This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/oL7Va2kH8P-3vrFReEUhkCyRmcY.roa File: oL7Va2kH8P-3vrFReEUhkCyRmcY.roa (raw, json) Hash identifier: r6Ou/HXbegxpeXGw26fS8AHPIewd+N00kGGB9t5uCj8= Subject key identifier: A0:BE:D5:6B:69:07:F0:FF:B7:BE:B1:51:78:45:21:90:2C:91:99:C6 Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Certificate serial: 019B7CEE6E034310F949AA85F9D523095B65 Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/oL7Va2kH8P-3vrFReEUhkCyRmcY.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51447 IP address blocks: 45.137.20.0/24 maxlen: 24 45.137.21.0/24 maxlen: 24 45.137.22.0/24 maxlen: 24 45.137.23.0/24 maxlen: 24 185.222.56.0/24 maxlen: 24 185.222.57.0/24 maxlen: 24 185.222.58.0/24 maxlen: 24 185.222.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6e:03:43:10:f9:49:aa:85:f9:d5:23:09:5b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0bed56b6907f0ffb7beb151784521902c9199c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:cc:a4:98:32:7e:05:10:a1:f9:0d:ef:85: e8:2a:2b:3f:05:19:41:34:37:4c:c3:4f:2d:c8:04: f7:5d:89:80:8a:b3:94:71:3d:b7:e2:3b:9d:22:77: 40:fa:27:49:10:37:ad:73:46:c1:60:06:cb:bb:55: 6c:88:6d:12:01:a1:34:9d:e2:80:64:ba:49:2e:86: b6:7f:55:b7:ad:5f:53:86:b2:1e:40:bc:39:ed:55: d9:c7:30:1b:56:68:a0:79:9e:bc:09:df:62:48:8f: 95:aa:62:88:3f:56:cf:44:57:b2:21:9c:5b:05:bb: f8:c3:8c:df:39:f2:1f:41:60:f9:d4:51:80:b7:e2: 72:c7:9d:eb:72:5d:8e:50:02:e0:b6:9c:c5:d4:e7: 58:ad:65:40:8e:08:63:30:59:05:38:a5:66:93:b0: 74:11:18:ad:48:ca:87:37:86:df:3e:7a:35:44:ba: fd:8f:80:d6:25:93:3b:56:39:21:08:3e:6f:8f:a8: 46:4f:8a:09:c9:37:ce:52:b3:6d:82:70:cd:35:70: ec:f7:bb:0b:c3:9a:63:02:6c:9f:85:41:e7:1f:65: ee:b2:94:b8:34:46:6c:38:b7:a4:d9:86:f7:44:13: c8:7f:81:e6:17:f9:26:de:81:12:60:74:a0:58:d7: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BE:D5:6B:69:07:F0:FF:B7:BE:B1:51:78:45:21:90:2C:91:99:C6 X509v3 Authority Key Identifier: keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/oL7Va2kH8P-3vrFReEUhkCyRmcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.20.0/22 185.222.56.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:46:15:35:a1:50:ba:09:c1:a1:1f:71:c2:5b:f3:54:e0:e3: f5:ad:99:87:87:7c:4a:f6:0d:53:12:b5:dc:71:29:c8:d9:55: 22:a5:04:7f:30:74:d0:ea:cf:3b:94:54:41:f9:9c:64:41:22: 24:23:f1:22:54:eb:26:56:ec:a8:43:76:92:dc:e2:f3:12:ea: 57:82:dc:9b:97:02:72:28:1d:12:9c:c6:19:ab:be:cc:d7:c9: 66:38:67:48:6f:1a:7a:5a:01:3b:f3:66:8e:75:df:04:72:fb: 68:f9:59:73:8a:6e:f3:f0:b2:9f:09:fd:a9:cd:0a:5e:3c:78: e2:10:65:b0:b7:57:26:bb:17:7e:1b:d1:e2:7c:42:ac:6f:75: 80:af:d0:a2:f6:04:de:98:80:88:10:c1:65:2a:c5:93:dc:4d: d7:f7:a5:89:74:fe:5d:d1:a1:ce:f4:7d:69:b6:2e:4f:ba:de: 24:ef:50:97:79:80:54:5d:fa:0f:fa:21:a6:da:dd:83:73:43: 40:7d:c6:39:1b:a5:4f:c7:eb:aa:cf:28:04:b7:ee:ea:76:fc: 50:a5:38:95:f7:b5:f0:cb:3f:e5:57:cb:b0:ab:26:ff:13:1d: 89:79:f6:15:72:22:33:0d:39:61:35:86:b4:44:83:fd:38:3d: 91:c3:11:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87m4DQxD5SaqF+dUjCVtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDA5ZTE3MWJhZjhjMmEzYTk0ZDI5YjI0ODc5ZWY5N2Yw OTY2MDIwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGJlZDU2YjY5MDdmMGZmYjdiZWIxNTE3ODQ1MjE5MDJjOTE5OWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/MpJgyfgUQofkN74XoKis/BRlB NDdMw08tyAT3XYmAirOUcT234judIndA+idJEDetc0bBYAbLu1VsiG0SAaE0neKA ZLpJLoa2f1W3rV9ThrIeQLw57VXZxzAbVmigeZ68Cd9iSI+VqmKIP1bPRFeyIZxb Bbv4w4zfOfIfQWD51FGAt+Jyx53rcl2OUALgtpzF1OdYrWVAjghjMFkFOKVmk7B0 ERitSMqHN4bfPno1RLr9j4DWJZM7VjkhCD5vj6hGT4oJyTfOUrNtgnDNNXDs97sL w5pjAmyfhUHnH2XuspS4NEZsOLek2Yb3RBPIf4HmF/km3oESYHSgWNdsHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKC+1WtpB/D/t76xUXhFIZAskZnGMB8GA1UdIwQY MBaAFIoAnhcbr4wqOpTSmySHnvl/CWYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4Zjct MmU3MjEzNzY3NjI4LzEvb0w3VmEya0g4UC0zdnJGUmVFVWhrQ3lSbWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4ZjctMmU3MjEzNzY3NjI4 LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYkUAwQC ud44MA0GCSqGSIb3DQEBCwUAA4IBAQAdRhU1oVC6CcGhH3HCW/NU4OP1rZmHh3xK 9g1TErXccSnI2VUipQR/MHTQ6s87lFRB+ZxkQSIkI/EiVOsmVuyoQ3aS3OLzEupX gtyblwJyKB0SnMYZq77M18lmOGdIbxp6WgE782aOdd8Ecvto+Vlzim7z8LKfCf2p zQpePHjiEGWwt1cmuxd+G9HifEKsb3WAr9Ci9gTemICIEMFlKsWT3E3X96WJdP5d 0aHO9H1pti5Put4k71CXeYBUXfoP+iGm2t2Dc0NAfcY5G6VPx+uqzygEt+7qdvxQ pTiV97Xwyz/lV8uwqyb/Ex2JefYVciIzDTlhNYa0RIP9OD2RwxHd -----END CERTIFICATE-----Generated at Mon Jan 26 18:10:51 2026 by rpki-client