This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/YQDkcvZP0TolQ9Rb2J9bf8U7wD8.roa File: YQDkcvZP0TolQ9Rb2J9bf8U7wD8.roa (raw, json) Hash identifier: bLjbl+wMhiL7sRh09UL9i2a7It+tGXyibFC5+VSFo1A= Subject key identifier: 61:00:E4:72:F6:4F:D1:3A:25:43:D4:5B:D8:9F:5B:7F:C5:3B:C0:3F Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Certificate serial: 019B7C80675E2534530785A59573A98233F5 Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/YQDkcvZP0TolQ9Rb2J9bf8U7wD8.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31204 IP address blocks: 83.218.192.0/19 maxlen: 19 89.149.64.0/18 maxlen: 24 89.149.84.0/23 maxlen: 23 89.149.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:67:5e:25:34:53:07:85:a5:95:73:a9:82:33:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6100e472f64fd13a2543d45bd89f5b7fc53bc03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ef:49:45:11:6d:1c:13:d4:24:91:98:d4:b9: 04:ea:18:b3:f8:a5:88:90:3a:04:1a:e3:02:8d:a6: 0b:32:a4:2a:bc:ea:c4:ce:e6:13:c9:7f:84:48:e0: 64:56:c8:95:cf:a5:16:9d:12:bc:7e:61:b2:e9:d3: a4:94:d8:0c:0c:5b:ed:ab:99:c3:cb:cb:4d:0c:d4: d4:6b:c8:b6:55:c4:bc:4f:0f:5a:e3:dc:e8:5b:97: 9c:24:ee:dc:b5:51:12:eb:e6:e7:91:08:ba:ee:50: 95:cb:c0:b1:1c:9c:8f:42:d4:8a:07:3b:62:2b:da: dd:79:de:37:67:52:06:b3:f9:b4:24:f8:44:4b:bb: 8f:09:8c:bd:58:ec:41:1b:4b:d8:6e:e2:1b:5f:66: a4:89:29:b0:9d:3d:2f:a9:aa:80:e1:a1:55:7f:a7: e5:be:a7:eb:fc:43:d5:cd:d6:1f:dd:6a:3a:38:5b: 60:1b:dd:37:64:e5:61:f6:41:f0:bc:c1:2d:f6:f5: a2:6c:f8:14:50:3e:c9:76:09:ff:db:45:56:17:fb: 20:cd:dc:0d:b5:01:d1:87:08:f4:6e:f4:1f:98:c1: 90:20:cb:f1:01:bb:45:0f:68:03:aa:ec:12:65:9e: 4a:d3:5d:a5:f3:c7:d5:2a:69:c6:e4:1d:b2:be:45: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:00:E4:72:F6:4F:D1:3A:25:43:D4:5B:D8:9F:5B:7F:C5:3B:C0:3F X509v3 Authority Key Identifier: keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/YQDkcvZP0TolQ9Rb2J9bf8U7wD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.218.192.0/19 89.149.64.0/18 Signature Algorithm: sha256WithRSAEncryption 67:43:80:48:37:bf:57:14:99:92:6d:af:a9:73:51:6a:2e:a3: bd:50:a6:32:59:63:90:fa:01:58:8d:9d:64:03:2e:39:0f:01: 83:5b:0b:20:1e:b0:5d:93:9c:a2:c3:c1:9f:53:d3:94:90:a5: 7c:f4:4f:76:89:c7:e0:c4:cf:35:4d:92:3d:c9:ed:40:6e:f8: 20:d1:90:c0:ac:4a:5e:3f:2b:e4:6c:be:ce:d4:22:91:de:a9: f2:9d:ab:dd:09:6f:ce:44:9b:75:ef:b9:a9:c7:90:97:f9:26: b5:d9:b5:6a:a8:eb:61:6c:0c:bc:64:47:32:7e:44:16:b5:36: 1f:b2:50:8c:07:4f:97:17:38:77:3d:4e:9e:be:0b:2a:ca:00: ed:2f:6a:ae:a1:0b:c9:dd:f4:65:89:b8:5c:52:ff:13:82:9b: e7:e6:b9:90:48:b3:b8:2a:ca:0f:19:2a:93:22:1e:8f:71:cf: cf:6b:c8:82:0b:16:38:4d:72:24:78:c5:6b:e6:eb:43:3e:03: b6:eb:0b:17:c8:e5:89:71:6e:c3:8c:80:ba:dc:01:c5:38:1a: 8c:0d:14:11:fe:8f:28:e2:1b:bb:9a:cc:7b:21:3d:d8:14:a6: 43:73:f8:c2:80:8e:28:b4:6c:b5:39:95:99:97:e7:2d:46:1a: b6:07:5b:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gGdeJTRTB4WllXOpgjP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw ZDc3ODcwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTAwZTQ3MmY2NGZkMTNhMjU0M2Q0NWJkODlmNWI3ZmM1M2JjMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+9JRRFtHBPUJJGY1LkE6hiz+KWI kDoEGuMCjaYLMqQqvOrEzuYTyX+ESOBkVsiVz6UWnRK8fmGy6dOklNgMDFvtq5nD y8tNDNTUa8i2VcS8Tw9a49zoW5ecJO7ctVES6+bnkQi67lCVy8CxHJyPQtSKBzti K9rded43Z1IGs/m0JPhES7uPCYy9WOxBG0vYbuIbX2akiSmwnT0vqaqA4aFVf6fl vqfr/EPVzdYf3Wo6OFtgG903ZOVh9kHwvMEt9vWibPgUUD7Jdgn/20VWF/sgzdwN tQHRhwj0bvQfmMGQIMvxAbtFD2gDquwSZZ5K012l88fVKmnG5B2yvkX+/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGEA5HL2T9E6JUPUW9ifW3/FO8A/MB8GA1UdIwQY MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et NmY3MDI0YzNhYWQ3LzEvWVFEa2N2WlAwVG9sUTlSYjJKOWJmOFU3d0Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3 LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFU9rAAwQG WZVAMA0GCSqGSIb3DQEBCwUAA4IBAQBnQ4BIN79XFJmSba+pc1FqLqO9UKYyWWOQ +gFYjZ1kAy45DwGDWwsgHrBdk5yiw8GfU9OUkKV89E92icfgxM81TZI9ye1Abvgg 0ZDArEpePyvkbL7O1CKR3qnynavdCW/ORJt177mpx5CX+Sa12bVqqOthbAy8ZEcy fkQWtTYfslCMB0+XFzh3PU6evgsqygDtL2quoQvJ3fRlibhcUv8Tgpvn5rmQSLO4 KsoPGSqTIh6Pcc/Pa8iCCxY4TXIkeMVr5utDPgO26wsXyOWJcW7DjIC63AHFOBqM DRQR/o8o4hu7msx7IT3YFKZDc/jCgI4otGy1OZWZl+ctRhq2B1vF -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:31 2026 by rpki-client