This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/9GhuMXLHbzdiDAMfsJHbqzR-MEw.roa File: 9GhuMXLHbzdiDAMfsJHbqzR-MEw.roa (raw, json) Hash identifier: g5IZRl4BDdytGAyq101061DrAkIRTjvTwY1EdCTIxCM= Subject key identifier: F4:68:6E:31:72:C7:6F:37:62:0C:03:1F:B0:91:DB:AB:34:7E:30:4C Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e Certificate serial: 019B7DCB62DA297F0FED34EDCC7286B2E627 Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/9GhuMXLHbzdiDAMfsJHbqzR-MEw.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51790 IP address blocks: 45.136.188.0/23 maxlen: 23 45.136.190.0/23 maxlen: 23 46.19.8.0/23 maxlen: 24 46.19.10.0/23 maxlen: 24 46.19.12.0/23 maxlen: 24 46.19.14.0/23 maxlen: 24 185.57.144.0/23 maxlen: 23 185.57.145.0/24 maxlen: 24 185.57.146.0/24 maxlen: 24 185.92.228.0/24 maxlen: 24 185.97.52.0/22 maxlen: 24 185.185.88.0/22 maxlen: 24 193.3.59.0/24 maxlen: 24 209.16.152.0/22 maxlen: 23 209.16.152.0/23 maxlen: 23 209.16.154.0/23 maxlen: 23 217.61.252.0/24 maxlen: 24 2a02:28b0::/32 maxlen: 32 2a02:28b1::/32 maxlen: 32 2a02:28b2::/32 maxlen: 32 2a02:28b7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:62:da:29:7f:0f:ed:34:ed:cc:72:86:b2:e6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4686e3172c76f37620c031fb091dbab347e304c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:61:cf:88:41:73:49:63:c5:49:42:9c:72:04: 74:17:9e:40:5a:1b:92:3c:a4:dd:2a:41:7e:4a:b0: ac:96:4a:d8:58:7a:a6:00:33:48:12:8d:d5:4c:6e: 1a:ca:8f:fa:4e:93:f2:0f:47:6a:77:1b:63:d3:64: 91:f5:d7:0e:f4:c2:3d:e8:67:d3:fe:bc:90:57:a2: a3:73:47:7f:f8:c9:ea:ad:31:e8:e6:bc:ef:8c:5f: ff:38:e6:58:ee:09:70:e4:5a:35:8b:9b:dd:9d:63: d6:65:87:be:05:4f:0f:98:79:0e:77:f2:06:3a:1b: 94:05:9a:86:e9:4a:24:0d:53:4d:0d:b9:39:7a:cd: c0:9f:e4:fa:e0:06:76:b9:b3:05:fc:50:e1:54:30: 78:76:b3:e4:36:9f:c6:d1:fc:1f:5c:fb:be:b4:8c: f7:12:74:a9:f2:b3:cd:e3:9c:b2:ef:16:9e:19:99: a8:4c:00:1d:4d:d3:c3:57:2b:a1:15:5f:79:96:75: 76:95:2a:06:dd:bd:cf:60:c3:9e:84:1d:a9:d3:bf: b3:9f:f0:35:56:c6:f5:86:a3:57:63:25:43:bc:b2: 45:95:3c:4d:a8:83:db:cb:06:e4:ae:c6:e7:e4:c2: f7:11:81:f1:01:dd:7e:26:cd:e5:c9:42:60:2a:1e: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:68:6E:31:72:C7:6F:37:62:0C:03:1F:B0:91:DB:AB:34:7E:30:4C X509v3 Authority Key Identifier: keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/9GhuMXLHbzdiDAMfsJHbqzR-MEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.188.0/22 46.19.8.0/21 185.57.144.0-185.57.146.255 185.92.228.0/24 185.97.52.0/22 185.185.88.0/22 193.3.59.0/24 209.16.152.0/22 217.61.252.0/24 IPv6: 2a02:28b0::-2a02:28b2:ffff:ffff:ffff:ffff:ffff:ffff 2a02:28b7::/32 Signature Algorithm: sha256WithRSAEncryption 35:82:e9:7d:e5:7e:89:c0:da:b4:b7:28:b3:ed:37:82:fd:b3: 89:8f:3f:a1:82:8c:e2:33:d9:b3:60:9c:d3:f1:19:16:a6:ab: ec:20:9a:e9:c1:29:db:fc:19:c5:c7:36:7b:23:54:de:3c:f5: b0:3f:84:9a:0e:2b:7f:35:b5:59:44:12:d5:bf:52:cb:57:b3: 92:56:8d:92:ac:70:a3:42:ed:ee:0f:e8:d6:9e:72:cc:5f:d9: d9:2b:73:90:49:07:f0:c2:19:54:e5:57:58:fd:59:a9:59:15: e9:5a:c7:bc:30:97:48:95:ba:5f:0d:be:e7:c9:5a:3c:53:7a: ad:f4:ad:92:32:d6:d9:63:42:cd:b3:0f:0f:03:71:f6:94:2a: 2f:3f:b4:46:a7:02:b1:4d:02:17:1b:6b:ed:a4:08:0e:7d:29: 91:9d:21:28:74:4a:75:a1:93:3d:64:4e:ac:c8:f7:55:ae:44: 96:ee:6c:dc:15:0a:1d:e9:42:f4:0c:4c:d3:e9:7d:ff:a3:2b: 8e:02:ea:7d:a4:d8:8e:34:0b:fc:a1:e4:90:b7:9e:67:63:a5: 3d:f9:c3:b2:11:b2:7c:81:d6:dd:af:da:26:59:9a:1b:81:71: 01:29:14:78:d4:f6:12:c8:57:d6:4a:98:a4:e7:c7:d4:39:17: ad:60:0d:9a -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZt9y2LaKX8P7TTtzHKGsuYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGM5NTg1ODg5Zjk4ZTBjNzdmOWI2Y2Q4MDM2MWFhMDJi ZGQ2OGUwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDY4NmUzMTcyYzc2ZjM3NjIwYzAzMWZiMDkxZGJhYjM0N2UzMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2HPiEFzSWPFSUKccgR0F55AWhuS PKTdKkF+SrCslkrYWHqmADNIEo3VTG4ayo/6TpPyD0dqdxtj02SR9dcO9MI96GfT /ryQV6Kjc0d/+MnqrTHo5rzvjF//OOZY7glw5Fo1i5vdnWPWZYe+BU8PmHkOd/IG OhuUBZqG6UokDVNNDbk5es3An+T64AZ2ubMF/FDhVDB4drPkNp/G0fwfXPu+tIz3 EnSp8rPN45yy7xaeGZmoTAAdTdPDVyuhFV95lnV2lSoG3b3PYMOehB2p07+zn/A1 Vsb1hqNXYyVDvLJFlTxNqIPbywbkrsbn5ML3EYHxAd1+Js3lyUJgKh4juwIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFPRobjFyx283YgwDH7CR26s0fjBMMB8GA1UdIwQY MBaAFGFMlYWIn5jgx3+bbNgDYaoCvdaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5VmhZaWZtT0RIZjV0czJBTmhxZ0s5MW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iYjZmMzgtMjM2OS00NDZmLTg4ZjIt MGI0NTc1YjY5YzU3LzEvOUdodU1YTEhiemRpREFNZnNKSGJxelItTUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iYjZmMzgtMjM2OS00NDZmLTg4ZjItMGI0NTc1YjY5YzU3 LzEvWVV5VmhZaWZtT0RIZjV0czJBTmhxZ0s5MW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBEBAIAATA+AwQCLYi8AwQD LhMIMAwDBAS5OZADBAC5OZIDBAC5XOQDBAK5YTQDBAK5uVgDBADBAzsDBALREJgD BADZPfwwHQQCAAIwFzAOAwUEKgIosAMFACoCKLIDBQAqAii3MA0GCSqGSIb3DQEB CwUAA4IBAQA1gul95X6JwNq0tyiz7TeC/bOJjz+hgoziM9mzYJzT8RkWpqvsIJrp wSnb/BnFxzZ7I1TePPWwP4SaDit/NbVZRBLVv1LLV7OSVo2SrHCjQu3uD+jWnnLM X9nZK3OQSQfwwhlU5VdY/VmpWRXpWse8MJdIlbpfDb7nyVo8U3qt9K2SMtbZY0LN sw8PA3H2lCovP7RGpwKxTQIXG2vtpAgOfSmRnSEodEp1oZM9ZE6syPdVrkSW7mzc FQod6UL0DEzT6X3/oyuOAup9pNiONAv8oeSQt55nY6U9+cOyEbJ8gdbdr9omWZob gXEBKRR41PYSyFfWSpik58fUORetYA2a -----END CERTIFICATE-----Generated at Mon Jan 26 00:38:58 2026 by rpki-client