This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/4d9-6h6RHLAtIkxDu8GiYTASn8o.roa File: 4d9-6h6RHLAtIkxDu8GiYTASn8o.roa (raw, json) Hash identifier: gqqQTnXdL5PKtQ8KN/lbpQCpkcfM5mWMVs9m29iW+Pc= Subject key identifier: E1:DF:7E:EA:1E:91:1C:B0:2D:22:4C:43:BB:C1:A2:61:30:12:9F:CA Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d Certificate serial: 019B7C80B824FDCE8EFF92E677677B032962 Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/4d9-6h6RHLAtIkxDu8GiYTASn8o.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207668 IP address blocks: 45.66.20.0/23 maxlen: 23 45.66.22.0/23 maxlen: 23 45.144.120.0/22 maxlen: 22 91.211.224.0/22 maxlen: 22 194.53.192.0/24 maxlen: 24 194.53.193.0/24 maxlen: 24 194.53.194.0/23 maxlen: 23 2a09:60c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b8:24:fd:ce:8e:ff:92:e6:77:67:7b:03:29:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1df7eea1e911cb02d224c43bbc1a26130129fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0e:7f:e4:5f:4d:af:b9:8c:ec:a8:4f:e7:71: 5c:55:b1:ce:59:ba:bd:c8:e5:6b:1f:aa:c2:17:76: 86:59:e3:43:1f:f4:e2:cb:84:3f:3f:c3:de:e7:b9: de:85:ff:02:05:cf:e8:fc:2b:e2:7d:33:22:53:fd: a0:7d:b8:5a:e6:99:69:1e:f9:78:fb:36:02:f2:26: 0b:37:5d:ce:44:f0:95:a5:3c:5a:47:40:f4:51:f7: 7a:a4:af:23:e6:69:d8:a2:27:3a:9d:5d:87:4d:59: cc:81:89:8a:ed:f7:ae:e9:52:7d:53:9f:f1:11:21: d3:b9:72:77:a7:e4:8d:73:24:5a:c6:39:4b:96:a3: 69:94:c4:df:e1:af:1b:48:cf:f6:95:ca:2d:ea:dd: e0:fe:61:74:17:3f:d2:a6:b4:6b:3d:7f:aa:74:90: 2c:54:1a:33:6b:86:e4:7c:0d:78:fc:e6:86:82:25: 60:13:71:41:ef:a0:0f:5d:8f:1e:10:b8:74:74:3b: 25:1a:db:ba:54:41:8b:e7:29:94:74:ca:f1:e6:59: bd:a7:69:bb:e7:79:45:e5:67:07:86:04:ae:20:79: 29:87:95:8a:e6:e0:93:9b:17:d9:73:28:a6:c6:f9: 54:66:10:3d:6d:62:af:73:df:0d:86:4e:ac:c4:25: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DF:7E:EA:1E:91:1C:B0:2D:22:4C:43:BB:C1:A2:61:30:12:9F:CA X509v3 Authority Key Identifier: keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/4d9-6h6RHLAtIkxDu8GiYTASn8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.20.0/22 45.144.120.0/22 91.211.224.0/22 194.53.192.0/22 IPv6: 2a09:60c0::/29 Signature Algorithm: sha256WithRSAEncryption 37:50:c7:30:d0:64:29:72:c9:8b:73:3e:a7:a3:11:d9:65:39: f0:9a:66:3f:08:ac:7c:82:f7:1c:67:d0:8e:84:56:ee:5f:d6: 6f:8b:51:57:d1:f0:63:8a:7e:47:56:7e:2f:54:92:e9:db:91: 4a:55:79:3b:6c:a3:a0:0d:40:15:f3:cd:76:78:21:e8:59:ca: e4:6b:e9:da:f2:20:5c:66:e8:63:dd:77:be:8d:8e:6b:15:83: 5c:a8:ac:08:39:df:93:64:65:54:5e:10:dd:d3:87:69:1f:68: 23:bc:d7:25:f9:78:0b:8f:8b:9a:f8:33:7c:cb:29:37:08:9b: bb:d0:40:d3:87:c6:0d:8e:a7:ce:3b:35:bb:c1:00:56:f9:6f: 4f:68:58:cb:7d:9f:ac:4e:90:21:6e:47:1d:23:1a:8a:ec:4c: c7:c5:c0:4d:d1:0e:ce:30:94:b0:0b:e3:d8:09:fc:d7:92:01: c6:79:39:00:0a:cc:2a:eb:89:ac:b9:d6:7e:24:27:61:cd:58: cf:7a:2a:ad:e9:f7:d4:00:06:ea:08:46:87:82:40:2d:1c:bc: 80:fc:27:3f:5e:cb:e4:2d:ef:78:57:37:59:c2:4c:3c:e3:65: 3b:f3:47:2f:60:0c:37:3e:3b:31:73:b3:55:28:c2:7e:46:d8: d6:ed:a8:51 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8gLgk/c6O/5Lmd2d7AyliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YWE5Y2FkZTkzYmU2YmE3YzhhYmIzMjM4MzE4MDc2MzE3 ZDYwN2QwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWRmN2VlYTFlOTExY2IwMmQyMjRjNDNiYmMxYTI2MTMwMTI5ZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q5/5F9Nr7mM7KhP53FcVbHOWbq9 yOVrH6rCF3aGWeNDH/Tiy4Q/P8Pe57nehf8CBc/o/CvifTMiU/2gfbha5plpHvl4 +zYC8iYLN13ORPCVpTxaR0D0Ufd6pK8j5mnYoic6nV2HTVnMgYmK7feu6VJ9U5/x ESHTuXJ3p+SNcyRaxjlLlqNplMTf4a8bSM/2lcot6t3g/mF0Fz/SprRrPX+qdJAs VBoza4bkfA14/OaGgiVgE3FB76APXY8eELh0dDslGtu6VEGL5ymUdMrx5lm9p2m7 53lF5WcHhgSuIHkph5WK5uCTmxfZcyimxvlUZhA9bWKvc98Nhk6sxCXjtQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOHffuoekRywLSJMQ7vBomEwEp/KMB8GA1UdIwQY MBaAFKaqnK3pO+a6fIq7MjgxgHYxfWB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYt ZWM0NjdmYTg2MzZlLzEvNGQ5LTZoNlJITEF0SWt4RHU4R2lZVEFTbjhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYtZWM0NjdmYTg2MzZl LzEvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLUIUAwQC LZB4AwQCW9PgAwQCwjXAMA0EAgACMAcDBQMqCWDAMA0GCSqGSIb3DQEBCwUAA4IB AQA3UMcw0GQpcsmLcz6noxHZZTnwmmY/CKx8gvccZ9COhFbuX9Zvi1FX0fBjin5H Vn4vVJLp25FKVXk7bKOgDUAV8812eCHoWcrka+na8iBcZuhj3Xe+jY5rFYNcqKwI Od+TZGVUXhDd04dpH2gjvNcl+XgLj4ua+DN8yyk3CJu70EDTh8YNjqfOOzW7wQBW +W9PaFjLfZ+sTpAhbkcdIxqK7EzHxcBN0Q7OMJSwC+PYCfzXkgHGeTkACswq64ms udZ+JCdhzVjPeiqt6ffUAAbqCEaHgkAtHLyA/Cc/XsvkLe94VzdZwkw842U780cv YAw3Pjsxc7NVKMJ+RtjW7ahR -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:33 2026 by rpki-client