This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/22I2cj4bCDfR9vz_ePYstKdwD4U.roa File: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (raw, json) Hash identifier: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4= Subject key identifier: DB:62:36:72:3E:1B:08:37:D1:F6:FC:FF:78:F6:2C:B4:A7:70:0F:85 Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Certificate serial: 019B7834E19EA5F176C96E5E49CEF3EBD1D6 Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/22I2cj4bCDfR9vz_ePYstKdwD4U.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16074 IP address blocks: 145.77.32.0/21 maxlen: 24 145.77.32.0/22 maxlen: 24 145.77.36.0/22 maxlen: 24 145.77.42.0/23 maxlen: 24 145.77.44.0/23 maxlen: 24 145.77.46.0/23 maxlen: 24 145.77.48.0/23 maxlen: 24 145.77.50.0/23 maxlen: 24 145.77.52.0/22 maxlen: 24 145.77.56.0/22 maxlen: 24 145.77.60.0/22 maxlen: 24 145.77.64.0/19 maxlen: 24 145.77.64.0/20 maxlen: 24 145.77.80.0/20 maxlen: 24 145.77.96.0/20 maxlen: 24 145.77.96.0/21 maxlen: 24 145.77.104.0/21 maxlen: 24 145.77.224.0/20 maxlen: 24 145.77.224.0/21 maxlen: 24 2001:67c:2f04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e1:9e:a5:f1:76:c9:6e:5e:49:ce:f3:eb:d1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db6236723e1b0837d1f6fcff78f62cb4a7700f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:8e:f8:ba:3c:01:c5:94:59:dd:be:f7:da: a0:7e:f0:87:d6:21:b9:b8:ab:49:71:e1:47:08:1a: d7:1d:97:47:f2:7e:f7:32:f4:50:2e:2f:60:df:55: 01:20:ec:a1:f4:ca:74:82:42:36:7b:ff:d1:ad:4a: 02:a5:b6:2a:2f:59:7b:2f:f8:ae:3e:61:be:88:4d: ef:e6:e2:0b:8c:07:0e:0e:44:0f:6d:3f:4b:0e:4c: 93:af:d5:b8:ea:a1:e3:6c:0f:91:6f:0e:ee:e6:8a: 10:9c:2f:39:74:e3:1d:c2:6f:8d:6a:a4:2c:c2:60: 59:19:ef:3a:ad:c3:06:cb:33:a6:35:76:39:9b:2f: 76:2b:85:57:23:80:1b:a3:ec:c8:23:2b:b0:e5:b4: 95:dc:8c:3a:e1:cf:db:1b:ab:a1:fe:f6:6f:7c:fe: 01:73:93:f0:f5:2c:3c:35:a8:49:b1:e4:9d:a8:49: ef:96:ae:c8:c7:24:61:d2:2e:83:74:af:9d:d3:e1: 8f:c2:9d:d0:02:37:ef:43:fd:a5:a3:b5:a5:fd:4d: be:05:c0:63:75:43:c4:a5:b6:0a:b0:34:b0:fc:dd: a0:26:a9:33:3a:d5:15:21:6e:3c:4f:30:12:14:47: 9b:62:f4:df:a0:4e:fa:ec:33:ad:c5:9d:0e:16:f2: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:62:36:72:3E:1B:08:37:D1:F6:FC:FF:78:F6:2C:B4:A7:70:0F:85 X509v3 Authority Key Identifier: keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/22I2cj4bCDfR9vz_ePYstKdwD4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.77.32.0/21 145.77.42.0-145.77.111.255 