This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RIeAMH2m47hI28tBL0938GuzqwU.roa File: RIeAMH2m47hI28tBL0938GuzqwU.roa (raw, json) Hash identifier: dVsUjibxqlZf7zzswIwaSrojSLKsKe4s/oH8/A+Q5J4= Subject key identifier: 44:87:80:30:7D:A6:E3:B8:48:DB:CB:41:2F:4F:77:F0:6B:B3:AB:05 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758DEC2F7FD7380B0177963F1639D2C Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RIeAMH2m47hI28tBL0938GuzqwU.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56382 IP address blocks: 45.152.124.0/24 maxlen: 24 45.152.125.0/24 maxlen: 24 45.152.126.0/24 maxlen: 24 45.152.127.0/24 maxlen: 24 194.5.96.0/24 maxlen: 24 2a0f:5700::/32 maxlen: 48 2a0f:5700:1220::/44 maxlen: 44 2a0f:5700:fe80::/48 maxlen: 48 2a0f:5701:1220::/44 maxlen: 44 2a0f:5701:fe01::/48 maxlen: 48 2a0f:5701:fe80::/48 maxlen: 48 2a0f:5702::/32 maxlen: 48 2a0f:5707:1220::/44 maxlen: 44 2a0f:5707:aa80::/44 maxlen: 48 2a0f:5707:ab80::/44 maxlen: 48 2a0f:5707:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:de:c2:f7:fd:73:80:b0:17:79:63:f1:63:9d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=448780307da6e3b848dbcb412f4f77f06bb3ab05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:21:d8:c8:ab:54:16:1b:36:13:28:d3:5c:d7: 49:3f:57:2e:de:0d:88:1c:7d:5f:40:b0:30:82:7c: 72:cc:4f:86:c8:75:51:27:b0:45:b7:55:b7:59:27: 78:4b:29:fa:09:36:4c:bc:2d:2d:e2:f0:c3:30:a3: 95:f8:86:e1:6c:46:f2:e4:a7:6d:58:e8:9c:87:80: 3c:ac:91:2a:ff:80:ee:b8:36:21:cd:8a:e1:a7:d5: 2a:99:aa:58:bb:49:7e:b4:80:00:24:1e:f1:5d:d6: fd:66:3d:a7:62:f8:8b:db:e0:9e:f6:35:09:d0:88: 4c:29:0e:b0:5c:46:2e:c7:97:ce:88:e7:cb:a9:21: d0:1f:5c:61:18:3f:bb:39:c1:88:ed:b1:98:19:83: ed:5a:bb:2f:05:8d:b1:e0:11:09:44:e2:27:12:3d: ef:1a:3f:3d:95:bb:81:73:3a:15:4e:8d:7d:53:9e: f2:87:e5:c5:b4:4e:83:dc:50:e1:4d:b1:08:99:fd: df:3f:1a:1e:c4:eb:6c:17:d7:4b:2b:17:5e:45:8a: 92:11:95:99:e7:1a:74:e6:33:0c:57:88:25:ab:52: 56:fb:16:98:eb:55:f1:42:19:14:23:f5:33:47:0e: ba:d8:ef:00:df:9c:40:c9:d8:0a:b8:da:5a:16:72: e5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:87:80:30:7D:A6:E3:B8:48:DB:CB:41:2F:4F:77:F0:6B:B3:AB:05 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RIeAMH2m47hI28tBL0938GuzqwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.124.0/22 194.5.96.0/24 IPv6: 2a0f:5700::/32 2a0f:5701:1220::/44 2a0f:5701:fe01::/48 2a0f:5701:fe80::/48 