This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/SzUYKWffDLzD3KfG-tHUGCGVR50.roa File: SzUYKWffDLzD3KfG-tHUGCGVR50.roa (raw, json) Hash identifier: HYko2OtpzwVD1bQm6/aHErTnPd1yFyteka+/4h0Bbfo= Subject key identifier: 4B:35:18:29:67:DF:0C:BC:C3:DC:A7:C6:FA:D1:D4:18:21:95:47:9D Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Certificate serial: 019B7B35D8FFB28AEE2CFF234C17D95745A5 Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/SzUYKWffDLzD3KfG-tHUGCGVR50.roa Signing time: Thu 01 Jan 2026 20:18:05 +0000 ROA not before: Thu 01 Jan 2026 20:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48359 IP address blocks: 45.155.192.0/24 maxlen: 24 45.155.193.0/24 maxlen: 24 45.155.194.0/24 maxlen: 24 45.155.195.0/24 maxlen: 24 91.213.157.0/24 maxlen: 24 91.213.167.0/24 maxlen: 24 91.213.172.0/24 maxlen: 24 185.47.48.0/23 maxlen: 23 185.47.48.0/24 maxlen: 24 185.47.49.0/24 maxlen: 24 185.47.50.0/23 maxlen: 23 185.47.50.0/24 maxlen: 24 185.47.51.0/24 maxlen: 24 185.82.64.0/22 maxlen: 22 185.82.64.0/24 maxlen: 24 185.82.65.0/24 maxlen: 24 185.82.66.0/24 maxlen: 24 185.82.67.0/24 maxlen: 24 185.121.56.0/22 maxlen: 22 185.121.56.0/24 maxlen: 24 185.121.57.0/24 maxlen: 24 185.121.58.0/24 maxlen: 24 185.121.59.0/24 maxlen: 24 185.125.20.0/24 maxlen: 24 185.125.21.0/24 maxlen: 24 185.125.22.0/24 maxlen: 24 185.125.23.0/24 maxlen: 24 185.137.60.0/22 maxlen: 24 185.137.60.0/24 maxlen: 24 185.137.61.0/24 maxlen: 24 185.137.62.0/24 maxlen: 24 185.137.63.0/24 maxlen: 24 185.142.92.0/22 maxlen: 22 185.142.92.0/24 maxlen: 24 185.142.93.0/24 maxlen: 24 185.142.94.0/24 maxlen: 24 185.142.95.0/24 maxlen: 24 185.142.124.0/22 maxlen: 22 185.142.124.0/24 maxlen: 24 185.142.125.0/24 maxlen: 24 185.142.126.0/24 maxlen: 24 185.142.127.0/24 maxlen: 24 185.212.192.0/24 maxlen: 24 185.212.193.0/24 maxlen: 24 185.212.195.0/24 maxlen: 24 185.221.192.0/22 maxlen: 22 185.221.192.0/24 maxlen: 24 185.221.194.0/24 maxlen: 24 185.221.195.0/24 maxlen: 24 185.238.44.0/24 maxlen: 24 185.238.45.0/24 maxlen: 24 185.238.46.0/24 maxlen: 24 185.238.47.0/24 maxlen: 24 193.246.174.0/24 maxlen: 24 193.246.175.0/24 maxlen: 24 193.246.200.0/24 maxlen: 24 193.246.201.0/24 maxlen: 24 195.8.110.0/24 maxlen: 24 195.8.112.0/24 maxlen: 24 195.8.114.0/24 maxlen: 24 195.191.22.0/24 maxlen: 24 195.191.23.0/24 maxlen: 24 195.191.44.0/24 maxlen: 24 195.191.45.0/24 maxlen: 24 195.230.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d8:ff:b2:8a:ee:2c:ff:23:4c:17:d9:57:45:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b35182967df0cbcc3dca7c6fad1d4182195479d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:a3:2b:f0:7a:47:f2:84:c9:22:71:02:e9: 0c:61:30:0e:15:96:3e:85:ac:05:82:0f:a2:a4:de: 16:66:bb:50:b4:0e:70:cf:98:cc:3e:f5:de:d9:43: fb:48:d9:df:77:6a:ab:ef:53:45:ad:d4:84:f9:94: 1b:99:38:26:99:fe:66:da:01:bb:98:64:0a:d4:d1: 9d:c8:ec:e6:6c:ff:63:ca:ce:a4:41:bf:93:2e:37: e0:45:f4:3d:a5:58:fa:0c:a5:8a:ce:89:ca:39:c4: f7:71:2e:de:84:bc:40:23:27:db:3b:a7:b3:d6:f8: 5b:eb:bc:fc:cb:54:47:2c:33:cb:0b:34:06:93:10: 81:d6:d6:7c:41:53:f5:5f:f9:9f:da:e3:3b:2c:28: 7a:e2:42:1d:2b:71:86:41:8f:fa:9b:c5:3e:40:af: a4:0d:dc:5a:ea:77:58:7e:9b:1c:90:61:0f:3c:6e: 09:72:86:3b:b9:68:cc:a5:d1:9e:6d:fb:6e:62:a8: