This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/x-AVgP6fS1vR55B2Cu24SJ_fCj4.roa File: x-AVgP6fS1vR55B2Cu24SJ_fCj4.roa (raw, json) Hash identifier: sQvbv4zLNER6TmIVOQQkMEEoKdWHXfDO0s9C3r0xJvU= Subject key identifier: C7:E0:15:80:FE:9F:4B:5B:D1:E7:90:76:0A:ED:B8:48:9F:DF:0A:3E Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75E47EEFEE55FA5D88F22277024D8 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/x-AVgP6fS1vR55B2Cu24SJ_fCj4.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13118 IP address blocks: 46.237.0.0/18 maxlen: 18 46.237.0.0/19 maxlen: 19 46.237.48.0/20 maxlen: 20 77.234.0.0/19 maxlen: 19 85.113.192.0/19 maxlen: 19 85.113.192.0/20 maxlen: 20 85.113.204.0/24 maxlen: 24 87.253.0.0/19 maxlen: 19 87.253.0.0/20 maxlen: 20 87.253.13.0/24 maxlen: 24 87.253.16.0/21 maxlen: 21 87.253.24.0/21 maxlen: 21 93.181.208.0/20 maxlen: 20 93.181.224.0/24 maxlen: 24 93.181.225.0/24 maxlen: 24 93.181.240.0/20 maxlen: 20 95.86.192.0/18 maxlen: 18 95.86.192.0/19 maxlen: 19 95.86.206.0/24 maxlen: 24 95.86.207.0/24 maxlen: 24 95.86.208.0/24 maxlen: 24 95.86.209.0/24 maxlen: 24 95.86.224.0/19 maxlen: 19 95.106.160.0/19 maxlen: 19 109.161.0.0/17 maxlen: 17 109.161.0.0/19 maxlen: 19 109.161.0.0/21 maxlen: 21 109.161.8.0/21 maxlen: 21 109.161.32.0/19 maxlen: 19 109.161.52.0/24 maxlen: 24 109.161.57.0/24 maxlen: 24 109.161.60.0/22 maxlen: 22 109.161.64.0/19 maxlen: 19 109.161.64.0/20 maxlen: 20 217.15.128.0/19 maxlen: 24 217.15.134.0/24 maxlen: 24 217.15.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5e:47:ee:fe:e5:5f:a5:d8:8f:22:27:70:24:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7e01580fe9f4b5bd1e790760aedb8489fdf0a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:0b:d5:7c:84:69:24:76:5e:90:0d:cc:fe: ef:5f:bf:40:2a:c3:00:fc:30:0d:a6:25:de:ac:b1: ff:88:61:d8:de:50:93:41:76:36:b5:80:4b:27:0a: 0a:84:b0:ac:ed:8e:fb:bf:d8:d4:39:a9:db:bb:cd: 37:86:05:07:49:3c:4b:45:99:88:84:79:fa:d1:5a: bb:67:62:a7:f5:c6:f1:38:10:b6:17:63:49:38:6d: 52:84:de:d9:86:60:5c:30:d0:b4:0f:5e:c9:b4:48: 6c:38:7e:ab:22:90:62:25:5b:ff:de:9f:fc:df:df: de:8c:39:c1:6b:68:de:22:15:14:00:e0:64:0e:85: 14:66:d2:69:a9:b0:a9:bb:a3:90:dd:06:e1:e1:36: 80:98:8d:27:a4:9b:68:93:21:18:d1:32:65:5d:5a: 5a:ab:92:5a:63:20:8c:16:8a:d1:77:e4:b3:39:3d: 21:ae:42:3f:41:04:cb:5f:2b:4e:52:d1:bd:ad:f3: fe:90:cb:63:08:f9:bf:87:90:39:82:f4:d6:9f:86: 03:b9:f3:56:10:76:e2:84:7d:c4:28:ca:d5:a5:08: f5:d5:90:af:56:f9:44:74:90:98:09:72:ff:49:56: 2c:1e:2f:a1:21:da:55:0c:fe:7f:44:84:58:62:e2: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E0:15:80:FE:9F:4B:5B:D1:E7:90:76:0A:ED:B8:48:9F:DF:0A:3E