This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/k7301x4TDZ-HmwAn_XR87DawYK0.roa File: k7301x4TDZ-HmwAn_XR87DawYK0.roa (raw, json) Hash identifier: U30C+hjifV6sssEdcbIeaLDuCv5ub5DEBE4U7r5DScc= Subject key identifier: 93:BD:F4:D7:1E:13:0D:9F:87:9B:00:27:FD:74:7C:EC:36:B0:60:AD Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019BE097E8BA22D2883FB3F3ED63411F29AB Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/k7301x4TDZ-HmwAn_XR87DawYK0.roa Signing time: Wed 21 Jan 2026 12:46:50 +0000 ROA not before: Wed 21 Jan 2026 12:46:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200740 IP address blocks: 45.134.12.0/23 maxlen: 23 45.134.14.0/23 maxlen: 23 80.76.32.0/23 maxlen: 23 80.76.34.0/23 maxlen: 23 89.44.84.0/23 maxlen: 23 91.200.14.0/24 maxlen: 24 91.200.15.0/24 maxlen: 24 92.118.8.0/23 maxlen: 23 95.81.77.0/24 maxlen: 24 95.81.93.0/24 maxlen: 24 95.81.94.0/23 maxlen: 23 95.81.112.0/24 maxlen: 24 95.81.113.0/24 maxlen: 24 95.81.119.0/24 maxlen: 24 95.81.120.0/24 maxlen: 24 103.85.112.0/24 maxlen: 24 103.85.113.0/24 maxlen: 24 103.249.132.0/23 maxlen: 23 103.249.134.0/23 maxlen: 23 104.128.138.0/23 maxlen: 23 104.128.142.0/23 maxlen: 23 104.128.142.0/24 maxlen: 24 104.128.143.0/24 maxlen: 24 109.69.56.0/23 maxlen: 23 109.69.58.0/23 maxlen: 23 185.103.252.0/23 maxlen: 23 185.103.254.0/23 maxlen: 23 185.114.72.0/23 maxlen: 23 2a0c:5d00:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:97:e8:ba:22:d2:88:3f:b3:f3:ed:63:41:1f:29:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 21 12:46:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93bdf4d71e130d9f879b0027fd747cec36b060ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:2d:66:88:df:85:7f:a2:ab:bd:0a:f6:7d: 51:57:b5:eb:18:cc:25:ad:00:cc:cb:b6:47:89:cc: 3e:b7:00:89:45:3f:1a:11:e3:69:ec:3d:b2:39:be: d4:78:29:72:a3:39:2d:f6:79:c0:6f:82:81:55:7a: 04:b9:29:12:56:0d:0f:3a:d1:87:45:70:58:fa:fe: 8b:4c:91:43:83:cb:09:85:4b:82:31:a6:76:3f:5a: e3:93:0a:50:db:69:52:ad:46:de:41:e8:e1:22:90: 5b:3e:2f:7a:67:e5:ee:26:57:51:d8:e2:f9:4a:da: 1f:ec:3f:0e:0f:8b:5e:d0:e9:93:31:03:96:0a:a3: 32:d6:73:8f:a3:57:90:67:da:c0:0e:f3:5e:22:38: b9:2d:3b:5a:ed:c7:59:9f:ec:52:f3:e2:31:c5:94: 9f:4f:9b:12:be:08:eb:37:73:73:6f:a7:1d:d1:35: 48:cc:f5:23:26:a6:ac:6c:a6:fd:a1:8e:eb:0d:14: e8:39:04:98:f3:62:c0:2d:94:1e:74:f5:b2:6e:90: 0a:1b:c0:c1:ae:68:ae:ef:26:2d:8d:c6:d3:f6:57: 54:a3:fc:f0:c8:2b:ad:a3:10:89:7f:60:ea:3f:40: 96:34:56:3c:13:32:d6:66:77:0b:15:e3:15:a1:45: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BD:F4:D7:1E:13:0D:9F:87:9B:00:27:FD:74:7C:EC:36:B0:60:AD X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/k7301x4TDZ-HmwAn_XR87DawYK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.12.0/22 