This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vZ3oR3hShZyJqlHNnfhWdUqssTg.roa File: vZ3oR3hShZyJqlHNnfhWdUqssTg.roa (raw, json) Hash identifier: Nq2GZ6BAZtRhhi+It639msAqKQuLb+giakmfU8u0m0g= Subject key identifier: BD:9D:E8:47:78:52:85:9C:89:AA:51:CD:9D:F8:56:75:4A:AC:B1:38 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C80581583594340E1B48B6A06BC4902 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vZ3oR3hShZyJqlHNnfhWdUqssTg.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 45.92.172.0/24 maxlen: 24 45.135.177.0/24 maxlen: 24 45.138.144.0/24 maxlen: 24 45.138.147.0/24 maxlen: 24 45.140.60.0/24 maxlen: 24 45.140.62.0/24 maxlen: 24 45.140.63.0/24 maxlen: 24 45.142.72.0/24 maxlen: 24 45.142.73.0/24 maxlen: 24 45.142.74.0/24 maxlen: 24 45.142.75.0/24 maxlen: 24 45.143.142.0/24 maxlen: 24 45.147.252.0/24 maxlen: 24 45.152.212.0/24 maxlen: 24 45.152.213.0/24 maxlen: 24 45.152.214.0/24 maxlen: 24 45.152.215.0/24 maxlen: 24 45.156.148.0/24 maxlen: 24 45.156.151.0/24 maxlen: 24 45.158.45.0/24 maxlen: 24 87.247.141.0/24 maxlen: 24 91.188.228.0/24 maxlen: 24 91.188.229.0/24 maxlen: 24 91.188.230.0/24 maxlen: 24 91.188.231.0/24 maxlen: 24 91.213.35.0/24 maxlen: 24 91.220.206.0/24 maxlen: 24 91.220.229.0/24 maxlen: 24 193.8.171.0/24 maxlen: 24 194.156.0.0/24 maxlen: 24 194.156.27.0/24 maxlen: 24 213.226.102.0/24 maxlen: 24 213.226.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:58:15:83:59:43:40:e1:b4:8b:6a:06:bc:49:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd9de8477852859c89aa51cd9df856754aacb138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6f:c6:d3:13:78:2c:e6:5d:fe:5f:6e:85:05: ce:34:09:34:95:a6:29:39:2f:fe:4c:38:ed:7e:e1: 04:79:54:fe:d5:33:8a:db:a3:e7:14:fc:47:90:bc: c7:eb:80:f0:cb:e3:0f:61:b2:32:b6:32:54:93:f6: cd:27:a2:cd:9d:82:c3:e2:1b:e0:28:70:b7:dd:39: 41:97:38:dd:1b:9a:1b:9c:0d:83:f7:1e:1e:3a:ac: fd:7c:bf:1b:00:62:6b:86:80:b0:5d:cc:9e:8f:2c: 79:91:24:83:85:6e:ad:b3:89:4c:18:33:a9:da:d7: 68:c3:cd:ab:22:3d:7b:3c:bd:af:78:3b:06:6a:38: 6d:08:cc:1c:b7:b3:bd:da:ec:24:b2:a8:f2:ce:6a: 31:2b:d6:0d:4a:22:ae:4f:fc:06:19:89:57:0d:3c: 8f:e1:4e:ec:22:48:88:3e:25:29:a7:a3:07:fd:0f: 10:4a:91:9e:46:3b:72:1d:6f:73:df:4f:be:1e:20: 1c:cf:2f:23:d0:f7:60:03:41:52:fc:3c:b6:f9:f9: 30:ef:9d:c3:a1:02:18:c6:17:9f:be:59:e9:c4:68: 8c:9c:87:ca:d8:fb:31:5c:38:9c:41:3e:0d:26:c1: 43:48:ed:0c:17:60:94:a2:47:7e:9a:03:34:3f:3f: f1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9D:E8:47:78:52:85:9C:89:AA:51:CD:9D:F8:56:75:4A:AC:B1:38 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vZ3oR3hShZyJqlHNnfhWdUqssTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.172.0/24 