This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa File: FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa (raw, json) Hash identifier: dq1d/UwLiz9XXEmCgqOT7UCJTR2SgOpkulgHHbWFy0Y= Subject key identifier: 15:29:14:D7:3B:78:C2:F3:0B:D9:3B:5F:CB:C9:3A:23:BA:2C:F1:9B Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Certificate serial: 019B7DC9565B8DB00F2A12C8E90988291603 Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa Signing time: Fri 02 Jan 2026 08:18:25 +0000 ROA not before: Fri 02 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49788 IP address blocks: 45.153.104.0/22 maxlen: 22 79.141.96.0/20 maxlen: 20 91.90.104.0/21 maxlen: 21 91.189.120.0/21 maxlen: 21 91.193.0.0/22 maxlen: 24 91.209.212.0/24 maxlen: 24 91.218.184.0/22 maxlen: 22 91.220.165.0/24 maxlen: 24 91.221.130.0/23 maxlen: 23 91.223.100.0/24 maxlen: 24 91.225.60.0/22 maxlen: 22 93.184.112.0/21 maxlen: 21 151.252.8.0/21 maxlen: 24 176.111.206.0/23 maxlen: 23 185.7.192.0/22 maxlen: 22 185.55.104.0/22 maxlen: 22 185.80.180.0/22 maxlen: 24 185.168.72.0/22 maxlen: 22 193.202.115.0/24 maxlen: 24 2001:67c:230::/48 maxlen: 48 2001:67c:206c::/48 maxlen: 48 2a02:d140::/29 maxlen: 29 2a04:d340::/29 maxlen: 29 2a0b:f200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:56:5b:8d:b0:0f:2a:12:c8:e9:09:88:29:16:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Validity Not Before: Jan 2 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152914d73b78c2f30bd93b5fcbc93a23ba2cf19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:e6:3c:4e:6e:1e:d9:e9:5b:cc:84:a7:4b: 1d:80:22:35:b0:e3:0c:38:04:4c:5a:54:07:0a:03: 9b:07:b2:c9:74:22:99:73:70:9b:57:d6:01:f8:48: 36:df:c6:03:59:eb:f9:15:8f:05:67:da:06:60:80: f9:b9:a9:a7:ca:e8:98:fe:b4:8d:d3:ae:d2:ca:f1: eb:dd:42:4c:c2:b7:87:fe:6d:39:da:69:0f:fe:e3: 40:2a:cc:30:c8:3b:45:a6:7f:94:7c:e1:97:0f:b2: 68:d1:ff:f5:f3:02:32:c2:96:92:df:05:81:34:5f: b4:c5:93:55:95:0e:fa:ae:d9:ca:82:23:f1:87:f8: 30:54:c7:72:78:23:30:64:a5:72:2e:e2:7b:c0:28: f9:af:2a:2d:af:28:11:85:e6:b4:8e:f3:89:a8:87: b9:4a:88:b8:27:c5:14:d1:38:c7:e5:df:b0:c5:a6: 4e:7f:f9:9e:d0:ba:ee:5d:d7:bb:46:80:c5:24:6c: 2b:5f:6f:49:79:0c:40:4d:b6:92:d1:7f:08:46:8b: a1:f6:2b:03:8d:e5:f3:e1:1b:3e:3a:f2:ea:1b:e5: 35:b9:78:b1:cc:c9:2b:26:91:c5:21:6f:38:00:af: 79:74:6a:d9:29:f5:ea:9b:a8:d6:4e:7b:44:58:91: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:29:14:D7:3B:78:C2:F3:0B:D9:3B:5F:CB:C9:3A:23:BA:2C:F1:9B X509v3 Authority Key Identifier: keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.104.0/22 79.141.96.0/20 91.90.104.0/21 91.189.120.0/21 91.193.0.0/22 91.209.212.0/24 91.218.184.0/22 91.220.165.0/24 91.221.130.0/23 91.223.100.0/24 91.225.60.0/22 93.184.112.0/21 