This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/D1-yFIpBHV__M0varLi2rfrfUtg.roa File: D1-yFIpBHV__M0varLi2rfrfUtg.roa (raw, json) Hash identifier: 1Us2UncDA53twzcYN4Fcy2Q+oxQvFCuszTijOukX0HI= Subject key identifier: 0F:5F:B2:14:8A:41:1D:5F:FF:33:4B:DA:AC:B8:B6:AD:FA:DF:52:D8 Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Certificate serial: 019BC5EE2BB3B4F96E907772617E6F880999 Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/D1-yFIpBHV__M0varLi2rfrfUtg.roa Signing time: Fri 16 Jan 2026 08:31:18 +0000 ROA not before: Fri 16 Jan 2026 08:31:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15703 IP address blocks: 80.247.220.0/24 maxlen: 24 87.233.0.0/16 maxlen: 24 193.28.152.0/24 maxlen: 24 213.193.192.0/21 maxlen: 24 213.193.193.0/24 maxlen: 24 213.193.208.0/21 maxlen: 24 213.193.209.0/24 maxlen: 24 213.193.210.0/24 maxlen: 24 213.193.212.0/24 maxlen: 24 213.193.232.0/21 maxlen: 24 213.193.232.0/24 maxlen: 24 213.193.240.0/21 maxlen: 24 213.239.136.0/24 maxlen: 24 213.239.154.0/24 maxlen: 24 2001:990::/32 maxlen: 32 2001:9a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:ee:2b:b3:b4:f9:6e:90:77:72:61:7e:6f:88:09:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Validity Not Before: Jan 16 08:31:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f5fb2148a411d5fff334bdaacb8b6adfadf52d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:a9:eb:e6:75:24:9e:5b:fe:ae:05:5c:f7: 74:a4:3e:2a:eb:d4:dc:f9:c9:2b:13:53:22:4f:10: 92:73:7a:58:a9:76:45:c8:10:19:c4:de:81:d2:d5: f6:69:c1:90:0c:ac:e9:2a:bb:31:29:de:19:b9:73: a5:89:35:ca:fc:74:f2:d1:5e:d5:ea:e8:b0:e8:8e: 89:3b:79:41:6d:64:44:30:a9:5d:ca:e6:d5:e0:69: 5c:e0:7c:e5:b5:f0:39:19:d1:24:08:fc:2c:3f:b7: 4b:3d:2d:4f:8e:48:0d:e9:fd:27:f6:64:d1:3f:f4: 31:58:37:69:ef:66:90:00:8a:47:66:ec:60:5e:c8: a2:f6:9d:b0:18:e7:8c:c2:8b:60:b0:b2:59:11:34: d6:df:15:5d:76:48:59:54:6c:01:b4:7e:2c:b6:9c: fe:c1:17:4c:cb:db:ea:a0:91:4d:16:c7:29:b9:fb: 53:ec:33:02:fa:0e:13:58:5d:34:38:e8:53:a2:af: 6f:46:3d:6d:7d:80:7a:02:35:65:91:c7:d9:24:1c: ab:12:b2:4e:cc:6c:e3:e4:fc:c7:0f:64:dd:a5:69: 36:18:56:8b:68:3a:1e:ab:e9:cb:05:7e:3a:1e:49: 0f:e0:84:4d:1c:97:2c:51:ac:ca:eb:f6:a7:d2:e1: 4a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5F:B2:14:8A:41:1D:5F:FF:33:4B:DA:AC:B8:B6:AD:FA:DF:52:D8 X509v3 Authority Key Identifier: keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/D1-yFIpBHV__M0varLi2rfrfUtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.220.0/24 87.233.0.0/16 193.28.152.0/24 213.193.192.0/21 