This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/VOy2pqg45DcbaU8g-AYkzB6uwX4.roa File: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (raw, json) Hash identifier: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ= Subject key identifier: 54:EC:B6:A6:A8:38:E4:37:1B:69:4F:20:F8:06:24:CC:1E:AE:C1:7E Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Certificate serial: 019B7DCAEBC308E1F3C5A5984570B020BD4C Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/VOy2pqg45DcbaU8g-AYkzB6uwX4.roa Signing time: Fri 02 Jan 2026 08:20:09 +0000 ROA not before: Fri 02 Jan 2026 08:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8990 IP address blocks: 45.88.204.0/22 maxlen: 22 82.150.32.0/19 maxlen: 19 91.144.64.0/18 maxlen: 24 91.144.121.0/24 maxlen: 24 95.171.64.0/19 maxlen: 19 109.199.32.0/19 maxlen: 24 109.199.46.0/24 maxlen: 24 109.199.57.0/24 maxlen: 24 109.199.58.0/24 maxlen: 24 109.199.61.0/24 maxlen: 24 109.199.62.0/24 maxlen: 24 212.92.0.0/19 maxlen: 19 2a03:9900::/32 maxlen: 32 2a03:9900:1::/48 maxlen: 48 2a03:9900:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:eb:c3:08:e1:f3:c5:a5:98:45:70:b0:20:bd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Validity Not Before: Jan 2 08:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54ecb6a6a838e4371b694f20f80624cc1eaec17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:7f:f6:d2:d7:8b:db:1d:f7:ac:15:e0:59: 0a:b3:54:27:6d:80:09:11:ec:9d:e4:1b:7b:c7:b8: fb:4d:7a:81:3c:05:fd:aa:7d:ce:37:90:5d:3e:a6: b7:2e:95:46:af:1e:fb:22:dd:28:ec:54:98:0f:e9: 3e:12:46:67:9d:bd:f9:9e:60:b1:32:58:22:f6:60: ae:72:a1:18:d8:94:91:f1:99:57:34:c6:05:1e:3f: 14:e3:2d:a4:b8:ab:46:f5:7a:5d:8e:a5:10:8c:e1: d1:c9:6e:03:45:a6:45:af:2e:9a:01:a8:f9:81:65: 7e:c8:bb:ed:41:09:60:01:0b:a9:2b:07:bf:2f:e2: d9:5d:70:26:30:e0:3b:af:a4:ea:9d:fa:50:ca:b8: 24:ce:f2:90:42:d1:95:45:13:10:4f:b0:63:d5:01: e5:06:c0:c9:d8:89:fa:6d:60:3f:b0:e5:ef:8f:57: 51:3f:cd:3a:8a:bb:73:1d:88:51:b6:43:e6:23:89: 17:66:cf:eb:87:c3:46:ca:dc:f9:cb:72:c7:49:4d: 49:48:c8:74:b1:57:83:70:e2:60:3d:a1:0b:d1:b0: d0:e2:2a:ad:89:d3:31:5f:b5:16:10:14:06:5c:23: c8:7a:48:6f:8d:7c:15:48:20:91:dc:a0:7b:97:7c: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EC:B6:A6:A8:38:E4:37:1B:69:4F:20:F8:06:24:CC:1E:AE:C1:7E X509v3 Authority Key Identifier: keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/VOy2pqg45DcbaU8g-AYkzB6uwX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.204.0/22 