This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa File: ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa (raw, json) Hash identifier: PAnCTRg2QzsK95CrphYN3Z21jLVwZm4bozxHdK4npEM= Subject key identifier: 7A:34:2D:17:E2:09:01:C3:D4:B0:99:B6:1A:B6:F7:D0:8A:A0:D6:53 Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452 Certificate serial: 019B76EAEE40973E1DAE79C90E9F4F843798 Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43927 IP address blocks: 45.131.128.0/23 maxlen: 24 46.102.240.0/21 maxlen: 24 77.81.240.0/21 maxlen: 24 89.32.144.0/21 maxlen: 24 89.33.197.0/24 maxlen: 24 89.45.248.0/21 maxlen: 24 91.188.224.0/24 maxlen: 24 91.188.225.0/24 maxlen: 24 91.188.226.0/24 maxlen: 24 91.188.227.0/24 maxlen: 24 92.114.98.0/24 maxlen: 24 93.113.174.0/24 maxlen: 24 185.105.32.0/22 maxlen: 24 185.125.108.0/24 maxlen: 24 185.125.109.0/24 maxlen: 24 185.125.110.0/23 maxlen: 24 185.199.172.0/22 maxlen: 24 185.199.174.0/24 maxlen: 24 185.199.175.0/24 maxlen: 24 185.250.104.0/24 maxlen: 24 185.250.105.0/24 maxlen: 24 185.250.106.0/24 maxlen: 24 185.250.107.0/24 maxlen: 24 188.240.47.0/24 maxlen: 24 188.241.112.0/21 maxlen: 24 2a06:cd40:1::/48 maxlen: 48 2a06:cd40:2::/48 maxlen: 48 2a06:cd40:3::/48 maxlen: 48 2a06:cd40:4::/48 maxlen: 48 2a06:cd40:100::/48 maxlen: 48 2a06:cd40:101::/48 maxlen: 64 2a06:cd40:200::/48 maxlen: 48 2a06:cd40:300::/48 maxlen: 64 2a06:cd40:301::/48 maxlen: 64 2a06:cd40:400::/48 maxlen: 48 2a06:cd40:cafe::/48 maxlen: 48 2a06:cd40:caff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ee:40:97:3e:1d:ae:79:c9:0e:9f:4f:84:37:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5336107179715609dca422bc07a098468c529452 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a342d17e20901c3d4b099b61ab6f7d08aa0d653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:90:99:2b:b3:97:bf:13:5b:e0:ac:ef:c8: 32:e5:ec:ec:ec:fa:46:2c:16:3e:53:af:41:d7:5e: 24:7a:f7:66:e5:d1:b9:7f:30:4b:4e:56:9c:98:0b: 64:23:02:75:98:c5:ba:34:2e:18:48:62:77:bd:df: f6:91:c9:1b:da:3f:77:24:3c:4b:5c:92:06:29:82: 72:7d:b3:1d:51:2e:37:59:a6:97:10:18:6a:9b:15: ac:6e:ff:26:27:0a:0f:a9:89:4a:dc:8c:7a:31:52: 28:8c:eb:b6:02:c7:34:4c:16:53:d3:cc:63:1c:2d: b9:c8:b9:2e:82:3f:7f:12:ba:eb:65:ad:89:8d:0e: a0:3b:cc:79:77:7f:e0:82:84:e9:fc:94:92:1f:49: cd:3a:2f:5b:9b:e1:42:2a:be:4e:a7:6f:a2:f6:41: 30:08:8a:b9:ab:69:95:76:b3:bf:6b:26:35:59:bb: a4:0a:e9:94:b2:52:57:ef:a1:9f:7a:17:cc:94:8a: 41:b6:e5:49:dd:4e:8b:b8:a3:a8:0d:36:42:a4:3a: 90:99:b5:55:f1:e3:2c:8a:8c:df:25:5c:cc:61:21: 6b:ab:cf:e9:ea:c5:79:d3:55:7f:fe:27:29:b1:52: 04:ed:aa:36:73:2c:c4:4c:5f:a7:3f:7d:ee:34:50: f8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:34:2D:17:E2:09:01:C3:D4:B0:99:B6:1A:B6:F7:D0:8A:A0:D6:53 X509v3 Authority Key Identifier: keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.128.0/23 46.102.240.0/21 77.81.240.0/21 89.32.144.0/21 89.33.197.0/24 