This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa File: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (raw, json) Hash identifier: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U= Subject key identifier: 52:DD:54:21:95:ED:BC:6B:C0:F2:3A:9F:8C:AC:7E:CE:84:AC:4A:69 Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Certificate serial: 019B7C13323B481EEE653639BD4E34D5BD4B Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203244 IP address blocks: 45.80.85.0/24 maxlen: 24 45.80.86.0/24 maxlen: 24 45.80.87.0/24 maxlen: 24 177.8.68.0/24 maxlen: 24 185.140.216.0/22 maxlen: 24 185.246.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:32:3b:48:1e:ee:65:36:39:bd:4e:34:d5:bd:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52dd542195edbc6bc0f23a9f8cac7ece84ac4a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:9a:5f:d8:d2:1b:38:18:b9:53:8a:e9:12: cf:d3:e2:bc:fc:65:6c:84:c2:aa:7a:92:1e:ad:b9: 7a:61:54:e2:43:d3:52:95:39:0d:b6:4f:c4:6d:6a: e3:7b:32:5e:62:4a:8b:3c:60:a9:36:f5:93:71:e5: 47:38:8a:65:f4:b2:f4:be:09:07:28:60:c4:88:60: bb:d3:05:5f:35:86:20:fd:b2:23:05:f5:b0:77:d5: d3:fc:23:c0:14:00:23:0d:01:6f:9d:f4:db:2b:01: 74:66:bb:a6:11:45:93:11:c6:38:f4:c0:40:c2:de: e6:4a:f8:8f:0c:14:41:d9:88:aa:ba:3f:9a:af:52: f2:17:7a:d2:ba:7f:28:09:73:fc:63:99:cd:03:5d: 11:87:3a:d7:f2:a4:e0:85:8d:53:69:ec:e0:49:fc: 1a:66:2d:f3:be:b0:8f:34:42:c0:32:ec:cd:d9:46: 9a:be:70:74:3c:32:c8:7b:21:71:ac:38:ba:18:67: b6:62:5c:9c:ad:07:5d:10:70:40:de:12:81:05:c9: 18:47:be:de:f5:a2:01:8f:20:cc:ff:1d:41:6a:9f: df:3b:4b:8b:cf:b4:f8:fd:be:9e:6a:8d:0b:15:f3: 87:e7:df:1e:82:9c:dc:d2:46:ed:d9:97:e8:de:f4: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DD:54:21:95:ED:BC:6B:C0:F2:3A:9F:8C:AC:7E:CE:84:AC:4A:69 X509v3 Authority Key Identifier: keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.85.0-45.80.87.255 177.8.68.0/24 185.140.216.0/22 185.246.196.0/22 Signature Algorithm: sha256WithRSAEncryption 12:4d:6f:b8:4c:c2:2e:3a:28:85:f5:51:c5:98:cf:89:de:16: 64:cd:60:3b:98:b8:a7:7f:ef:2b:07:1b:d6:59:fa:fc:9a:34: fa:81:80:7e:9f:30:3f:14:9a:7f:8c:bb:a9:d3:f0:d2:e9:2a: 0a:70:9c:a7:79:7d:ce:ae:6c:b2:56:68:38:1b:8e:51:6e:68: 3e:72:f9:6c:38:1c:b3:e4:69:eb:82:6c:73:d0:a0:6e:43:e8: 1e:88:9c:20:90:6b:52:33:05:23:5b:79:e0:ab:ca:39:26:cd: 84:76:c1:99:e2:e5:1c:f3:b4:f9:8e:03:5c:2a:14:9e:a8:63: 27:ab:29:06:a9:aa:22:78:28:0f:b7:1a:63:50:4e:27:8f:92: ff:d1:7c:d7:b3:19:ad:c8:db:88:ef:79:11:ca:0f:d3:3d:86: 39:96:83:c3:a1:fa:22:5f:62:68:3c:42:3c:06:d3:68:84:be: b2:3b:31:5a:7c:ee:2d:a7:a8:09:9e:13:4e:9f:75:6f:4c:a7: b2:87:b8:d0:89:18:56:46:62:c1:03:4b:bb:2f:92:16:eb:7f: 64:26:75:ea:96:b5:4e:1c:fc:48:31:b2:b2:89:92:8b:13:2f: a3:d5:61:f6:f7:a0:72:b2:e2:f3:dc:be:22:fe:cb:8c:e5:ec: 5b:da:0b:83 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8EzI7SB7uZTY5vU401b1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3 MDJmNGEwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmRkNTQyMTk1ZWRiYzZiYzBmMjNhOWY4Y2FjN2VjZTg0YWM0YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4qaX9jSGzgYuVOK6RLP0+K8/GVs hMKqepIerbl6YVTiQ9NSlTkNtk/EbWrjezJeYkqLPGCpNvWTceVHOIpl9LL0vgkH KGDEiGC70wVfNYYg/bIjBfWwd9XT/CPAFAAjDQFvnfTbKwF0ZrumEUWTEcY49MBA wt7mSviPDBRB2Yiquj+ar1LyF3rSun8oCXP8Y5nNA10RhzrX8qTghY1TaezgSfwa Zi3zvrCPNELAMuzN2UaavnB0PDLIeyFxrDi6GGe2YlycrQddEHBA3hKBBckYR77e 9aIBjyDM/x1Bap/fO0uLz7T4/b6eao0LFfOH598egpzc0kbt2Zfo3vSa4QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFFLdVCGV7bxrwPI6n4ysfs6ErEppMB8GA1UdIwQY MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt MmM0OGNiMjk4NjQ2LzEvVXQxVUlaWHR2R3ZBOGpxZmpLeC16b1NzU21rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2 LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAtUFUD BAMtUFADBACxCEQDBAK5jNgDBAK59sQwDQYJKoZIhvcNAQELBQADggEBABJNb7hM wi46KIX1UcWYz4neFmTNYDuYuKd/7ysHG9ZZ+vyaNPqBgH6fMD8Umn+Mu6nT8NLp KgpwnKd5fc6ubLJWaDgbjlFuaD5y+Ww4HLPkaeuCbHPQoG5D6B6InCCQa1IzBSNb eeCryjkmzYR2wZni5RzztPmOA1wqFJ6oYyerKQapqiJ4KA+3GmNQTiePkv/RfNez Ga3I24jveRHKD9M9hjmWg8Oh+iJfYmg8QjwG02iEvrI7MVp87i2nqAmeE06fdW9M p7KHuNCJGFZGYsEDS7svkhbrf2QmdeqWtU4c/EgxsrKJkosTL6PVYfb3oHKy4vPc viL+y4zl7FvaC4M= -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:53 2026 by rpki-client