82.150.32.0/19 91.144.64.0/18 95.171.64.0/19 109.199.32.0/19 212.92.0.0/19 IPv6: 2a03:9900::/32 Signature Algorithm: sha256WithRSAEncryption 5b:23:30:42:a5:ce:13:7c:dc:24:c7:c1:23:ee:5c:2a:4d:5a: 44:0c:10:f6:05:d6:86:6c:e0:7f:ff:c0:d1:dc:ec:b1:58:8a: 0a:30:dd:ac:5b:13:d9:f8:76:af:36:90:59:a3:33:08:42:00: ff:fb:dd:1b:58:91:45:cf:4f:af:e8:b5:15:0e:e8:e1:14:28: 7a:97:4e:c8:8e:2f:52:16:25:27:16:b6:81:87:96:41:e0:6b: 87:69:d6:82:57:75:74:92:14:d6:f4:96:d2:b0:1a:a6:72:2c: 2e:95:b0:32:97:a6:b9:1f:e2:71:50:80:36:b9:83:c9:ce:72: 26:87:a1:69:00:61:bb:97:17:f3:10:bb:5f:1c:d9:2e:08:22: d3:e2:59:9b:b4:d5:1b:c0:86:02:f5:58:94:ab:64:62:1f:e7: c9:61:79:21:e0:64:fa:94:f2:b3:43:d1:a2:7f:0e:6c:0c:7b: f6:3d:61:f5:b9:e3:f0:9f:e3:a6:0b:0d:7f:2a:a5:dd:a7:79: 67:d5:2b:90:93:86:47:64:5b:00:26:55:d0:ad:cf:e2:f4:1f: 8e:2f:70:b3:f2:6f:06:c5:85:4c:57:a0:79:0b:4d:d1:0e:10: 7b:70:e3:7c:43:c1:f6:bb:da:e6:7f:32:b6:94:1a:f6:a8:c2: 1a:f4:7b:90 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt9yuvDCOHzxaWYRXCwIL1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm OWUyMzMwHhcNMjYwMTAyMDgyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGVjYjZhNmE4MzhlNDM3MWI2OTRmMjBmODA2MjRjYzFlYWVjMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnZ/9tLXi9sd96wV4FkKs1QnbYAJ Eeyd5Bt7x7j7TXqBPAX9qn3ON5BdPqa3LpVGrx77It0o7FSYD+k+EkZnnb35nmCx Mlgi9mCucqEY2JSR8ZlXNMYFHj8U4y2kuKtG9XpdjqUQjOHRyW4DRaZFry6aAaj5 gWV+yLvtQQlgAQupKwe/L+LZXXAmMOA7r6TqnfpQyrgkzvKQQtGVRRMQT7Bj1QHl BsDJ2In6bWA/sOXvj1dRP806irtzHYhRtkPmI4kXZs/rh8NGytz5y3LHSU1JSMh0 sVeDcOJgPaEL0bDQ4iqtidMxX7UWEBQGXCPIekhvjXwVSCCR3KB7l3zDdQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFFTstqaoOOQ3G2lPIPgGJMwersF+MB8GA1UdIwQY MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt MGFjYzg5MmIxMWQyLzEvVk95MnBxZzQ1RGNiYVU4Zy1BWWt6QjZ1d1g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLVjMAwQF UpYgAwQGW5BAAwQFX6tAAwQFbccgAwQF1FwAMA0EAgACMAcDBQAqA5kAMA0GCSqG SIb3DQEBCwUAA4IBAQBbIzBCpc4TfNwkx8Ej7lwqTVpEDBD2BdaGbOB//8DR3Oyx WIoKMN2sWxPZ+HavNpBZozMIQgD/+90bWJFFz0+v6LUVDujhFCh6l07Iji9SFiUn FraBh5ZB4GuHadaCV3V0khTW9JbSsBqmciwulbAyl6a5H+JxUIA2uYPJznImh6Fp AGG7lxfzELtfHNkuCCLT4lmbtNUbwIYC9ViUq2RiH+fJYXkh4GT6lPKzQ9Gifw5s DHv2PWH1uePwn+OmCw1/KqXdp3ln1SuQk4ZHZFsAJlXQrc/i9B+OL3Cz8m8GxYVM V6B5C03RDhB7cON8Q8H2u9rmfzK2lBr2qMIa9HuQ -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:11 2026 by rpki-client