X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/x-AVgP6fS1vR55B2Cu24SJ_fCj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.237.0.0/18 77.234.0.0/19 85.113.192.0/19 87.253.0.0/19 93.181.208.0-93.181.225.255 93.181.240.0/20 95.86.192.0/18 95.106.160.0/19 109.161.0.0/17 217.15.128.0/19 Signature Algorithm: sha256WithRSAEncryption 6d:b6:e4:3e:d9:fe:61:b1:d9:05:f4:61:b2:5a:24:12:4f:d2: 07:bd:29:90:6d:07:97:e9:cf:6e:6d:4e:a7:af:cd:8e:ea:8d: de:e6:2c:45:6d:f4:15:c3:19:19:36:2c:28:3b:61:0a:71:81: 9b:51:3a:fe:1e:f7:ba:de:a5:be:60:f0:48:a2:f5:91:60:b9: 60:27:97:e6:d3:90:e4:07:ac:8b:3f:d5:65:e3:ed:f1:86:40: 3b:03:62:1d:2c:45:50:3c:f6:8a:9d:d0:24:53:46:3f:fb:ac: 53:d7:9e:24:58:65:b9:03:d3:4b:4a:55:0c:0d:34:76:cf:e8: 13:cf:6d:d1:0a:a0:69:59:1a:0e:1b:e7:37:c9:71:49:c0:8c: af:87:de:51:fb:02:a4:54:85:83:28:b8:4b:94:d0:6e:d6:f5: ed:36:66:fe:2f:33:77:83:78:d7:16:ff:4b:5e:64:f2:89:f5: 06:25:06:35:b0:e4:be:e1:4f:57:59:cb:f4:0f:47:34:98:21: 30:73:5c:97:a4:f8:6e:59:d5:50:0a:ce:8c:0a:54:46:3a:66: 84:e7:4f:47:29:30:2a:56:ec:f7:05:74:0d:b9:1c:9b:90:ab: 15:c4:51:e3:97:7f:0a:49:e1:09:5d:bb:5e:6f:d0:46:08:39: 6c:1e:54:c7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt+p15H7v7lX6XYjyIncCTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2UwMTU4MGZlOWY0YjViZDFlNzkwNzYwYWVkYjg0ODlmZGYwYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPIL1XyEaSR2XpANzP7vX79AKsMA /DANpiXerLH/iGHY3lCTQXY2tYBLJwoKhLCs7Y77v9jUOanbu803hgUHSTxLRZmI hHn60Vq7Z2Kn9cbxOBC2F2NJOG1ShN7ZhmBcMNC0D17JtEhsOH6rIpBiJVv/3p/8 39/ejDnBa2jeIhUUAOBkDoUUZtJpqbCpu6OQ3Qbh4TaAmI0npJtokyEY0TJlXVpa q5JaYyCMForRd+SzOT0hrkI/QQTLXytOUtG9rfP+kMtjCPm/h5A5gvTWn4YDufNW EHbihH3EKMrVpQj11ZCvVvlEdJCYCXL/SVYsHi+hIdpVDP5/RIRYYuJ0mQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFMfgFYD+n0tb0eeQdgrtuEif3wo+MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEveC1BVmdQNmZTMXZSNTVCMkN1MjRTSl9mQ2o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQGLu0AAwQF TeoAAwQFVXHAAwQFV/0AMAwDBARdtdADBAFdteADBARdtfADBAZfVsADBAVfaqAD BAdtoQADBAXZD4AwDQYJKoZIhvcNAQELBQADggEBAG225D7Z/mGx2QX0YbJaJBJP 0ge9KZBtB5fpz25tTqevzY7qjd7mLEVt9BXDGRk2LCg7YQpxgZtROv4e97repb5g 8Eii9ZFguWAnl+bTkOQHrIs/1WXj7fGGQDsDYh0sRVA89oqd0CRTRj/7rFPXniRY ZbkD00tKVQwNNHbP6BPPbdEKoGlZGg4b5zfJcUnAjK+H3lH7AqRUhYMouEuU0G7W 9e02Zv4vM3eDeNcW/0teZPKJ9QYlBjWw5L7hT1dZy/QPRzSYITBzXJek+G5Z1VAK zowKVEY6ZoTnT0cpMCpW7PcFdA25HJuQqxXEUeOXfwpJ4Qldu15v0EYIOWweVMc= -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:40 2026 by rpki-client