This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EXf7ocIrwXJtyLH-dvZhifFbrCM.roa File: EXf7ocIrwXJtyLH-dvZhifFbrCM.roa (raw, json) Hash identifier: eleTqrdFxLCQ34oFGr5NkZmeNqpsbIfoZ7gbJ+sAw1c= Subject key identifier: 11:77:FB:A1:C2:2B:C1:72:6D:C8:B1:FE:76:F6:61:89:F1:5B:AC:23 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019BD8839A4892D20D3A1527C849CE795CB2 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EXf7ocIrwXJtyLH-dvZhifFbrCM.roa Signing time: Mon 19 Jan 2026 23:07:41 +0000 ROA not before: Mon 19 Jan 2026 23:07:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 45.136.0.0/24 maxlen: 32 45.136.2.0/24 maxlen: 32 45.136.3.0/24 maxlen: 32 128.0.119.0/24 maxlen: 32 185.117.23.0/24 maxlen: 32 185.144.100.0/24 maxlen: 32 185.144.102.0/24 maxlen: 32 185.211.48.0/24 maxlen: 32 185.211.49.0/24 maxlen: 32 185.211.50.0/24 maxlen: 32 185.227.240.0/24 maxlen: 32 185.227.241.0/24 maxlen: 32 185.227.242.0/24 maxlen: 32 185.227.243.0/24 maxlen: 32 193.201.209.0/24 maxlen: 32 193.201.210.0/24 maxlen: 32 193.201.211.0/24 maxlen: 32 194.36.102.0/24 maxlen: 32 194.36.103.0/24 maxlen: 32 194.124.64.0/24 maxlen: 32 194.124.66.0/24 maxlen: 32 194.124.67.0/24 maxlen: 32 195.85.68.0/24 maxlen: 32 195.85.69.0/24 maxlen: 32 195.85.70.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:83:9a:48:92:d2:0d:3a:15:27:c8:49:ce:79:5c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 19 23:07:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1177fba1c22bc1726dc8b1fe76f66189f15bac23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:46:33:ac:c2:ce:e4:bb:f5:0c:79:26:47: 8c:bf:b8:d5:de:73:22:00:e9:bd:63:74:b4:38:46: fd:e9:19:e2:36:15:8d:38:f3:14:da:be:01:53:61: c4:87:b9:27:a4:25:fc:36:36:41:23:e3:30:b9:63: ec:28:3c:a9:74:6b:e7:93:72:3e:a0:95:7a:b9:31: 19:f3:bf:65:c2:14:4f:83:b9:6d:fd:65:91:24:94: 1f:8e:e9:a6:ef:21:2b:e1:b9:6e:77:0a:50:e5:50: ad:03:08:2b:0f:ab:f0:f6:bb:8b:7a:31:e4:78:5a: 55:d7:ee:0b:73:8e:f2:ec:cd:fd:6f:24:68:78:de: 58:40:46:a8:bb:e6:1a:8c:e8:83:9e:5c:14:fa:e8: f0:68:7d:cd:b1:83:9d:d3:08:48:95:24:b0:49:a4: f0:b1:e8:ca:88:4a:26:a2:78:e9:be:d0:19:36:4e: 7a:a3:9c:02:0f:c0:0d:01:40:c4:7c:3f:f6:6c:eb: 64:43:bc:40:50:2c:2e:c9:fa:85:8f:fb:1c:27:bd: e1:ac:d1:a0:b2:65:43:19:7b:00:91:c5:cb:df:a9: 89:c1:0a:82:0a:b8:f7:36:13:b6:9d:88:4b:47:86: 9c:92:fa:9f:42:96:49:36:44:bc:24:8a:71:65:2a: 7c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:77:FB:A1:C2:2B:C1:72:6D:C8:B1:FE:76:F6:61:89:F1:5B:AC:23 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EXf7ocIrwXJtyLH-dvZhifFbrCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.0.0/24 