This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/a7LjY76Bw3Pjgz_yCX14ERLlyNQ.roa File: a7LjY76Bw3Pjgz_yCX14ERLlyNQ.roa (raw, json) Hash identifier: A+cb8pqjRQ/b8Tp/aBDHUe07WGQvC6abtVhh2uScOAU= Subject key identifier: 6B:B2:E3:63:BE:81:C3:73:E3:83:3F:F2:09:7D:78:11:12:E5:C8:D4 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C806B703AA51A4B05D54CE30B5A2F14 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/a7LjY76Bw3Pjgz_yCX14ERLlyNQ.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 45.91.161.0/24 maxlen: 24 45.135.176.0/24 maxlen: 24 45.135.178.0/24 maxlen: 24 45.135.179.0/24 maxlen: 24 45.140.61.0/24 maxlen: 24 45.143.141.0/24 maxlen: 24 45.143.143.0/24 maxlen: 24 45.147.246.0/24 maxlen: 24 45.156.149.0/24 maxlen: 24 45.156.150.0/24 maxlen: 24 176.101.59.0/24 maxlen: 24 176.101.60.0/24 maxlen: 24 193.8.164.0/24 maxlen: 24 193.8.167.0/24 maxlen: 24 193.8.175.0/24 maxlen: 24 193.238.135.0/24 maxlen: 24 194.156.1.0/24 maxlen: 24 213.109.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6b:70:3a:a5:1a:4b:05:d5:4c:e3:0b:5a:2f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bb2e363be81c373e3833ff2097d781112e5c8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e2:68:6f:2b:19:04:34:78:53:f0:95:1b:24: aa:e4:9c:09:7c:70:b1:75:7f:79:a1:6a:78:19:05: 21:aa:e6:cf:ad:59:fb:28:e4:50:e5:be:c1:60:4a: 6a:29:a3:8a:86:f2:80:ab:51:46:8c:0e:c7:64:49: 47:b5:70:05:d7:90:5b:81:38:6a:95:2d:39:b8:ec: 5f:57:8e:bd:b7:0a:fc:e5:20:dc:36:33:26:c9:04: 82:20:a5:c1:ad:48:f5:ba:f5:e1:69:e5:6d:13:06: f3:c8:cb:e7:89:d6:c2:98:3d:5d:a0:8e:2a:e1:e4: c0:d4:a4:a5:36:a7:fc:47:98:1e:67:84:98:16:ac: c6:61:80:f5:be:85:07:1f:ee:78:3e:89:c7:3f:fa: 2f:4d:a1:0c:d3:a0:35:6f:10:e6:dd:64:0f:d6:d9: 2d:1b:7e:cf:2e:70:cf:1a:fe:82:9a:82:94:32:d8: 78:62:e2:de:96:fb:b1:0e:5b:59:10:ca:2d:24:a4: 48:5c:50:2c:00:5e:31:75:45:24:37:ec:e7:68:ee: 78:e6:3f:09:05:c4:30:09:85:1d:d3:2d:f9:97:16: 72:9d:6c:b7:32:9a:a5:6c:32:c5:2d:d4:18:ca:53: 9f:3e:66:5a:1a:be:c6:73:37:aa:46:8c:f1:f1:be: f6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:E3:63:BE:81:C3:73:E3:83:3F:F2:09:7D:78:11:12:E5:C8:D4 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/a7LjY76Bw3Pjgz_yCX14ERLlyNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.161.0/24 45.135.176.0/24 45.135.178.0/23 45.140.61.0/24 45.143.141.0/24 45.143.143.0/24 45.147.246.0/24 45.156.149.0-45.156.150.255 