.93.13.0/24 maxlen: 24 45.147.195.0/24 maxlen: 24 77.83.72.0/24 maxlen: 24 85.193.70.0/23 maxlen: 23 91.188.246.0/23 maxlen: 23 130.49.164.0/23 maxlen: 23 178.170.223.0/24 maxlen: 24 185.190.116.0/23 maxlen: 23 185.190.118.0/23 maxlen: 23 192.70.196.0/23 maxlen: 23 192.70.198.0/23 maxlen: 23 2a07:ecc0::/30 maxlen: 30 2a07:ecc4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:86:f7:6f:cf:ce:b5:cc:8f:e0:d2:77:58:cb:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d40280f480ad1f6b1e7c50ef2e826c2bd78f139e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:7a:1f:61:34:02:9c:0b:bc:03:e8:94:67: d6:51:66:59:3f:aa:4d:08:2c:02:e5:b2:6d:39:1e: 2b:8d:7b:5c:86:db:ed:bf:46:f3:21:60:c0:ab:b8: dc:61:2c:dc:b8:23:0b:3a:79:b6:4d:24:a8:f9:5a: 01:60:f7:23:0a:92:ec:98:65:e6:31:11:fe:b5:ad: ca:ce:a2:41:94:cb:72:46:f4:e2:49:b9:40:eb:9e: 36:c3:7a:82:75:0c:f6:c4:85:66:87:fe:a0:97:fa: 8d:a2:74:cf:ec:1e:00:f2:97:bf:5c:a0:f7:7c:91: 57:35:6c:9f:0d:e4:83:24:22:e3:c6:a1:04:6e:b5: f2:c1:95:d5:24:33:57:ef:5e:66:d4:85:8d:3b:8b: 66:ff:fd:16:51:36:d3:8a:c6:55:da:af:1e:c4:f1: bf:04:51:e8:3d:4b:d6:49:df:93:7a:a2:fe:8e:68: 5d:df:f5:5c:5e:a8:2b:46:9f:bd:c5:18:f1:be:bc: b9:3c:ae:ec:3e:43:27:ce:0d:c2:9e:22:24:65:4b: f3:7b:a2:1d:5d:8c:94:e5:ad:e7:85:84:c1:4e:b6: 1a:c7:e7:02:de:82:61:3a:c7:a9:f0:b0:53:1f:c0: b8:be:5d:99:58:8e:2f:bf:c0:0f:1c:fb:f7:52:be: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:02:80:F4:80:AD:1F:6B:1E:7C:50:EF:2E:82:6C:2B:D7:8F:13:9E X509v3 Authority Key Identifier: keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/1AKA9ICtH2sefFDvLoJsK9ePE54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.254.0/24 45.93.13.0/24 45.147.195.0/24 77.83.72.0/24 85.193.70.0/23 91.188.246.0/23 130.49.164.0/23 178.170.223.0/24 185.190.116.0/22 192.70.196.0/22 IPv6: 2a07:ecc0::/29 Signature Algorithm: sha256WithRSAEncryption 8b:c8:00:8b:f6:b3:fa:04:c6:f2:41:e9:84:45:55:05:f8:8c: c2:99:29:f7:fc:4c:1c:a1:a0:a8:a6:54:d9:68:e4:b8:3a:b4: da:1a:cc:c1:13:9f:76:29:0c:0b:88:ad:e9:79:9b:6a:aa:58: 24:25:6c:75:19:5c:b6:8b:e4:8c:69:59:62:ba:8e:95:88:27: a7:fb:db:49:50:d6:98:4e:c4:79:87:1c:cc:65:34:4f:f4:1c: ae:45:50:7b:f9:28:04:aa:11:f4:18:5e:f0:fc:5f:c9:b3:fa: 38:d3:00:7b:2e:58:1d:d6:b4:b2:e3:a5:a0:31:66:a7:60:d6: 13:10:9a:73:22:80:ed:a6:cf:55:96:f4:2b:c1:e2:a7:b3:30: a7:19:31:4b:1e:e8:95:30:2b:f1:73:7a:b2:a0:cf:bc:53:c6: e9:5c:04:23:32:fd:71:fa:3d:b6:9c:f4:dc:83:d4:fe:80:0d: d3:e9:84:1e:55:c1:66:e7:ac:1f:af:84:ca:5a:82:10:56:c8: 5b:29:ad:37:ed:55:cc:58:21:76:15:5b:fa:e0:e1:32:75:6e: 05:f0:bd:a5:4d:c9:e0:22:79:04:ab:d3:fd:e3:a7:a4:96:9f: 1c:cc:79:72:c5:48:10:48:5f:e7:fd:1a:ad:97:88:6a:85:26: 47:60:97:e3 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt8Eob3b8/OtcyP4NJ3WMuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzVmZWIyZDI1ZmFjNGRkOGJhYTRmNzFkOGRjMjI2ODE4 NmEwMzkwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDAyODBmNDgwYWQxZjZiMWU3YzUwZWYyZTgyNmMyYmQ3OGYxMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7d6H2E0ApwLvAPolGfWUWZZP6pN CCwC5bJtOR4rjXtchtvtv0bzIWDAq7jcYSzcuCMLOnm2TSSo+VoBYPcjCpLsmGXm MRH+ta3KzqJBlMtyRvTiSblA6542w3qCdQz2xIVmh/6gl/qNonTP7B4A8pe/XKD3 fJFXNWyfDeSDJCLjxqEEbrXywZXVJDNX715m1IWNO4tm//0WUTbTisZV2q8exPG/ BFHoPUvWSd+TeqL+jmhd3/VcXqgrRp+9xRjxvry5PK7sPkMnzg3CniIkZUvze6Id XYyU5a3nhYTBTrYax+cC3oJhOsep8LBTH8C4vl2ZWI4vv8APHPv3Ur5RZwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFNQCgPSArR9rHnxQ7y6CbCvXjxOeMB8GA1UdIwQY MBaAFCLF/rLSX6xN2Lqk9x2NwiaBhqA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTkt NDY4ZjQ5OGZhZjFjLzEvMUFLQTlJQ3RIMnNlZkZEdkxvSnNLOWVQRTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTktNDY4ZjQ5OGZhZjFj LzEvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQALQ/+AwQA LV0NAwQALZPDAwQATVNIAwQBVcFGAwQBW7z2AwQBgjGkAwQAsqrfAwQCub50AwQC wEbEMA0EAgACMAcDBQMqB+zAMA0GCSqGSIb3DQEBCwUAA4IBAQCLyACL9rP6BMby QemERVUF+IzCmSn3/EwcoaCoplTZaOS4OrTaGszBE592KQwLiK3peZtqqlgkJWx1 GVy2i+SMaVliuo6ViCen+9tJUNaYTsR5hxzMZTRP9ByuRVB7+SgEqhH0GF7w/F/J s/o40wB7Llgd1rSy46WgMWanYNYTEJpzIoDtps9VlvQrweKnszCnGTFLHuiVMCvx c3qyoM+8U8bpXAQjMv1x+j22nPTcg9T+gA3T6YQeVcFm56wfr4TKWoIQVshbKa03 7VXMWCF2FVv64OEydW4F8L2lTcngInkEq9P946eklp8czHlyxUgQSF/n/Rqtl4hq hSZHYJfj -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:28 2026 by rpki-client