This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa File: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (raw, json) Hash identifier: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y= Subject key identifier: 43:CD:89:CC:C4:3D:7E:7E:B3:41:46:05:63:38:6C:6B:A9:FC:11:F0 Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065 Certificate serial: 019B7AC8ABE4BB729F0F8E0306EAD2BC7B41 Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa Signing time: Thu 01 Jan 2026 18:18:50 +0000 ROA not before: Thu 01 Jan 2026 18:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205381 IP address blocks: 45.88.32.0/24 maxlen: 24 45.88.33.0/24 maxlen: 24 45.88.34.0/24 maxlen: 24 45.88.35.0/24 maxlen: 24 185.220.56.0/24 maxlen: 24 185.220.57.0/24 maxlen: 24 185.220.58.0/23 maxlen: 23 194.107.229.0/24 maxlen: 24 194.110.1.0/24 maxlen: 24 194.110.7.0/24 maxlen: 24 194.110.19.0/24 maxlen: 24 2a07:86c0::/29 maxlen: 29 2a0c:f587:fffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ab:e4:bb:72:9f:0f:8e:03:06:ea:d2:bc:7b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065 Validity Not Before: Jan 1 18:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43cd89ccc43d7e7eb341460563386c6ba9fc11f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:23:43:21:23:d4:90:c4:36:d7:25:40:41: 99:b8:a2:61:7f:bf:91:86:e5:76:71:a1:ed:a8:ff: b9:82:30:28:c0:7c:cb:3c:53:32:4b:89:45:88:21: eb:8a:13:3e:73:b2:ec:7d:cc:e5:5d:1d:f2:08:3c: 68:99:bd:25:33:ed:6a:e5:05:8a:35:b1:87:d8:81: 49:aa:6c:87:ae:ae:f0:4f:76:27:94:94:74:d8:e2: 45:7f:27:be:8c:54:dd:1f:4a:2e:bd:4e:7d:09:88: 48:b8:e1:60:db:36:36:55:8a:c3:45:83:5c:4a:10: ec:ec:66:d8:24:c1:d1:db:b8:72:07:59:52:27:0c: 6f:7f:21:9c:b1:75:81:05:d3:09:02:cb:ec:a8:fe: ba:07:cb:ff:93:d3:07:ea:a4:3c:75:7e:5d:63:9b: 52:26:d0:c5:73:b5:33:22:71:f1:39:fd:f9:1c:2d: 89:8b:9c:ff:82:39:a6:73:88:a6:f8:e0:39:08:ef: 65:34:05:3d:86:7d:fc:88:aa:42:ec:a3:40:a4:83: c7:e6:99:9a:d0:47:8d:08:74:3a:98:bd:24:44:e4: 6e:3c:8f:cd:53:cb:74:0e:91:d5:f4:f4:68:0e:af: 20:2f:b4:a6:b1:21:70:b6:e1:f2:08:2a:0b:6b:fc: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CD:89:CC:C4:3D:7E:7E:B3:41:46:05:63:38:6C:6B:A9:FC:11:F0 X509v3 Authority Key Identifier: keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.32.0/22 185.220.56.0/22 194.107.229.0/24 194.110.1.0/24 194.110.7.0/24 194.110.19.0/24 IPv6: 2a07:86c0::/29 2a0c:f587:fffd::/48 Signature Algorithm: sha256WithRSAEncryption 76:15:33:5a:82:ad:8e:8d:4a:88:f8:04:88:fb:5a:c5:48:a1: d3:82:81:65:a3:d8:bd:97:01:8e:df:b4:29:83:c6:90:c2:20: c4:1f:33:cd:69:7c:7f:29:84:73:62:92:4a:c8:53:28:d9:e1: 65:a7:96:7d:8e:4b:35:40:52:0e:d2:d2:c8:9d:5a:09:fc:0d: c7:5a:c9:9d:88:1f:5d:ce:88:e6:a3:40:48:1c:26:56:58:c8: 63:99:01:da:b7:64:f4:4f:4d:e0:47:ff:8f:d2:dd:54:c0:51: 52:49:d4:3d:c2:7d:02:32:ae:d5:55:b5:f4:e3:a7:73:ff:52: 9b:89:3c:02:7b:33:cb:d2:bd:32:47:fd:fd:96:ab:1c:78:a0: bf:53:5e:46:88:e7:07:1c:59:5a:09:78:1e:4a:6c:29:85:c2: 6c:99:15:d3:90:69:72:a3:af:3c:03:6b:9e:83:57:79:76:34: e2:d5:22:33:ed:a4:27:b2:21:7b:b8:4a:94:b0:fd:14:dc:8a: a7:2a:0b:d5:70:51:39:ee:aa:19:12:7d:ce:48:74:48:a8:28: cc:dc:fc:35:a5:22:ff:da:21:42:01:48:22:2d:bd:3c:fe:ce: 58:4a:bd:0b:f6:d8:bc:32:45:97:78:5b:ea:8e:1b:82:c1:14: 24:19:ca:4e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt6yKvku3KfD44DBurSvHtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk YjAwNjUwHhcNMjYwMTAxMTgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2NkODljY2M0M2Q3ZTdlYjM0MTQ2MDU2MzM4NmM2YmE5ZmMxMWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXQjQyEj1JDENtclQEGZuKJhf7+R huV2caHtqP+5gjAowHzLPFMyS4lFiCHrihM+c7LsfczlXR3yCDxomb0lM+1q5QWK NbGH2IFJqmyHrq7wT3YnlJR02OJFfye+jFTdH0ouvU59CYhIuOFg2zY2VYrDRYNc ShDs7GbYJMHR27hyB1lSJwxvfyGcsXWBBdMJAsvsqP66B8v/k9MH6qQ8dX5dY5tS JtDFc7UzInHxOf35HC2Ji5z/gjmmc4im+OA5CO9lNAU9hn38iKpC7KNApIPH5pma 0EeNCHQ6mL0kRORuPI/NU8t0DpHV9PRoDq8gL7SmsSFwtuHyCCoLa/wCcwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFEPNiczEPX5+s0FGBWM4bGup/BHwMB8GA1UdIwQY MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt MWU0ZTA0MDA4NDRiLzEvUTgySnpNUTlmbjZ6UVVZRll6aHNhNm44RWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQCLVggAwQC udw4AwQAwmvlAwQAwm4BAwQAwm4HAwQAwm4TMBYEAgACMBADBQMqB4bAAwcAKgz1 h//9MA0GCSqGSIb3DQEBCwUAA4IBAQB2FTNagq2OjUqI+ASI+1rFSKHTgoFlo9i9 lwGO37Qpg8aQwiDEHzPNaXx/KYRzYpJKyFMo2eFlp5Z9jks1QFIO0tLInVoJ/A3H WsmdiB9dzojmo0BIHCZWWMhjmQHat2T0T03gR/+P0t1UwFFSSdQ9wn0CMq7VVbX0 46dz/1KbiTwCezPL0r0yR/39lqsceKC/U15GiOcHHFlaCXgeSmwphcJsmRXTkGly o688A2ueg1d5djTi1SIz7aQnsiF7uEqUsP0U3IqnKgvVcFE57qoZEn3OSHRIqCjM 3Pw1pSL/2iFCAUgiLb08/s5YSr0L9ti8MkWXeFvqjhuCwRQkGcpO -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:23 2026 by rpki-client