This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/yOnpLpdVWl0jXoYFDk87GuN8z4k.roa File: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (raw, json) Hash identifier: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I= Subject key identifier: C8:E9:E9:2E:97:55:5A:5D:23:5E:86:05:0E:4F:3B:1A:E3:7C:CF:89 Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019B7C803D13BF81C328BFBC7BB1DE042936 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/yOnpLpdVWl0jXoYFDk87GuN8z4k.roa Signing time: Fri 02 Jan 2026 02:18:57 +0000 ROA not before: Fri 02 Jan 2026 02:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20552 IP address blocks: 91.199.97.0/24 maxlen: 24 91.216.30.0/24 maxlen: 24 164.40.240.0/21 maxlen: 21 164.40.240.0/24 maxlen: 24 164.40.241.0/24 maxlen: 24 164.40.242.0/24 maxlen: 24 164.40.243.0/24 maxlen: 24 164.40.244.0/24 maxlen: 24 164.40.245.0/24 maxlen: 24 164.40.246.0/24 maxlen: 24 164.40.247.0/24 maxlen: 24 185.24.200.0/22 maxlen: 22 185.52.168.0/22 maxlen: 24 185.52.169.0/24 maxlen: 24 185.52.170.0/24 maxlen: 24 185.52.171.0/24 maxlen: 24 185.119.12.0/22 maxlen: 22 185.119.12.0/24 maxlen: 24 185.119.13.0/24 maxlen: 24 185.119.14.0/24 maxlen: 24 185.119.15.0/24 maxlen: 24 217.168.128.0/20 maxlen: 20 217.168.129.0/24 maxlen: 24 217.168.141.0/24 maxlen: 24 2a02:d88::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3d:13:bf:81:c3:28:bf:bc:7b:b1:de:04:29:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8e9e92e97555a5d235e86050e4f3b1ae37ccf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:1d:ae:3a:37:19:0b:a3:1c:dc:41:75:a3: a9:51:23:37:59:27:2d:b2:e1:f5:bc:45:cc:ee:3f: 67:0b:cd:e4:a4:30:96:c1:b3:79:64:a5:36:69:54: 3d:52:eb:32:99:de:6b:d0:2b:1d:7d:54:14:02:83: e1:74:24:8d:0c:dd:b5:6f:47:f7:f6:e1:b1:52:88: 06:d2:e4:70:b2:88:20:d3:9c:16:fa:f4:d9:31:8b: d3:c4:2f:92:ba:9a:a8:b7:83:0b:49:55:90:f2:19: 4a:4c:d3:46:24:df:01:6d:cb:27:9b:5d:e1:83:16: 90:2a:0b:86:07:ce:50:91:7e:ac:a1:15:bb:f8:53: bd:9f:5c:b5:7e:92:d7:9c:18:b7:31:6c:d4:75:97: 9b:16:91:38:ff:ae:33:f9:c9:f5:d3:db:4d:53:76: 16:fd:ec:62:9e:f6:62:90:c2:fd:99:88:8c:c0:a7: 68:14:10:77:e6:1a:51:d0:bc:28:8d:10:87:2e:67: 45:63:63:4e:6b:14:da:38:34:60:d1:73:06:c6:85: e2:54:1b:b8:c1:23:0b:a1:ba:f6:8e:07:1c:7c:57: c1:3b:2f:bb:95:fb:ed:96:6a:8b:21:63:ba:5a:3a: b6:f4:8a:ba:30:e5:0e:b9:69:bd:fa:4b:e2:f7:77: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:E9:2E:97:55:5A:5D:23:5E:86:05:0E:4F:3B:1A:E3:7C:CF:89 