This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/v2V88seM-Nwzh5wj9f_9IQhYFX0.roa File: v2V88seM-Nwzh5wj9f_9IQhYFX0.roa (raw, json) Hash identifier: XYFFs6E41zM0dNU5XXPXTg3Z5qY8tv1UZybspVMB9NU= Subject key identifier: BF:65:7C:F2:C7:8C:F8:DC:33:87:9C:23:F5:FF:FD:21:08:58:15:7D Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Certificate serial: 019BCDE24DE43A7BF73515182438BBEADC16 Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/v2V88seM-Nwzh5wj9f_9IQhYFX0.roa Signing time: Sat 17 Jan 2026 21:35:18 +0000 ROA not before: Sat 17 Jan 2026 21:35:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206276 IP address blocks: 45.8.12.0/22 maxlen: 22 45.141.240.0/22 maxlen: 22 78.142.212.0/22 maxlen: 22 178.251.16.0/22 maxlen: 22 185.179.184.0/22 maxlen: 22 185.190.100.0/22 maxlen: 22 193.38.144.0/22 maxlen: 22 193.38.224.0/22 maxlen: 22 194.49.56.0/22 maxlen: 22 212.63.112.0/22 maxlen: 22 2a0a:8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cd:e2:4d:e4:3a:7b:f7:35:15:18:24:38:bb:ea:dc:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Validity Not Before: Jan 17 21:35:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf657cf2c78cf8dc33879c23f5fffd210858157d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:02:53:45:83:1b:8c:ca:3a:5f:0d:02:d0:2d: cf:00:f1:14:bf:65:21:07:a1:2d:d0:fb:5d:d3:48: 0a:9b:2b:74:2c:5d:24:cd:ad:01:da:ac:6d:4e:2c: 8e:e0:fa:56:bf:44:fb:e3:76:2c:de:55:87:81:e5: d2:63:b7:cf:27:7b:34:e5:91:87:47:b0:52:10:d3: 63:ea:37:0f:c7:ee:d6:53:ca:cc:55:49:30:38:f3: 81:ff:bd:e3:ee:1d:33:1e:da:c0:94:05:e8:3c:4c: 47:f4:a4:95:1b:d4:e3:8e:10:92:92:cf:f0:e9:ca: 4e:5a:fb:9b:da:76:7b:05:f3:71:74:72:ef:86:3e: fe:3e:fb:56:75:c2:c9:b4:7e:e5:1a:ab:75:e8:3a: 64:10:f4:97:25:b3:fc:8f:c8:9a:fa:bc:0f:dd:c2: 31:cd:2b:ae:23:44:8c:58:8f:45:97:f4:8d:1b:28: 8f:79:a5:d4:ef:da:08:95:ef:0c:67:a6:96:38:24: ab:3f:a8:10:98:4f:1a:8a:62:39:e1:3c:8d:6f:dc: 57:0d:bc:6a:2d:2d:b3:3f:73:e5:29:1c:76:3b:f1: 63:6f:c6:f9:ed:0f:b8:93:ea:95:4f:5b:82:78:5a: 6c:8d:90:e4:f8:eb:bd:02:cb:e0:85:16:2a:ad:4f: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:7C:F2:C7:8C:F8:DC:33:87:9C:23:F5:FF:FD:21:08:58:15:7D X509v3 Authority Key Identifier: keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/v2V88seM-Nwzh5wj9f_9IQhYFX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.12.0/22 45.141.240.0/22 78.142.212.0/22 178.251.16.0/22 185.179.184.0/22 185.190.100.0/22 193.38.144.0/22 