This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa File: x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa (raw, json) Hash identifier: AqP1AEgenjD2KrPY+QLH5krFzTJA90JozOTpwzG6a5A= Subject key identifier: C7:97:9B:29:CF:7F:DE:A0:3B:A4:43:82:D3:F0:67:39:2D:41:F2:82 Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802 Certificate serial: 019B7C7EEE029A21086ABD47BA05F3178B1E Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa Signing time: Fri 02 Jan 2026 02:17:31 +0000 ROA not before: Fri 02 Jan 2026 02:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198401 IP address blocks: 45.82.144.0/22 maxlen: 22 91.234.12.0/22 maxlen: 22 185.96.52.0/22 maxlen: 22 185.146.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:ee:02:9a:21:08:6a:bd:47:ba:05:f3:17:8b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802 Validity Not Before: Jan 2 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7979b29cf7fdea03ba44382d3f067392d41f282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:2d:b9:64:84:d1:d9:5c:f1:42:be:12:3d: 45:07:0d:49:c8:de:dd:c2:a4:d8:2c:3e:d6:27:01: 82:e8:39:90:46:96:63:c9:08:97:1a:0e:e6:ea:fa: c2:86:cd:19:1b:d1:1c:37:15:5a:ff:47:a0:5f:fe: b8:e5:46:31:19:0e:69:d1:24:a4:11:80:a8:0a:5b: 70:b3:dc:3e:c6:59:d6:9b:60:4b:f9:a3:1b:64:c4: d0:5d:d0:c2:0f:14:a9:33:69:36:e2:76:a3:04:5e: 76:fd:7e:7c:7a:fb:79:77:fc:cb:34:6f:28:72:78: b8:ce:24:8b:97:59:62:f9:82:15:25:2b:0f:87:8c: d4:f9:a1:2b:26:7e:c8:6a:cd:23:48:6d:82:36:df: e7:70:64:e1:03:05:0a:bb:f3:69:9a:23:eb:24:d3: 11:0a:f6:07:44:0f:43:01:76:f2:26:e4:34:86:03: 04:bb:28:2c:3d:a8:61:1e:42:36:84:f4:2f:e7:90: c1:19:2c:59:68:66:8a:dd:ae:59:df:54:94:69:1c: d4:cb:b4:e7:32:42:4f:de:00:cf:51:cd:d2:04:c9: 31:02:2e:fc:ec:fe:71:e3:18:30:f2:25:a9:31:bd: bf:b5:5c:36:7a:2a:03:e8:93:ec:a8:7f:8c:bc:25: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:97:9B:29:CF:7F:DE:A0:3B:A4:43:82:D3:F0:67:39:2D:41:F2:82 X509v3 Authority Key Identifier: keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.144.0/22 91.234.12.0/22 185.96.52.0/22 185.146.244.0/22 Signature Algorithm: sha256WithRSAEncryption 54:8b:7e:d8:aa:42:16:24:c3:bb:51:99:e8:0f:48:5b:d6:28: f1:a0:88:a4:8d:49:f7:68:7a:5c:55:f1:1e:1e:49:e4:10:68: bd:95:b4:b3:b7:7a:ec:ab:70:af:5d:cb:40:6c:99:cf:b7:68: 0f:af:b4:85:c7:b4:a0:21:cb:7b:6e:ea:cd:fe:4a:7a:24:2d: 66:92:26:da:b3:bc:0a:f1:5f:9b:c1:58:f0:26:58:24:1c:2d: 1e:76:b1:3b:15:91:42:1e:d7:03:42:c9:b7:b0:b7:3d:20:29: bc:c8:91:53:ad:32:ce:4f:18:bb:0b:a8:2c:42:84:2e:d1:15: 6d:06:c4:c6:d7:9a:35:be:f1:d1:62:fb:4e:c2:5c:a3:b1:9c: e7:94:85:32:0a:a9:74:d6:80:84:cb:35:92:16:bf:1b:4e:ca: d5:26:91:3b:49:cf:7a:05:72:ba:ca:8a:40:8c:98:b9:c0:db: da:7e:e0:07:61:da:bd:2f:bf:75:a0:15:9b:f5:00:68:ca:e6: cc:72:55:a6:25:83:e7:62:0b:f5:b4:2f:c9:47:fb:3d:7f:a3: 92:9b:b6:2e:16:8f:e5:9d:59:21:3f:c0:f0:c5:07:da:02:66: 4c:d0:d5:e0:41:ec:48:70:8b:06:62:f6:c2:6b:c3:8c:d8:69: 99:e8:60:03 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8fu4CmiEIar1HugXzF4seMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzg0YmQ5NmE0NGJjMzYxZDEzMzQ0ZDU0YzhiYzUxZmY2 N2E4MDIwHhcNMjYwMTAyMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzk3OWIyOWNmN2ZkZWEwM2JhNDQzODJkM2YwNjczOTJkNDFmMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup8tuWSE0dlc8UK+Ej1FBw1JyN7d wqTYLD7WJwGC6DmQRpZjyQiXGg7m6vrChs0ZG9EcNxVa/0egX/645UYxGQ5p0SSk EYCoCltws9w+xlnWm2BL+aMbZMTQXdDCDxSpM2k24najBF52/X58evt5d/zLNG8o cni4ziSLl1li+YIVJSsPh4zU+aErJn7Ias0jSG2CNt/ncGThAwUKu/NpmiPrJNMR CvYHRA9DAXbyJuQ0hgMEuygsPahhHkI2hPQv55DBGSxZaGaK3a5Z31SUaRzUy7Tn MkJP3gDPUc3SBMkxAi787P5x4xgw8iWpMb2/tVw2eioD6JPsqH+MvCUsxwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMeXmynPf96gO6RDgtPwZzktQfKCMB8GA1UdIwQY MBaAFA14S9lqRLw2HRM0TVTIvFH/Z6gCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAt ZDRjNjZmNGYzYjZlLzEveDVlYktjOV8zcUE3cEVPQzBfQm5PUzFCOG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAtZDRjNjZmNGYzYjZl LzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLVKQAwQC W+oMAwQCuWA0AwQCuZL0MA0GCSqGSIb3DQEBCwUAA4IBAQBUi37YqkIWJMO7UZno D0hb1ijxoIikjUn3aHpcVfEeHknkEGi9lbSzt3rsq3CvXctAbJnPt2gPr7SFx7Sg Ict7burN/kp6JC1mkibas7wK8V+bwVjwJlgkHC0edrE7FZFCHtcDQsm3sLc9ICm8 yJFTrTLOTxi7C6gsQoQu0RVtBsTG15o1vvHRYvtOwlyjsZznlIUyCql01oCEyzWS Fr8bTsrVJpE7Sc96BXK6yopAjJi5wNvafuAHYdq9L791oBWb9QBoyubMclWmJYPn Ygv1tC/JR/s9f6OSm7YuFo/lnVkhP8DwxQfaAmZM0NXgQexIcIsGYvbCa8OM2GmZ 6GAD -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:13 2026 by rpki-client