This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/mZ4P89ydJFhQN4rY2f4PkVz254Y.roa File: mZ4P89ydJFhQN4rY2f4PkVz254Y.roa (raw, json) Hash identifier: Skt3qNUNcOa5hy1opbsaR3i/Q2rM/WSrwZEbE9IBS/I= Subject key identifier: 99:9E:0F:F3:DC:9D:24:58:50:37:8A:D8:D9:FE:0F:91:5C:F6:E7:86 Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Certificate serial: 019B797F057BDE592C269D3A84D0FA599CD4 Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/mZ4P89ydJFhQN4rY2f4PkVz254Y.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32708 IP address blocks: 45.65.44.0/22 maxlen: 22 45.65.44.0/23 maxlen: 23 45.65.44.0/24 maxlen: 24 45.65.45.0/24 maxlen: 24 45.65.46.0/23 maxlen: 23 45.65.46.0/24 maxlen: 24 45.65.47.0/24 maxlen: 24 85.92.100.0/22 maxlen: 22 85.92.100.0/24 maxlen: 24 85.92.101.0/24 maxlen: 24 85.92.102.0/24 maxlen: 24 85.92.103.0/24 maxlen: 24 103.91.56.0/22 maxlen: 22 103.91.56.0/24 maxlen: 24 103.91.57.0/24 maxlen: 24 103.91.58.0/24 maxlen: 24 103.91.59.0/24 maxlen: 24 103.108.188.0/23 maxlen: 23 103.108.188.0/24 maxlen: 24 103.108.189.0/24 maxlen: 24 103.115.204.0/23 maxlen: 23 103.115.204.0/24 maxlen: 24 103.115.205.0/24 maxlen: 24 103.143.86.0/23 maxlen: 23 103.143.86.0/24 maxlen: 24 103.143.87.0/24 maxlen: 24 103.211.0.0/22 maxlen: 22 103.211.0.0/24 maxlen: 24 103.211.1.0/24 maxlen: 24 103.211.2.0/24 maxlen: 24 103.211.3.0/24 maxlen: 24 123.253.104.0/22 maxlen: 22 123.253.104.0/24 maxlen: 24 123.253.105.0/24 maxlen: 24 123.253.106.0/24 maxlen: 24 123.253.107.0/24 maxlen: 24 185.211.78.0/24 maxlen: 24 2a0d:b8c0::/48 maxlen: 48 2a0d:b8c0:1::/48 maxlen: 48 2a11:b000:1::/48 maxlen: 48 2a11:b000:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:05:7b:de:59:2c:26:9d:3a:84:d0:fa:59:9c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=999e0ff3dc9d245850378ad8d9fe0f915cf6e786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3c:2b:9a:7e:aa:50:9a:50:3c:b6:b0:a3:2e: b1:76:a6:8a:b4:b1:35:36:1b:2b:fa:ba:55:e6:f7: 5f:aa:86:0e:11:34:90:bd:67:6b:e2:f0:e5:7d:52: cb:73:ac:fc:a2:a3:3d:05:c9:80:f2:6d:95:07:13: 9a:a9:b1:e5:9b:83:c2:98:57:5c:ac:2c:16:8c:e0: 0a:ad:1a:99:bc:03:d9:dc:5d:76:dc:7d:5a:22:41: 8d:36:c5:3c:fa:6c:50:ab:87:f1:70:88:19:f9:2b: 59:ed:10:80:c5:bb:ac:a5:ba:27:b8:d7:12:fc:03: c4:73:8e:e4:b5:55:2d:21:88:ef:1b:8a:60:ed:ee: 47:42:a2:e6:2c:98:80:6d:7b:3d:3e:fa:b5:26:c2: 70:01:25:aa:48:12:2c:1c:9a:33:9d:2e:32:3c:71: 53:c4:3a:14:89:7b:a1:1c:94:2d:f5:d2:74:47:3f: ef:c1:76:25:ae:83:e3:13:21:ab:70:2d:df:4e:7d: d5:cf:8f:7c:1b:fd:3a:98:89:2d:08:9b:f0:d1:e4: 41:7a:89:64:6e:e6:9e:61:13:e9:83:ce:43:ee:4c: 0a:1d:62:22:63:fb:14:b2:cb:f4:27:74:db:89:2a: 21:5e:93:42:13:bb:5e:65:6d:6f:7d:35:b6:f2:ea: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9E:0F:F3:DC:9D:24:58:50:37:8A:D8:D9:FE:0F:91:5C:F6:E7:86 