This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/XkTjGnGGh3laYViJaWY0KDmoQI8.roa File: XkTjGnGGh3laYViJaWY0KDmoQI8.roa (raw, json) Hash identifier: IMQlknsH0owKAXY35MWVuDQJyGr8qx9A7Y7oI0Y0kaI= Subject key identifier: 5E:44:E3:1A:71:86:87:79:5A:61:58:89:69:66:34:28:39:A8:40:8F Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019BDB23992DB91E252F49097ED46C0DCCF5 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/XkTjGnGGh3laYViJaWY0KDmoQI8.roa Signing time: Tue 20 Jan 2026 11:21:41 +0000 ROA not before: Tue 20 Jan 2026 11:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.155.241.0/24 maxlen: 24 45.155.242.0/24 maxlen: 24 194.143.206.0/23 maxlen: 24 194.143.217.0/24 maxlen: 24 194.143.218.0/24 maxlen: 24 194.143.221.0/24 maxlen: 24 194.143.222.0/24 maxlen: 24 194.143.223.0/24 maxlen: 24 195.114.196.0/24 maxlen: 24 195.114.197.0/24 maxlen: 24 195.114.198.0/24 maxlen: 24 195.114.203.0/24 maxlen: 24 195.114.205.0/24 maxlen: 24 213.220.0.0/24 maxlen: 24 213.220.2.0/24 maxlen: 24 213.220.4.0/24 maxlen: 24 213.220.6.0/24 maxlen: 24 213.220.7.0/24 maxlen: 24 213.220.11.0/24 maxlen: 24 213.220.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:23:99:2d:b9:1e:25:2f:49:09:7e:d4:6c:0d:cc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 20 11:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e44e31a718687795a6158896966342839a8408f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:cc:09:7a:7e:f8:e1:46:bd:38:a2:5c:cf: 41:5a:6b:f1:42:82:10:f9:db:03:1d:36:fd:ba:64: b4:30:01:09:bf:be:aa:3b:26:7d:c2:c9:c1:cc:95: 63:43:61:23:1b:86:68:ae:6d:c9:6a:ec:e6:25:dc: cb:b2:4a:1e:c9:3b:5a:b7:0c:17:ea:0a:cf:c9:54: 4e:81:37:9c:1a:1e:09:6a:31:76:d8:9f:2c:59:a4: 24:ab:13:34:b2:db:21:af:bc:4b:d1:df:f8:96:ba: 05:a4:14:79:10:69:f9:62:f0:fc:29:62:12:8b:a0: 73:03:83:ef:a6:8f:b9:87:28:61:67:5e:d9:b8:f0: e7:20:85:5f:78:fc:10:2d:7f:4b:15:a8:20:68:b9: 4b:49:02:7e:8b:a6:a7:84:04:1a:b2:93:42:b6:af: 35:c5:0b:7e:50:34:ac:4f:e9:8b:9a:ff:62:e4:22: 00:b9:40:1a:9b:9b:32:df:8a:8b:99:bd:77:39:d3: 65:f8:18:8c:c2:06:db:06:d0:bf:cd:6a:03:f9:04: c2:2b:99:c6:9f:ed:f4:92:47:0b:17:d7:f1:a5:de: 56:a5:bb:a2:1a:5d:4f:b5:41:58:e6:4d:b4:52:a3: d9:0f:76:03:a5:b1:06:ea:a9:2b:3b:61:03:17:e1: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:44:E3:1A:71:86:87:79:5A:61:58:89:69:66:34:28:39:A8:40:8F X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/XkTjGnGGh3laYViJaWY0KDmoQI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.241.0-45.155.242.255 194.143.206.0/23 