This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/enyFFWh9n2gyKI-wgUqYxZWV6TQ.roa File: enyFFWh9n2gyKI-wgUqYxZWV6TQ.roa (raw, json) Hash identifier: ffqDLFJnt7EZIYCzOELgd9ZMArcFIA7EhD99Kgcs9xE= Subject key identifier: 7A:7C:85:15:68:7D:9F:68:32:28:8F:B0:81:4A:98:C5:95:95:E9:34 Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Certificate serial: 019B7F837A1B65CED6787484FB9230F1D8C5 Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/enyFFWh9n2gyKI-wgUqYxZWV6TQ.roa Signing time: Fri 02 Jan 2026 16:21:21 +0000 ROA not before: Fri 02 Jan 2026 16:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200738 IP address blocks: 45.129.20.0/24 maxlen: 24 45.129.21.0/24 maxlen: 24 45.129.22.0/24 maxlen: 24 45.129.23.0/24 maxlen: 24 77.83.124.0/22 maxlen: 22 92.114.56.0/22 maxlen: 22 93.114.240.0/22 maxlen: 22 109.230.222.0/24 maxlen: 24 176.100.208.0/22 maxlen: 22 176.100.212.0/22 maxlen: 22 176.100.224.0/20 maxlen: 20 176.100.224.0/24 maxlen: 24 176.100.225.0/24 maxlen: 24 185.97.168.0/22 maxlen: 22 185.159.252.0/22 maxlen: 22 185.170.147.0/24 maxlen: 24 188.215.8.0/22 maxlen: 22 193.26.148.0/22 maxlen: 22 193.31.36.0/22 maxlen: 22 193.35.14.0/23 maxlen: 23 193.35.26.0/23 maxlen: 23 2a06:6c0::/48 maxlen: 48 2a06:6c0:1::/48 maxlen: 48 2a06:6c0:2::/48 maxlen: 48 2a06:6c0:3::/48 maxlen: 48 2a06:6c0:11::/48 maxlen: 48 2a06:6c0:12::/48 maxlen: 48 2a06:6c0:13::/48 maxlen: 48 2a06:6c0:21::/48 maxlen: 48 2a06:6c0:22::/48 maxlen: 48 2a06:6c0:23::/48 maxlen: 48 2a06:6c0:24::/48 maxlen: 48 2a06:6c0:25::/48 maxlen: 48 2a06:6c0:26::/48 maxlen: 48 2a06:6c0:254::/48 maxlen: 48 2a06:6c0:255::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:7a:1b:65:ce:d6:78:74:84:fb:92:30:f1:d8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Validity Not Before: Jan 2 16:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a7c8515687d9f6832288fb0814a98c59595e934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:c7:f5:2e:ed:51:59:cf:4f:0f:3b:cd:64: b3:d6:f4:b4:15:93:c7:45:57:40:dd:ac:d1:92:2c: 5c:f6:1a:11:67:c7:8f:11:96:81:c3:5d:9f:8b:c4: ae:e3:ab:a9:ac:15:03:c9:0d:20:d6:a1:47:d2:b5: 4d:6b:bd:6a:09:ec:0e:7d:ec:ac:5a:a9:9f:54:0c: 68:ff:0a:04:44:46:35:86:cd:52:d6:16:4a:39:b8: 82:ff:fc:9f:92:50:71:80:2d:e3:0f:ce:ad:da:91: f0:34:3b:3c:a9:5d:62:1d:c9:a4:50:d9:46:0c:63: ba:90:28:e9:0d:61:84:25:2f:6b:3a:a4:00:88:46: bf:5d:bf:07:05:a9:95:f3:48:9c:a9:ed:b9:19:d5: 8c:fd:f1:73:5f:53:84:d6:38:15:f3:ad:ae:15:0a: cd:9f:99:36:e4:c0:69:6c:31:f2:b6:f2:e5:4a:95: 91:d3:90:bf:f6:20:9b:97:a7:24:d9:e4:b8:df:a5: 3d:1a:2e:d3:ca:8e:00:b4:cc:2e:49:02:8e:f4:50: 05:f7:3a:dd:1b:9b:8a:4a:4d:b3:43:19:a8:5a:b6: fa:89:f1:b1:f3:24:a8:66:93:48:b1:19:aa:d1:e1: c4:0f:dd:a2:fe:4a:10:fc:55:2b:45:99:4c:a2:5a: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7C:85:15:68:7D:9F:68:32:28:8F:B0:81:4A:98:C5:95:95:E9:34 X509v3 Authority Key Identifier: keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/enyFFWh9n2gyKI-wgUqYxZWV6TQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.20.0/22 77.83.124.0/22 92.114.56.0/22 93.114.240.0/22 109.230.222.0/24 176.100.208.0/21 176.100.224.0/20 185.97.168.0/22 185.159.252.0/22 185.170.147.0/24 188.215.8.0/22 193.26.148.0/22 193.31.36.0/22 193.35.14.0/23 193.35.26.0/23 IPv6: 2a06:6c0::/46 2a06:6c0:11::-2a06:6c0:13:ffff:ffff:ffff:ffff:ffff 2a06:6c0:21::-2a06:6c0:26:ffff:ffff:ffff:ffff:ffff 2a06:6c0:254::/47 Signature Algorithm: sha256WithRSAEncryption 49:32:62:73:83:8d:61:49:a0:5c:01:d8:32:3f:01:ce:11:ac: c8:f5:85:75:87:3c:82:29:51:ae:c8:c9:bf:d7:fe:bc:6d:03: c2:0c:fd:bd:51:0e:73:37:95:eb:a2:8e:01:c7:27:7b:93:3a: f2:af:4a:d0:08:a6:16:a5:ef:41:1e:4b:97:d6:17:5f:aa:7f: 1c:b0:ed:f1:fd:f7:5d:4a:00:b1:ee:01:a8:47:2c:91:bd:87: 57:ab:25:6d:ef:81:e1:c4:ad:16:f7:10:c4:1a:94:8b:13:d0: 10:ba:90:57:81:d1:e3:a9:ef:8a:57:44:ea:9a:73:ef:09:f1: c7:81:32:8f:03:3f:7a:04:be:f8:9b:a5:90:d4:73:6f:80:f0: ce:00:bd:bf:bd:73:4c:35:01:1f:51:a3:99:65:d2:f4:27:79: bb:53:09:c7:fb:65:6e:c3:dc:01:93:df:20:bf:18:72:9a:fa: 36:3a:16:43:30:67:6f:75:1c:9a:e4:ac:53:c3:c8:2e:94:5f: 84:4c:fe:5b:0c:8c:f4:8c:66:14:a9:f9:93:b8:cd:45:6c:01: a2:10:a1:17:b3:17:1c:c1:1f:58:c1:7b:d4:5d:fc:a5:b6:31: 51:9b:8d:f6:07:66:03:5d:05:bc:31:9e:1c:89:e3:e4:c7:b0: 5c:f6:ab:86 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt/g3obZc7WeHSE+5Iw8djFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5 MjNmMjAwHhcNMjYwMTAyMTYyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTdjODUxNTY4N2Q5ZjY4MzIyODhmYjA4MTRhOThjNTk1OTVlOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxTH9S7tUVnPTw87zWSz1vS0FZPH RVdA3azRkixc9hoRZ8ePEZaBw12fi8Su46uprBUDyQ0g1qFH0rVNa71qCewOfeys WqmfVAxo/woEREY1hs1S1hZKObiC//yfklBxgC3jD86t2pHwNDs8qV1iHcmkUNlG DGO6kCjpDWGEJS9rOqQAiEa/Xb8HBamV80icqe25GdWM/fFzX1OE1jgV862uFQrN n5k25MBpbDHytvLlSpWR05C/9iCbl6ck2eS436U9Gi7Tyo4AtMwuSQKO9FAF9zrd G5uKSk2zQxmoWrb6ifGx8ySoZpNIsRmq0eHED92i/koQ/FUrRZlMolq1mwIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFHp8hRVofZ9oMiiPsIFKmMWVlek0MB8GA1UdIwQY MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt Nzc3MzczZTYwNTVlLzEvZW55RkZXaDluMmd5S0ktd2dVcVl4WldWNlRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDBgBAIAATBaAwQCLYEU AwQCTVN8AwQCXHI4AwQCXXLwAwQAbebeAwQDsGTQAwQEsGTgAwQCuWGoAwQCuZ/8 AwQAuaqTAwQCvNcIAwQCwRqUAwQCwR8kAwQBwSMOAwQBwSMaMEAEAgACMDoDBwIq BgbAAAAwEgMHACoGBsAAEQMHAioGBsAAEDASAwcAKgYGwAAhAwcAKgYGwAAmAwcB KgYGwAJUMA0GCSqGSIb3DQEBCwUAA4IBAQBJMmJzg41hSaBcAdgyPwHOEazI9YV1 hzyCKVGuyMm/1/68bQPCDP29UQ5zN5Xroo4Bxyd7kzryr0rQCKYWpe9BHkuX1hdf qn8csO3x/fddSgCx7gGoRyyRvYdXqyVt74HhxK0W9xDEGpSLE9AQupBXgdHjqe+K V0TqmnPvCfHHgTKPAz96BL74m6WQ1HNvgPDOAL2/vXNMNQEfUaOZZdL0J3m7UwnH +2Vuw9wBk98gvxhymvo2OhZDMGdvdRya5KxTw8gulF+ETP5bDIz0jGYUqfmTuM1F bAGiEKEXsxccwR9YwXvUXfyltjFRm432B2YDXQW8MZ4ciePkx7Bc9quG -----END CERTIFICATE-----Generated at Mon Jan 26 06:21:08 2026 by rpki-client