This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/_yP2m6cl8cRwC6MErd0OYqhk9uw.roa File: _yP2m6cl8cRwC6MErd0OYqhk9uw.roa (raw, json) Hash identifier: KC1xdvTrCnL148MmuC/CmRUv6swh9y2uLjAWg/EyWgo= Subject key identifier: FF:23:F6:9B:A7:25:F1:C4:70:0B:A3:04:AD:DD:0E:62:A8:64:F6:EC Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B7D5C4352E062677DF9C6C3762294C463 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/_yP2m6cl8cRwC6MErd0OYqhk9uw.roa Signing time: Fri 02 Jan 2026 06:19:17 +0000 ROA not before: Fri 02 Jan 2026 06:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29632 IP address blocks: 94.131.0.0/23 maxlen: 23 94.131.4.0/24 maxlen: 24 94.131.6.0/24 maxlen: 24 94.131.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:43:52:e0:62:67:7d:f9:c6:c3:76:22:94:c4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jan 2 06:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff23f69ba725f1c4700ba304addd0e62a864f6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:41:f1:c5:60:60:48:88:15:55:fb:95:83: e2:21:00:58:cc:69:d1:25:ae:fc:b2:c0:df:ed:3c: e4:eb:c9:15:1e:8a:b2:d9:1d:be:f3:ce:12:0c:84: d7:ac:cf:9e:8a:e2:13:e4:ca:a0:9c:f6:d0:b6:94: a8:fc:db:25:de:24:de:b9:df:dd:8e:0e:58:9c:8c: ee:d3:ea:0e:83:78:2a:06:62:b6:d5:a5:b6:df:33: 2d:4c:23:76:8d:a7:1c:8e:86:1b:d8:d6:2a:25:45: 78:4a:20:26:47:d5:c1:45:f8:18:4c:4f:2a:49:fc: 5c:f6:6c:ea:55:ca:ba:33:0a:f9:ea:ab:4f:c8:33: 12:8d:9d:26:4b:5b:fd:1a:74:6f:31:64:dc:1e:b3: 53:93:7f:1f:bf:54:f3:f6:7b:ff:a0:c1:d0:f8:3c: 24:20:8a:14:34:bf:0e:42:1b:f3:11:1b:13:73:1d: 9f:01:34:71:02:9d:a2:77:34:ac:a4:6d:d0:e5:ae: 2b:4c:6d:b5:bc:09:f8:c0:f9:e9:9c:0b:b6:bc:e8: e7:10:21:87:12:21:06:9b:43:31:c9:20:1a:9d:b1: 5c:ec:24:84:59:7f:db:18:86:57:74:05:31:9e:f1: 1a:e7:67:e0:72:6f:8b:4a:7a:30:2a:6e:16:af:79: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:F6:9B:A7:25:F1:C4:70:0B:A3:04:AD:DD:0E:62:A8:64:F6:EC X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/_yP2m6cl8cRwC6MErd0OYqhk9uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.0.0/23 94.131.4.0/24 94.131.6.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:b4:b2:6a:ac:52:4b:d7:83:70:fd:f1:2c:1c:67:01:77:80: fe:a0:e2:51:b1:38:3c:2d:cc:1c:e6:ab:69:ea:d9:0e:fa:91: ba:5a:72:96:07:87:66:a8:b0:85:87:b4:1d:d4:b0:aa:01:95: 60:02:27:8f:ca:1e:05:99:8f:41:75:5a:df:98:78:22:bc:f4: a5:3c:f0:65:40:06:9d:71:07:9c:4c:2d:46:ca:47:1f:a6:21: de:b5:2f:9c:5c:c5:e1:47:d1:bb:ab:b2:7f:10:c0:3b:07:e2: 2d:6b:8a:d4:c1:08:9f:f0:c0:1b:15:de:57:5e:2a:12:fa:0c: 68:ec:3b:1c:c9:c0:ee:36:a2:22:c4:ec:b6:f9:33:da:73:f9: 08:cf:8c:f9:b1:f0:56:1b:de:50:d9:b1:a1:72:71:ee:8f:5e: b9:1e:39:14:c9:1f:c0:13:ac:0c:02:bb:3e:a1:54:43:cc:b4: 81:b1:e6:39:6f:b7:9a:56:27:bb:10:02:eb:cf:d4:9a:3d:41: f0:1d:9b:71:1d:a4:48:b2:c8:de:4b:b9:75:a6:e9:d6:8d:0a: 5f:da:7e:86:62:12:3d:8d:74:b0:a6:28:4d:68:e7:11:af:7a: bc:e1:5b:e8:a1:be:9e:a2:d6:83:a7:39:b0:82:43:dd:68:33: 85:a5:e6:b7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XENS4GJnffnGw3YilMRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMTAyMDYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjIzZjY5YmE3MjVmMWM0NzAwYmEzMDRhZGRkMGU2MmE4NjRmNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj45B8cVgYEiIFVX7lYPiIQBYzGnR Ja78ssDf7Tzk68kVHoqy2R2+884SDITXrM+eiuIT5MqgnPbQtpSo/Nsl3iTeud/d jg5YnIzu0+oOg3gqBmK21aW23zMtTCN2jaccjoYb2NYqJUV4SiAmR9XBRfgYTE8q Sfxc9mzqVcq6Mwr56qtPyDMSjZ0mS1v9GnRvMWTcHrNTk38fv1Tz9nv/oMHQ+Dwk IIoUNL8OQhvzERsTcx2fATRxAp2idzSspG3Q5a4rTG21vAn4wPnpnAu2vOjnECGH EiEGm0MxySAanbFc7CSEWX/bGIZXdAUxnvEa52fgcm+LSnowKm4Wr3k6rQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP8j9punJfHEcAujBK3dDmKoZPbsMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvX3lQMm02Y2w4Y1J3QzZNRXJkME9ZcWhrOXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXoMAAwQA XoMEAwQBXoMGMA0GCSqGSIb3DQEBCwUAA4IBAQAOtLJqrFJL14Nw/fEsHGcBd4D+ oOJRsTg8Lcwc5qtp6tkO+pG6WnKWB4dmqLCFh7Qd1LCqAZVgAiePyh4FmY9BdVrf mHgivPSlPPBlQAadcQecTC1GykcfpiHetS+cXMXhR9G7q7J/EMA7B+Ita4rUwQif 8MAbFd5XXioS+gxo7DscycDuNqIixOy2+TPac/kIz4z5sfBWG95Q2bGhcnHuj165 HjkUyR/AE6wMArs+oVRDzLSBseY5b7eaVie7EALrz9SaPUHwHZtxHaRIssjeS7l1 punWjQpf2n6GYhI9jXSwpihNaOcRr3q84Vvoob6eotaDpzmwgkPdaDOFpea3 -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:13 2026 by rpki-client