45.135.177.0/24 45.138.144.0/24 45.138.147.0/24 45.140.60.0/24 45.140.62.0/23 45.142.72.0/22 45.143.142.0/24 45.147.252.0/24 45.152.212.0/22 45.156.148.0/24 45.156.151.0/24 45.158.45.0/24 87.247.141.0/24 91.188.228.0/22 91.213.35.0/24 91.220.206.0/24 91.220.229.0/24 193.8.171.0/24 194.156.0.0/24 194.156.27.0/24 213.226.102.0/23 Signature Algorithm: sha256WithRSAEncryption ad:2e:4d:32:0c:65:d2:e9:be:be:fa:1e:24:2d:a9:ec:6b:6d: 2a:c4:44:b9:2d:c5:84:9a:28:5d:60:a7:73:ad:d7:02:8a:46: 09:3c:2f:5a:65:a8:d7:b9:e9:5c:13:59:a9:cc:33:9b:e5:49: d7:85:cb:3a:f1:1d:0a:5f:72:32:92:1a:a6:a0:a9:d4:74:f1: b3:c8:26:f5:96:91:4a:83:9f:b6:6a:78:39:d8:10:aa:fa:6a: fe:99:cc:30:2d:97:2f:c8:ec:bc:83:0a:ab:8b:30:f4:ba:b4: 5a:7b:9a:8b:b0:c9:0a:6b:a4:db:ae:56:0a:1e:c7:3b:2e:60: a6:07:0c:f1:8c:e8:4d:a9:af:da:81:36:76:96:c6:cb:a6:9a: cb:77:70:0a:eb:69:a8:ae:38:0c:93:c4:a3:18:ef:e3:6d:11: e3:a6:57:d9:c9:0d:42:50:03:ff:73:7c:78:46:c1:be:c3:40: cf:92:e7:b6:37:bb:42:7d:0a:f8:20:f1:68:7b:bb:3b:d7:5b: 7c:62:bb:46:b0:3a:b4:56:dc:05:90:cb:2e:10:5a:52:40:80: d1:74:11:89:87:40:6a:d4:9c:e6:ec:df:0c:90:22:25:c8:71: 6e:4f:0c:6a:67:2a:4b:f3:0d:f5:a7:d1:27:e9:50:50:a6:00: 13:3f:5d:f7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt8gFgVg1lDQOG0i2oGvEkCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDlkZTg0Nzc4NTI4NTljODlhYTUxY2Q5ZGY4NTY3NTRhYWNiMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W/G0xN4LOZd/l9uhQXONAk0laYp OS/+TDjtfuEEeVT+1TOK26PnFPxHkLzH64Dwy+MPYbIytjJUk/bNJ6LNnYLD4hvg KHC33TlBlzjdG5obnA2D9x4eOqz9fL8bAGJrhoCwXcyejyx5kSSDhW6ts4lMGDOp 2tdow82rIj17PL2veDsGajhtCMwct7O92uwksqjyzmoxK9YNSiKuT/wGGYlXDTyP 4U7sIkiIPiUpp6MH/Q8QSpGeRjtyHW9z30++HiAczy8j0PdgA0FS/Dy2+fkw753D oQIYxhefvlnpxGiMnIfK2PsxXDicQT4NJsFDSO0MF2CUokd+mgM0Pz/xiwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFL2d6Ed4UoWciapRzZ34VnVKrLE4MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvdlozb1IzaFNoWnlKcWxITm5maFdkVXFzc1RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAAt XKwDBAAth7EDBAAtipADBAAtipMDBAAtjDwDBAEtjD4DBAItjkgDBAAtj44DBAAt k/wDBAItmNQDBAAtnJQDBAAtnJcDBAAtni0DBABX940DBAJbvOQDBABb1SMDBABb 3M4DBABb3OUDBADBCKsDBADCnAADBADCnBsDBAHV4mYwDQYJKoZIhvcNAQELBQAD ggEBAK0uTTIMZdLpvr76HiQtqexrbSrERLktxYSaKF1gp3Ot1wKKRgk8L1plqNe5 6VwTWanMM5vlSdeFyzrxHQpfcjKSGqagqdR08bPIJvWWkUqDn7ZqeDnYEKr6av6Z zDAtly/I7LyDCquLMPS6tFp7mouwyQprpNuuVgoexzsuYKYHDPGM6E2pr9qBNnaW xsummst3cArraaiuOAyTxKMY7+NtEeOmV9nJDUJQA/9zfHhGwb7DQM+S57Y3u0J9 Cvgg8Wh7uzvXW3xiu0awOrRW3AWQyy4QWlJAgNF0EYmHQGrUnObs3wyQIiXIcW5P DGpnKkvzDfWn0SfpUFCmABM/Xfc= -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:14 2026 by rpki-client