This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/RoT_BRy5K5T_EFywyXjf2sUOgfA.roa File: RoT_BRy5K5T_EFywyXjf2sUOgfA.roa (raw, json) Hash identifier: 3g9pqCZcoGTGtwQJjCoF4vdhAm5IX+/HPg+Sn5/5ZvI= Subject key identifier: 46:84:FF:05:1C:B9:2B:94:FF:10:5C:B0:C9:78:DF:DA:C5:0E:81:F0 Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Certificate serial: 019B7910153522A0A2F60A4015F589146B7D Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/RoT_BRy5K5T_EFywyXjf2sUOgfA.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43009 IP address blocks: 83.166.64.0/19 maxlen: 24 83.166.64.0/24 maxlen: 24 83.166.65.0/24 maxlen: 24 83.166.66.0/24 maxlen: 24 83.166.67.0/24 maxlen: 24 83.166.68.0/24 maxlen: 24 83.166.78.0/24 maxlen: 24 83.166.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:15:35:22:a0:a2:f6:0a:40:15:f5:89:14:6b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4684ff051cb92b94ff105cb0c978dfdac50e81f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:1f:4d:97:f7:1c:be:b3:3b:02:7b:de:97: 92:3f:b1:40:57:e4:91:ad:ee:41:61:7f:db:9b:a7: ca:6b:7a:88:b4:0b:ac:46:f7:51:b6:f5:be:c2:19: af:7b:2b:b9:1a:0b:28:fb:a8:df:95:fd:e2:2e:0c: cb:55:40:01:02:8f:af:e6:86:71:f6:97:41:c2:4d: d5:d9:c2:c4:3f:41:63:4f:4e:86:40:04:69:a7:ef: 60:16:3f:3d:a7:ca:70:77:20:5e:db:a5:21:cf:60: 7d:ce:57:49:43:fc:2c:62:85:d3:3c:50:1c:89:8f: b4:8b:92:8f:1e:8c:cc:38:1d:c6:b2:d9:75:79:ea: f1:11:50:2a:c2:83:01:47:fb:e3:7a:b8:cd:d9:fa: af:f0:bd:1d:83:cc:d8:b8:48:e7:a8:e9:9c:da:2e: 86:44:44:43:e8:e1:28:e9:b6:dc:22:3d:5a:a5:ed: 90:f7:63:9e:18:09:54:56:3a:01:77:17:48:ed:ea: 98:a0:60:55:d6:19:9a:6d:41:36:9c:38:a0:2e:b5: d7:c9:25:f5:32:85:7b:71:df:70:bb:80:df:e7:77: 87:49:50:a9:fc:8d:50:69:51:a8:59:00:cd:af:e8: e9:01:ff:4b:22:71:be:bd:6b:29:c1:65:30:7e:8c: c6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:84:FF:05:1C:B9:2B:94:FF:10:5C:B0:C9:78:DF:DA:C5:0E:81:F0 X509v3 Authority Key Identifier: keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/RoT_BRy5K5T_EFywyXjf2sUOgfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.166.64.0/19 Signature Algorithm: sha256WithRSAEncryption ce:da:07:2f:ae:ed:64:0c:ba:e6:06:52:db:b2:c6:e4:1c:75: 15:9b:ca:15:ca:10:6b:5a:44:e9:6f:e4:04:ff:9a:74:ae:99: be:93:91:d4:e9:99:bc:90:fc:6f:a0:72:51:e1:8d:93:79:c4: 2a:92:4c:ec:e5:e3:07:1a:7c:d6:6e:7e:32:27:f1:76:73:f7: a4:6e:e8:7f:f9:7c:af:d7:a2:3c:78:4d:90:9e:a9:19:f0:20: d6:03:8d:4a:fb:be:4f:a7:81:ec:c9:b2:f2:0e:08:56:40:c0: 02:64:0f:a3:f2:d7:6a:86:06:a3:9c:83:3a:d9:bf:b3:30:90: 4a:ad:22:d1:3c:7c:3a:19:de:11:a2:3d:bc:71:67:56:fc:17: 75:02:09:98:a7:e4:2f:ac:a8:e7:02:1c:fa:de:bd:d4:05:7f: 09:1f:d0:e1:3e:89:42:79:4e:1e:73:40:40:7f:fe:c1:86:bc: a8:5a:fc:e8:1f:02:e4:ee:d6:1f:14:14:5d:47:ed:22:85:3d: 4c:66:6d:6d:a8:be:2e:ab:01:2d:c0:7c:1a:3f:4d:82:94:7c: 52:31:c3:d6:b6:04:2c:0a:a3:5a:74:36:35:d4:a1:5b:d2:74: 09:1b:16:2d:f3:fa:71:89:a9:d3:ef:34:3d:99:6f:d0:ee:70: 56:1a:28:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBU1IqCi9gpAFfWJFGt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1 Y2IxN2UwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Njg0ZmYwNTFjYjkyYjk0ZmYxMDVjYjBjOTc4ZGZkYWM1MGU4MWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/MfTZf3HL6zOwJ73peSP7FAV+SR re5BYX/bm6fKa3qItAusRvdRtvW+whmveyu5Ggso+6jflf3iLgzLVUABAo+v5oZx 9pdBwk3V2cLEP0FjT06GQARpp+9gFj89p8pwdyBe26Uhz2B9zldJQ/wsYoXTPFAc iY+0i5KPHozMOB3Gstl1eerxEVAqwoMBR/vjerjN2fqv8L0dg8zYuEjnqOmc2i6G RERD6OEo6bbcIj1ape2Q92OeGAlUVjoBdxdI7eqYoGBV1hmabUE2nDigLrXXySX1 MoV7cd9wu4Df53eHSVCp/I1QaVGoWQDNr+jpAf9LInG+vWspwWUwfozGyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEaE/wUcuSuU/xBcsMl439rFDoHwMB8GA1UdIwQY MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct NGQxNmJlOWJhMTMyLzEvUm9UX0JSeTVLNVRfRUZ5d3lYamYyc1VPZ2ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFU6ZAMA0G CSqGSIb3DQEBCwUAA4IBAQDO2gcvru1kDLrmBlLbssbkHHUVm8oVyhBrWkTpb+QE /5p0rpm+k5HU6Zm8kPxvoHJR4Y2TecQqkkzs5eMHGnzWbn4yJ/F2c/ekbuh/+Xyv 16I8eE2QnqkZ8CDWA41K+75Pp4HsybLyDghWQMACZA+j8tdqhgajnIM62b+zMJBK rSLRPHw6Gd4Roj28cWdW/Bd1AgmYp+QvrKjnAhz63r3UBX8JH9DhPolCeU4ec0BA f/7BhryoWvzoHwLk7tYfFBRdR+0ihT1MZm1tqL4uqwEtwHwaP02ClHxSMcPWtgQs CqNadDY11KFb0nQJGxYt8/pxianT7zQ9mW/Q7nBWGihP -----END CERTIFICATE-----Generated at Mon Jan 26 01:49:45 2026 by rpki-client