This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/d45O4HaM6_SjO7mjzjskCZEqjmk.roa File: d45O4HaM6_SjO7mjzjskCZEqjmk.roa (raw, json) Hash identifier: dowO/8l4EITYERynybQUVdaXfcQ3f7HwUklnrHDQVKo= Subject key identifier: 77:8E:4E:E0:76:8C:EB:F4:A3:3B:B9:A3:CE:3B:24:09:91:2A:8E:69 Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019BC5A05A5D93C051085950056BA39D904F Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/d45O4HaM6_SjO7mjzjskCZEqjmk.roa Signing time: Fri 16 Jan 2026 07:06:18 +0000 ROA not before: Fri 16 Jan 2026 07:06:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42473 IP address blocks: 159.195.0.0/24 maxlen: 24 159.195.90.0/24 maxlen: 24 2a0a:4cc0::/43 maxlen: 43 2a0a:4cc0:40::/43 maxlen: 43 2a0a:4cc0:80::/43 maxlen: 43 2a0a:4cc0:c0::/43 maxlen: 43 2a0a:4cc0:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:a0:5a:5d:93:c0:51:08:59:50:05:6b:a3:9d:90:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Jan 16 07:06:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=778e4ee0768cebf4a33bb9a3ce3b2409912a8e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:9a:55:ed:8d:66:bc:96:43:fc:42:c7:6a: 08:4d:cd:42:14:93:4c:33:25:5a:bd:79:f2:bf:0a: 05:bf:69:ea:78:2e:eb:e9:d3:84:5e:d9:1d:39:b1: 99:89:47:76:18:3d:cf:33:08:bd:7d:11:bb:3e:40: 2e:8e:9e:33:82:6a:87:58:72:c7:2a:a3:ac:95:78: 03:0d:52:2a:71:2d:9b:0a:4c:7e:49:44:1a:15:c3: f2:d3:b7:d3:21:49:a0:50:d2:68:fb:13:38:96:e2: fb:20:e0:9e:a8:d7:90:cf:81:06:a6:d4:43:5b:46: e1:a4:fa:c8:18:5d:e0:58:de:a3:80:d3:e5:7b:7b: 38:9c:d8:77:16:9d:06:1f:f8:f8:a5:ef:c3:0e:a5: 66:05:33:f7:bf:fc:23:6d:a6:4d:2d:96:74:b8:12: 2d:d3:48:31:aa:f9:cd:d1:ce:53:c7:75:26:83:51: fd:6f:cc:ad:c1:45:bb:02:4f:5a:fb:fc:c7:d2:e3: 11:ac:30:8e:55:1f:71:f7:a5:1e:87:73:fb:6e:6c: d3:46:a6:c9:25:e7:df:2c:d4:5e:b8:14:e2:51:c8: 55:ca:fa:a9:ad:97:b7:72:80:9a:ce:25:d7:07:1f: e6:cd:9a:76:60:12:82:12:9d:58:1d:87:90:e9:c9: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8E:4E:E0:76:8C:EB:F4:A3:3B:B9:A3:CE:3B:24:09:91:2A:8E:69 X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/d45O4HaM6_SjO7mjzjskCZEqjmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.195.0.0/24 159.195.90.0/24 IPv6: 2a0a:4cc0::/43 2a0a:4cc0:40::/43 2a0a:4cc0:80::/43 2a0a:4cc0:c0::/43 2a0a:4cc0:2000::/48 Signature Algorithm: sha256WithRSAEncryption 53:cd:49:45:d0:44:3b:4c:fc:4c:20:d0:eb:ca:78:c9:d5:95: 25:7f:85:68:0f:33:75:47:15:70:92:9b:3f:a5:03:e4:1b:96: fa:ae:de:5e:84:d1:a8:55:75:83:9b:b7:6d:43:31:b4:78:64: 3e:95:a7:0a:d1:af:ed:7c:2c:17:c6:bc:60:9b:2c:f3:c5:47: 8b:8c:d6:c1:24:d1:fb:99:51:4d:1f:08:1f:63:1f:c1:bc:a7: 96:fa:6c:8d:4e:d0:6d:2c:d6:20:fd:d4:70:b3:7d:c5:d5:b2: 08:7e:36:be:00:0c:54:eb:ab:58:15:5f:b5:d8:c8:a4:13:b5: 2a:3a:e9:63:53:04:55:cb:38:b5:10:2a:9c:e4:df:96:84:71: 95:58:12:54:5a:df:36:18:36:20:4d:3b:9c:fc:97:2a:4a:54: 2a:9e:21:c9:70:72:53:81:7b:9b:38:d2:0f:85:b1:55:a2:d2: be:56:19:4a:14:80:d6:16:93:f3:95:51:9b:1a:7f:17:68:75: 1a:5c:1a:84:11:8b:66:d1:4b:92:a3:14:88:90:09:5b:8e:5a: 39:96:36:8b:06:37:8c:95:60:ab:6b:d7:a4:76:91:d6:a5:f8: 93:27:1b:f7:a4:68:5f:af:b2:48:9c:09:22:e7:4d:d9:23:3f: ef:34:22:6e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZvFoFpdk8BRCFlQBWujnZBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjYwMTE2MDcwNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzhlNGVlMDc2OGNlYmY0YTMzYmI5YTNjZTNiMjQwOTkxMmE4ZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArliaVe2NZryWQ/xCx2oITc1CFJNM MyVavXnyvwoFv2nqeC7r6dOEXtkdObGZiUd2GD3PMwi9fRG7PkAujp4zgmqHWHLH KqOslXgDDVIqcS2bCkx+SUQaFcPy07fTIUmgUNJo+xM4luL7IOCeqNeQz4EGptRD W0bhpPrIGF3gWN6jgNPle3s4nNh3Fp0GH/j4pe/DDqVmBTP3v/wjbaZNLZZ0uBIt 00gxqvnN0c5Tx3Umg1H9b8ytwUW7Ak9a+/zH0uMRrDCOVR9x96Ueh3P7bmzTRqbJ JeffLNReuBTiUchVyvqprZe3coCaziXXBx/mzZp2YBKCEp1YHYeQ6clHowIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFHeOTuB2jOv0ozu5o847JAmRKo5pMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvZDQ1TzRIYU02X1NqTzdtanpqc2tDWkVxam1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTASBAIAATAMAwQAn8MAAwQA n8NaMDMEAgACMC0DBwUqCkzAAAADBwUqCkzAAEADBwUqCkzAAIADBwUqCkzAAMAD BwAqCkzAIAAwDQYJKoZIhvcNAQELBQADggEBAFPNSUXQRDtM/Ewg0OvKeMnVlSV/ hWgPM3VHFXCSmz+lA+Qblvqu3l6E0ahVdYObt21DMbR4ZD6VpwrRr+18LBfGvGCb LPPFR4uM1sEk0fuZUU0fCB9jH8G8p5b6bI1O0G0s1iD91HCzfcXVsgh+Nr4ADFTr q1gVX7XYyKQTtSo66WNTBFXLOLUQKpzk35aEcZVYElRa3zYYNiBNO5z8lypKVCqe IclwclOBe5s40g+FsVWi0r5WGUoUgNYWk/OVUZsafxdodRpcGoQRi2bRS5KjFIiQ CVuOWjmWNosGN4yVYKtr16R2kdal+JMnG/ekaF+vskicCSLnTdkjP+80Im4= -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:55 2026 by rpki-client