This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/AYUwImHjtxjRsLvL3PriAzenLDw.roa File: AYUwImHjtxjRsLvL3PriAzenLDw.roa (raw, json) Hash identifier: iOp+EiRAhWRuEGynv0qnZuyUCR3ll137ZqRUZPzXwm4= Subject key identifier: 01:85:30:22:61:E3:B7:18:D1:B0:BB:CB:DC:FA:E2:03:37:A7:2C:3C Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Certificate serial: 019BDE561450B37F797CDA241AAB9354C592 Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/AYUwImHjtxjRsLvL3PriAzenLDw.roa Signing time: Wed 21 Jan 2026 02:15:41 +0000 ROA not before: Wed 21 Jan 2026 02:15:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26380 IP address blocks: 185.96.136.0/23 maxlen: 23 185.96.136.0/24 maxlen: 24 185.96.137.0/24 maxlen: 24 185.96.138.0/24 maxlen: 24 185.175.204.0/23 maxlen: 23 185.175.204.0/24 maxlen: 24 185.175.205.0/24 maxlen: 24 185.175.206.0/23 maxlen: 23 185.175.206.0/24 maxlen: 24 185.175.207.0/24 maxlen: 24 185.199.60.0/24 maxlen: 24 185.199.61.0/24 maxlen: 24 217.149.106.0/24 maxlen: 24 217.149.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:56:14:50:b3:7f:79:7c:da:24:1a:ab:93:54:c5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Validity Not Before: Jan 21 02:15:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0185302261e3b718d1b0bbcbdcfae20337a72c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:60:c1:90:8a:11:00:6c:f6:4a:c9:c7:2f: 87:0c:4b:60:41:67:85:89:22:33:67:9d:f2:46:0d: 4c:3f:ee:9e:c7:80:c0:cb:05:6d:44:67:c1:8c:96: af:fb:53:88:ad:9b:26:a3:6e:b8:f1:2f:de:ba:9d: dc:a3:c0:4f:04:bb:a3:be:9a:80:c7:38:59:0a:c1: fa:89:55:5d:b5:ab:38:35:f3:02:55:9e:22:78:33: 85:7b:f9:69:c4:47:3e:e5:1a:a6:52:d6:f2:e7:ab: 58:f1:7a:b5:be:56:f3:4a:a9:63:12:34:3d:fc:23: e1:e8:aa:dc:46:35:49:5a:12:2d:47:d7:64:16:19: f7:da:5d:27:49:26:88:99:98:c7:e6:97:d9:b6:ce: a7:51:c7:8c:20:86:20:55:53:54:02:23:5c:eb:8a: b6:31:bc:b5:06:93:dd:9a:15:67:81:17:43:4b:fa: 71:9b:81:6f:34:c5:de:ce:71:9c:9e:88:33:15:35: 68:aa:35:1e:53:f2:7a:63:99:d5:1f:70:55:2d:c5: 0c:df:15:dc:d9:14:9e:d8:44:bd:0c:92:05:0b:27: d9:5e:50:30:0f:01:45:86:dd:3e:1d:77:db:56:45: 00:23:5e:1e:d7:aa:e1:c6:e1:88:2b:53:08:1c:68: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:85:30:22:61:E3:B7:18:D1:B0:BB:CB:DC:FA:E2:03:37:A7:2C:3C X509v3 Authority Key Identifier: keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/AYUwImHjtxjRsLvL3PriAzenLDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.136.0-185.96.138.255 185.175.204.0/22 