This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/M0pDr4Clch3V01pm4pja2RrFX_Q.roa File: M0pDr4Clch3V01pm4pja2RrFX_Q.roa (raw, json) Hash identifier: FaCDNXQloqHAn9HCQuN4XRRX7eJlA+OA81nG9S2/sLs= Subject key identifier: 33:4A:43:AF:80:A5:72:1D:D5:D3:5A:66:E2:98:DA:D9:1A:C5:5F:F4 Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c Certificate serial: 019B7EA6465FD82D7E1A4C48706F5641CA5A Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/M0pDr4Clch3V01pm4pja2RrFX_Q.roa Signing time: Fri 02 Jan 2026 12:19:44 +0000 ROA not before: Fri 02 Jan 2026 12:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212286 IP address blocks: 45.87.128.0/23 maxlen: 23 45.91.73.0/24 maxlen: 24 45.128.80.0/22 maxlen: 22 45.129.72.0/24 maxlen: 24 45.131.216.0/22 maxlen: 22 45.132.164.0/22 maxlen: 22 45.138.248.0/22 maxlen: 22 45.145.136.0/22 maxlen: 22 45.153.36.0/22 maxlen: 22 45.154.148.0/22 maxlen: 22 81.85.32.0/20 maxlen: 20 152.114.202.0/23 maxlen: 23 152.114.204.0/23 maxlen: 23 158.94.188.0/22 maxlen: 22 158.94.217.0/24 maxlen: 24 185.121.236.0/22 maxlen: 22 193.17.224.0/24 maxlen: 24 193.17.231.0/24 maxlen: 24 193.17.253.0/24 maxlen: 24 193.17.255.0/24 maxlen: 24 212.97.80.0/21 maxlen: 21 212.102.124.0/24 maxlen: 24 213.184.68.0/22 maxlen: 22 217.179.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:46:5f:d8:2d:7e:1a:4c:48:70:6f:56:41:ca:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c Validity Not Before: Jan 2 12:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=334a43af80a5721dd5d35a66e298dad91ac55ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e9:45:9c:67:c0:c2:c5:58:bf:92:f9:af:07: ba:96:c8:2b:33:21:58:f0:f3:f3:93:98:f5:ea:1c: 90:df:f0:81:7e:09:27:65:90:9c:d6:2f:d7:f3:2d: 94:a0:6f:3d:a2:52:ad:8b:aa:d6:44:91:3b:33:37: 54:70:1e:74:cb:ab:08:0d:f4:76:6d:9a:9b:c2:47: d6:f7:be:69:b8:71:26:03:09:9c:59:27:d8:ea:d2: 19:10:48:a6:53:93:84:2e:a0:94:01:0d:fb:fc:e8: bd:80:42:2d:a0:05:46:f4:87:d2:b8:0f:a5:b3:8b: 6f:28:57:b9:18:5d:87:b0:d3:52:0d:e3:59:9e:b8: 2b:32:e2:35:81:ea:30:77:71:08:7d:27:f5:88:19: 64:67:79:b4:ff:6d:40:f4:7e:7e:03:76:0a:1a:ee: 87:16:46:34:e1:5b:9e:b5:7f:64:43:67:89:ff:53: f4:24:f2:b9:de:15:d8:da:8b:c4:2f:11:b2:a1:5f: 10:da:78:df:52:61:42:a5:3a:d8:85:ed:ad:fe:b9: 7a:1b:f5:c7:07:19:4f:57:cb:e8:08:79:ed:a6:84: f7:d5:a6:f5:f2:21:08:a5:ce:a6:d7:bc:a0:f4:5b: 09:de:89:01:cb:45:c4:42:0b:25:9a:8b:70:9d:05: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4A:43:AF:80:A5:72:1D:D5:D3:5A:66:E2:98:DA:D9:1A:C5:5F:F4 X509v3 Authority Key Identifier: keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/M0pDr4Clch3V01pm4pja2RrFX_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.128.0/23 45.91.73.0/24 45.128.80.0/22 45.129.72.0/24 45.131.216.0/22 45.132.164.0/22 