This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa File: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (raw, json) Hash identifier: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg= Subject key identifier: BE:25:E4:5C:B6:71:27:E2:AB:04:34:C7:11:4F:5E:57:62:69:5D:F7 Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019BDF8A9D411CEB87BF55108155FF17B2BF Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa Signing time: Wed 21 Jan 2026 07:52:41 +0000 ROA not before: Wed 21 Jan 2026 07:52:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207990 IP address blocks: 45.10.236.0/22 maxlen: 32 45.66.176.0/22 maxlen: 32 45.82.96.0/22 maxlen: 32 45.84.228.0/22 maxlen: 32 45.154.192.0/22 maxlen: 32 45.156.224.0/22 maxlen: 32 63.141.36.0/23 maxlen: 32 82.115.213.0/24 maxlen: 32 92.118.208.0/22 maxlen: 32 139.28.120.0/22 maxlen: 32 185.36.254.0/24 maxlen: 32 185.153.149.0/24 maxlen: 24 185.188.63.0/24 maxlen: 32 185.223.248.0/22 maxlen: 32 188.119.154.0/24 maxlen: 32 193.228.58.0/23 maxlen: 32 193.254.27.0/24 maxlen: 32 193.254.28.0/24 maxlen: 32 194.0.133.0/24 maxlen: 32 194.0.136.0/24 maxlen: 32 194.53.70.0/24 maxlen: 32 194.88.143.0/24 maxlen: 32 194.124.239.0/24 maxlen: 32 194.124.240.0/24 maxlen: 32 194.124.247.0/24 maxlen: 32 194.124.248.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:8a:9d:41:1c:eb:87:bf:55:10:81:55:ff:17:b2:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jan 21 07:52:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be25e45cb67127e2ab0434c7114f5e5762695df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:a2:0c:8e:2d:a1:48:6b:5c:3d:1b:f7:43: 4c:95:24:21:e1:76:31:70:e6:57:e9:f0:6f:1c:d9: 7c:4b:f3:46:5c:33:8d:43:b2:2f:67:9b:cd:29:9f: d2:c8:ab:fb:bf:a7:21:ec:ed:bd:1f:a8:03:2f:ef: f5:55:d0:c3:3a:70:4c:7c:68:26:22:f0:31:63:a1: 7d:7b:78:71:87:27:42:83:7a:ad:51:47:bd:3c:4a: 8a:6c:07:ea:23:a3:81:72:a0:b5:24:23:a8:16:eb: d4:54:32:89:ba:5c:dd:e8:b9:67:5d:3b:4f:9b:99: ff:fa:ab:e8:9a:33:0f:49:6c:5a:dc:29:c6:d9:76: df:56:4d:ca:f9:86:7f:d5:c8:00:d6:06:6f:fc:38: 94:be:a0:ea:8e:4d:96:0c:52:a0:4c:b9:ac:5a:1b: 54:ba:b7:44:01:1b:5e:b1:99:d0:27:71:1b:e6:ce: ff:0c:d9:df:13:65:90:1c:a1:b2:ed:89:f3:c8:b0: 56:4c:1d:7e:b8:b6:b7:d7:79:e7:f8:6d:66:cd:bd: e4:b0:0a:6e:66:55:85:e6:cd:06:49:db:5b:4e:dd: d4:44:96:dc:9b:30:c1:17:2d:1e:3d:89:62:82:84: 19:f9:ee:46:31:63:12:c6:4b:4d:fb:02:3a:6e:ed: ca:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:25:E4:5C:B6:71:27:E2:AB:04:34:C7:11:4F:5E:57:62:69:5D:F7 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.236.0/22 45.66.176.0/22 45.82.96.0/22 45.84.228.0/22 45.154.192.0/22 45.156.224.0/22 63.141.36.0/23 82.115.213.0/24 