This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/9W5GOtFDpWBFLP39aI9-GYTv67w.roa File: 9W5GOtFDpWBFLP39aI9-GYTv67w.roa (raw, json) Hash identifier: Ly+0aJYut/pTQfmmUwMydFSUtJuswgS18u/UPXI+/4A= Subject key identifier: F5:6E:46:3A:D1:43:A5:60:45:2C:FD:FD:68:8F:7E:19:84:EF:EB:BC Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c Certificate serial: 019B76EAB634A3AE215FEF1E0014E6958D83 Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/9W5GOtFDpWBFLP39aI9-GYTv67w.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35394 IP address blocks: 45.85.136.0/22 maxlen: 22 80.67.44.0/22 maxlen: 22 130.185.88.0/21 maxlen: 21 185.72.44.0/22 maxlen: 22 185.79.36.0/22 maxlen: 22 185.93.44.0/22 maxlen: 22 185.93.152.0/22 maxlen: 22 185.143.96.0/22 maxlen: 22 185.172.168.0/22 maxlen: 22 185.186.28.0/22 maxlen: 22 185.196.56.0/22 maxlen: 22 185.217.204.0/22 maxlen: 22 185.220.44.0/22 maxlen: 22 185.236.168.0/22 maxlen: 22 185.240.232.0/22 maxlen: 22 185.245.176.0/24 maxlen: 24 185.245.177.0/24 maxlen: 24 185.245.178.0/24 maxlen: 24 185.245.179.0/24 maxlen: 24 193.27.246.0/23 maxlen: 23 193.27.248.0/23 maxlen: 23 193.161.220.0/22 maxlen: 22 194.61.16.0/22 maxlen: 22 213.217.24.0/22 maxlen: 22 2a03:3d60::/29 maxlen: 29 2a09:5000::/29 maxlen: 29 2a0c:8f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b6:34:a3:ae:21:5f:ef:1e:00:14:e6:95:8d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f56e463ad143a560452cfdfd688f7e1984efebbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:7b:f8:73:43:23:29:df:f2:22:75:ac:a1: 37:08:c3:e9:94:aa:f8:21:50:58:0d:26:d5:8e:07: d9:8a:1a:9f:e4:bb:c3:86:18:f2:ec:b3:26:98:3c: 68:6a:26:53:9c:13:69:a9:91:40:ed:73:30:0a:a9: 49:0b:6c:2c:1b:e7:b6:cf:5c:ad:b8:16:1d:0a:e3: 3b:a3:2c:3e:0a:93:e5:6c:05:2f:75:b1:9f:59:38: 66:08:1a:1b:01:25:36:b7:72:c0:f9:af:7f:b7:e4: 7c:f8:87:06:0c:29:c8:0e:d5:b2:5b:cc:9c:07:27: 82:f1:5e:f8:d3:78:37:dd:f7:36:e0:c0:78:bf:46: 4e:41:47:95:49:77:b0:57:13:ff:ee:e0:af:c9:fe: e4:8d:02:f3:8d:19:93:91:a2:0c:81:fc:21:20:5c: 0a:ac:f1:cc:cb:4b:bc:be:ba:00:af:49:31:9d:56: 42:4b:c6:75:1d:76:9d:c7:3b:c4:3f:d3:29:57:21: d2:d5:e0:a5:b4:56:cb:47:f3:0b:4b:48:ca:85:e4: 6f:cb:d2:eb:48:17:79:9c:68:eb:30:82:f6:86:c3: 34:e8:ec:68:6f:65:e3:c7:24:1b:7f:66:a3:c8:2f: 29:c6:07:74:1f:db:ed:7e:37:6d:a1:16:8d:d5:98: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6E:46:3A:D1:43:A5:60:45:2C:FD:FD:68:8F:7E:19:84:EF:EB:BC X509v3 Authority Key Identifier: keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/9W5GOtFDpWBFLP39aI9-GYTv67w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.136.0/22 80.67.44.0/22 130.185.88.0/21 185.72.44.0/22 185.79.36.0/22 185.93.44.0/22 185.93.152.0/22 185.143.96.0/22 185.172.168.0/22 185.186.28.0/22 185.196.56.0/22 185.217.204.0/22 