151.252.8.0/21 176.111.206.0/23 185.7.192.0/22 185.55.104.0/22 185.80.180.0/22 185.168.72.0/22 193.202.115.0/24 IPv6: 2001:67c:230::/48 2001:67c:206c::/48 2a02:d140::/29 2a04:d340::/29 2a0b:f200::/32 Signature Algorithm: sha256WithRSAEncryption 33:96:02:50:f1:c5:3a:0d:e4:6d:87:3a:82:37:57:b7:d0:c4: d6:b6:76:cb:2a:f2:a9:ca:8d:62:84:78:d8:69:76:79:3a:22: 37:66:ba:3e:e5:6d:ec:67:ec:f2:01:24:c8:b4:7e:26:de:f1: 77:20:95:d3:77:e1:27:f3:32:4c:28:a0:6a:61:6b:aa:c6:d9: 40:6e:e2:52:25:6e:d2:a7:76:be:21:b8:65:30:6b:26:d4:00: c2:aa:1f:39:1b:c7:ef:1e:d9:61:f1:9f:43:b1:14:48:c7:6d: 11:b7:65:df:0a:1a:95:04:7e:9c:9c:94:ee:2f:f5:a6:f7:ea: fa:e0:7a:f6:09:ea:97:c4:01:56:ff:2b:e5:d0:19:e3:10:b3: 83:79:5b:f9:42:c5:69:0d:c4:8d:4c:3b:69:40:29:e3:7b:25: 53:3d:c6:65:74:ad:30:90:84:5e:8c:be:d1:49:1e:30:a4:f0: 9d:a1:ae:02:f1:31:ae:20:3b:26:d6:a4:06:ea:58:7a:a0:58: a6:b7:b6:e4:c2:74:07:da:c3:c1:b9:b5:e9:13:0c:49:11:59: 08:79:92:51:0f:68:c1:a5:f8:67:6c:92:eb:ab:5e:96:e4:fb: 49:1e:0c:57:6c:c0:3d:eb:03:ab:0c:76:25:64:d4:b7:e7:7c: ba:13:ec:93 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt9yVZbjbAPKhLI6QmIKRYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw ZmVkOWMwHhcNMjYwMTAyMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTI5MTRkNzNiNzhjMmYzMGJkOTNiNWZjYmM5M2EyM2JhMmNmMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4bmPE5uHtnpW8yEp0sdgCI1sOMM OARMWlQHCgObB7LJdCKZc3CbV9YB+Eg238YDWev5FY8FZ9oGYID5uamnyuiY/rSN 067SyvHr3UJMwreH/m052mkP/uNAKswwyDtFpn+UfOGXD7Jo0f/18wIywpaS3wWB NF+0xZNVlQ76rtnKgiPxh/gwVMdyeCMwZKVyLuJ7wCj5ryotrygRhea0jvOJqIe5 Soi4J8UU0TjH5d+wxaZOf/me0LruXde7RoDFJGwrX29JeQxATbaS0X8IRouh9isD jeXz4Rs+OvLqG+U1uXixzMkrJpHFIW84AK95dGrZKfXqm6jWTntEWJFp8wIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFBUpFNc7eMLzC9k7X8vJOiO6LPGbMB8GA1UdIwQY MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It ODkyOTZjY2IzNWY1LzEvRlNrVTF6dDR3dk1MMlR0Znk4azZJN29zOFpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1 LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTB4BAIAATByAwQCLZlo AwQET41gAwQDW1poAwQDW714AwQCW8EAAwQAW9HUAwQCW9q4AwQAW9ylAwQBW92C AwQAW99kAwQCW+E8AwQDXbhwAwQDl/wIAwQBsG/OAwQCuQfAAwQCuTdoAwQCuVC0 AwQCuahIAwQAwcpzMC0EAgACMCcDBwAgAQZ8AjADBwAgAQZ8IGwDBQMqAtFAAwUD KgTTQAMFACoL8gAwDQYJKoZIhvcNAQELBQADggEBADOWAlDxxToN5G2HOoI3V7fQ xNa2dssq8qnKjWKEeNhpdnk6Ijdmuj7lbexn7PIBJMi0fibe8XcgldN34SfzMkwo oGpha6rG2UBu4lIlbtKndr4huGUwaybUAMKqHzkbx+8e2WHxn0OxFEjHbRG3Zd8K GpUEfpyclO4v9ab36vrgevYJ6pfEAVb/K+XQGeMQs4N5W/lCxWkNxI1MO2lAKeN7 JVM9xmV0rTCQhF6MvtFJHjCk8J2hrgLxMa4gOybWpAbqWHqgWKa3tuTCdAfaw8G5 tekTDEkRWQh5klEPaMGl+GdskuurXpbk+0keDFdswD3rA6sMdiVk1LfnfLoT7JM= -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:54 2026 by rpki-client