This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/auDg02aDw-Ng4UMnzRMAZPV_78A.roa File: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (raw, json) Hash identifier: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic= Subject key identifier: 6A:E0:E0:D3:66:83:C3:E3:60:E1:43:27:CD:13:00:64:F5:7F:EF:C0 Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Certificate serial: 019B7CEE67819830FEA4005851601407764F Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/auDg02aDw-Ng4UMnzRMAZPV_78A.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61060 IP address blocks: 45.158.204.0/23 maxlen: 23 185.132.236.0/22 maxlen: 22 194.120.124.0/23 maxlen: 23 194.120.190.0/23 maxlen: 23 194.122.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:67:81:98:30:fe:a4:00:58:51:60:14:07:76:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ae0e0d36683c3e360e14327cd130064f57fefc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ac:2b:9f:c8:f8:c0:74:20:04:f1:c5:37:4d: 65:56:39:ac:bd:ef:7f:23:22:83:ce:20:12:f6:8b: 30:06:9b:5b:75:73:d6:d7:70:fb:f2:fd:a3:82:84: 8a:82:69:65:f7:3c:4d:b2:9c:c6:7d:51:35:42:5b: ae:c7:5e:ac:97:92:66:7e:a5:ee:d3:54:1b:90:15: 7f:c6:47:11:f3:ae:c4:1b:75:4a:93:cf:7d:ca:46: 36:6d:84:a7:e9:7f:c1:d0:55:f4:40:55:5c:d3:b6: de:96:3d:47:64:e6:0f:9d:0f:b1:69:23:c8:f7:9a: 78:03:44:fc:2b:4b:0f:d7:f1:a5:82:da:cc:06:ef: f3:7f:f2:89:16:a8:d8:8b:b7:d0:e8:72:1a:88:46: 13:b5:40:88:75:fc:eb:eb:53:ed:e6:d6:22:18:2c: 84:e7:2c:63:88:22:15:58:8b:7a:c2:47:60:e0:3a: 02:84:6f:ce:b3:73:b3:b3:f0:33:1b:05:b4:0b:62: bb:0d:8f:36:36:8d:d4:c9:ce:60:5d:cc:8d:b8:43: 80:a7:a1:62:8f:2c:a9:97:58:14:df:de:39:89:8f: fc:81:de:49:25:3e:ac:1b:d1:d9:b5:b0:98:09:e3: 61:a2:f5:f7:64:57:89:5c:ce:3b:59:86:19:8d:3d: bc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E0:E0:D3:66:83:C3:E3:60:E1:43:27:CD:13:00:64:F5:7F:EF:C0 X509v3 Authority Key Identifier: keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/auDg02aDw-Ng4UMnzRMAZPV_78A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.204.0/23 185.132.236.0/22 194.120.124.0/23 194.120.190.0/23 194.122.240.0/22 Signature Algorithm: sha256WithRSAEncryption 10:19:27:49:2b:88:3e:4d:19:a8:35:cf:64:dd:d5:c5:bb:d1: ab:0a:ad:82:29:c8:37:bb:d8:89:29:64:1a:36:62:fd:80:09: 90:14:f0:be:3b:1b:5c:ec:ac:43:68:63:7e:75:13:b2:37:b2: bd:eb:88:04:ef:68:d7:b6:8a:17:e4:da:a7:60:07:33:dd:1b: b0:aa:cd:ba:bf:72:9c:57:65:97:54:cc:9b:24:5e:5e:59:38: 0a:7a:23:cc:56:7b:8a:9d:81:39:9d:1a:da:bf:eb:66:ad:4e: f4:0c:93:a6:8f:63:6a:dd:58:49:0a:16:ed:8f:33:e0:ab:7e: 7b:c6:aa:52:0d:2f:14:64:95:ee:c2:72:97:b8:a3:6e:d3:e5: 22:91:e9:c0:48:95:eb:be:4c:4e:27:9f:4d:99:1c:82:7b:55: 26:09:67:eb:9a:b3:48:97:a1:7e:04:76:37:34:10:05:f7:23: e7:cb:cd:8c:88:13:05:d8:45:27:55:07:e3:98:18:9a:21:f0: 85:c0:48:f5:60:60:5d:ad:7f:d5:0d:16:cc:ab:82:81:96:86: ed:5f:cf:fc:d9:3f:3a:62:fa:97:7a:a2:ea:43:9d:b9:91:06: 47:fb:3a:56:c8:a4:42:7f:ec:1c:1e:e9:7c:68:54:41:6b:97: b5:79:63:b3 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt87meBmDD+pABYUWAUB3ZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5 NjNmZDIwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWUwZTBkMzY2ODNjM2UzNjBlMTQzMjdjZDEzMDA2NGY1N2ZlZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66wrn8j4wHQgBPHFN01lVjmsve9/ IyKDziAS9oswBptbdXPW13D78v2jgoSKgmll9zxNspzGfVE1Qluux16sl5JmfqXu 01QbkBV/xkcR867EG3VKk899ykY2bYSn6X/B0FX0QFVc07belj1HZOYPnQ+xaSPI 95p4A0T8K0sP1/GlgtrMBu/zf/KJFqjYi7fQ6HIaiEYTtUCIdfzr61Pt5tYiGCyE 5yxjiCIVWIt6wkdg4DoChG/Os3Ozs/AzGwW0C2K7DY82No3Uyc5gXcyNuEOAp6Fi jyypl1gU3945iY/8gd5JJT6sG9HZtbCYCeNhovX3ZFeJXM47WYYZjT28qwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGrg4NNmg8PjYOFDJ80TAGT1f+/AMB8GA1UdIwQY MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt MjkxYWFlZGQ1OGNjLzEvYXVEZzAyYUR3LU5nNFVNbnpSTUFaUFZfNzhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLZ7MAwQC uYTsAwQBwnh8AwQBwni+AwQCwnrwMA0GCSqGSIb3DQEBCwUAA4IBAQAQGSdJK4g+ TRmoNc9k3dXFu9GrCq2CKcg3u9iJKWQaNmL9gAmQFPC+Oxtc7KxDaGN+dROyN7K9 64gE72jXtooX5NqnYAcz3Ruwqs26v3KcV2WXVMybJF5eWTgKeiPMVnuKnYE5nRra v+tmrU70DJOmj2Nq3VhJChbtjzPgq357xqpSDS8UZJXuwnKXuKNu0+UikenASJXr vkxOJ59NmRyCe1UmCWfrmrNIl6F+BHY3NBAF9yPny82MiBMF2EUnVQfjmBiaIfCF wEj1YGBdrX/VDRbMq4KBlobtX8/82T86YvqXeqLqQ525kQZH+zpWyKRCf+wcHul8 aFRBa5e1eWOz -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:21 2026 by rpki-client