185.199.60.0/23 217.149.106.0/23 Signature Algorithm: sha256WithRSAEncryption 07:25:3c:e1:34:11:2e:26:b6:c1:51:c4:d3:34:dc:2b:76:92: 3a:59:17:42:9c:87:58:10:d3:23:cf:9b:3c:1c:b9:23:38:63: 95:36:80:c2:34:e3:74:66:15:69:68:8a:39:07:78:21:40:3e: 8f:91:df:b9:7b:26:83:8a:d8:02:f5:1c:fe:3c:51:48:9c:94: 47:80:0a:72:01:e1:f0:2b:4f:ac:94:8e:93:a0:25:b2:26:2b: bc:a4:1c:ad:e3:e1:82:89:ea:70:59:2c:1a:81:bd:af:48:b5: 7a:b8:12:9d:f3:9c:bc:42:23:6b:90:70:7c:cf:ed:58:4d:90: 33:7f:b3:e5:88:a4:84:f7:be:81:4c:8a:cd:0d:e2:21:46:0f: 1e:69:7f:40:33:6f:ca:32:56:23:08:44:78:95:e5:08:c3:31: 1f:bc:7c:30:59:a0:bd:dd:78:e5:2a:25:16:aa:2e:c0:14:00: 3a:62:1f:3a:0e:9c:65:12:fc:76:ca:64:0f:2f:35:d2:7b:6e: 77:e9:fd:68:4d:80:d3:d1:7d:f0:4f:04:0a:45:63:9f:72:8f: 71:a6:b4:4a:54:86:6d:7b:88:d8:92:30:44:bb:47:a3:c3:ae: 47:41:14:56:63:c0:a4:ee:2d:bb:47:d6:13:0d:91:c3:6f:d3: 5b:ac:24:2f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZveVhRQs395fNokGquTVMWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTI2Zjk2MzUxMTg5M2ZhNGQ5ZmJkNWU2NGUwZjhhNDM4 MzdlNDAwHhcNMjYwMTIxMDIxNTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTg1MzAyMjYxZTNiNzE4ZDFiMGJiY2JkY2ZhZTIwMzM3YTcyYzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgFgwZCKEQBs9krJxy+HDEtgQWeF iSIzZ53yRg1MP+6ex4DAywVtRGfBjJav+1OIrZsmo2648S/eup3co8BPBLujvpqA xzhZCsH6iVVdtas4NfMCVZ4ieDOFe/lpxEc+5RqmUtby56tY8Xq1vlbzSqljEjQ9 /CPh6KrcRjVJWhItR9dkFhn32l0nSSaImZjH5pfZts6nUceMIIYgVVNUAiNc64q2 Mby1BpPdmhVngRdDS/pxm4FvNMXeznGcnogzFTVoqjUeU/J6Y5nVH3BVLcUM3xXc 2RSe2ES9DJIFCyfZXlAwDwFFht0+HXfbVkUAI14e16rhxuGIK1MIHGgnnwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFAGFMCJh47cY0bC7y9z64gM3pyw8MB8GA1UdIwQY MBaAFMqSb5Y1EYk/pNn71eZOD4pDg35AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEt MTQ2MDVkYjU0M2QwLzEvQVlVd0ltSGp0eGpSc0x2TDNQcmlBemVuTER3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEtMTQ2MDVkYjU0M2Qw LzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAO5YIgD BAC5YIoDBAK5r8wDBAG5xzwDBAHZlWowDQYJKoZIhvcNAQELBQADggEBAAclPOE0 ES4mtsFRxNM03Ct2kjpZF0Kch1gQ0yPPmzwcuSM4Y5U2gMI043RmFWloijkHeCFA Po+R37l7JoOK2AL1HP48UUiclEeACnIB4fArT6yUjpOgJbImK7ykHK3j4YKJ6nBZ LBqBva9ItXq4Ep3znLxCI2uQcHzP7VhNkDN/s+WIpIT3voFMis0N4iFGDx5pf0Az b8oyViMIRHiV5QjDMR+8fDBZoL3deOUqJRaqLsAUADpiHzoOnGUS/HbKZA8vNdJ7 bnfp/WhNgNPRffBPBApFY59yj3GmtEpUhm17iNiSMES7R6PDrkdBFFZjwKTuLbtH 1hMNkcNv01usJC8= -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:41 2026 by rpki-client