This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/SLt04H5KmH3Vrs5wkvZpWnGiha0.roa File: SLt04H5KmH3Vrs5wkvZpWnGiha0.roa (raw, json) Hash identifier: G9GxEVefW947uRK0BuK6mQqyb0vu3oxfGtbziIUIJQw= Subject key identifier: 48:BB:74:E0:7E:4A:98:7D:D5:AE:CE:70:92:F6:69:5A:71:A2:85:AD Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019B7FF23DB34B4F4DBAA49B55054C9AF0ED Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/SLt04H5KmH3Vrs5wkvZpWnGiha0.roa Signing time: Fri 02 Jan 2026 18:22:20 +0000 ROA not before: Fri 02 Jan 2026 18:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50131 IP address blocks: 37.72.132.0/24 maxlen: 32 45.142.156.0/24 maxlen: 32 45.142.157.0/24 maxlen: 32 45.142.158.0/23 maxlen: 32 45.145.72.0/23 maxlen: 32 45.145.74.0/23 maxlen: 32 45.150.164.0/22 maxlen: 32 45.150.226.0/23 maxlen: 32 45.151.132.0/22 maxlen: 32 45.154.212.0/22 maxlen: 32 62.204.54.0/24 maxlen: 32 91.246.39.0/24 maxlen: 24 94.154.114.0/24 maxlen: 32 146.19.114.0/24 maxlen: 32 146.19.223.0/24 maxlen: 32 176.116.1.0/24 maxlen: 32 178.22.30.0/24 maxlen: 32 188.93.139.0/24 maxlen: 32 193.218.200.0/23 maxlen: 32 193.221.94.0/23 maxlen: 32 194.124.218.0/23 maxlen: 32 194.124.224.0/23 maxlen: 32 194.147.98.0/23 maxlen: 32 194.147.100.0/23 maxlen: 32 212.18.111.0/24 maxlen: 32 217.114.47.0/24 maxlen: 32 2a0e:da40:4000::/34 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:3d:b3:4b:4f:4d:ba:a4:9b:55:05:4c:9a:f0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jan 2 18:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48bb74e07e4a987dd5aece7092f6695a71a285ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:b9:22:ee:10:12:d3:aa:8f:98:86:bc:da: 03:9d:f3:e2:18:d2:68:75:a3:0b:b4:33:8d:a5:52: 5e:a1:66:63:22:d5:f5:9f:69:6c:b7:d1:84:3b:9a: 90:39:5f:76:20:cf:1c:41:24:a5:74:ba:8e:51:06: d5:3f:77:74:cd:4a:6f:76:6a:16:f2:7e:e4:ff:27: 74:9a:5a:a5:6b:15:9d:7e:89:fb:b2:9d:23:6c:84: fe:42:80:79:e0:4c:a9:11:80:9a:14:61:6a:36:63: 6b:0f:43:1c:33:cb:86:d6:b7:f6:8a:59:05:a7:d3: 07:23:ae:d6:41:7e:6c:89:73:4f:ec:97:37:cd:6a: 62:24:6e:03:cb:4e:3c:38:b4:44:5b:6a:0b:bc:29: 13:98:7e:7d:48:ed:ce:0f:5d:08:c8:e3:b2:07:91: 79:0f:15:4a:a2:3a:10:27:9b:db:31:ba:a4:63:96: 1e:a2:bb:31:fb:73:41:a7:98:d9:40:cd:62:e0:c9: ae:89:33:50:54:17:93:b2:ff:f0:e8:74:c5:65:76: 7b:0f:19:ac:13:3f:e6:68:bf:60:90:00:dc:db:5c: b6:ce:3f:0c:cd:da:0d:a4:62:6f:e1:11:d9:5d:07: 06:dd:b8:42:10:1c:e5:f6:88:19:2b:21:bf:c2:ed: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BB:74:E0:7E:4A:98:7D:D5:AE:CE:70:92:F6:69:5A:71:A2:85:AD X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/SLt04H5KmH3Vrs5wkvZpWnGiha0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.132.0/24 45.142.156.0/22 45.145.72.0/22 