This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/ADB2NS1OG8KwsVLAD6NYCaCtJi4.roa File: ADB2NS1OG8KwsVLAD6NYCaCtJi4.roa (raw, json) Hash identifier: aji7irnO+hSBbZms7WFiwbNpASyVLJ3jxlOuf/BgaKY= Subject key identifier: 00:30:76:35:2D:4E:1B:C2:B0:B1:52:C0:0F:A3:58:09:A0:AD:26:2E Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Certificate serial: 019B79ECE6B0D9BBF570D5241ABBB40E6AF6 Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/ADB2NS1OG8KwsVLAD6NYCaCtJi4.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49870 IP address blocks: 45.80.36.0/23 maxlen: 23 45.95.144.0/23 maxlen: 23 45.95.145.0/24 maxlen: 24 45.95.146.0/24 maxlen: 24 45.95.147.0/24 maxlen: 24 2a0e:3980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e6:b0:d9:bb:f5:70:d5:24:1a:bb:b4:0e:6a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=003076352d4e1bc2b0b152c00fa35809a0ad262e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:1b:fe:34:de:b6:da:46:61:ad:44:0d:65: 7d:fc:6d:65:8e:f1:20:aa:9f:da:59:04:8e:65:03: cc:fd:b0:d1:6d:b3:aa:82:1b:39:3d:0e:12:55:23: 36:b2:3e:d7:f3:88:dd:e8:ad:fb:ae:36:49:b7:de: 34:df:e2:c8:2e:a4:5e:da:59:3b:95:21:25:05:7a: 7a:5c:14:b6:3a:dc:f7:89:fe:d6:07:4d:b4:a3:f6: ac:71:b8:d1:cf:e4:0f:56:ee:b0:6d:6f:10:85:71: 68:19:f5:75:ab:bc:e0:68:bb:b6:3d:11:6b:1a:25: fb:fb:8e:28:c9:99:8d:d8:ca:c9:37:81:85:2e:3a: 2a:ef:26:6c:ee:4d:f7:bf:90:3e:dc:4e:dc:d3:f6: ff:8f:de:92:3f:af:06:15:e8:12:8c:4e:f9:47:9a: e7:42:80:e9:d7:d3:a5:7a:83:45:1a:47:34:09:ae: fb:10:77:65:37:b5:e8:a2:cd:8b:36:03:d5:76:a9: d2:30:08:58:da:24:13:91:19:c1:ae:f1:92:f3:30: fa:04:f8:5f:75:28:82:7f:06:71:68:ed:1f:57:19: f4:61:b1:4c:4d:6c:1c:ce:43:86:f4:d1:91:34:df: 42:53:20:81:1d:39:14:a7:49:b8:54:03:c0:59:9d: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:30:76:35:2D:4E:1B:C2:B0:B1:52:C0:0F:A3:58:09:A0:AD:26:2E X509v3 Authority Key Identifier: keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/ADB2NS1OG8KwsVLAD6NYCaCtJi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.36.0/23 45.95.144.0/22 IPv6: 2a0e:3980::/29 Signature Algorithm: sha256WithRSAEncryption 9b:ca:04:a0:94:51:1f:6b:0e:29:1b:32:e7:cd:99:86:35:a4: c0:6b:b9:c5:07:d4:3f:b7:cb:75:30:4d:b5:3a:64:d9:97:fe: bf:ed:e9:58:ee:ba:2e:dc:da:9a:96:16:79:e7:51:71:b6:6b: 66:22:0f:0d:9d:c9:54:d6:78:b4:97:ec:03:c4:80:7b:90:c3: 08:b5:29:d3:2b:60:55:6a:86:91:cc:c8:14:01:39:50:a7:8d: 2b:a6:ba:30:fe:a8:e4:1b:81:40:66:a9:fc:3f:21:14:87:86: 9e:f8:b4:11:6b:2f:bc:5f:c9:ab:40:77:7e:36:90:c9:30:f2: 0f:2d:4a:26:72:fa:d7:b0:04:67:e3:2e:88:71:4b:75:87:93: 47:54:26:fe:ad:55:89:17:67:79:70:2f:5d:17:6e:33:4c:cd: 92:2b:6f:b0:91:8b:f9:1c:d4:e5:19:c7:d4:63:5c:f1:75:ca: e7:14:64:1b:ec:0b:35:a3:43:e6:15:7f:5d:f4:e5:eb:bb:42: e1:5d:07:32:d5:5c:67:f1:e0:32:8f:81:8f:2f:db:5c:e4:7f: 65:c5:22:aa:94:70:d2:d9:f9:55:a6:0a:e4:91:b0:a9:41:27: fb:0a:c6:9a:f7:94:10:57:a8:0b:c0:1b:a9:55:92:80:91:30: 24:a3:6f:ae -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57Oaw2bv1cNUkGru0Dmr2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2 Y2QxYTMwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDMwNzYzNTJkNGUxYmMyYjBiMTUyYzAwZmEzNTgwOWEwYWQyNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqQb/jTettpGYa1EDWV9/G1ljvEg qp/aWQSOZQPM/bDRbbOqghs5PQ4SVSM2sj7X84jd6K37rjZJt9403+LILqRe2lk7 lSElBXp6XBS2Otz3if7WB020o/ascbjRz+QPVu6wbW8QhXFoGfV1q7zgaLu2PRFr GiX7+44oyZmN2MrJN4GFLjoq7yZs7k33v5A+3E7c0/b/j96SP68GFegSjE75R5rn QoDp19OleoNFGkc0Ca77EHdlN7Xoos2LNgPVdqnSMAhY2iQTkRnBrvGS8zD6BPhf dSiCfwZxaO0fVxn0YbFMTWwczkOG9NGRNN9CUyCBHTkUp0m4VAPAWZ2KGwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAAwdjUtThvCsLFSwA+jWAmgrSYuMB8GA1UdIwQY MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt MmVjZGExMWRlMTUzLzEvQURCMk5TMU9HOEt3c1ZMQUQ2TllDYUN0Smk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLVAkAwQC LV+QMA0EAgACMAcDBQMqDjmAMA0GCSqGSIb3DQEBCwUAA4IBAQCbygSglFEfaw4p GzLnzZmGNaTAa7nFB9Q/t8t1ME21OmTZl/6/7elY7rou3NqalhZ551FxtmtmIg8N nclU1ni0l+wDxIB7kMMItSnTK2BVaoaRzMgUATlQp40rprow/qjkG4FAZqn8PyEU h4ae+LQRay+8X8mrQHd+NpDJMPIPLUomcvrXsARn4y6IcUt1h5NHVCb+rVWJF2d5 cC9dF24zTM2SK2+wkYv5HNTlGcfUY1zxdcrnFGQb7As1o0PmFX9d9OXru0LhXQcy 1Vxn8eAyj4GPL9tc5H9lxSKqlHDS2flVpgrkkbCpQSf7Csaa95QQV6gLwBupVZKA kTAko2+u -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:00 2026 by rpki-client