This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/angOMGRdc3adpd1I_is4-dwikO4.roa File: angOMGRdc3adpd1I_is4-dwikO4.roa (raw, json) Hash identifier: 9j7afe7OMx1plAaw5QDHW6xfHLrBeH+kUa5ibWgW2WY= Subject key identifier: 6A:78:0E:30:64:5D:73:76:9D:A5:DD:48:FE:2B:38:F9:DC:22:90:EE Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Certificate serial: 019BDF6C669415F94B8D2E9503FDE2FEB659 Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/angOMGRdc3adpd1I_is4-dwikO4.roa Signing time: Wed 21 Jan 2026 07:19:41 +0000 ROA not before: Wed 21 Jan 2026 07:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49223 IP address blocks: 45.14.24.0/22 maxlen: 22 45.90.176.0/22 maxlen: 22 91.243.180.0/22 maxlen: 22 109.108.224.0/19 maxlen: 19 109.108.224.0/20 maxlen: 20 109.108.240.0/20 maxlen: 20 141.98.104.0/22 maxlen: 22 141.138.96.0/19 maxlen: 19 178.74.192.0/18 maxlen: 18 178.74.192.0/19 maxlen: 19 178.74.240.0/20 maxlen: 20 185.16.124.0/22 maxlen: 22 185.43.236.0/22 maxlen: 22 185.59.156.0/22 maxlen: 22 185.77.100.0/22 maxlen: 22 185.86.0.0/22 maxlen: 22 185.119.212.0/22 maxlen: 22 185.146.120.0/22 maxlen: 22 185.181.36.0/22 maxlen: 22 193.106.20.0/22 maxlen: 22 193.148.88.0/22 maxlen: 22 194.37.100.0/22 maxlen: 22 213.226.92.0/22 maxlen: 22 217.30.192.0/20 maxlen: 20 2a04:100::/29 maxlen: 29 2a04:100::/36 maxlen: 36 2a04:100:1000::/36 maxlen: 36 2a04:100:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:6c:66:94:15:f9:4b:8d:2e:95:03:fd:e2:fe:b6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Validity Not Before: Jan 21 07:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a780e30645d73769da5dd48fe2b38f9dc2290ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:40:68:f4:dc:30:c3:b9:4d:3a:19:75:73: 96:11:2e:94:15:b8:73:c6:d5:9a:f1:37:a9:28:b2: 26:8b:5a:d0:ac:09:97:d1:7a:6e:28:15:96:2b:27: 73:61:1e:97:ce:22:4c:be:ba:0a:6e:1d:b1:d9:58: 27:9e:18:c6:8c:8e:53:15:e2:a2:6b:72:0c:62:02: 9a:af:08:18:e8:dd:aa:53:09:c9:b8:15:a0:d0:dc: 96:97:25:8f:66:4c:e0:de:63:2b:56:0b:2d:c6:29: 84:0a:d2:5c:18:2b:6d:7b:96:d4:08:10:06:ec:f9: 87:a3:7b:54:ea:21:f8:4f:e1:f8:40:7b:40:7b:10: e6:fb:73:2e:dd:66:01:68:e0:8b:f9:e4:9e:74:6b: 7f:b5:8c:71:b7:75:9d:22:4a:40:5c:9d:31:32:b2: c8:91:24:b0:c0:d6:04:0d:82:dc:7f:fd:52:04:5a: f5:a3:bc:c4:fa:8d:83:f7:75:14:0f:2c:e5:46:3e: 64:7a:03:1e:20:7b:f3:ea:a7:ff:09:f9:4c:5d:cd: 79:56:89:d1:8b:ab:11:56:f9:c3:77:db:04:a5:9e: ce:64:de:95:06:c9:db:da:85:b5:da:79:8c:dc:e3: f1:39:06:2b:a8:27:16:cf:8a:58:f4:be:70:37:32: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:78:0E:30:64:5D:73:76:9D:A5:DD:48:FE:2B:38:F9:DC:22:90:EE X509v3 Authority Key Identifier: keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/angOMGRdc3adpd1I_is4-dwikO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.24.0/22 45.90.176.0/22 91.243.180.0/22 109.108.224.0/19 