194.143.217.0-194.143.218.255 194.143.221.0-194.143.223.255 195.114.196.0-195.114.198.255 195.114.203.0/24 195.114.205.0/24 213.220.0.0/24 213.220.2.0/24 213.220.4.0/24 213.220.6.0/23 213.220.11.0/24 213.220.13.0/24 Signature Algorithm: sha256WithRSAEncryption 58:16:9c:a3:91:35:1a:33:86:aa:e0:b6:53:8d:0b:b1:55:15: 22:1c:a7:9e:b7:dc:af:d6:e8:45:4b:f2:fe:f1:d1:95:3d:55: 11:a4:36:6e:1f:5b:ec:4b:09:43:7d:e8:05:3e:ed:13:c1:d3: a9:53:49:0b:e9:e1:b3:a3:2b:4b:2e:bb:c9:86:80:2d:bf:2d: 97:7b:1b:c1:b7:62:26:75:fc:76:aa:f8:a9:00:2b:45:a1:d3: 64:d0:35:b7:83:d8:f3:69:76:8a:ac:37:3c:e6:8f:41:bc:df: df:9f:fa:84:5e:e6:2d:5c:3b:10:cc:fa:5c:65:6c:13:5d:0f: 5a:2e:d9:30:0c:bc:03:af:ab:d5:96:a8:c0:4e:6d:ee:66:c5: a4:02:7b:0c:cd:fa:9a:9e:21:df:9d:ba:cb:84:a2:b6:c3:ed: 8b:18:cd:63:d2:6b:1a:e8:67:19:ff:fd:2c:23:83:cf:13:e8: ab:9c:fb:19:7e:df:71:17:ea:74:23:e8:24:7c:1f:8e:46:af: 70:e6:58:f6:56:5c:29:56:68:a3:7e:d2:9b:20:a4:2d:e3:f5: ab:02:d0:d5:85:c6:d1:53:26:26:a9:59:79:98:02:92:8c:4d: 22:92:ab:2b:14:fc:f6:1e:77:aa:69:4d:a1:88:a1:39:b4:5c: 46:34:dd:ed -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZvbI5ktuR4lL0kJftRsDcz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTIwMTEyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTQ0ZTMxYTcxODY4Nzc5NWE2MTU4ODk2OTY2MzQyODM5YTg0MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEnMCXp++OFGvTiiXM9BWmvxQoIQ +dsDHTb9umS0MAEJv76qOyZ9wsnBzJVjQ2EjG4Zorm3JauzmJdzLskoeyTtatwwX 6grPyVROgTecGh4JajF22J8sWaQkqxM0stshr7xL0d/4lroFpBR5EGn5YvD8KWIS i6BzA4Pvpo+5hyhhZ17ZuPDnIIVfePwQLX9LFaggaLlLSQJ+i6anhAQaspNCtq81 xQt+UDSsT+mLmv9i5CIAuUAam5sy34qLmb13OdNl+BiMwgbbBtC/zWoD+QTCK5nG n+30kkcLF9fxpd5WpbuiGl1PtUFY5k20UqPZD3YDpbEG6qkrO2EDF+E2XQIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFF5E4xpxhod5WmFYiWlmNCg5qECPMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvWGtUakduR0doM2xhWVZpSmFXWTBLRG1vUUk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbjAMAwQALZvx AwQALZvyAwQBwo/OMAwDBADCj9kDBADCj9owDAMEAMKP3QMEBcKPwDAMAwQCw3LE AwQAw3LGAwQAw3LLAwQAw3LNAwQA1dwAAwQA1dwCAwQA1dwEAwQB1dwGAwQA1dwL AwQA1dwNMA0GCSqGSIb3DQEBCwUAA4IBAQBYFpyjkTUaM4aq4LZTjQuxVRUiHKee t9yv1uhFS/L+8dGVPVURpDZuH1vsSwlDfegFPu0TwdOpU0kL6eGzoytLLrvJhoAt vy2XexvBt2Imdfx2qvipACtFodNk0DW3g9jzaXaKrDc85o9BvN/fn/qEXuYtXDsQ zPpcZWwTXQ9aLtkwDLwDr6vVlqjATm3uZsWkAnsMzfqaniHfnbrLhKK2w+2LGM1j 0msa6GcZ//0sI4PPE+irnPsZft9xF+p0I+gkfB+ORq9w5lj2VlwpVmijftKbIKQt 4/WrAtDVhcbRUyYmqVl5mAKSjE0ikqsrFPz2HneqaU2hiKE5tFxGNN3t -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:36 2026 by rpki-client