193.38.224.0/22 194.49.56.0/22 212.63.112.0/22 IPv6: 2a0a:8c0::/29 Signature Algorithm: sha256WithRSAEncryption 7c:7a:c6:08:f4:8a:d4:32:d7:fd:11:00:19:12:54:ff:22:f3: e8:e3:4f:dd:cf:49:41:be:7f:b6:f1:8b:33:33:d9:2b:87:f1: 4d:a0:38:d7:c0:58:10:d9:47:4e:16:eb:10:67:6d:72:cf:fe: c0:29:4f:02:2d:82:77:77:e2:16:5f:6f:67:22:07:6f:dd:b5: 55:39:8a:fc:e1:4f:ab:ae:71:6c:c8:ff:96:7c:86:d4:bb:1b: 48:c6:42:c5:9a:3c:ec:eb:5a:9d:8e:68:32:ac:dc:81:c6:c2: 6b:0a:4f:87:e9:ef:1b:24:b8:70:af:68:e8:59:56:38:ee:e7: 5c:1a:45:c1:db:d4:3a:a9:dd:e2:09:68:33:15:62:c9:ff:40: 19:d0:bd:51:6a:a9:84:0c:b1:0b:90:e1:57:85:bf:df:a0:0e: d5:03:f7:c7:93:90:f6:f9:4e:7e:34:de:97:41:88:3a:cb:85: d4:9d:b8:2b:d3:f4:41:ff:3a:cf:16:6f:70:45:b3:2f:e7:66: fe:52:79:42:d1:7f:45:7a:6f:23:c1:c0:eb:6a:1d:fa:6c:7c: 88:29:33:ee:24:fd:45:7e:62:df:34:3e:d7:39:c2:46:02:87: 54:27:51:61:e1:f9:57:fe:b6:2d:e8:e6:d1:1b:cc:03:63:cf: ec:70:11:06 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZvN4k3kOnv3NRUYJDi76twWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh NTdlYzgwHhcNMjYwMTE3MjEzNTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjY1N2NmMmM3OGNmOGRjMzM4NzljMjNmNWZmZmQyMTA4NTgxNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wJTRYMbjMo6Xw0C0C3PAPEUv2Uh B6Et0Ptd00gKmyt0LF0kza0B2qxtTiyO4PpWv0T743Ys3lWHgeXSY7fPJ3s05ZGH R7BSENNj6jcPx+7WU8rMVUkwOPOB/73j7h0zHtrAlAXoPExH9KSVG9TjjhCSks/w 6cpOWvub2nZ7BfNxdHLvhj7+PvtWdcLJtH7lGqt16DpkEPSXJbP8j8ia+rwP3cIx zSuuI0SMWI9Fl/SNGyiPeaXU79oIle8MZ6aWOCSrP6gQmE8aimI54TyNb9xXDbxq LS2zP3PlKRx2O/Fjb8b57Q+4k+qVT1uCeFpsjZDk+Ou9AsvghRYqrU9zFQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFL9lfPLHjPjcM4ecI/X//SEIWBV9MB8GA1UdIwQY MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt YmQ1OGQwMDIxYTA5LzEvdjJWODhzZU0tTnd6aDV3ajlmXzlJUWhZRlgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5 LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCLQgMAwQC LY3wAwQCTo7UAwQCsvsQAwQCubO4AwQCub5kAwQCwSaQAwQCwSbgAwQCwjE4AwQC 1D9wMA0EAgACMAcDBQMqCgjAMA0GCSqGSIb3DQEBCwUAA4IBAQB8esYI9IrUMtf9 EQAZElT/IvPo40/dz0lBvn+28YszM9krh/FNoDjXwFgQ2UdOFusQZ21yz/7AKU8C LYJ3d+IWX29nIgdv3bVVOYr84U+rrnFsyP+WfIbUuxtIxkLFmjzs61qdjmgyrNyB xsJrCk+H6e8bJLhwr2joWVY47udcGkXB29Q6qd3iCWgzFWLJ/0AZ0L1RaqmEDLEL kOFXhb/foA7VA/fHk5D2+U5+NN6XQYg6y4XUnbgr0/RB/zrPFm9wRbMv52b+UnlC 0X9Fem8jwcDrah36bHyIKTPuJP1FfmLfND7XOcJGAodUJ1Fh4flX/rYt6ObRG8wD Y8/scBEG -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:44 2026 by rpki-client