213.193.208.0/21 213.193.232.0-213.193.247.255 213.239.136.0/24 213.239.154.0/24 IPv6: 2001:990::/32 2001:9a8::/32 Signature Algorithm: sha256WithRSAEncryption bd:62:c5:08:cd:e9:51:46:6c:c0:b7:78:23:1b:85:5c:ab:bb: 5b:91:3d:a9:02:cc:0c:91:5d:73:47:52:c9:0f:2b:aa:29:66: c4:de:ef:68:cd:59:10:b5:00:a4:7f:a0:c7:8e:eb:fc:54:86: c7:a0:28:67:b1:39:bf:bc:ce:72:4f:56:0b:98:a3:80:5a:05: ce:0a:15:ad:80:1b:b5:42:dd:3c:67:a0:ac:ff:e4:f4:56:8b: 04:cc:3e:22:76:d6:bb:85:8d:38:48:02:4f:47:6b:cb:60:ca: ca:20:e1:63:2c:c6:74:2c:40:84:50:07:a1:8f:15:0d:c8:43: 44:16:ab:b2:11:45:89:e3:60:0a:a3:ed:25:37:6b:67:16:9d: 13:e5:9e:89:64:e6:98:b5:2b:8f:a3:7c:9a:19:e3:e2:74:cb: 12:23:39:3c:9d:8e:76:ce:c0:7e:46:03:3b:a1:f9:df:79:da: ab:0a:7c:42:c1:8e:fb:0b:b0:3d:d2:ad:63:44:6d:cb:f2:30: a7:90:96:a3:b2:d7:6e:8f:3c:a6:3f:4f:41:42:cb:ae:ab:c9: 8b:a8:00:76:c7:be:06:2f:b1:99:5b:33:f1:7c:64:00:13:4d: a1:68:6d:ec:23:e5:fc:e0:cd:84:59:a4:a6:57:8c:be:51:3b: 99:18:0d:5d -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZvF7iuztPlukHdyYX5viAmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl MDk3YmIwHhcNMjYwMTE2MDgzMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjVmYjIxNDhhNDExZDVmZmYzMzRiZGFhY2I4YjZhZGZhZGY1MmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhWp6+Z1JJ5b/q4FXPd0pD4q69Tc +ckrE1MiTxCSc3pYqXZFyBAZxN6B0tX2acGQDKzpKrsxKd4ZuXOliTXK/HTy0V7V 6uiw6I6JO3lBbWREMKldyubV4Glc4HzltfA5GdEkCPwsP7dLPS1PjkgN6f0n9mTR P/QxWDdp72aQAIpHZuxgXsii9p2wGOeMwotgsLJZETTW3xVddkhZVGwBtH4stpz+ wRdMy9vqoJFNFscpuftT7DMC+g4TWF00OOhToq9vRj1tfYB6AjVlkcfZJByrErJO zGzj5PzHD2TdpWk2GFaLaDoeq+nLBX46HkkP4IRNHJcsUazK6/an0uFKqwIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFA9fshSKQR1f/zNL2qy4tq3631LYMB8GA1UdIwQY MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct ZTg4NDY1YzQ2MTg2LzEvRDEteUZJcEJIVl9fTTB2YXJMaTJyZnJmVXRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2 LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTA9BAIAATA3AwQAUPfcAwMA V+kDBADBHJgDBAPVwcADBAPVwdAwDAMEA9XB6AMEA9XB8AMEANXviAMEANXvmjAU BAIAAjAOAwUAIAEJkAMFACABCagwDQYJKoZIhvcNAQELBQADggEBAL1ixQjN6VFG bMC3eCMbhVyru1uRPakCzAyRXXNHUskPK6opZsTe72jNWRC1AKR/oMeO6/xUhseg KGexOb+8znJPVguYo4BaBc4KFa2AG7VC3TxnoKz/5PRWiwTMPiJ21ruFjThIAk9H a8tgysog4WMsxnQsQIRQB6GPFQ3IQ0QWq7IRRYnjYAqj7SU3a2cWnRPlnolk5pi1 K4+jfJoZ4+J0yxIjOTydjnbOwH5GAzuh+d952qsKfELBjvsLsD3SrWNEbcvyMKeQ lqOy126PPKY/T0FCy66ryYuoAHbHvgYvsZlbM/F8ZAATTaFobewj5fzgzYRZpKZX jL5RO5kYDV0= -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:50 2026 by rpki-client