This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/2F897qCWvfh11SUzKWZ5JUV2vMs.roa File: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (raw, json) Hash identifier: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0= Subject key identifier: D8:5F:3D:EE:A0:96:BD:F8:75:D5:25:33:29:66:79:25:45:76:BC:CB Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7C61A2159F4D2B8A4B40BE1FB64D1 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/2F897qCWvfh11SUzKWZ5JUV2vMs.roa Signing time: Thu 01 Jan 2026 18:17:51 +0000 ROA not before: Thu 01 Jan 2026 18:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 932 IP address blocks: 45.128.146.0/23 maxlen: 24 45.131.179.0/24 maxlen: 24 45.132.238.0/23 maxlen: 24 45.133.238.0/23 maxlen: 24 45.134.82.0/23 maxlen: 24 45.135.118.0/23 maxlen: 24 45.137.10.0/23 maxlen: 24 45.140.90.0/23 maxlen: 24 91.217.162.0/24 maxlen: 24 91.238.203.0/24 maxlen: 24 91.238.207.0/24 maxlen: 24 185.106.176.0/22 maxlen: 24 193.200.130.0/24 maxlen: 24 193.200.134.0/24 maxlen: 24 193.200.149.0/24 maxlen: 24 193.200.152.0/24 maxlen: 24 193.227.103.0/24 maxlen: 24 193.227.109.0/24 maxlen: 24 2a06:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c6:1a:21:59:f4:d2:b8:a4:b4:0b:e1:fb:64:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d85f3deea096bdf875d52533296679254576bccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:7c:03:ca:59:52:8a:d3:7c:c4:af:85:f2: 06:f1:00:a9:9a:7e:79:e2:86:5a:41:94:3b:6f:6c: 7d:f0:33:39:9f:5e:e5:ae:e0:18:97:8b:30:86:bc: a3:fa:8c:33:d2:2a:47:ef:cf:3b:35:c6:be:30:b2: 28:f6:ca:51:33:7c:91:45:98:7e:dc:00:b5:67:83: ae:76:88:99:aa:e5:63:39:75:80:4c:f4:3b:57:73: 8f:6b:c2:ea:63:aa:78:ef:e7:89:da:81:41:36:6d: 63:11:dc:07:75:1b:cb:b6:df:96:f0:5c:fa:11:85: 15:12:94:92:28:66:3d:d8:ae:1c:6e:5f:e6:1a:2c: da:df:32:ba:dd:e1:bc:c2:81:7d:d3:a1:d8:79:5b: a6:e8:a3:ff:31:d4:34:7e:14:ac:0e:3b:ef:e6:45: 17:d7:f3:95:74:31:8d:be:8d:96:b1:1a:d8:3b:ed: 23:aa:1b:3d:57:84:30:28:73:49:ab:6f:03:e8:02: b9:1d:bd:0c:df:ff:dc:4f:59:ed:c8:ec:4a:8b:0e: 7d:c2:1b:56:db:5c:c7:cc:76:99:eb:4b:df:82:4d: d4:48:8e:5a:6b:e3:1b:fa:ed:f5:67:93:8f:f4:a8: 4a:9d:9a:ce:3a:db:d6:0c:c9:14:bf:28:8a:d8:38: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5F:3D:EE:A0:96:BD:F8:75:D5:25:33:29:66:79:25:45:76:BC:CB X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/2F897qCWvfh11SUzKWZ5JUV2vMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.146.0/23 45.131.179.0/24 45.132.238.0/23 45.133.238.0/23 45.134.82.0/23 45.135.118.0/23 