141.98.104.0/22 141.138.96.0/19 178.74.192.0/18 185.16.124.0/22 185.43.236.0/22 185.59.156.0/22 185.77.100.0/22 185.86.0.0/22 185.119.212.0/22 185.146.120.0/22 185.181.36.0/22 193.106.20.0/22 193.148.88.0/22 194.37.100.0/22 213.226.92.0/22 217.30.192.0/20 IPv6: 2a04:100::/29 Signature Algorithm: sha256WithRSAEncryption 7f:29:51:d6:d4:b5:e7:a7:99:7b:0f:aa:39:da:fc:7f:db:1c: be:35:9c:00:c0:46:76:72:3d:0e:65:31:1c:27:27:90:30:2c: df:ed:16:3d:62:00:4c:07:38:d6:41:05:dd:91:e3:6a:1c:c6: 78:d5:75:53:e5:95:e6:4f:93:e6:4e:9a:40:b6:86:b8:60:8a: c3:01:2b:bd:b8:47:71:f2:d6:f0:8f:ac:c2:34:38:d1:ac:72: f0:d8:f9:39:91:90:aa:42:d7:08:7b:cd:3f:ed:00:d2:8f:a6: 1e:b6:ca:86:7a:46:fc:79:22:5f:af:41:2f:2c:41:17:2b:29: 18:a1:4a:b7:5d:cc:8e:6a:93:f8:ff:f1:76:5a:05:ac:a7:65: e7:d4:d7:bb:35:41:35:2c:68:66:56:df:c2:57:68:61:cc:cf: 3f:37:82:26:5c:34:50:75:3a:6f:be:01:c0:c1:7d:1f:dd:3e: 78:50:35:52:e2:d1:0a:f7:78:3c:77:b0:48:2d:a4:cf:91:be: 0f:21:b6:28:bc:96:18:85:67:64:c4:00:59:37:8d:da:ad:44: 9c:e6:e6:ea:79:1b:bf:8d:fe:0e:8a:b3:ec:6f:e2:ae:a5:5f: fb:7b:cd:92:fc:b4:dc:3b:0c:5c:13:dc:fa:07:08:74:5a:18: 9f:36:f1:e5 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgISAZvfbGaUFflLjS6VA/3i/rZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiN2NjYjFhNmUzYmNhYjYzMTlkMzE3ZjYyYzc0YmYxZTFm NDE0NzMwHhcNMjYwMTIxMDcxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTc4MGUzMDY0NWQ3Mzc2OWRhNWRkNDhmZTJiMzhmOWRjMjI5MGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5tAaPTcMMO5TToZdXOWES6UFbhz xtWa8TepKLImi1rQrAmX0XpuKBWWKydzYR6XziJMvroKbh2x2VgnnhjGjI5TFeKi a3IMYgKarwgY6N2qUwnJuBWg0NyWlyWPZkzg3mMrVgstximECtJcGCtte5bUCBAG 7PmHo3tU6iH4T+H4QHtAexDm+3Mu3WYBaOCL+eSedGt/tYxxt3WdIkpAXJ0xMrLI kSSwwNYEDYLcf/1SBFr1o7zE+o2D93UUDyzlRj5kegMeIHvz6qf/CflMXc15VonR i6sRVvnDd9sEpZ7OZN6VBsnb2oW12nmM3OPxOQYrqCcWz4pY9L5wNzKpCQIDAQAB o4ICjTCCAokwHQYDVR0OBBYEFGp4DjBkXXN2naXdSP4rOPncIpDuMB8GA1UdIwQY MBaAFLt8yxpuO8q2MZ0xf2LHS/Hh9BRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMt NjRiMGU2MTRkMDA0LzEvYW5nT01HUmRjM2FkcGQxSV9pczQtZHdpa080LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMtNjRiMGU2MTRkMDA0 LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzB+BAIAATB4AwQCLQ4Y AwQCLVqwAwQCW/O0AwQFbWzgAwQCjWJoAwQFjYpgAwQGskrAAwQCuRB8AwQCuSvs AwQCuTucAwQCuU1kAwQCuVYAAwQCuXfUAwQCuZJ4AwQCubUkAwQCwWoUAwQCwZRY AwQCwiVkAwQC1eJcAwQE2R7AMA0EAgACMAcDBQMqBAEAMA0GCSqGSIb3DQEBCwUA A4IBAQB/KVHW1LXnp5l7D6o52vx/2xy+NZwAwEZ2cj0OZTEcJyeQMCzf7RY9YgBM BzjWQQXdkeNqHMZ41XVT5ZXmT5PmTppAtoa4YIrDASu9uEdx8tbwj6zCNDjRrHLw 2Pk5kZCqQtcIe80/7QDSj6YetsqGekb8eSJfr0EvLEEXKykYoUq3XcyOapP4//F2 WgWsp2Xn1Ne7NUE1LGhmVt/CV2hhzM8/N4ImXDRQdTpvvgHAwX0f3T54UDVS4tEK 93g8d7BILaTPkb4PIbYovJYYhWdkxABZN43arUSc5ubqeRu/jf4OirPsb+KupV/7 e82S/LTcOwxcE9z6Bwh0WhifNvHl -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:45 2026 by rpki-client