185.220.44.0/22 185.236.168.0/22 185.240.232.0/22 185.245.176.0/22 193.27.246.0-193.27.249.255 193.161.220.0/22 194.61.16.0/22 213.217.24.0/22 IPv6: 2a03:3d60::/29 2a09:5000::/29 2a0c:8f80::/29 Signature Algorithm: sha256WithRSAEncryption 43:4c:43:67:90:1a:a1:b2:37:eb:b6:e1:40:35:67:b5:ff:e0: f6:37:42:ce:74:90:f5:53:93:b7:24:0f:e6:f5:ee:d7:e4:f1: 47:82:d9:4a:ca:4d:ef:2e:69:e8:df:99:ad:21:ca:e4:25:31: ed:60:4c:e4:5e:54:af:f3:d3:1b:ec:73:c8:a3:82:7e:20:f1: 7a:35:c1:e5:bf:c5:4d:1f:0c:a6:1f:cb:5c:a8:3b:53:d1:ae: c4:32:01:03:3f:3d:02:2d:22:6e:b3:fb:2b:37:8c:53:f9:62: 9f:6e:8d:75:12:19:ac:7b:b7:13:df:33:47:e2:d2:48:4f:34: 4a:4b:41:ae:3b:fa:a8:19:0b:d1:10:5f:c8:04:25:9a:b9:0a: 7e:db:45:12:52:30:be:08:01:45:6a:4e:5d:9a:02:ca:fd:77: a7:13:29:51:f2:6b:0d:7d:f7:b6:bc:8f:cb:93:89:cd:84:62: 8e:90:d5:1a:dc:8a:bf:5d:3b:19:d5:37:ce:e0:4f:ed:39:dc: 23:4f:90:c6:11:8a:6c:38:51:a9:0a:33:31:ea:d6:31:2e:58: 9d:b0:c5:51:b6:35:b2:ba:01:71:56:07:08:f2:7a:3c:fa:78: 13:b3:63:d6:cd:ad:af:ca:33:ae:16:f0:a3:e1:d0:8a:e9:a5: 5b:ec:0b:ad -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt26rY0o64hX+8eABTmlY2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZDZmZjEzNGJkNjU2ZjBjZTE0ZDQxMGIwMmJlYzU1MWVi NjlhMmMwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTZlNDYzYWQxNDNhNTYwNDUyY2ZkZmQ2ODhmN2UxOTg0ZWZlYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSx7+HNDIynf8iJ1rKE3CMPplKr4 IVBYDSbVjgfZihqf5LvDhhjy7LMmmDxoaiZTnBNpqZFA7XMwCqlJC2wsG+e2z1yt uBYdCuM7oyw+CpPlbAUvdbGfWThmCBobASU2t3LA+a9/t+R8+IcGDCnIDtWyW8yc ByeC8V7403g33fc24MB4v0ZOQUeVSXewVxP/7uCvyf7kjQLzjRmTkaIMgfwhIFwK rPHMy0u8vroAr0kxnVZCS8Z1HXadxzvEP9MpVyHS1eCltFbLR/MLS0jKheRvy9Lr SBd5nGjrMIL2hsM06Oxob2XjxyQbf2ajyC8pxgd0H9vtfjdtoRaN1ZjpZwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFPVuRjrRQ6VgRSz9/WiPfhmE7+u8MB8GA1UdIwQY MBaAFFTW/xNL1lbwzhTUELAr7FUetposMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDIt NjQyNzhjMGQ4ZWJmLzEvOVc1R090RkRwV0JGTFAzOWFJOS1HWVR2Njd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDItNjQyNzhjMGQ4ZWJm LzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBhwQCAAEwgYADBAIt VYgDBAJQQywDBAOCuVgDBAK5SCwDBAK5TyQDBAK5XSwDBAK5XZgDBAK5j2ADBAK5 rKgDBAK5uhwDBAK5xDgDBAK52cwDBAK53CwDBAK57KgDBAK58OgDBAK59bAwDAME AcEb9gMEAcEb+AMEAsGh3AMEAsI9EAMEAtXZGDAbBAIAAjAVAwUDKgM9YAMFAyoJ UAADBQMqDI+AMA0GCSqGSIb3DQEBCwUAA4IBAQBDTENnkBqhsjfrtuFANWe1/+D2 N0LOdJD1U5O3JA/m9e7X5PFHgtlKyk3vLmno35mtIcrkJTHtYEzkXlSv89Mb7HPI o4J+IPF6NcHlv8VNHwymH8tcqDtT0a7EMgEDPz0CLSJus/srN4xT+WKfbo11Ehms e7cT3zNH4tJITzRKS0GuO/qoGQvREF/IBCWauQp+20USUjC+CAFFak5dmgLK/Xen EylR8msNffe2vI/Lk4nNhGKOkNUa3Iq/XTsZ1TfO4E/tOdwjT5DGEYpsOFGpCjMx 6tYxLlidsMVRtjWyugFxVgcI8no8+ngTs2PWza2vyjOuFvCj4dCK6aVb7Aut -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:26 2026 by rpki-client