This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Lq44h0G4q1e-UoLFf16nF4HM2xg.roa File: Lq44h0G4q1e-UoLFf16nF4HM2xg.roa (raw, json) Hash identifier: 8njI491vVK+Ep2tlJdykehE2iLFit02Dsa4DLuRuC40= Subject key identifier: 2E:AE:38:87:41:B8:AB:57:BE:52:82:C5:7F:5E:A7:17:81:CC:DB:18 Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA517A580FAA43E9A4AF08D5984179A Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Lq44h0G4q1e-UoLFf16nF4HM2xg.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56534 IP address blocks: 45.135.215.0/24 maxlen: 24 89.104.126.0/24 maxlen: 24 89.223.80.0/21 maxlen: 21 92.255.60.0/24 maxlen: 24 92.255.88.0/21 maxlen: 32 92.255.96.0/21 maxlen: 21 93.174.72.0/21 maxlen: 21 176.53.192.0/24 maxlen: 24 176.53.194.0/23 maxlen: 24 176.53.196.0/24 maxlen: 24 176.53.197.0/24 maxlen: 24 176.53.198.0/23 maxlen: 23 176.53.200.0/22 maxlen: 22 176.53.204.0/22 maxlen: 22 176.53.208.0/22 maxlen: 24 176.53.208.0/24 maxlen: 24 176.53.211.0/24 maxlen: 24 176.53.212.0/22 maxlen: 22 176.53.213.0/24 maxlen: 24 185.47.52.0/22 maxlen: 22 185.47.54.0/24 maxlen: 24 185.108.4.0/24 maxlen: 24 2a04:ac00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:17:a5:80:fa:a4:3e:9a:4a:f0:8d:59:84:17:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2eae388741b8ab57be5282c57f5ea71781ccdb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:90:e8:7d:71:be:2d:46:74:fa:e4:89:2f: d6:26:06:aa:f8:38:62:d2:79:0b:0c:b5:75:e7:3c: 76:20:f9:ee:05:c9:1f:52:2d:e1:a8:d2:55:de:c1: d8:57:81:08:68:a9:1e:56:ca:f7:e2:c9:09:67:b6: cc:2d:c7:28:4c:1d:1b:fb:e4:86:32:4a:1f:28:cd: ad:2f:4f:6a:87:c1:ab:53:cf:80:21:64:73:79:e3: ef:bc:65:16:8c:ac:64:c5:fc:ea:b2:2a:c0:37:93: 2a:de:88:9d:dc:30:e0:32:e6:2c:0b:56:37:23:0b: e5:87:9f:14:46:03:c2:46:7c:36:68:e0:da:11:54: b7:a5:07:d0:c1:04:7f:6c:58:37:d0:22:a6:22:06: c1:93:a4:bb:da:0a:15:14:93:62:25:63:96:ba:13: 3c:7c:81:35:52:51:1e:50:02:9b:4b:68:d5:3e:de: fc:a9:48:0b:c7:88:b6:0a:56:cc:ce:aa:d6:65:a0: 48:cf:a0:0e:b4:69:6a:59:f2:c0:79:3e:df:4f:20: 5c:66:a8:51:d8:cb:7b:5d:03:1b:a8:d2:5b:eb:7d: cc:f0:3a:13:20:b7:3c:a2:b2:8a:23:98:37:de:bc: e2:a2:7f:c4:2d:b4:0f:e0:09:0b:b6:68:3c:e4:8d: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AE:38:87:41:B8:AB:57:BE:52:82:C5:7F:5E:A7:17:81:CC:DB:18 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Lq44h0G4q1e-UoLFf16nF4HM2xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.215.0/24 