89.45.248.0/21 91.188.224.0/22 92.114.98.0/24 93.113.174.0/24 185.105.32.0/22 185.125.108.0/22 185.199.172.0/22 185.250.104.0/22 188.240.47.0/24 188.241.112.0/21 IPv6: 2a06:cd40:1::-2a06:cd40:4:ffff:ffff:ffff:ffff:ffff 2a06:cd40:100::/47 2a06:cd40:200::/48 2a06:cd40:300::/47 2a06:cd40:400::/48 2a06:cd40:cafe::/47 Signature Algorithm: sha256WithRSAEncryption 5d:2f:38:3a:1c:9d:60:09:2a:f3:e1:9c:e8:b4:64:7c:ad:3b: 5b:ba:89:94:f7:0a:9c:59:52:55:45:73:d0:ac:ba:3f:cb:f7: 3f:46:f6:33:23:49:fc:e5:3a:14:c1:58:9d:74:1a:e2:d0:bb: 37:dc:11:8d:12:98:6b:68:23:f0:68:a4:45:b3:ae:05:4e:f8: 23:9f:75:29:2a:e8:5e:e3:ab:a0:5f:37:6a:e1:93:7e:a3:99: 7f:bf:46:24:b9:88:19:89:47:62:3d:d9:26:8c:49:48:62:5f: b5:a1:54:8d:35:f8:94:d3:45:a0:3e:38:1a:a5:04:a9:ff:84: ae:16:4b:c7:1c:ec:0e:19:d3:86:67:55:bd:90:ac:eb:a3:ea: 57:fa:2b:f8:9e:2e:7f:2c:af:ed:d8:00:71:b6:66:89:58:9b: fc:fe:87:22:6d:dd:83:a4:82:14:16:b3:65:fa:30:c4:10:7f: f9:8e:54:42:17:40:79:27:f6:a2:2a:1f:0a:46:88:8d:47:50: c6:f8:6c:d9:7a:e4:e2:a1:97:a2:f5:95:bf:17:c1:ef:93:0d: e1:8f:bf:15:b2:39:1c:9e:97:07:27:4d:ea:75:32:87:74:30: 5e:b6:d8:6e:1a:b0:b0:b2:ad:6f:31:16:8d:4f:d1:22:c1:8e: 21:a2:4e:b1 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgISAZt26u5Alz4drnnJDp9PhDeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzYxMDcxNzk3MTU2MDlkY2E0MjJiYzA3YTA5ODQ2OGM1 Mjk0NTIwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTM0MmQxN2UyMDkwMWMzZDRiMDk5YjYxYWI2ZjdkMDhhYTBkNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyiQmSuzl78TW+Cs78gy5ezs7PpG LBY+U69B114kevdm5dG5fzBLTlacmAtkIwJ1mMW6NC4YSGJ3vd/2kckb2j93JDxL XJIGKYJyfbMdUS43WaaXEBhqmxWsbv8mJwoPqYlK3Ix6MVIojOu2Asc0TBZT08xj HC25yLkugj9/ErrrZa2JjQ6gO8x5d3/ggoTp/JSSH0nNOi9bm+FCKr5Op2+i9kEw CIq5q2mVdrO/ayY1WbukCumUslJX76GfehfMlIpBtuVJ3U6LuKOoDTZCpDqQmbVV 8eMsiozfJVzMYSFrq8/p6sV501V//icpsVIE7ao2cyzETF+nP33uNFD4SQIDAQAB o4ICqTCCAqUwHQYDVR0OBBYEFHo0LRfiCQHD1LCZthq299CKoNZTMB8GA1UdIwQY MBaAFFM2EHF5cVYJ3KQivAegmEaMUpRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUt ZDE4NjEwMDc1ZWZjLzEvZWpRdEYtSUpBY1BVc0ptMkdyYjMwSXFnMWxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUtZDE4NjEwMDc1ZWZj LzEvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzBgBAIAATBaAwQBLYOA AwQDLmbwAwQDTVHwAwQDWSCQAwQAWSHFAwQDWS34AwQCW7zgAwQAXHJiAwQAXXGu AwQCuWkgAwQCuX1sAwQCucesAwQCufpoAwQAvPAvAwQDvPFwMEcEAgACMEEwEgMH ACoGzUAAAQMHACoGzUAABAMHASoGzUABAAMHACoGzUACAAMHASoGzUADAAMHACoG zUAEAAMHASoGzUDK/jANBgkqhkiG9w0BAQsFAAOCAQEAXS84OhydYAkq8+Gc6LRk fK07W7qJlPcKnFlSVUVz0Ky6P8v3P0b2MyNJ/OU6FMFYnXQa4tC7N9wRjRKYa2gj 8GikRbOuBU74I591KSroXuOroF83auGTfqOZf79GJLmIGYlHYj3ZJoxJSGJftaFU jTX4lNNFoD44GqUEqf+ErhZLxxzsDhnThmdVvZCs66PqV/or+J4ufyyv7dgAcbZm iVib/P6HIm3dg6SCFBazZfowxBB/+Y5UQhdAeSf2oiofCkaIjUdQxvhs2Xrk4qGX ovWVvxfB75MN4Y+/FbI5HJ6XBydN6nUyh3QwXrbYbhqwsLKtbzEWjU/RIsGOIaJO sQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:37 2026 by rpki-client