92.118.208.0/22 139.28.120.0/22 185.36.254.0/24 185.153.149.0/24 185.188.63.0/24 185.223.248.0/22 188.119.154.0/24 193.228.58.0/23 193.254.27.0-193.254.28.255 194.0.133.0/24 194.0.136.0/24 194.53.70.0/24 194.88.143.0/24 194.124.239.0-194.124.240.255 194.124.247.0-194.124.248.255 Signature Algorithm: sha256WithRSAEncryption 79:7f:ed:97:3d:eb:63:d4:b6:4b:aa:37:cf:5a:fb:cf:f4:0a: 4a:7c:b0:76:f8:db:b1:9a:0e:09:57:e2:26:ab:31:24:38:ab: 85:c4:b8:6c:a3:28:88:cc:cf:c2:dc:65:62:91:68:fd:97:bd: 18:c0:8e:08:2c:b1:af:e3:6c:e2:d9:65:52:79:f1:98:c5:ed: 53:6b:d1:eb:56:fd:c3:95:4c:d2:8f:62:63:31:55:9c:ec:c1: cd:25:77:49:d3:04:e7:c6:f6:2c:bb:75:dc:69:fb:09:da:c8: 53:05:e6:69:0f:f3:95:8e:6f:af:7c:0c:46:78:48:a6:fd:ca: 4e:88:15:62:67:16:31:b8:8f:a9:c7:57:0f:89:b3:37:69:0a: df:00:aa:d1:0c:5f:de:37:69:41:6e:37:eb:88:d8:24:70:1c: ab:4d:b6:a4:8c:3d:ce:9c:eb:98:2c:a5:56:d8:ad:12:75:0e: 2d:cc:68:d9:45:23:4c:e3:53:00:b6:87:e4:a3:80:c1:80:04: 38:78:a7:3f:f7:4b:79:71:a9:0e:36:d9:82:dd:d0:ce:b3:9e: 81:c4:d6:bb:93:c6:9f:e8:53:19:8e:d9:31:89:d7:52:a6:62: 3f:00:0e:63:cb:99:d4:96:33:fc:ba:3d:ea:81:40:23:78:b7: 98:69:d5:31 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZvfip1BHOuHv1UQgVX/F7K/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwMTIxMDc1MjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTI1ZTQ1Y2I2NzEyN2UyYWIwNDM0YzcxMTRmNWU1NzYyNjk1ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSmiDI4toUhrXD0b90NMlSQh4XYx cOZX6fBvHNl8S/NGXDONQ7IvZ5vNKZ/SyKv7v6ch7O29H6gDL+/1VdDDOnBMfGgm IvAxY6F9e3hxhydCg3qtUUe9PEqKbAfqI6OBcqC1JCOoFuvUVDKJulzd6LlnXTtP m5n/+qvomjMPSWxa3CnG2XbfVk3K+YZ/1cgA1gZv/DiUvqDqjk2WDFKgTLmsWhtU urdEARtesZnQJ3Eb5s7/DNnfE2WQHKGy7YnzyLBWTB1+uLa313nn+G1mzb3ksApu ZlWF5s0GSdtbTt3URJbcmzDBFy0ePYligoQZ+e5GMWMSxktN+wI6bu3K8QIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFL4l5Fy2cSfiqwQ0xxFPXldiaV33MB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEvdmlYa1hMWnhKLUtyQkRUSEVVOWVWMkpwWGZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBAIt CuwDBAItQrADBAItUmADBAItVOQDBAItmsADBAItnOADBAE/jSQDBABSc9UDBAJc dtADBAKLHHgDBAC5JP4DBAC5mZUDBAC5vD8DBAK53/gDBAC8d5oDBAHB5DowDAME AMH+GwMEAMH+HAMEAMIAhQMEAMIAiAMEAMI1RgMEAMJYjzAMAwQAwnzvAwQAwnzw MAwDBADCfPcDBADCfPgwDQYJKoZIhvcNAQELBQADggEBAHl/7Zc962PUtkuqN89a +8/0Ckp8sHb427GaDglX4iarMSQ4q4XEuGyjKIjMz8LcZWKRaP2XvRjAjggssa/j bOLZZVJ58ZjF7VNr0etW/cOVTNKPYmMxVZzswc0ld0nTBOfG9iy7ddxp+wnayFMF 5mkP85WOb698DEZ4SKb9yk6IFWJnFjG4j6nHVw+JszdpCt8AqtEMX943aUFuN+uI 2CRwHKtNtqSMPc6c65gspVbYrRJ1Di3MaNlFI0zjUwC2h+SjgMGABDh4pz/3S3lx qQ422YLd0M6znoHE1ruTxp/oUxmO2TGJ11KmYj8ADmPLmdSWM/y6PeqBQCN4t5hp 1TE= -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:39 2026 by rpki-client