45.137.10.0/23 45.140.90.0/23 91.217.162.0/24 91.238.203.0/24 91.238.207.0/24 185.106.176.0/22 193.200.130.0/24 193.200.134.0/24 193.200.149.0/24 193.200.152.0/24 193.227.103.0/24 193.227.109.0/24 IPv6: 2a06:5040::/48 Signature Algorithm: sha256WithRSAEncryption bd:27:80:29:69:3c:36:90:98:5b:d4:26:58:62:d5:bf:37:1a: 0f:80:3e:4f:70:01:3f:4d:b4:8e:d9:24:62:84:92:47:33:14: 0c:5d:5c:f9:9d:e7:ac:8a:f4:3b:e2:15:56:e2:ee:1d:6e:e2: 0f:17:62:c2:33:b4:0e:f5:45:32:0c:28:32:4c:89:cf:8a:45: 21:e1:c3:d8:17:ad:b8:1e:2d:bb:03:da:5a:d5:19:de:7c:8a: 7d:b5:b3:12:01:ba:f8:67:89:97:61:37:95:fb:68:87:70:a8: c2:de:88:ba:de:52:cb:6b:f5:1b:b6:a0:7b:09:f5:ca:65:00: f4:fa:fd:ea:0d:a7:c3:62:e7:72:aa:b1:a6:40:ee:c9:f2:af: 5d:63:e0:02:1e:a7:4a:85:d8:5c:55:f4:d6:c9:18:fa:44:55: a5:b5:bd:83:49:70:00:eb:14:ec:c9:ca:91:19:9f:31:7e:b5: 76:37:02:bc:c9:0e:a2:5e:ca:c9:71:34:37:e5:d9:96:e9:02: cb:ac:10:71:fd:0a:ab:d7:af:22:86:e3:85:3d:c7:b8:66:50: ae:0c:50:4a:6b:76:01:91:10:3a:84:a4:9e:b0:fc:29:f9:0f: 3e:53:50:87:b4:c6:77:4b:be:2a:1b:43:7b:da:87:06:79:dc: 98:07:d6:5e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt6x8YaIVn00riktAvh+2TRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODVmM2RlZWEwOTZiZGY4NzVkNTI1MzMyOTY2NzkyNTQ1NzZiY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdp8A8pZUorTfMSvhfIG8QCpmn55 4oZaQZQ7b2x98DM5n17lruAYl4swhryj+owz0ipH7887Nca+MLIo9spRM3yRRZh+ 3AC1Z4OudoiZquVjOXWATPQ7V3OPa8LqY6p47+eJ2oFBNm1jEdwHdRvLtt+W8Fz6 EYUVEpSSKGY92K4cbl/mGiza3zK63eG8woF906HYeVum6KP/MdQ0fhSsDjvv5kUX 1/OVdDGNvo2WsRrYO+0jqhs9V4QwKHNJq28D6AK5Hb0M3//cT1ntyOxKiw59whtW 21zHzHaZ60vfgk3USI5aa+Mb+u31Z5OP9KhKnZrOOtvWDMkUvyiK2DjSVQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFNhfPe6glr34ddUlMylmeSVFdrzLMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvMkY4OTdxQ1d2ZmgxMVNVektXWjVKVVYydk1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTByBAIAATBsAwQBLYCS AwQALYOzAwQBLYTuAwQBLYXuAwQBLYZSAwQBLYd2AwQBLYkKAwQBLYxaAwQAW9mi AwQAW+7LAwQAW+7PAwQCuWqwAwQAwciCAwQAwciGAwQAwciVAwQAwciYAwQAweNn AwQAweNtMA8EAgACMAkDBwAqBlBAAAAwDQYJKoZIhvcNAQELBQADggEBAL0ngClp PDaQmFvUJlhi1b83Gg+APk9wAT9NtI7ZJGKEkkczFAxdXPmd56yK9DviFVbi7h1u 4g8XYsIztA71RTIMKDJMic+KRSHhw9gXrbgeLbsD2lrVGd58in21sxIBuvhniZdh N5X7aIdwqMLeiLreUstr9Ru2oHsJ9cplAPT6/eoNp8Ni53KqsaZA7snyr11j4AIe p0qF2FxV9NbJGPpEVaW1vYNJcADrFOzJypEZnzF+tXY3ArzJDqJeyslxNDfl2Zbp AsusEHH9CqvXryKG44U9x7hmUK4MUEprdgGREDqEpJ6w/Cn5Dz5TUIe0xndLviob Q3vahwZ53JgH1l4= -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:29 2026 by rpki-client