X509v3 Authority Key Identifier: keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/mZ4P89ydJFhQN4rY2f4PkVz254Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.44.0/22 85.92.100.0/22 103.91.56.0/22 103.108.188.0/23 103.115.204.0/23 103.143.86.0/23 103.211.0.0/22 123.253.104.0/22 185.211.78.0/24 IPv6: 2a0d:b8c0::/47 2a11:b000:1::-2a11:b000:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 04:5e:10:b0:38:dc:be:93:b4:b9:5d:52:d0:cb:7f:86:cf:72: 9a:ec:e2:1a:8a:fe:80:15:68:95:15:e5:28:60:80:94:82:cf: 13:63:e2:4a:71:9f:bf:e0:e6:b2:e5:19:ee:a5:dd:4a:68:d7: 49:79:5e:59:5e:bb:9d:48:95:14:06:7f:90:fc:5a:b8:90:fb: 5f:6d:04:ef:55:92:ab:cd:37:be:60:bd:db:85:bb:c8:53:92: e1:5f:4a:03:fb:12:14:65:c3:17:7b:94:c6:11:7d:61:32:d6: 97:c5:84:98:7c:6a:ca:e3:ca:3e:5b:3f:6a:be:c3:89:b1:d5: d1:29:6a:7e:4a:e9:5f:1e:d6:6a:70:a5:b9:dd:9c:27:c4:b5: a3:21:63:5f:4f:0e:58:81:75:f3:25:00:c9:52:76:0b:8e:a0: 25:3a:12:be:79:da:bc:3b:15:e1:f6:78:a4:4f:ff:53:d0:98: 2f:c9:46:3f:5a:61:6e:93:ae:a5:db:7d:10:54:d8:9f:72:32: 1d:94:3d:60:b1:bb:c7:97:2f:07:40:a6:4b:62:dd:78:0c:42: c9:9f:90:2d:e7:b5:5a:bf:47:37:91:24:c8:6e:b4:52:55:d3: 3f:49:5e:4b:cb:68:a1:33:2a:5e:6e:a2:b7:4c:ab:df:cc:82: 08:7f:35:c8 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt5fwV73lksJp06hND6WZzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj MTZkZDAwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTllMGZmM2RjOWQyNDU4NTAzNzhhZDhkOWZlMGY5MTVjZjZlNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Twrmn6qUJpQPLawoy6xdqaKtLE1 Nhsr+rpV5vdfqoYOETSQvWdr4vDlfVLLc6z8oqM9BcmA8m2VBxOaqbHlm4PCmFdc rCwWjOAKrRqZvAPZ3F123H1aIkGNNsU8+mxQq4fxcIgZ+StZ7RCAxbuspbonuNcS /APEc47ktVUtIYjvG4pg7e5HQqLmLJiAbXs9Pvq1JsJwASWqSBIsHJoznS4yPHFT xDoUiXuhHJQt9dJ0Rz/vwXYlroPjEyGrcC3fTn3Vz498G/06mIktCJvw0eRBeolk buaeYRPpg85D7kwKHWIiY/sUssv0J3TbiSohXpNCE7teZW1vfTW28uqtLQIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFJmeD/PcnSRYUDeK2Nn+D5Fc9ueGMB8GA1UdIwQY MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt NjJkNDJmZTZmZDNjLzEvbVo0UDg5eWRKRmhRTjRyWTJmNFBrVnoyNTRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzA8BAIAATA2AwQCLUEsAwQC VVxkAwQCZ1s4AwQBZ2y8AwQBZ3PMAwQBZ49WAwQCZ9MAAwQCe/1oAwQAudNOMCME AgACMB0DBwEqDbjAAAAwEgMHACoRsAAAAQMHACoRsAAAAjANBgkqhkiG9w0BAQsF AAOCAQEABF4QsDjcvpO0uV1S0Mt/hs9ymuziGor+gBVolRXlKGCAlILPE2PiSnGf v+DmsuUZ7qXdSmjXSXleWV67nUiVFAZ/kPxauJD7X20E71WSq803vmC924W7yFOS 4V9KA/sSFGXDF3uUxhF9YTLWl8WEmHxqyuPKPls/ar7DibHV0SlqfkrpXx7WanCl ud2cJ8S1oyFjX08OWIF18yUAyVJ2C46gJToSvnnavDsV4fZ4pE//U9CYL8lGP1ph bpOupdt9EFTYn3IyHZQ9YLG7x5cvB0CmS2LdeAxCyZ+QLee1Wr9HN5EkyG60UlXT P0leS8tooTMqXm6it0yr38yCCH81yA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:45 2026 by rpki-client