cc:06:de:92:ab:f8:27:6a:b9:91:18:5d:4e:61:bf: b5:46:31:e5:59:4d:d3:cf:e8:1b:a0:d1:98:d4:45: c6:d2:da:64:b2:c9:2a:04:0e:54:82:9c:59:9d:ae: fb:33:cb:a4:27:8a:e9:30:31:36:d5:65:d1:f7:de: a8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:35:18:29:67:DF:0C:BC:C3:DC:A7:C6:FA:D1:D4:18:21:95:47:9D X509v3 Authority Key Identifier: keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/SzUYKWffDLzD3KfG-tHUGCGVR50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.192.0/22 91.213.157.0/24 91.213.167.0/24 91.213.172.0/24 185.47.48.0/22 185.82.64.0/22 185.121.56.0/22 185.125.20.0/22 185.137.60.0/22 185.142.92.0/22 185.142.124.0/22 185.212.192.0/23 185.212.195.0/24 185.221.192.0/22 185.238.44.0/22 193.246.174.0/23 193.246.200.0/23 195.8.110.0/24 195.8.112.0/24 195.8.114.0/24 195.191.22.0/23 195.191.44.0/23 195.230.97.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:8b:6d:c7:1e:bb:b6:e9:4e:87:2a:a6:13:da:e9:67:66:9a: 87:ba:5e:d4:ce:54:dc:b1:7f:36:45:d3:5f:22:4d:a2:11:cc: f5:84:69:27:9e:f7:91:2a:6c:19:01:a9:b9:68:15:f5:0a:d4: d6:06:b5:f8:fd:a7:5a:2a:12:a7:fb:db:cc:36:01:a4:76:32: dd:6b:df:86:2f:9c:8e:b7:bb:09:4f:9e:38:0a:f3:23:87:58: 2a:75:0d:bc:a3:ee:b0:9a:14:d8:c9:52:78:14:8a:6b:31:45: 3f:22:4e:97:f9:d9:2d:4d:f2:80:d5:51:5c:68:23:e2:c3:a9: 3f:46:11:69:da:44:69:fa:b1:c1:ea:ee:ab:5c:a7:ec:7e:b7: ee:87:8d:af:88:45:bc:5e:08:fd:c8:ed:33:43:4f:b7:c1:95: 60:26:58:ba:25:a9:36:e5:61:47:0d:ca:30:a3:58:48:bc:bb: fe:58:90:ed:40:86:f4:e2:61:e7:01:b4:3f:c3:38:2d:99:f3: 97:1f:00:f3:fe:66:07:9d:a8:d4:43:b6:11:87:0f:4d:61:34: fe:66:8e:f7:ce:0a:4d:86:45:47:54:c7:51:41:bb:2b:27:ed: 74:e4:81:85:3c:64:04:f6:3c:72:79:31:23:87:b0:4d:ad:0b: 6a:27:7f:e6 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt7Ndj/soruLP8jTBfZV0WlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk ZDFiZmIwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjM1MTgyOTY3ZGYwY2JjYzNkY2E3YzZmYWQxZDQxODIxOTU0NzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLujK/B6R/KEySJxAukMYTAOFZY+ hawFgg+ipN4WZrtQtA5wz5jMPvXe2UP7SNnfd2qr71NFrdSE+ZQbmTgmmf5m2gG7 mGQK1NGdyOzmbP9jys6kQb+TLjfgRfQ9pVj6DKWKzonKOcT3cS7ehLxAIyfbO6ez 1vhb67z8y1RHLDPLCzQGkxCB1tZ8QVP1X/mf2uM7LCh64kIdK3GGQY/6m8U+QK+k Ddxa6ndYfpsckGEPPG4JcoY7uWjMpdGebftuYqjMBt6Sq/gnarmRGF1OYb+1RjHl WU3Tz+gboNGY1EXG0tpksskqBA5UgpxZna77M8ukJ4rpMDE21WXR996otwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFEs1GCln3wy8w9ynxvrR1BghlUedMB8GA1UdIwQY MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt MzM5ODBjMDNmMDhlLzEvU3pVWUtXZmZETHpEM0tmRy10SFVHQ0dWUjUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAIt m8ADBABb1Z0DBABb1acDBABb1awDBAK5LzADBAK5UkADBAK5eTgDBAK5fRQDBAK5 iTwDBAK5jlwDBAK5jnwDBAG51MADBAC51MMDBAK53cADBAK57iwDBAHB9q4DBAHB 9sgDBADDCG4DBADDCHADBADDCHIDBAHDvxYDBAHDvywDBADD5mEwDQYJKoZIhvcN AQELBQADggEBAF6Lbcceu7bpTocqphPa6Wdmmoe6XtTOVNyxfzZF018iTaIRzPWE aSee95EqbBkBqbloFfUK1NYGtfj9p1oqEqf728w2AaR2Mt1r34YvnI63uwlPnjgK 8yOHWCp1Dbyj7rCaFNjJUngUimsxRT8iTpf52S1N8oDVUVxoI+LDqT9GEWnaRGn6 scHq7qtcp+x+t+6Hja+IRbxeCP3I7TNDT7fBlWAmWLolqTblYUcNyjCjWEi8u/5Y kO1AhvTiYecBtD/DOC2Z85cfAPP+ZgedqNRDthGHD01hNP5mjvfOCk2GRUdUx1FB uysn7XTkgYU8ZAT2PHJ5MSOHsE2tC2onf+Y= -----END CERTIFICATE-----Generated at Mon Jan 26 02:19:20 2026 by rpki-client