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/yOnpLpdVWl0jXoYFDk87GuN8z4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.97.0/24 91.216.30.0/24 164.40.240.0/21 185.24.200.0/22 185.52.168.0/22 185.119.12.0/22 217.168.128.0/20 IPv6: 2a02:d88::/32 Signature Algorithm: sha256WithRSAEncryption 98:28:62:78:50:c5:92:70:b9:00:f2:88:fe:a0:00:12:f7:7c: 77:95:bf:c4:01:44:12:4a:33:b3:ef:f4:9b:c6:19:87:93:fe: 09:ce:2f:39:d3:62:73:8d:ee:c2:f6:c2:d3:41:c2:a0:81:48: 48:0e:a1:fe:62:69:c2:94:b3:6f:d8:f8:64:00:2f:26:b6:c8: 40:63:e4:46:75:e0:eb:a7:74:d3:a3:dd:df:4e:e6:e0:aa:a1: 7e:db:b8:d0:3c:74:be:66:4f:60:2c:d0:11:3d:ce:76:f8:c0: 13:d1:b7:30:95:34:9a:c8:fd:a4:cd:68:4f:26:33:cc:f4:67: 17:24:73:88:a1:a3:96:23:14:44:14:41:ab:40:e7:b2:06:3b: 05:65:db:6a:4a:7c:a5:e1:31:24:55:7d:99:fc:35:86:ae:da: bf:a0:8a:ba:53:bf:e1:1e:c8:86:46:44:92:ea:e5:4f:18:68: b1:5a:b6:da:1f:29:3b:c6:82:49:8f:9f:c6:b0:d7:72:8a:10: 42:ce:8b:71:ff:77:fa:85:78:45:1a:64:0d:09:ce:4e:91:c6: a8:2e:f0:56:e7:3a:84:e7:60:b8:ed:35:c6:9a:0c:bb:c6:28: 4f:22:80:25:ff:14:eb:ea:c6:ea:ab:61:6a:f4:8d:71:12:60: 14:25:54:7a -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt8gD0Tv4HDKL+8e7HeBCk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGU5ZTkyZTk3NTU1YTVkMjM1ZTg2MDUwZTRmM2IxYWUzN2NjZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8sdrjo3GQujHNxBdaOpUSM3WSct suH1vEXM7j9nC83kpDCWwbN5ZKU2aVQ9Uusymd5r0CsdfVQUAoPhdCSNDN21b0f3 9uGxUogG0uRwsogg05wW+vTZMYvTxC+Supqot4MLSVWQ8hlKTNNGJN8Bbcsnm13h gxaQKguGB85QkX6soRW7+FO9n1y1fpLXnBi3MWzUdZebFpE4/64z+cn109tNU3YW /exinvZikML9mYiMwKdoFBB35hpR0LwojRCHLmdFY2NOaxTaODRg0XMGxoXiVBu4 wSMLobr2jgccfFfBOy+7lfvtlmqLIWO6Wjq29Iq6MOUOuWm9+kvi93fDmQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFMjp6S6XVVpdI16GBQ5POxrjfM+JMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEveU9ucExwZFZXbDBqWG9ZRkRrODdHdU44ejRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQAW8dhAwQA W9geAwQDpCjwAwQCuRjIAwQCuTSoAwQCuXcMAwQE2aiAMA0EAgACMAcDBQAqAg2I MA0GCSqGSIb3DQEBCwUAA4IBAQCYKGJ4UMWScLkA8oj+oAAS93x3lb/EAUQSSjOz 7/SbxhmHk/4Jzi8502Jzje7C9sLTQcKggUhIDqH+YmnClLNv2PhkAC8mtshAY+RG deDrp3TTo93fTubgqqF+27jQPHS+Zk9gLNARPc52+MAT0bcwlTSayP2kzWhPJjPM 9GcXJHOIoaOWIxREFEGrQOeyBjsFZdtqSnyl4TEkVX2Z/DWGrtq/oIq6U7/hHsiG RkSS6uVPGGixWrbaHyk7xoJJj5/GsNdyihBCzotx/3f6hXhFGmQNCc5OkcaoLvBW 5zqE52C47TXGmgy7xihPIoAl/xTr6sbqq2Fq9I1xEmAUJVR6 -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:36 2026 by rpki-client