This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/2y_ByTab_ws0mbVLyTpRpyAcyZ8.roa File: 2y_ByTab_ws0mbVLyTpRpyAcyZ8.roa (raw, json) Hash identifier: 7PzrDU99O6DGjDd0LnO/scUqV/NIo6T6ri/qjRwALko= Subject key identifier: DB:2F:C1:C9:36:9B:FF:0B:34:99:B5:4B:C9:3A:51:A7:20:1C:C9:9F Certificate issuer: /CN=10543a5197eb2544447e9d36b3ebf14452c777eb Certificate serial: 019B797EE6E36B7C8A3DC0150F0DD5A81040 Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/2y_ByTab_ws0mbVLyTpRpyAcyZ8.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2110 IP address blocks: 78.16.0.0/14 maxlen: 14 78.16.0.0/16 maxlen: 16 78.17.0.0/16 maxlen: 16 78.18.0.0/15 maxlen: 15 185.146.180.0/22 maxlen: 22 185.146.180.0/24 maxlen: 24 192.111.39.0/24 maxlen: 24 193.95.128.0/18 maxlen: 24 193.120.0.0/16 maxlen: 16 193.120.52.0/24 maxlen: 24 193.120.216.0/24 maxlen: 24 193.203.128.0/19 maxlen: 19 194.46.192.0/18 maxlen: 18 194.125.0.0/17 maxlen: 17 194.145.128.0/21 maxlen: 21 194.165.160.0/19 maxlen: 19 212.2.160.0/19 maxlen: 19 213.202.128.0/18 maxlen: 18 2001:7c8::/29 maxlen: 29 2001:7c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e6:e3:6b:7c:8a:3d:c0:15:0f:0d:d5:a8:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db2fc1c9369bff0b3499b54bc93a51a7201cc99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:f5:a0:8b:4b:9e:3a:8a:8f:47:12:b8:5f: a5:fd:48:a4:a3:a3:0c:e9:14:b7:d8:48:87:5b:20: ce:09:e3:9b:66:4b:fa:15:d0:7c:72:c8:0b:39:a4: 25:cf:56:e8:9b:aa:70:4e:bd:4f:ff:53:83:74:70: 50:ec:aa:72:a2:a4:ef:ad:9a:79:07:64:f0:48:ac: 7e:e6:5b:f3:f9:e2:31:bf:18:75:39:6f:fa:64:16: f5:79:b8:f3:34:d3:96:1b:b8:4c:c0:c3:a1:f2:cb: f6:42:c7:ae:6a:51:6f:f3:a5:3c:01:17:6c:db:f5: 8e:3a:f0:f8:6f:1d:18:c3:5c:6b:9e:e4:b8:bd:3d: 97:1a:97:be:e0:79:2a:dc:8f:16:19:a8:d5:e9:bb: 8c:7a:d8:8d:8a:8a:a9:e5:cd:72:3c:f2:a2:29:5a: 99:6b:bf:40:6d:4b:e9:7b:32:ee:fb:21:58:c3:4d: 9e:b5:21:f5:94:58:3c:92:a6:34:37:4b:4d:f7:43: e5:a2:aa:0c:7c:72:6e:da:6d:77:23:ce:00:84:f4: a8:fc:ce:8e:09:2e:bc:42:d1:42:e0:a1:20:c3:f7: 40:e6:67:ef:25:2e:e7:89:07:6d:1c:13:4b:ac:d7: c5:84:f1:41:b4:6c:f9:55:88:b8:86:6b:3a:a5:00: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2F:C1:C9:36:9B:FF:0B:34:99:B5:4B:C9:3A:51:A7:20:1C:C9:9F X509v3 Authority Key Identifier: keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/2y_ByTab_ws0mbVLyTpRpyAcyZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.16.0.0/14 185.146.180.0/22 192.111.39.0/24 193.95.128.0/18 193.120.0.0/16 193.203.128.0/19 194.46.192.0/18 194.125.0.0/17 194.145.128.0/21 