145.77.224.0/20 IPv6: 2001:67c:2f04::/48 Signature Algorithm: sha256WithRSAEncryption 3f:4b:b4:3f:05:e5:06:24:37:81:a7:ac:50:ad:be:c1:6a:d5: ca:1c:de:24:0e:09:f9:dc:6c:83:68:95:99:20:24:04:8b:3c: b1:34:ba:c4:d0:90:e0:af:d2:52:1a:f0:26:96:74:bc:e4:0f: 3f:40:f9:d2:21:d3:6f:bc:cb:73:f6:e8:f0:a4:13:d3:7e:0b: 96:83:79:0c:cd:56:67:ff:f7:98:d7:22:67:d3:bf:42:86:ae: 95:42:8c:27:59:18:d5:9d:19:c1:29:1b:9b:f5:0a:81:e9:e5: 95:71:bd:a7:8b:78:a9:c1:3f:4e:57:0c:86:3e:dd:88:87:07: 3b:fc:82:4a:fc:27:71:b4:89:d5:99:6d:93:c4:e5:05:a7:8a: fc:bf:f3:6a:0f:2e:53:74:83:e2:2f:bb:d7:fe:da:5f:73:99: ba:43:e3:40:fb:ae:d9:4c:8f:b7:88:b2:4f:2f:55:26:26:27: 5a:64:20:55:77:66:c3:28:41:0d:d4:4d:48:a0:af:52:42:1c: d6:47:01:bf:a3:23:6e:6f:50:e9:46:1e:d7:6d:d9:f2:d8:1b: aa:02:e7:29:89:12:05:f6:58:c9:9d:44:ab:b4:d4:b9:b0:0c: 7b:4f:37:fc:8d:4c:a8:f3:60:ed:9b:3d:2b:d0:58:9c:15:6c: 0b:b9:af:d7 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt4NOGepfF2yW5eSc7z69HWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwM2Y1NTAwYWVmZTZhYjRkYmRlMTI0MDczYTM3YmMwZGMz MzFlODAwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjYyMzY3MjNlMWIwODM3ZDFmNmZjZmY3OGY2MmNiNGE3NzAwZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE+O+Lo8AcWUWd2+99qgfvCH1iG5 uKtJceFHCBrXHZdH8n73MvRQLi9g31UBIOyh9Mp0gkI2e//RrUoCpbYqL1l7L/iu PmG+iE3v5uILjAcODkQPbT9LDkyTr9W46qHjbA+Rbw7u5ooQnC85dOMdwm+NaqQs wmBZGe86rcMGyzOmNXY5my92K4VXI4Abo+zIIyuw5bSV3Iw64c/bG6uh/vZvfP4B c5Pw9Sw8NahJseSdqEnvlq7IxyRh0i6DdK+d0+GPwp3QAjfvQ/2lo7Wl/U2+BcBj dUPEpbYKsDSw/N2gJqkzOtUVIW48TzASFEebYvTfoE767DOtxZ0OFvJa7QIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFNtiNnI+Gwg30fb8/3j2LLSncA+FMB8GA1UdIwQY MBaAFOA/VQCu/mq0294SQHOje8DcMx6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDct M2FjNTY1ZGNkZjczLzEvMjJJMmNqNGJDRGZSOXZ6X2VQWXN0S2R3RDRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDctM2FjNTY1ZGNkZjcz LzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQDkU0gMAwD BAGRTSoDBASRTWADBASRTeAwDwQCAAIwCQMHACABBnwvBDANBgkqhkiG9w0BAQsF AAOCAQEAP0u0PwXlBiQ3gaesUK2+wWrVyhzeJA4J+dxsg2iVmSAkBIs8sTS6xNCQ 4K/SUhrwJpZ0vOQPP0D50iHTb7zLc/bo8KQT034LloN5DM1WZ//3mNciZ9O/Qoau lUKMJ1kY1Z0ZwSkbm/UKgenllXG9p4t4qcE/TlcMhj7diIcHO/yCSvwncbSJ1Zlt k8TlBaeK/L/zag8uU3SD4i+71/7aX3OZukPjQPuu2UyPt4iyTy9VJiYnWmQgVXdm wyhBDdRNSKCvUkIc1kcBv6Mjbm9Q6UYe123Z8tgbqgLnKYkSBfZYyZ1Eq7TUubAM e083/I1MqPNg7Zs9K9BYnBVsC7mv1w== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:37 2026 by rpki-client