45.136.2.0/23 128.0.119.0/24 185.117.23.0/24 185.144.100.0/24 185.144.102.0/24 185.211.48.0-185.211.50.255 185.227.240.0/22 193.201.209.0-193.201.211.255 194.36.102.0/23 194.124.64.0/24 194.124.66.0/23 195.85.68.0-195.85.70.255 Signature Algorithm: sha256WithRSAEncryption 26:5a:52:22:96:6d:20:7e:d2:9a:8c:4a:13:c1:23:2c:29:06: 5b:9b:1e:88:18:ab:a4:ee:84:db:a8:41:13:f7:7d:11:bf:b9: da:46:af:d4:5f:c1:f3:83:4c:b6:b8:6a:b1:4d:1e:3e:a6:52: 50:5c:1a:ec:60:a3:58:79:b1:60:88:09:a5:fd:c3:d0:bc:99: dd:3e:a0:ce:59:b8:06:f0:87:60:62:0a:26:9a:78:7d:2e:fe: 04:31:f8:05:7f:dc:3d:a5:82:d8:d2:54:2e:87:10:31:fe:a1: 2a:85:49:a4:38:c6:ff:4c:c0:b7:7f:ea:48:79:71:b9:bc:d8: 7d:69:d1:a9:48:e9:da:50:a5:ec:fc:59:3b:59:38:ed:48:f7: 9a:0e:6c:8e:c9:41:1d:3a:45:5d:ce:e3:5a:e1:f0:10:8f:70: 79:b4:eb:0b:76:50:a6:b4:28:4c:69:e4:96:e4:72:d9:ed:84: 99:ef:76:87:49:c9:d3:4c:f0:c1:41:43:c8:98:0a:ea:fb:70: 5a:4c:6f:4b:aa:29:fb:27:3e:e4:23:ef:c9:49:0c:e8:25:bc: 73:2e:14:88:ea:07:a8:ab:fe:05:e3:c0:40:b4:6f:bf:70:bd: 40:7b:08:ab:91:d0:b3:8c:92:16:72:79:54:41:42:68:05:84: e4:04:65:3b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZvYg5pIktINOhUnyEnOeVyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTE5MjMwNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTc3ZmJhMWMyMmJjMTcyNmRjOGIxZmU3NmY2NjE4OWYxNWJhYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMtGM6zCzuS79Qx5JkeMv7jV3nMi AOm9Y3S0OEb96RniNhWNOPMU2r4BU2HEh7knpCX8NjZBI+MwuWPsKDypdGvnk3I+ oJV6uTEZ879lwhRPg7lt/WWRJJQfjumm7yEr4bludwpQ5VCtAwgrD6vw9ruLejHk eFpV1+4Lc47y7M39byRoeN5YQEaou+YajOiDnlwU+ujwaH3NsYOd0whIlSSwSaTw sejKiEomonjpvtAZNk56o5wCD8ANAUDEfD/2bOtkQ7xAUCwuyfqFj/scJ73hrNGg smVDGXsAkcXL36mJwQqCCrj3NhO2nYhLR4ackvqfQpZJNkS8JIpxZSp83QIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFBF3+6HCK8Fybcix/nb2YYnxW6wjMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvRVhmN29jSXJ3WEp0eUxILWR2WmhpZkZickNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQALYgAAwQB LYgCAwQAgAB3AwQAuXUXAwQAuZBkAwQAuZBmMAwDBAS50zADBAC50zIDBAK54/Aw DAMEAMHJ0QMEAsHJ0AMEAcIkZgMEAMJ8QAMEAcJ8QjAMAwQCw1VEAwQAw1VGMA0G CSqGSIb3DQEBCwUAA4IBAQAmWlIilm0gftKajEoTwSMsKQZbmx6IGKuk7oTbqEET 930Rv7naRq/UX8Hzg0y2uGqxTR4+plJQXBrsYKNYebFgiAml/cPQvJndPqDOWbgG 8IdgYgommnh9Lv4EMfgFf9w9pYLY0lQuhxAx/qEqhUmkOMb/TMC3f+pIeXG5vNh9 adGpSOnaUKXs/Fk7WTjtSPeaDmyOyUEdOkVdzuNa4fAQj3B5tOsLdlCmtChMaeSW 5HLZ7YSZ73aHScnTTPDBQUPImArq+3BaTG9Lqin7Jz7kI+/JSQzoJbxzLhSI6geo q/4F48BAtG+/cL1AewirkdCzjJIWcnlUQUJoBYTkBGU7 -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:47 2026 by rpki-client