This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/Rfqa8OJ2kQsd8ZG_LegzwW5IjHg.roa File: Rfqa8OJ2kQsd8ZG_LegzwW5IjHg.roa (raw, json) Hash identifier: bd9vTzTkuvRXu3qYlvcAWmBvwcVPHwkBDQ7+v06V9d8= Subject key identifier: 45:FA:9A:F0:E2:76:91:0B:1D:F1:91:BF:2D:E8:33:C1:6E:48:8C:78 Certificate issuer: /CN=3ca447fd0979b8a989355c354d304d114d20727a Certificate serial: 019B7834EA7228239B381A55475DDBFD7981 Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/Rfqa8OJ2kQsd8ZG_LegzwW5IjHg.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204253 IP address blocks: 185.109.196.0/22 maxlen: 22 185.109.196.0/24 maxlen: 24 185.109.197.0/24 maxlen: 24 185.109.198.0/24 maxlen: 24 185.109.199.0/24 maxlen: 24 2a06:5240:f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ea:72:28:23:9b:38:1a:55:47:5d:db:fd:79:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45fa9af0e276910b1df191bf2de833c16e488c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:8f:aa:e9:67:f4:9f:51:c8:88:79:3c:48: ec:5d:d1:3d:28:57:f4:09:fe:28:01:07:04:44:ce: 42:3b:2b:69:7e:29:bc:09:a2:56:bb:0e:a1:ea:8e: 9a:c6:d2:f4:37:c5:42:f6:e7:ea:42:1e:a5:6c:7e: 79:01:ac:c6:11:79:c4:27:9a:82:d7:e3:8f:17:38: f1:f6:95:45:fa:f4:ce:49:b6:b8:c8:25:c3:4b:8a: e4:13:f2:e6:dc:51:ce:54:5a:0a:57:bb:df:89:9e: f7:e5:94:3e:70:f3:3f:ae:69:55:67:e9:80:cd:9a: d1:ef:e9:f5:09:96:84:d7:f2:77:cc:53:03:1f:36: f8:81:59:13:3d:b3:58:42:ae:2d:e0:5f:cc:9e:fc: 5d:fe:6d:38:c9:6e:bd:1b:57:dd:3f:6a:b7:f9:6c: fe:7a:fe:19:bc:a5:0f:03:bb:97:de:4b:0a:6b:e6: fc:25:32:c4:7a:bb:89:81:53:40:09:32:b5:5a:91: a5:d8:ac:c3:4f:37:ad:2f:4b:eb:d7:b1:99:8b:c2: 6b:62:76:24:c1:b7:ba:84:7c:a5:33:c9:12:17:c7: aa:45:9c:0d:79:37:86:ed:bb:ef:a5:f8:ee:21:25: f5:03:ee:78:ba:c5:30:33:92:06:23:e2:5e:fa:33: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FA:9A:F0:E2:76:91:0B:1D:F1:91:BF:2D:E8:33:C1:6E:48:8C:78 X509v3 Authority Key Identifier: keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/Rfqa8OJ2kQsd8ZG_LegzwW5IjHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.196.0/22 IPv6: 2a06:5240:f0::/44 Signature Algorithm: sha256WithRSAEncryption 54:9a:de:56:89:3b:a9:c8:b1:f6:2a:67:8b:23:ed:36:01:35: 7e:37:b4:ee:c0:6c:37:36:22:11:dd:83:e7:eb:4a:8e:bb:ea: 61:78:25:dc:39:78:f7:e0:54:2d:54:82:2b:3e:7d:53:cd:5f: d2:51:c9:31:44:53:0d:d1:24:80:64:6f:03:f8:8f:db:c9:92: f7:ad:37:9d:17:d5:50:26:be:90:f6:c6:89:55:7d:4d:99:b8: cb:b4:da:0e:df:7a:04:57:4c:e1:f1:d0:bb:0d:81:48:62:32: 1f:73:46:6b:dd:1e:93:80:fd:2e:b6:c6:cd:57:5c:b3:2a:e4: db:b9:21:15:bf:95:2f:38:aa:5d:0b:8c:08:1d:fe:b3:68:b1: 26:be:f8:e9:c4:5a:b4:b9:58:e5:73:a9:e0:f9:b1:bd:cb:0b: cb:54:94:c3:0c:bb:81:72:92:03:44:7a:d6:3b:e0:9b:f8:87: 12:42:66:7b:d2:9b:4d:ba:4a:76:fe:4d:01:ee:48:da:e9:5d: cb:58:34:38:9f:ad:dd:df:65:ba:0a:5b:22:fd:1b:e4:f1:08: c4:44:af:1e:5e:4f:a2:02:34:27:63:22:2d:0f:aa:b9:e4:97: a7:bc:0e:fe:75:30:70:34:1f:3a:95:19:73:e9:f6:bc:2a:ad: e4:f6:79:ed -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NOpyKCObOBpVR13b/XmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTQ0N2ZkMDk3OWI4YTk4OTM1NWMzNTRkMzA0ZDExNGQy MDcyN2EwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWZhOWFmMGUyNzY5MTBiMWRmMTkxYmYyZGU4MzNjMTZlNDg4Yzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxCPquln9J9RyIh5PEjsXdE9KFf0 Cf4oAQcERM5COytpfim8CaJWuw6h6o6axtL0N8VC9ufqQh6lbH55AazGEXnEJ5qC 1+OPFzjx9pVF+vTOSba4yCXDS4rkE/Lm3FHOVFoKV7vfiZ735ZQ+cPM/rmlVZ+mA zZrR7+n1CZaE1/J3zFMDHzb4gVkTPbNYQq4t4F/Mnvxd/m04yW69G1fdP2q3+Wz+ ev4ZvKUPA7uX3ksKa+b8JTLEeruJgVNACTK1WpGl2KzDTzetL0vr17GZi8JrYnYk wbe6hHylM8kSF8eqRZwNeTeG7bvvpfjuISX1A+54usUwM5IGI+Je+jO2bQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEX6mvDidpELHfGRvy3oM8FuSIx4MB8GA1UdIwQY MBaAFDykR/0JebipiTVcNU0wTRFNIHJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGIt YTZlZjc1MmM2ZGMyLzEvUmZxYThPSjJrUXNkOFpHX0xlZ3p3VzVJakhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGItYTZlZjc1MmM2ZGMy LzEvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuW3EMA8E AgACMAkDBwQqBlJAAPAwDQYJKoZIhvcNAQELBQADggEBAFSa3laJO6nIsfYqZ4sj 7TYBNX43tO7AbDc2IhHdg+frSo676mF4Jdw5ePfgVC1Ugis+fVPNX9JRyTFEUw3R JIBkbwP4j9vJkvetN50X1VAmvpD2xolVfU2ZuMu02g7fegRXTOHx0LsNgUhiMh9z RmvdHpOA/S62xs1XXLMq5Nu5IRW/lS84ql0LjAgd/rNosSa++OnEWrS5WOVzqeD5 sb3LC8tUlMMMu4FykgNEetY74Jv4hxJCZnvSm026Snb+TQHuSNrpXctYNDifrd3f ZboKWyL9G+TxCMRErx5eT6ICNCdjIi0Pqrnkl6e8Dv51MHA0HzqVGXPp9rwqreT2 ee0= -----END CERTIFICATE-----Generated at Mon Jan 12 07:11:18 2026 by rpki-client