This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/fyvhyswuOrkYuG7Dxy3RXqdfaj4.roa File: fyvhyswuOrkYuG7Dxy3RXqdfaj4.roa (raw, json) Hash identifier: i6Apw5kLn3fbRfNpJwcSwX8fAA6K51pqRQmFfW1EtUQ= Subject key identifier: 7F:2B:E1:CA:CC:2E:3A:B9:18:B8:6E:C3:C7:2D:D1:5E:A7:5F:6A:3E Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Certificate serial: 019B77589D5C86392FDDE0608CC1BF853CE7 Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/fyvhyswuOrkYuG7Dxy3RXqdfaj4.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6658 IP address blocks: 194.1.128.0/24 maxlen: 24 194.1.129.0/24 maxlen: 24 194.1.133.0/24 maxlen: 24 194.1.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9d:5c:86:39:2f:dd:e0:60:8c:c1:bf:85:3c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f2be1cacc2e3ab918b86ec3c72dd15ea75f6a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:01:e0:6b:e2:79:73:47:df:d0:f3:a9:a2: 96:03:65:42:e9:15:13:3f:92:b5:dd:c4:99:b0:0d: 81:45:9f:32:b2:a0:06:44:ae:2f:37:b3:c5:de:a8: 19:63:1c:82:39:1a:85:65:23:98:ef:a1:df:d7:c0: fb:c8:8d:71:93:2a:c9:aa:a4:32:2c:13:8d:5b:3d: 03:b2:6b:de:85:86:f4:53:92:15:e0:50:1a:a8:e0: 03:ec:ca:00:2e:4b:35:fe:81:09:88:50:7b:b4:bc: 6d:dc:c6:25:24:9b:b4:d5:e4:ea:41:2a:37:d1:99: a7:b0:cd:0c:c7:78:25:46:2d:df:d0:b2:72:d8:1a: 96:a6:f9:56:9f:92:61:46:51:b8:4a:e3:a0:56:46: a5:8f:4b:ca:1f:db:70:9a:37:12:f9:bd:f1:a2:87: 9c:40:cc:2d:92:4d:97:f0:b3:99:6d:f6:a6:b7:ed: 39:c9:47:ac:18:01:4f:ac:0a:06:0f:22:00:ab:1a: 5c:5c:9e:69:d5:aa:2b:da:d7:d3:40:9d:de:50:0a: f8:b4:e8:28:d3:84:11:bf:da:a8:47:f2:8c:f4:1b: 38:e7:be:e1:80:69:85:59:8d:ee:17:2c:51:55:63: 0c:f1:dd:00:a3:6d:fe:61:a5:12:70:6e:e0:b0:16: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2B:E1:CA:CC:2E:3A:B9:18:B8:6E:C3:C7:2D:D1:5E:A7:5F:6A:3E X509v3 Authority Key Identifier: keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/fyvhyswuOrkYuG7Dxy3RXqdfaj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.128.0/23 194.1.133.0-194.1.134.255 Signature Algorithm: sha256WithRSAEncryption 8d:31:5a:7a:89:48:71:4a:32:46:f5:01:8e:cb:65:2b:1a:27: 5e:15:2c:ac:41:39:f8:98:f6:95:00:b2:02:24:ab:50:9c:26: bf:98:dd:99:13:a9:3f:bb:40:d2:05:d0:5a:01:42:32:9d:9e: 89:fc:81:2f:7a:8f:03:39:56:66:fa:e4:bf:98:3d:f3:77:ef: 8f:c6:9e:f7:53:c2:31:e0:d5:54:9c:25:3a:bc:6c:c2:97:00: d4:66:5b:45:bb:dd:d3:24:20:c8:ed:83:a4:a4:81:1d:b6:4d: 21:71:1a:e0:bd:21:bc:6d:bd:15:f4:a3:82:3f:1b:09:1c:5c: 1b:60:00:a1:7e:45:c5:56:db:0e:49:88:b4:0b:96:9e:9a:e2: 5f:95:71:3a:53:c6:a5:4a:41:a0:a1:44:3c:9c:db:22:cf:0b: 55:b2:2a:91:fb:af:e0:0c:53:63:d0:b0:26:51:55:98:de:f6: c1:89:26:4c:77:c7:10:b4:33:a4:d8:c1:ac:15:26:40:8e:bc: 0d:93:21:9c:a8:26:95:1a:61:61:dc:92:a2:81:60:5c:8c:31: e0:78:f9:eb:37:f7:11:3a:15:d2:d8:13:43:e4:bc:33:7f:f9: 90:0b:d0:af:0d:50:14:d1:b0:8d:89:78:dc:8e:a6:ee:2e:e7: fd:2b:32:fd -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WJ1chjkv3eBgjMG/hTznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0 N2U4MzkwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjJiZTFjYWNjMmUzYWI5MThiODZlYzNjNzJkZDE1ZWE3NWY2YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ywB4GvieXNH39DzqaKWA2VC6RUT P5K13cSZsA2BRZ8ysqAGRK4vN7PF3qgZYxyCORqFZSOY76Hf18D7yI1xkyrJqqQy LBONWz0DsmvehYb0U5IV4FAaqOAD7MoALks1/oEJiFB7tLxt3MYlJJu01eTqQSo3 0ZmnsM0Mx3glRi3f0LJy2BqWpvlWn5JhRlG4SuOgVkalj0vKH9twmjcS+b3xooec QMwtkk2X8LOZbfamt+05yUesGAFPrAoGDyIAqxpcXJ5p1aor2tfTQJ3eUAr4tOgo 04QRv9qoR/KM9Bs4577hgGmFWY3uFyxRVWMM8d0Ao23+YaUScG7gsBYLPQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFH8r4crMLjq5GLhuw8ct0V6nX2o+MB8GA1UdIwQY MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct NTA0YzhmYzIyMGVhLzEvZnl2aHlzd3VPcmtZdUc3RHh5M1JYcWRmYWo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBwgGAMAwD BADCAYUDBADCAYYwDQYJKoZIhvcNAQELBQADggEBAI0xWnqJSHFKMkb1AY7LZSsa J14VLKxBOfiY9pUAsgIkq1CcJr+Y3ZkTqT+7QNIF0FoBQjKdnon8gS96jwM5Vmb6 5L+YPfN374/GnvdTwjHg1VScJTq8bMKXANRmW0W73dMkIMjtg6SkgR22TSFxGuC9 IbxtvRX0o4I/GwkcXBtgAKF+RcVW2w5JiLQLlp6a4l+VcTpTxqVKQaChRDyc2yLP C1WyKpH7r+AMU2PQsCZRVZje9sGJJkx3xxC0M6TYwawVJkCOvA2TIZyoJpUaYWHc kqKBYFyMMeB4+es39xE6FdLYE0PkvDN/+ZAL0K8NUBTRsI2JeNyOpu4u5/0rMv0= -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:41 2026 by rpki-client