176.101.59.0-176.101.60.255 193.8.164.0/24 193.8.167.0/24 193.8.175.0/24 193.238.135.0/24 194.156.1.0/24 213.109.109.0/24 Signature Algorithm: sha256WithRSAEncryption 90:de:dc:9b:19:55:5c:5e:19:73:18:d4:41:bd:c7:ec:6b:06: d4:2c:4f:25:e1:b9:59:08:fb:ce:6b:91:6b:2a:05:e7:97:67: e0:76:c7:17:6f:d3:cc:85:df:c0:4d:fd:01:9d:66:d2:15:0a: cb:37:21:c1:a1:50:b9:85:66:03:42:29:76:c3:3e:ad:1b:19: 48:62:e8:44:b6:af:f7:4f:4b:49:0b:3e:e4:27:5c:64:38:c2: 8b:b6:d8:37:07:d0:10:4e:91:c7:a1:b8:b7:b5:68:cd:57:38: 67:64:0b:e3:ec:5b:1b:4a:3e:f2:06:32:2e:17:4f:c9:ed:12: f9:98:0a:8b:b0:3a:c3:a3:6f:a9:4b:cb:28:82:65:15:9a:e0: f8:45:02:99:44:6a:8f:8b:ca:02:cc:a9:50:c4:ed:4c:85:35: 1d:82:b7:c7:0a:1f:bc:55:4b:0d:41:85:45:16:02:c4:cd:2a: 36:04:0b:02:a4:03:28:9b:a1:20:b7:64:c7:91:d7:99:de:12: 6c:53:d3:51:6f:00:cf:97:f5:fd:83:80:14:0a:ea:aa:fe:08: 51:6e:98:ab:5e:6c:72:7a:9b:63:0c:da:d4:1b:1f:18:05:8e: 9d:ce:d1:e3:86:15:37:56:4a:43:55:c1:cd:fe:f0:e1:d9:4e: e7:65:3a:00 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZt8gGtwOqUaSwXVTOMLWi8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmIyZTM2M2JlODFjMzczZTM4MzNmZjIwOTdkNzgxMTEyZTVjOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eJobysZBDR4U/CVGySq5JwJfHCx dX95oWp4GQUhqubPrVn7KORQ5b7BYEpqKaOKhvKAq1FGjA7HZElHtXAF15BbgThq lS05uOxfV469twr85SDcNjMmyQSCIKXBrUj1uvXhaeVtEwbzyMvnidbCmD1doI4q 4eTA1KSlNqf8R5geZ4SYFqzGYYD1voUHH+54PonHP/ovTaEM06A1bxDm3WQP1tkt G37PLnDPGv6CmoKUMth4YuLelvuxDltZEMotJKRIXFAsAF4xdUUkN+znaO545j8J BcQwCYUd0y35lxZynWy3MpqlbDLFLdQYylOfPmZaGr7GczeqRozx8b722wIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFGuy42O+gcNz44M/8gl9eBES5cjUMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvYTdMalk3NkJ3M1BqZ3pfeUNYMTRFUkxseU5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAC1boQME AC2HsAMEAS2HsgMEAC2MPQMEAC2PjQMEAC2PjwMEAC2T9jAMAwQALZyVAwQALZyW MAwDBACwZTsDBACwZTwDBADBCKQDBADBCKcDBADBCK8DBADB7ocDBADCnAEDBADV bW0wDQYJKoZIhvcNAQELBQADggEBAJDe3JsZVVxeGXMY1EG9x+xrBtQsTyXhuVkI +85rkWsqBeeXZ+B2xxdv08yF38BN/QGdZtIVCss3IcGhULmFZgNCKXbDPq0bGUhi 6ES2r/dPS0kLPuQnXGQ4wou22DcH0BBOkcehuLe1aM1XOGdkC+PsWxtKPvIGMi4X T8ntEvmYCouwOsOjb6lLyyiCZRWa4PhFAplEao+LygLMqVDE7UyFNR2Ct8cKH7xV Sw1BhUUWAsTNKjYECwKkAyiboSC3ZMeR15neEmxT01FvAM+X9f2DgBQK6qr+CFFu mKtebHJ6m2MM2tQbHxgFjp3O0eOGFTdWSkNVwc3+8OHZTudlOgA= -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:47 2026 by rpki-client