This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa File: dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa (raw, json) Hash identifier: l+RlXCW7RTqPoNsvx1EDw/ugEa8VniO9ekXCbH/csAk= Subject key identifier: 74:1A:AF:39:A8:3B:56:7E:92:30:7E:7E:45:1A:AC:2D:71:D7:86:F0 Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d Certificate serial: 019B7CEDDB78A01917789A3751EF80C86C6A Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206996 IP address blocks: 45.156.84.0/24 maxlen: 24 45.156.85.0/24 maxlen: 24 185.150.25.0/24 maxlen: 24 194.62.1.0/24 maxlen: 24 194.62.29.0/24 maxlen: 24 194.62.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:db:78:a0:19:17:78:9a:37:51:ef:80:c8:6c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=741aaf39a83b567e92307e7e451aac2d71d786f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:3a:fc:01:fb:bf:8d:7e:b2:6f:66:f6:58: b0:a6:5c:a1:d6:e1:62:d3:7a:6c:dd:b1:68:a8:92: bb:76:97:84:1b:18:2e:00:d9:b4:0a:24:db:d1:28: e6:ca:70:8b:6e:ad:87:b0:63:9d:e5:9c:62:60:0d: ad:b5:47:db:03:b6:c8:41:83:8f:4a:f3:02:4e:e7: a8:b5:34:77:80:cd:e0:8c:d0:e1:0c:20:6c:b9:59: 25:a6:98:af:31:03:6a:f1:84:81:a8:22:c3:f1:93: 83:56:ba:a8:83:12:dc:3a:36:af:24:ff:7d:6d:d5: 4e:86:45:bf:bc:eb:aa:d2:08:7b:1d:36:17:3e:18: 2f:95:d5:04:b4:ab:2c:2c:3c:5d:2e:1d:72:a3:fc: 5d:a1:3a:94:73:3b:ca:77:3f:59:cc:f6:01:49:15: 1b:33:db:c0:3a:c8:0f:06:f6:de:c7:fa:27:9c:0a: 3f:40:dd:a6:07:45:9d:2b:eb:9b:18:cd:9c:11:73: f3:f5:e5:0b:8c:dd:90:f0:d6:20:b6:4f:ad:ca:57: e8:b1:df:64:ae:c3:f2:c4:a6:93:b5:78:80:da:e0: b2:5b:7c:0b:a9:4b:8e:cf:b0:50:1a:95:a0:45:9e: ff:ca:4a:fa:52:9a:80:d8:2b:64:20:bf:89:a7:ff: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1A:AF:39:A8:3B:56:7E:92:30:7E:7E:45:1A:AC:2D:71:D7:86:F0 X509v3 Authority Key Identifier: keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.84.0/23 185.150.25.0/24 194.62.1.0/24 194.62.29.0/24 194.62.157.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:f7:e3:0e:00:7f:63:50:24:fc:bc:d6:b6:cf:0a:4c:6c:c9: 04:79:b9:f0:21:c8:aa:0a:82:78:b3:bb:03:5b:4f:b7:a1:b5: 4c:6b:e4:52:c1:80:8d:96:5c:38:e8:29:3a:1c:09:b3:07:c1: cb:fd:0d:81:b9:db:c7:ff:3e:a5:9b:30:f9:17:ac:01:4e:0b: f0:04:60:41:75:31:75:d5:d7:b1:80:73:b3:c8:28:aa:f2:d1: 9a:98:d9:c7:62:06:f6:5f:27:03:9e:bf:23:32:81:89:e0:8a: 70:ee:e8:d8:2b:6e:3c:b2:71:e7:1d:99:13:8a:af:33:3e:63: c0:8d:81:7e:ba:59:c9:a6:85:ff:21:fb:17:21:4c:fe:29:ff: ba:cb:87:c8:ee:b7:5a:2e:c0:31:b0:00:14:cd:a7:d7:8d:b7: 5d:45:7f:60:08:7d:f3:20:e1:01:d2:4e:22:a2:46:61:90:ee: 9b:4f:c5:80:59:0b:65:7e:fb:86:e9:07:c7:a4:d1:b5:39:73: cb:5b:7a:0d:f5:cc:15:25:bc:fd:d7:9c:cf:7d:54:48:67:8f: 6e:d9:57:b7:91:68:fd:3a:ef:10:7a:bf:57:8c:9b:f8:ed:6a: 52:27:22:1b:9c:9e:d2:6b:02:e0:03:de:37:c8:e4:e0:63:dc: 7b:44:80:fd -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt87dt4oBkXeJo3Ue+AyGxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4 MzYzNmQwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDFhYWYzOWE4M2I1NjdlOTIzMDdlN2U0NTFhYWMyZDcxZDc4NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIc6/AH7v41+sm9m9liwplyh1uFi 03ps3bFoqJK7dpeEGxguANm0CiTb0SjmynCLbq2HsGOd5ZxiYA2ttUfbA7bIQYOP SvMCTueotTR3gM3gjNDhDCBsuVklppivMQNq8YSBqCLD8ZODVrqogxLcOjavJP99 bdVOhkW/vOuq0gh7HTYXPhgvldUEtKssLDxdLh1yo/xdoTqUczvKdz9ZzPYBSRUb M9vAOsgPBvbex/onnAo/QN2mB0WdK+ubGM2cEXPz9eULjN2Q8NYgtk+tylfosd9k rsPyxKaTtXiA2uCyW3wLqUuOz7BQGpWgRZ7/ykr6UpqA2CtkIL+Jp/98TQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHQarzmoO1Z+kjB+fkUarC1x14bwMB8GA1UdIwQY MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt NjVhNDZjOGU0MWU5LzEvZEJxdk9hZzdWbjZTTUg1LVJScXNMWEhYaHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5 LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLZxUAwQA uZYZAwQAwj4BAwQAwj4dAwQAwj6dMA0GCSqGSIb3DQEBCwUAA4IBAQBL9+MOAH9j UCT8vNa2zwpMbMkEebnwIciqCoJ4s7sDW0+3obVMa+RSwYCNllw46Ck6HAmzB8HL /Q2BudvH/z6lmzD5F6wBTgvwBGBBdTF11dexgHOzyCiq8tGamNnHYgb2XycDnr8j MoGJ4Ipw7ujYK248snHnHZkTiq8zPmPAjYF+ulnJpoX/IfsXIUz+Kf+6y4fI7rda LsAxsAAUzafXjbddRX9gCH3zIOEB0k4iokZhkO6bT8WAWQtlfvuG6QfHpNG1OXPL W3oN9cwVJbz915zPfVRIZ49u2Ve3kWj9Ou8Qer9XjJv47WpSJyIbnJ7SawLgA943 yOTgY9x7RID9 -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:48 2026 by rpki-client