2a0f:5702::/32 2a0f:5707:1220::/44 2a0f:5707:aa80::/44 2a0f:5707:ab80::/44 2a0f:5707:ffff::/48 Signature Algorithm: sha256WithRSAEncryption a7:f8:54:7a:b9:55:5a:1b:4c:b8:3e:a4:d8:ab:5b:29:6e:4e: 27:03:7c:74:49:c0:a3:a4:63:09:79:f8:79:ec:45:2e:30:65: 67:04:a4:a3:05:77:d1:df:54:31:5d:17:31:4b:1f:25:da:c7: da:82:cc:3a:1a:c8:43:bb:17:f4:be:56:00:a4:42:4a:75:2a: 31:72:b0:a7:44:4d:61:93:4b:a2:e9:dd:02:88:56:be:2c:81: 25:18:78:9e:c5:81:c3:0a:12:61:fe:1a:ad:d5:16:84:ff:fe: 79:d8:8d:62:ef:12:0c:83:6c:e2:0a:81:ac:7d:ec:d2:41:e7: 45:68:f2:68:e6:80:d0:ee:9b:90:32:67:c3:b7:56:4c:ac:fb: 5c:e3:62:50:9d:ff:cf:6a:17:2a:a9:cc:58:a5:17:22:1a:2e: 64:39:50:db:f6:df:4e:ac:0f:73:08:18:15:54:6e:e7:94:0c: 02:38:6e:1a:b9:59:c3:6f:e5:02:0e:58:a0:6d:9a:65:19:3f: 96:d8:f5:da:00:67:f1:70:df:3a:0b:db:43:72:03:bd:ec:fd: 5d:6d:6f:04:ce:fd:ad:19:fa:1b:eb:be:2f:85:95:aa:22:6d: e4:69:84:32:68:1d:52:85:e6:ef:db:e7:c3:9b:e7:3b:67:d2: e0:8b:8a:d0 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZt3WN7C9/1zgLAXeWPxY50sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDg3ODAzMDdkYTZlM2I4NDhkYmNiNDEyZjRmNzdmMDZiYjNhYjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCHYyKtUFhs2EyjTXNdJP1cu3g2I HH1fQLAwgnxyzE+GyHVRJ7BFt1W3WSd4Syn6CTZMvC0t4vDDMKOV+IbhbEby5Kdt WOich4A8rJEq/4DuuDYhzYrhp9UqmapYu0l+tIAAJB7xXdb9Zj2nYviL2+Ce9jUJ 0IhMKQ6wXEYux5fOiOfLqSHQH1xhGD+7OcGI7bGYGYPtWrsvBY2x4BEJROInEj3v Gj89lbuBczoVTo19U57yh+XFtE6D3FDhTbEImf3fPxoexOtsF9dLKxdeRYqSEZWZ 5xp05jMMV4glq1JW+xaY61XxQhkUI/UzRw662O8A35xAydgKuNpaFnLlGQIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFESHgDB9puO4SNvLQS9Pd/Brs6sFMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvUkllQU1IMm00N2hJMjh0QkwwOTM4R3V6cXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTASBAIAATAMAwQCLZh8AwQA wgVgMFMEAgACME0DBQAqD1cAAwcEKg9XARIgAwcAKg9XAf4BAwcAKg9XAf6AAwUA Kg9XAgMHBCoPVwcSIAMHBCoPVweqgAMHBCoPVwergAMHACoPVwf//zANBgkqhkiG 9w0BAQsFAAOCAQEAp/hUerlVWhtMuD6k2KtbKW5OJwN8dEnAo6RjCXn4eexFLjBl ZwSkowV30d9UMV0XMUsfJdrH2oLMOhrIQ7sX9L5WAKRCSnUqMXKwp0RNYZNLound AohWviyBJRh4nsWBwwoSYf4ardUWhP/+ediNYu8SDINs4gqBrH3s0kHnRWjyaOaA 0O6bkDJnw7dWTKz7XONiUJ3/z2oXKqnMWKUXIhouZDlQ2/bfTqwPcwgYFVRu55QM AjhuGrlZw2/lAg5YoG2aZRk/ltj12gBn8XDfOgvbQ3IDvez9XW1vBM79rRn6G+u+ L4WVqiJt5GmEMmgdUoXm79vnw5vnO2fS4IuK0A== -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:29 2026 by rpki-client