This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/2dwCjqUUqCKWVJ6DvVzwdYlDvXQ.roa File: 2dwCjqUUqCKWVJ6DvVzwdYlDvXQ.roa (raw, json) Hash identifier: DPrgb6Kgdw0KIjv41bfjhUKWYAfrl79h2DWiUA8CcIQ= Subject key identifier: D9:DC:02:8E:A5:14:A8:22:96:54:9E:83:BD:5C:F0:75:89:43:BD:74 Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa Certificate serial: 019BA1EC43BEF473C5279724D0FCEDE9AB60 Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/2dwCjqUUqCKWVJ6DvVzwdYlDvXQ.roa Signing time: Fri 09 Jan 2026 08:42:54 +0000 ROA not before: Fri 09 Jan 2026 08:42:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207147 IP address blocks: 45.11.68.0/22 maxlen: 24 45.88.128.0/22 maxlen: 24 45.143.208.0/22 maxlen: 22 45.143.208.0/24 maxlen: 24 45.143.209.0/24 maxlen: 24 45.143.210.0/24 maxlen: 24 45.143.211.0/24 maxlen: 24 46.183.32.0/22 maxlen: 22 46.183.32.0/24 maxlen: 24 46.183.33.0/24 maxlen: 24 46.183.34.0/24 maxlen: 24 46.183.35.0/24 maxlen: 24 46.183.36.0/22 maxlen: 22 46.183.36.0/24 maxlen: 24 46.183.37.0/24 maxlen: 24 46.183.38.0/24 maxlen: 24 46.183.39.0/24 maxlen: 24 84.247.4.0/22 maxlen: 24 85.204.148.0/22 maxlen: 24 85.204.148.0/24 maxlen: 24 85.204.149.0/24 maxlen: 24 85.204.150.0/24 maxlen: 24 85.204.151.0/24 maxlen: 24 89.37.228.0/22 maxlen: 24 130.0.88.0/22 maxlen: 24 130.0.88.0/24 maxlen: 24 130.0.89.0/24 maxlen: 24 176.223.176.0/22 maxlen: 24 185.164.212.0/22 maxlen: 24 185.178.88.0/22 maxlen: 24 185.178.91.0/24 maxlen: 24 185.194.120.0/22 maxlen: 24 185.237.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:ec:43:be:f4:73:c5:27:97:24:d0:fc:ed:e9:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa Validity Not Before: Jan 9 08:42:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9dc028ea514a82296549e83bd5cf0758943bd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:23:21:82:d2:92:3a:2f:75:24:80:4f:32: a1:ff:83:d6:c0:5c:d6:1c:72:42:96:ec:37:1f:cd: a9:29:dc:00:99:7e:54:53:c8:7f:e8:4a:ad:fa:50: 64:79:d3:32:63:ba:de:b2:ec:93:d8:b6:c4:56:35: 27:25:f2:c8:f4:b8:46:db:27:c8:19:67:e7:2c:fa: cd:7b:1f:e6:60:65:88:a1:25:27:6c:49:0d:ae:b5: c1:84:d0:b8:f3:05:30:b1:a0:35:0e:c6:f7:ca:f8: ee:c3:bb:1d:49:41:98:72:d4:0f:92:fe:66:b3:a6: 6f:c7:33:03:66:dd:a5:97:64:2a:e3:05:3b:cb:b3: 02:0b:e2:23:c0:6f:2d:8b:7b:83:44:c1:ba:5b:e8: 93:ae:9e:a3:d2:94:10:08:4d:a7:af:96:e9:7d:a5: 4b:02:3f:81:98:62:32:32:61:5c:a4:f7:2d:14:c5: 9c:9d:bc:a8:a5:ab:ff:f0:6a:3c:db:04:ca:e5:2d: 4f:ab:61:45:38:62:f9:bc:d3:1c:45:af:e3:6a:94: f7:54:e2:bb:15:ac:4b:5f:a4:4f:31:e2:04:f4:8f: 64:94:c9:d5:18:7f:2f:59:fe:81:2f:f6:5f:e4:63: 03:0d:cb:b1:73:43:26:1a:62:e1:ee:96:81:1d:67: ba:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DC:02:8E:A5:14:A8:22:96:54:9E:83:BD:5C:F0:75:89:43:BD:74 X509v3 Authority Key Identifier: keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/2dwCjqUUqCKWVJ6DvVzwdYlDvXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.68.0/22 45.88.128.0/22 45.143.208.0/22 46.183.32.0/21 84.247.4.0/22 85.204.148.0/22 89.37.228.0/22 130.0.88.0/22 176.223.176.0/22 185.164.212.0/22 185.178.88.0/22 185.194.120.0/22 185.237.40.0/22 Signature Algorithm: sha256WithRSAEncryption aa:67:37:25:91:23:83:83:bc:ad:4a:34:77:64:ca:b0:1a:ec: f9:a6:72:2e:28:ab:78:ae:67:ee:c7:d7:8b:3e:29:a3:47:2b: 3d:2d:25:18:11:68:d0:90:8d:be:f0:e5:b2:bf:25:39:10:86: 72:1e:eb:ff:a1:1e:aa:5e:8a:5d:c0:ad:45:61:e1:e3:e7:5f: c1:31:bb:21:89:e9:0f:fb:34:fb:43:59:a5:64:59:bc:62:26: 4d:36:4b:e1:4a:e7:d8:14:eb:26:07:f9:8d:01:87:85:ab:47: 02:ce:d7:d1:ee:26:4d:a9:a3:74:a8:f8:6c:2a:9d:7b:4c:ce: ef:bf:f2:4a:e6:5e:00:f7:99:00:12:dc:01:7b:16:ad:09:98: f7:15:da:a6:95:1f:de:12:bd:3a:c9:06:e8:90:f9:3c:22:e1: 11:e9:98:7e:e2:b4:ef:dc:e9:87:d5:c7:db:10:d4:ed:6e:a4: 6f:fe:59:bd:a3:0c:78:dc:6e:c4:9a:d1:60:b4:ca:94:8e:d2: 11:eb:f3:b3:86:2d:b8:56:83:87:f0:1f:e7:06:56:d6:cb:6d: cf:08:9d:59:be:39:35:20:15:a8:f7:3a:96:4a:c3:e4:82:01: 7b:ea:80:3d:e4:fe:34:a9:95:95:e8:d9:62:4b:1d:25:ba:61: ca:bb:f9:53 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZuh7EO+9HPFJ5ck0Pzt6atgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzhmZjVkYWIzM2M0MmRhNjVmZTRlMWFiZmJjYTRlYWZi ZGQyYWEwHhcNMjYwMTA5MDg0MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWRjMDI4ZWE1MTRhODIyOTY1NDllODNiZDVjZjA3NTg5NDNiZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyojIYLSkjovdSSATzKh/4PWwFzW HHJCluw3H82pKdwAmX5UU8h/6Eqt+lBkedMyY7resuyT2LbEVjUnJfLI9LhG2yfI GWfnLPrNex/mYGWIoSUnbEkNrrXBhNC48wUwsaA1Dsb3yvjuw7sdSUGYctQPkv5m s6ZvxzMDZt2ll2Qq4wU7y7MCC+IjwG8ti3uDRMG6W+iTrp6j0pQQCE2nr5bpfaVL Aj+BmGIyMmFcpPctFMWcnbyopav/8Go82wTK5S1Pq2FFOGL5vNMcRa/japT3VOK7 FaxLX6RPMeIE9I9klMnVGH8vWf6BL/Zf5GMDDcuxc0MmGmLh7paBHWe6ywIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFNncAo6lFKgillSeg71c8HWJQ710MB8GA1UdIwQY MBaAFIl4/12rM8Qtpl/k4av7yk6vvdKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQt ZDAyZDk2YzM2Y2EzLzEvMmR3Q2pxVVVxQ0tXVko2RHZWendkWWxEdlhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQtZDAyZDk2YzM2Y2Ez LzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQCLQtEAwQC LViAAwQCLY/QAwQDLrcgAwQCVPcEAwQCVcyUAwQCWSXkAwQCggBYAwQCsN+wAwQC uaTUAwQCubJYAwQCucJ4AwQCue0oMA0GCSqGSIb3DQEBCwUAA4IBAQCqZzclkSOD g7ytSjR3ZMqwGuz5pnIuKKt4rmfux9eLPimjRys9LSUYEWjQkI2+8OWyvyU5EIZy Huv/oR6qXopdwK1FYeHj51/BMbshiekP+zT7Q1mlZFm8YiZNNkvhSufYFOsmB/mN AYeFq0cCztfR7iZNqaN0qPhsKp17TM7vv/JK5l4A95kAEtwBexatCZj3FdqmlR/e Er06yQbokPk8IuER6Zh+4rTv3OmH1cfbENTtbqRv/lm9owx43G7EmtFgtMqUjtIR 6/Ozhi24VoOH8B/nBlbWy23PCJ1Zvjk1IBWo9zqWSsPkggF76oA95P40qZWV6Nli Sx0lumHKu/lT -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:47 2026 by rpki-client