This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/1-ar0P82ef_StXuE7zueriWBD8hE.roa File: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (raw, json) Hash identifier: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM= Subject key identifier: F9:AA:F4:3F:CD:9E:7F:F4:AD:5E:E1:3B:CE:E7:AB:89:60:43:F2:11 Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97 Certificate serial: 019B7F80CD644C97701C45686AC1AD86EEB5 Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/1-ar0P82ef_StXuE7zueriWBD8hE.roa Signing time: Fri 02 Jan 2026 16:18:26 +0000 ROA not before: Fri 02 Jan 2026 16:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51409 IP address blocks: 45.146.156.0/24 maxlen: 24 45.146.157.0/24 maxlen: 24 45.146.158.0/24 maxlen: 24 45.146.159.0/24 maxlen: 24 178.255.56.0/21 maxlen: 21 178.255.56.0/24 maxlen: 24 178.255.57.0/24 maxlen: 24 178.255.58.0/24 maxlen: 24 178.255.59.0/24 maxlen: 24 178.255.60.0/24 maxlen: 24 178.255.61.0/24 maxlen: 24 178.255.62.0/24 maxlen: 24 178.255.63.0/24 maxlen: 24 185.41.224.0/22 maxlen: 22 185.41.224.0/24 maxlen: 24 185.41.225.0/24 maxlen: 24 185.41.226.0/24 maxlen: 24 185.41.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:cd:64:4c:97:70:1c:45:68:6a:c1:ad:86:ee:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646579561eca5879a747025e5798487b19cd2a97 Validity Not Before: Jan 2 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9aaf43fcd9e7ff4ad5ee13bcee7ab896043f211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:b8:ae:b2:90:f4:6b:c9:9d:5d:ee:d8:9b: 98:d3:f5:7c:25:6a:73:77:d7:3b:7a:44:4d:3d:13: 25:9b:b8:e4:ae:6e:43:c6:8f:c6:57:c7:66:60:5b: b7:58:41:eb:f1:74:5e:08:39:4b:d3:cd:ae:6f:c7: 91:6a:7c:bf:e2:b0:09:93:48:c6:1e:0b:de:d4:22: 24:1e:2f:01:7d:22:ad:74:17:e6:ec:2b:3c:dd:b0: 16:2c:ab:56:08:63:bf:90:dc:d2:8c:ac:f8:90:03: 1e:d8:be:72:54:06:40:73:77:b1:df:61:94:90:2f: 42:d8:41:91:0f:65:43:39:17:ec:e9:b1:6c:1e:f3: f4:97:3a:bd:be:7b:a5:47:e5:89:96:23:42:7d:2e: 54:ef:95:76:e4:52:cb:25:fd:52:b8:97:33:bb:32: 9a:4c:d4:53:7c:73:bc:9c:0b:62:e7:95:de:f2:0a: fb:0e:46:e3:20:7d:7f:b3:ca:44:57:10:cd:c5:f7: 9a:8b:1a:16:28:60:cc:cf:7c:32:3c:b9:02:97:8c: 17:68:84:b0:15:9e:2d:c7:9f:5b:27:c0:77:94:8b: 02:c2:e9:ff:3a:5c:af:25:62:08:77:41:f9:31:f6: 57:11:1b:29:72:8d:00:34:bd:df:c4:25:13:74:d3: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AA:F4:3F:CD:9E:7F:F4:AD:5E:E1:3B:CE:E7:AB:89:60:43:F2:11 X509v3 Authority Key Identifier: keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/1-ar0P82ef_StXuE7zueriWBD8hE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.156.0/22 178.255.56.0/21 185.41.224.0/22 Signature Algorithm: sha256WithRSAEncryption c3:fa:cc:d3:a3:0f:f8:06:36:4d:ab:9a:ef:c1:7d:6d:f2:1a: 38:b5:52:c6:17:6c:11:b8:d3:9b:bc:44:16:44:3a:7f:27:3b: e2:4b:5f:e4:4c:ca:76:4d:55:84:73:8d:96:d9:24:6b:3c:d5: 90:a5:de:f7:67:a4:e5:76:c9:94:83:e3:ef:b8:03:7a:63:16: 0e:2e:97:67:bb:fd:97:0e:74:35:24:80:6c:65:4a:90:37:eb: f5:71:29:cf:77:8a:92:e5:79:39:98:e5:1b:ac:1f:f0:37:54: bf:e5:4b:ae:e0:e7:54:9c:8a:67:97:2c:3d:e9:f8:f0:d2:ec: e6:be:16:c8:6b:6b:46:60:53:ec:cc:ab:fa:39:43:01:7c:c3: f9:2f:8c:eb:af:31:30:77:ed:1d:d1:53:77:8e:26:e0:fe:3e: d1:fc:24:24:c3:15:90:c1:38:e3:ac:bd:5c:ec:d6:6e:46:c9: e8:7e:1a:82:79:c3:68:a4:7e:85:68:50:48:25:79:1d:55:2b: 59:dd:4a:37:da:ec:50:c7:3f:48:6e:6b:d1:a0:31:11:ba:82: 78:4c:60:6d:14:b7:e5:98:7e:6f:8f:eb:fc:ac:aa:11:d9:6e: b0:ee:98:da:b8:43:b1:1c:22:4d:06:e8:4f:d6:32:af:3e:5f: 36:3c:f7:b3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt/gM1kTJdwHEVoasGthu61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj ZDJhOTcwHhcNMjYwMTAyMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWFhZjQzZmNkOWU3ZmY0YWQ1ZWUxM2JjZWU3YWI4OTYwNDNmMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5C4rrKQ9GvJnV3u2JuY0/V8JWpz d9c7ekRNPRMlm7jkrm5Dxo/GV8dmYFu3WEHr8XReCDlL082ub8eRany/4rAJk0jG Hgve1CIkHi8BfSKtdBfm7Cs83bAWLKtWCGO/kNzSjKz4kAMe2L5yVAZAc3ex32GU kC9C2EGRD2VDORfs6bFsHvP0lzq9vnulR+WJliNCfS5U75V25FLLJf1SuJczuzKa TNRTfHO8nAti55Xe8gr7DkbjIH1/s8pEVxDNxfeaixoWKGDMz3wyPLkCl4wXaISw FZ4tx59bJ8B3lIsCwun/OlyvJWIId0H5MfZXERspco0ANL3fxCUTdNNTeQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPmq9D/Nnn/0rV7hO87nq4lgQ/IRMB8GA1UdIwQY MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct NTVjM2QxMjllYzI4LzEvMS1hcjBQODJlZl9TdFh1RTd6dWVyaVdCRDhoRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGYvNjA0MzQ2LWM5N2MtNDA5Ny04OTk3LTU1YzNkMTI5ZWMy OC8xL1pHVjVWaDdLV0htblJ3SmVWNWhJZXhuTktwYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAi2SnAME A7L/OAMEArkp4DANBgkqhkiG9w0BAQsFAAOCAQEAw/rM06MP+AY2Taua78F9bfIa OLVSxhdsEbjTm7xEFkQ6fyc74ktf5EzKdk1VhHONltkkazzVkKXe92ek5XbJlIPj 77gDemMWDi6XZ7v9lw50NSSAbGVKkDfr9XEpz3eKkuV5OZjlG6wf8DdUv+VLruDn VJyKZ5csPen48NLs5r4WyGtrRmBT7Myr+jlDAXzD+S+M668xMHftHdFTd44m4P4+ 0fwkJMMVkME446y9XOzWbkbJ6H4agnnDaKR+hWhQSCV5HVUrWd1KN9rsUMc/SG5r 0aAxEbqCeExgbRS35Zh+b4/r/KyqEdlusO6Y2rhDsRwiTQboT9Yyrz5fNjz3sw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:33 2026 by rpki-client