This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/O9WsHSnzYk742zCkAgQTbUGTREs.roa File: O9WsHSnzYk742zCkAgQTbUGTREs.roa (raw, json) Hash identifier: C1fEjAGlIYgN7QiKgwHHUyzZLesUlNI/jIZwl5Vbn8I= Subject key identifier: 3B:D5:AC:1D:29:F3:62:4E:F8:DB:30:A4:02:04:13:6D:41:93:44:4B Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Certificate serial: 019B7B35A693A0EBE11EDB1DB5034E573577 Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/O9WsHSnzYk742zCkAgQTbUGTREs.roa Signing time: Thu 01 Jan 2026 20:17:52 +0000 ROA not before: Thu 01 Jan 2026 20:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208414 IP address blocks: 45.138.104.0/24 maxlen: 29 45.138.105.0/24 maxlen: 29 45.138.106.0/24 maxlen: 24 45.138.107.0/24 maxlen: 24 89.221.208.0/24 maxlen: 24 89.221.209.0/24 maxlen: 24 89.221.210.0/24 maxlen: 24 89.221.211.0/24 maxlen: 24 185.8.236.0/22 maxlen: 24 2a0e:acc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a6:93:a0:eb:e1:1e:db:1d:b5:03:4e:57:35:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bd5ac1d29f3624ef8db30a40204136d4193444b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:ac:78:7b:8f:e9:7f:ca:1f:15:69:33:f5: 6c:06:a8:43:4d:3d:b4:c1:4b:59:b6:3f:72:ba:4b: 6f:47:28:4c:df:70:d4:34:77:77:ae:09:9f:f6:98: 0a:c4:b2:b4:40:a8:45:14:b3:de:78:c0:78:41:6b: 09:63:66:64:21:f8:40:22:a5:1b:0f:ed:b7:55:81: 37:26:c9:64:21:e3:45:ca:97:0d:76:68:81:22:5b: d0:4c:d2:9d:ed:ba:84:16:47:e2:c1:2c:85:38:03: 25:e0:06:e3:22:e1:ce:0a:46:a2:f2:d0:1d:e4:5d: d2:ca:47:41:3a:c6:2c:38:67:be:e8:74:65:5f:c3: 6f:10:99:14:d6:60:4a:d5:b1:23:00:5d:1c:fa:5d: 27:7d:68:7d:33:f4:c2:7d:e7:89:84:d8:95:f1:1f: 32:18:95:2c:c0:a8:70:4e:77:ae:51:cc:53:bd:7f: 78:0f:2b:24:b0:0c:23:41:b0:ad:66:2a:fa:33:d1: e9:a9:d3:9d:57:fe:a8:7b:a3:04:64:cf:26:78:e4: 9d:30:23:09:5f:c7:d1:81:e3:e4:58:c0:2f:35:96: 71:50:34:ee:4e:ed:ee:9b:7b:5c:7b:81:eb:5d:c9: 64:04:03:e4:e5:b4:d8:ea:67:f9:cd:35:5c:3d:aa: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D5:AC:1D:29:F3:62:4E:F8:DB:30:A4:02:04:13:6D:41:93:44:4B X509v3 Authority Key Identifier: keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/O9WsHSnzYk742zCkAgQTbUGTREs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.104.0/22 89.221.208.0/22 185.8.236.0/22 IPv6: 2a0e:acc0::/29 Signature Algorithm: sha256WithRSAEncryption 1c:4f:b6:52:7b:eb:7c:e0:d7:dd:dd:4e:31:77:2b:27:d0:fb: f5:2c:ef:44:3b:f9:a6:ab:e9:da:f9:95:94:dc:4d:1b:35:c4: db:e2:5e:2c:f9:55:50:d1:7a:f8:09:38:85:bb:d6:cb:a5:2b: c9:8c:f9:e8:61:16:cb:e1:ad:94:e7:c0:fc:49:ea:f8:55:0d: 41:88:d7:72:e5:d4:a5:84:6b:f5:a7:04:5b:c0:a4:8c:11:41: 9f:7f:15:c7:2f:39:cd:3e:64:1f:86:dc:15:88:9e:05:66:28: 7c:68:a9:75:cd:86:40:f5:de:48:2a:ca:1f:d4:b9:c8:36:1b: 73:d3:e1:4e:98:be:66:a5:ca:a0:f9:e6:fb:02:34:3c:64:ba: 3e:30:04:47:cf:48:4a:a3:c2:d9:29:7e:dd:63:60:1e:32:ec: 46:2f:45:e6:2b:ba:d3:1d:6a:24:33:21:1f:66:67:4f:aa:d4: a8:d2:66:f2:5d:c5:53:52:07:16:0c:23:9d:5b:7c:d8:3e:6b: 03:14:01:10:62:88:a4:42:55:ec:91:e1:c1:2a:1d:45:82:33: b2:21:bf:92:61:cc:14:72:0d:97:96:d0:84:02:b2:53:f4:ed: ff:26:94:de:18:89:09:1b:39:27:d2:8d:c0:39:cc:44:f7:4d: ab:ef:f0:f0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7NaaToOvhHtsdtQNOVzV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4 MjgwMjEwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmQ1YWMxZDI5ZjM2MjRlZjhkYjMwYTQwMjA0MTM2ZDQxOTM0NDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAmseHuP6X/KHxVpM/VsBqhDTT20 wUtZtj9yuktvRyhM33DUNHd3rgmf9pgKxLK0QKhFFLPeeMB4QWsJY2ZkIfhAIqUb D+23VYE3JslkIeNFypcNdmiBIlvQTNKd7bqEFkfiwSyFOAMl4AbjIuHOCkai8tAd 5F3SykdBOsYsOGe+6HRlX8NvEJkU1mBK1bEjAF0c+l0nfWh9M/TCfeeJhNiV8R8y GJUswKhwTneuUcxTvX94DysksAwjQbCtZir6M9HpqdOdV/6oe6MEZM8meOSdMCMJ X8fRgePkWMAvNZZxUDTuTu3um3tce4HrXclkBAPk5bTY6mf5zTVcParMDwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDvVrB0p82JO+NswpAIEE21Bk0RLMB8GA1UdIwQY MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt MGFjN2I3ZWRlNDJiLzEvTzlXc0hTbnpZazc0MnpDa0FnUVRiVUdUUkVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLYpoAwQC Wd3QAwQCuQjsMA0EAgACMAcDBQMqDqzAMA0GCSqGSIb3DQEBCwUAA4IBAQAcT7ZS e+t84Nfd3U4xdysn0Pv1LO9EO/mmq+na+ZWU3E0bNcTb4l4s+VVQ0Xr4CTiFu9bL pSvJjPnoYRbL4a2U58D8Ser4VQ1BiNdy5dSlhGv1pwRbwKSMEUGffxXHLznNPmQf htwViJ4FZih8aKl1zYZA9d5IKsof1LnINhtz0+FOmL5mpcqg+eb7AjQ8ZLo+MARH z0hKo8LZKX7dY2AeMuxGL0XmK7rTHWokMyEfZmdPqtSo0mbyXcVTUgcWDCOdW3zY PmsDFAEQYoikQlXskeHBKh1FgjOyIb+SYcwUcg2XltCEArJT9O3/JpTeGIkJGzkn 0o3AOcxE902r7/Dw -----END CERTIFICATE-----Generated at Mon Jan 26 14:54:44 2026 by rpki-client