89.104.126.0/24 89.223.80.0/21 92.255.60.0/24 92.255.88.0-92.255.103.255 93.174.72.0/21 176.53.192.0/24 176.53.194.0-176.53.215.255 185.47.52.0/22 185.108.4.0/24 IPv6: 2a04:ac00::/29 Signature Algorithm: sha256WithRSAEncryption 63:5a:1d:5d:96:69:2c:b0:c6:60:ed:99:8a:eb:5c:36:00:95: 58:af:d7:78:73:73:e1:2d:e8:20:9e:c2:ca:a4:d6:7c:10:2a: 91:9c:a5:5f:46:51:98:0d:fa:86:aa:88:30:d0:9f:75:c7:71: 3d:44:91:b2:d6:d4:f3:66:bc:0c:a9:d0:fe:0a:d4:22:5a:3f: 4d:1a:78:77:f2:26:6e:23:7e:2f:18:98:e5:0e:9b:11:a1:bf: 6b:0b:dd:af:96:04:ad:ff:6e:83:8e:73:af:df:d6:3a:85:33: d3:1a:a8:67:cf:3c:4d:aa:dd:f6:74:c4:de:6c:59:7e:42:07: f2:70:36:b0:10:f7:7f:7e:c1:35:fb:fa:0b:02:73:d9:1f:9a: ed:fd:1c:9d:8b:60:4e:fe:56:64:bb:ad:f1:69:48:d1:f7:65: 27:40:bd:48:8d:60:34:66:72:09:86:47:45:f8:e4:47:f9:16: 83:00:fc:72:9d:b2:da:d6:d9:08:66:ea:d9:c7:43:d7:f8:18: f5:3e:fd:a3:59:82:6a:b1:2e:bb:ab:e0:62:3a:b2:71:e1:36: c4:17:f0:ae:2b:bd:5f:fd:52:74:60:f3:d2:a1:55:0a:45:db: 44:bc:6c:87:90:14:40:c9:4b:ab:04:94:76:1a:6d:7d:35:72: 60:16:d8:24 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt7pRelgPqkPppK8I1ZhBeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWFlMzg4NzQxYjhhYjU3YmU1MjgyYzU3ZjVlYTcxNzgxY2NkYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7aQ6H1xvi1GdPrkiS/WJgaq+Dhi 0nkLDLV15zx2IPnuBckfUi3hqNJV3sHYV4EIaKkeVsr34skJZ7bMLccoTB0b++SG MkofKM2tL09qh8GrU8+AIWRzeePvvGUWjKxkxfzqsirAN5Mq3oid3DDgMuYsC1Y3 Iwvlh58URgPCRnw2aODaEVS3pQfQwQR/bFg30CKmIgbBk6S72goVFJNiJWOWuhM8 fIE1UlEeUAKbS2jVPt78qUgLx4i2ClbMzqrWZaBIz6AOtGlqWfLAeT7fTyBcZqhR 2Mt7XQMbqNJb633M8DoTILc8orKKI5g33rzion/ELbQP4AkLtmg85I1HdQIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFC6uOIdBuKtXvlKCxX9epxeBzNsYMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvTHE0NGgwRzRxMWUtVW9MRmYxNm5GNEhNMnhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwQALYfXAwQA WWh+AwQDWd9QAwQAXP88MAwDBANc/1gDBANc/2ADBANdrkgDBACwNcAwDAMEAbA1 wgMEA7A10AMEArkvNAMEALlsBDANBAIAAjAHAwUDKgSsADANBgkqhkiG9w0BAQsF AAOCAQEAY1odXZZpLLDGYO2ZiutcNgCVWK/XeHNz4S3oIJ7CyqTWfBAqkZylX0ZR mA36hqqIMNCfdcdxPUSRstbU82a8DKnQ/grUIlo/TRp4d/ImbiN+LxiY5Q6bEaG/ awvdr5YErf9ug45zr9/WOoUz0xqoZ888Tard9nTE3mxZfkIH8nA2sBD3f37BNfv6 CwJz2R+a7f0cnYtgTv5WZLut8WlI0fdlJ0C9SI1gNGZyCYZHRfjkR/kWgwD8cp2y 2tbZCGbq2cdD1/gY9T79o1mCarEuu6vgYjqyceE2xBfwriu9X/1SdGDz0qFVCkXb RLxsh5AUQMlLqwSUdhptfTVyYBbYJA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:12 2026 by rpki-client