80.76.32.0/22 89.44.84.0/23 91.200.14.0/23 92.118.8.0/23 95.81.77.0/24 95.81.93.0-95.81.95.255 95.81.112.0/23 95.81.119.0-95.81.120.255 103.85.112.0/23 103.249.132.0/22 104.128.138.0/23 104.128.142.0/23 109.69.56.0/22 185.103.252.0/22 185.114.72.0/23 IPv6: 2a0c:5d00:3002::/48 Signature Algorithm: sha256WithRSAEncryption 41:1d:d6:75:e3:37:a0:ac:96:ad:06:3e:bc:ba:a0:91:4f:a7: 33:3d:a5:9c:30:3e:8b:e2:a2:b1:45:a4:b0:0d:fe:fa:f7:cd: d1:0c:6b:fe:65:c9:79:37:0e:d1:59:88:9f:b7:80:61:1f:ea: aa:b5:54:7d:d3:e8:89:13:fa:2b:c4:b9:72:f7:10:c1:4a:52: 13:c3:70:b0:58:0f:08:60:b9:4c:10:a3:74:40:fd:a2:8d:f6: e7:46:67:57:cd:a1:2b:9b:23:a8:9c:76:f1:01:e2:37:20:8d: a1:91:8a:0a:6e:cd:fe:2a:71:e0:b2:8e:05:df:52:75:1a:a0: bb:ef:52:14:e8:24:7b:62:d5:06:fa:55:ff:29:ae:6c:42:2a: 82:e2:04:7b:1d:64:e3:f2:9f:37:ed:28:e4:ff:7c:f8:f4:6c: 6f:be:0d:ed:04:16:53:3e:99:95:05:28:bd:b0:16:26:06:19: 40:1f:c3:3e:5d:d6:fc:44:08:a3:2a:35:0d:3b:6b:af:b5:35: b7:96:a7:9c:d6:27:31:3c:5f:f0:c0:c1:69:b0:a5:38:5c:78: ad:b8:ae:a9:9a:71:fb:bb:2c:9d:b6:98:4a:2d:1a:52:38:8f: 64:d6:1d:a4:ed:33:ba:86:8e:b8:3a:e9:28:bf:d2:74:d1:f7: 46:7f:0c:bb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZvgl+i6ItKIP7Pz7WNBHymrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTIxMTI0NjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2JkZjRkNzFlMTMwZDlmODc5YjAwMjdmZDc0N2NlYzM2YjA2MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8gtZojfhX+iq70K9n1RV7XrGMwl rQDMy7ZHicw+twCJRT8aEeNp7D2yOb7UeClyozkt9nnAb4KBVXoEuSkSVg0POtGH RXBY+v6LTJFDg8sJhUuCMaZ2P1rjkwpQ22lSrUbeQejhIpBbPi96Z+XuJldR2OL5 Stof7D8OD4te0OmTMQOWCqMy1nOPo1eQZ9rADvNeIji5LTta7cdZn+xS8+IxxZSf T5sSvgjrN3Nzb6cd0TVIzPUjJqasbKb9oY7rDRToOQSY82LALZQedPWybpAKG8DB rmiu7yYtjcbT9ldUo/zwyCutoxCJf2DqP0CWNFY8EzLWZncLFeMVoUUbTQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFJO99NceEw2fh5sAJ/10fOw2sGCtMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvazczMDF4NFREWi1IbXdBbl9YUjg3RGF3WUswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB2BAIAATBwAwQCLYYM AwQCUEwgAwQBWSxUAwQBW8gOAwQBXHYIAwQAX1FNMAwDBABfUV0DBAVfUUADBAFf UXAwDAMEAF9RdwMEAF9ReAMEAWdVcAMEAmf5hAMEAWiAigMEAWiAjgMEAm1FOAME Arln/AMEAblySDAPBAIAAjAJAwcAKgxdADACMA0GCSqGSIb3DQEBCwUAA4IBAQBB HdZ14zegrJatBj68uqCRT6czPaWcMD6L4qKxRaSwDf76983RDGv+Zcl5Nw7RWYif t4BhH+qqtVR90+iJE/orxLly9xDBSlITw3CwWA8IYLlMEKN0QP2ijfbnRmdXzaEr myOonHbxAeI3II2hkYoKbs3+KnHgso4F31J1GqC771IU6CR7YtUG+lX/Ka5sQiqC 4gR7HWTj8p837Sjk/3z49Gxvvg3tBBZTPpmVBSi9sBYmBhlAH8M+Xdb8RAijKjUN O2uvtTW3lqec1icxPF/wwMFpsKU4XHituK6pmnH7uyydtphKLRpSOI9k1h2k7TO6 ho64Oukov9J00fdGfwy7 -----END CERTIFICATE-----Generated at Wed Jan 21 22:40:05 2026 by rpki-client