194.165.160.0/19 212.2.160.0/19 213.202.128.0/18 IPv6: 2001:7c8::/29 Signature Algorithm: sha256WithRSAEncryption a8:06:d6:04:72:70:cb:e0:32:c5:a6:8d:1e:4c:2f:6e:f7:11: 4b:13:2f:6f:da:f5:b7:2b:d4:a3:23:71:5d:1c:dc:6a:f1:90: 16:5d:4d:9f:b2:3c:04:fa:b8:af:c2:ea:d7:85:c3:53:e3:f7: 40:14:8c:8e:c5:56:e4:e9:8a:00:73:7c:80:ea:6c:d9:79:7e: 1f:12:2c:c7:38:c1:6c:34:8e:16:25:be:79:bf:bc:2e:a0:20: a9:82:92:d0:a1:70:f7:7f:0e:17:96:ef:ce:2a:30:24:d1:59: 91:42:59:fd:5d:cb:ec:0c:a2:19:7c:80:56:49:e4:0b:30:fe: 44:29:02:9e:2c:e6:b2:91:ef:26:79:4a:d9:84:8b:86:7d:e6: 7b:f1:55:03:bb:ed:fb:85:3f:eb:f4:5e:53:5a:93:0b:d7:97: 0f:96:d5:63:b5:fc:c9:05:21:c6:0b:80:37:0b:db:18:9a:04: 80:0d:83:ba:a5:ed:c3:9b:60:f0:ec:e8:12:c9:ca:9f:6d:cc: 6f:64:eb:a4:7a:0b:3c:6b:1e:69:fa:a4:db:b9:42:d9:0a:73: 9c:9e:7d:60:43:11:80:40:cb:c0:43:eb:b8:31:b0:98:39:cb: 45:02:92:3e:84:52:30:74:bf:5b:8b:cb:ae:0c:29:2f:f6:8d: 85:1d:09:89 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt5fubja3yKPcAVDw3VqBBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTQzYTUxOTdlYjI1NDQ0NDdlOWQzNmIzZWJmMTQ0NTJj Nzc3ZWIwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjJmYzFjOTM2OWJmZjBiMzQ5OWI1NGJjOTNhNTFhNzIwMWNjOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnz1oItLnjqKj0cSuF+l/Uiko6MM 6RS32EiHWyDOCeObZkv6FdB8csgLOaQlz1bom6pwTr1P/1ODdHBQ7KpyoqTvrZp5 B2TwSKx+5lvz+eIxvxh1OW/6ZBb1ebjzNNOWG7hMwMOh8sv2QseualFv86U8ARds 2/WOOvD4bx0Yw1xrnuS4vT2XGpe+4Hkq3I8WGajV6buMetiNioqp5c1yPPKiKVqZ a79AbUvpezLu+yFYw02etSH1lFg8kqY0N0tN90PloqoMfHJu2m13I84AhPSo/M6O CS68QtFC4KEgw/dA5mfvJS7niQdtHBNLrNfFhPFBtGz5VYi4hms6pQC3cwIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFNsvwck2m/8LNJm1S8k6UacgHMmfMB8GA1UdIwQY MBaAFBBUOlGX6yVERH6dNrPr8URSx3frMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmIt ZjdlMGM1ZTI3MDJlLzEvMnlfQnlUYWJfd3MwbWJWTHlUcFJweUFjeVo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmItZjdlMGM1ZTI3MDJl LzEvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwMCThADBAK5 krQDBADAbycDBAbBX4ADAwDBeAMEBcHLgAMEBsIuwAMEB8J9AAMEA8KRgAMEBcKl oAMEBdQCoAMEBtXKgDANBAIAAjAHAwUDIAEHyDANBgkqhkiG9w0BAQsFAAOCAQEA qAbWBHJwy+AyxaaNHkwvbvcRSxMvb9r1tyvUoyNxXRzcavGQFl1Nn7I8BPq4r8Lq 14XDU+P3QBSMjsVW5OmKAHN8gOps2Xl+HxIsxzjBbDSOFiW+eb+8LqAgqYKS0KFw 938OF5bvziowJNFZkUJZ/V3L7AyiGXyAVknkCzD+RCkCnizmspHvJnlK2YSLhn3m e/FVA7vt+4U/6/ReU1qTC9eXD5bVY7X8yQUhxguANwvbGJoEgA2DuqXtw5tg8Ozo EsnKn23Mb2TrpHoLPGseafqk27lC2QpznJ59YEMRgEDLwEPruDGwmDnLRQKSPoRS MHS/W4vLrgwpL/aNhR0JiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:22 2026 by rpki-client