45.138.248.0/22 45.145.136.0/22 45.153.36.0/22 45.154.148.0/22 81.85.32.0/20 152.114.202.0-152.114.205.255 158.94.188.0/22 158.94.217.0/24 185.121.236.0/22 193.17.224.0/24 193.17.231.0/24 193.17.253.0/24 193.17.255.0/24 212.97.80.0/21 212.102.124.0/24 213.184.68.0/22 217.179.80.0/22 Signature Algorithm: sha256WithRSAEncryption a0:fc:dd:36:87:41:11:6a:58:29:b0:ac:e7:7c:91:d9:94:97: 56:1d:28:63:7d:0b:ca:a3:7e:5d:38:ae:d8:68:62:c4:c0:23: 67:0e:17:c0:55:c5:c4:18:b3:ba:c8:83:46:a8:65:1b:47:cd: 86:84:2c:6b:74:e8:3c:f6:48:a3:fe:38:17:8f:e3:ca:15:b3: ef:8c:4c:78:c2:45:c4:22:52:46:e8:8a:51:41:60:3d:49:69: e8:34:75:f7:34:25:36:5e:73:8c:b4:8a:5e:ff:09:d6:86:fd: d0:ef:ff:9e:d1:1d:46:3e:0b:d6:ae:2d:ef:b2:cb:f3:bb:bc: 11:3b:85:4c:1b:ae:e0:e8:0e:83:f4:0c:13:bc:f2:23:80:db: 19:eb:55:5f:49:27:d1:2e:71:78:d2:34:d2:82:2a:90:f4:54: 44:a0:ff:07:5e:0f:dd:6e:a1:4d:0d:b3:33:26:1b:e9:ea:2b: 23:2b:bc:f2:c3:f5:52:8f:bc:73:c9:d7:de:fa:b7:93:0f:73: d2:e2:9b:3b:86:2a:31:e1:d1:c7:30:10:55:c2:6d:c6:c6:71: e9:ba:0a:0a:09:00:35:5f:d4:4a:15:4c:2f:5a:4a:f6:d4:be: c7:54:33:54:42:52:81:e7:1a:4b:5e:10:68:7e:0b:b7:f0:ba: 2a:ad:21:af -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt+pkZf2C1+GkxIcG9WQcpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2 YzI0MGMwHhcNMjYwMTAyMTIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzRhNDNhZjgwYTU3MjFkZDVkMzVhNjZlMjk4ZGFkOTFhYzU1ZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OlFnGfAwsVYv5L5rwe6lsgrMyFY 8PPzk5j16hyQ3/CBfgknZZCc1i/X8y2UoG89olKti6rWRJE7MzdUcB50y6sIDfR2 bZqbwkfW975puHEmAwmcWSfY6tIZEEimU5OELqCUAQ37/Oi9gEItoAVG9IfSuA+l s4tvKFe5GF2HsNNSDeNZnrgrMuI1geowd3EIfSf1iBlkZ3m0/21A9H5+A3YKGu6H FkY04VuetX9kQ2eJ/1P0JPK53hXY2ovELxGyoV8Q2njfUmFCpTrYhe2t/rl6G/XH BxlPV8voCHntpoT31ab18iEIpc6m17yg9FsJ3okBy0XEQgslmotwnQXOYQIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFDNKQ6+ApXId1dNaZuKY2tkaxV/0MB8GA1UdIwQY MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt ODE3OTBmNjFlNzk0LzEvTTBwRHI0Q2xjaDNWMDFwbTRwamEyUnJGWF9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0 LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAEt V4ADBAAtW0kDBAItgFADBAAtgUgDBAItg9gDBAIthKQDBAItivgDBAItkYgDBAIt mSQDBAItmpQDBARRVSAwDAMEAZhyygMEAZhyzAMEAp5evAMEAJ5e2QMEArl57AME AMER4AMEAMER5wMEAMER/QMEAMER/wMEA9RhUAMEANRmfAMEAtW4RAMEAtmzUDAN BgkqhkiG9w0BAQsFAAOCAQEAoPzdNodBEWpYKbCs53yR2ZSXVh0oY30LyqN+XTiu 2GhixMAjZw4XwFXFxBizusiDRqhlG0fNhoQsa3ToPPZIo/44F4/jyhWz74xMeMJF xCJSRuiKUUFgPUlp6DR19zQlNl5zjLSKXv8J1ob90O//ntEdRj4L1q4t77LL87u8 ETuFTBuu4OgOg/QME7zyI4DbGetVX0kn0S5xeNI00oIqkPRURKD/B14P3W6hTQ2z MyYb6eorIyu88sP1Uo+8c8nX3vq3kw9z0uKbO4YqMeHRxzAQVcJtxsZx6boKCgkA NV/UShVML1pK9tS+x1QzVEJSgecaS14QaH4Lt/C6Kq0hrw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:58 2026 by rpki-client