45.150.164.0/22 45.150.226.0/23 45.151.132.0/22 45.154.212.0/22 62.204.54.0/24 91.246.39.0/24 94.154.114.0/24 146.19.114.0/24 146.19.223.0/24 176.116.1.0/24 178.22.30.0/24 188.93.139.0/24 193.218.200.0/23 193.221.94.0/23 194.124.218.0/23 194.124.224.0/23 194.147.98.0-194.147.101.255 212.18.111.0/24 217.114.47.0/24 IPv6: 2a0e:da40:4000::/34 Signature Algorithm: sha256WithRSAEncryption b7:85:aa:91:46:02:63:f6:2e:c2:ab:28:ea:67:22:88:3e:d3: c3:04:a6:90:63:ba:82:81:90:5f:d9:19:0c:49:88:75:a3:e0: 6b:58:43:8f:c0:07:97:e9:2a:c8:f2:40:ef:21:ae:ed:ad:92: 18:65:a1:52:e7:21:1b:0b:97:14:78:62:15:b5:ca:03:84:10: b3:c1:fd:70:e8:96:ba:a1:a8:96:10:5e:5f:93:31:a5:48:ab: 5c:5b:26:f0:af:ef:8d:d0:e4:46:ee:b8:a3:10:79:1a:9b:a3: 0b:e4:46:b7:e0:00:a7:dc:41:5c:df:f2:8b:d0:5c:f1:01:26: 05:98:15:b7:7a:ff:c2:0f:59:97:94:42:57:f9:22:72:db:8c: 55:40:4f:9a:9f:4e:fc:32:aa:0e:3b:e7:1d:f3:8f:58:d0:51: 96:ab:52:b2:c0:77:9f:fd:ee:92:71:18:92:eb:5f:02:f1:1e: 35:fd:d8:3f:91:7a:59:5c:88:ed:17:33:22:58:35:6f:31:28: 6a:5e:e4:4f:e1:e2:b5:fc:36:6b:e2:fe:3e:70:b0:bc:63:63: a0:6f:ed:2a:c1:c5:23:3c:2e:d1:24:39:fe:89:61:2f:35:31: 98:2f:96:64:27:ea:6c:ff:2a:90:2f:76:75:07:0b:a8:33:5f: 80:e2:50:a3 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt/8j2zS09NuqSbVQVMmvDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMTAyMTgyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGJiNzRlMDdlNGE5ODdkZDVhZWNlNzA5MmY2Njk1YTcxYTI4NWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshu5Iu4QEtOqj5iGvNoDnfPiGNJo daMLtDONpVJeoWZjItX1n2lst9GEO5qQOV92IM8cQSSldLqOUQbVP3d0zUpvdmoW 8n7k/yd0mlqlaxWdfon7sp0jbIT+QoB54EypEYCaFGFqNmNrD0McM8uG1rf2ilkF p9MHI67WQX5siXNP7Jc3zWpiJG4Dy048OLREW2oLvCkTmH59SO3OD10IyOOyB5F5 DxVKojoQJ5vbMbqkY5Yeorsx+3NBp5jZQM1i4MmuiTNQVBeTsv/w6HTFZXZ7Dxms Ez/maL9gkADc21y2zj8MzdoNpGJv4RHZXQcG3bhCEBzl9ogZKyG/wu2xGQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFEi7dOB+Sph91a7OcJL2aVpxooWtMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvU0x0MDRINUttSDNWcnM1d2t2WnBXbkdpaGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBkwQCAAEwgYwDBAAl SIQDBAItjpwDBAItkUgDBAItlqQDBAEtluIDBAItl4QDBAItmtQDBAA+zDYDBABb 9icDBABemnIDBACSE3IDBACSE98DBACwdAEDBACyFh4DBAC8XYsDBAHB2sgDBAHB 3V4DBAHCfNoDBAHCfOAwDAMEAcKTYgMEAcKTZAMEANQSbwMEANlyLzAOBAIAAjAI AwYGKg7aQEAwDQYJKoZIhvcNAQELBQADggEBALeFqpFGAmP2LsKrKOpnIog+08ME ppBjuoKBkF/ZGQxJiHWj4GtYQ4/AB5fpKsjyQO8hru2tkhhloVLnIRsLlxR4YhW1 ygOEELPB/XDolrqhqJYQXl+TMaVIq1xbJvCv743Q5EbuuKMQeRqbowvkRrfgAKfc QVzf8ovQXPEBJgWYFbd6/8IPWZeUQlf5InLbjFVAT5qfTvwyqg475x3zj1jQUZar UrLAd5/97pJxGJLrXwLxHjX92D+RellciO0XMyJYNW8xKGpe5E/h4rX8Nmvi/j5w sLxjY6Bv7SrBxSM8LtEkOf6JYS81MZgvlmQn6mz/KpAvdnUHC6gzX4DiUKM= -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:24 2026 by rpki-client