This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/Y29egXPiMsW9V8mMeno5f1i_DA0.roa File: Y29egXPiMsW9V8mMeno5f1i_DA0.roa (raw, json) Hash identifier: nkloI1U6cBcEsHKtfEkrQxaSlfy9yDL70Etn0mEQzrQ= Subject key identifier: 63:6F:5E:81:73:E2:32:C5:BD:57:C9:8C:7A:7A:39:7F:58:BF:0C:0D Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Certificate serial: 019B7F15E1EC76E853F17A5197AD43C1E875 Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/Y29egXPiMsW9V8mMeno5f1i_DA0.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211448 IP address blocks: 94.176.160.0/23 maxlen: 23 94.176.160.0/24 maxlen: 24 94.176.161.0/24 maxlen: 24 193.30.126.0/24 maxlen: 24 193.30.127.0/24 maxlen: 24 194.33.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e1:ec:76:e8:53:f1:7a:51:97:ad:43:c1:e8:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=636f5e8173e232c5bd57c98c7a7a397f58bf0c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:56:80:01:db:de:e6:32:39:5f:1a:7c:ac: f8:d7:17:e9:53:60:0f:b0:bf:5c:36:4d:83:ec:3e: b0:8e:71:03:d5:a5:71:62:64:0d:a6:cc:02:64:54: ef:ee:fa:09:6f:db:9d:6a:ce:86:fb:f5:4b:4c:1b: af:5f:11:be:22:e0:7e:23:ef:ee:0d:44:68:ba:96: 9d:76:88:c6:e7:6f:f9:fb:c7:98:cf:c3:9a:e7:ce: 19:83:64:16:f0:cf:10:5e:0c:7c:8f:f1:a5:f7:ee: 3b:ef:27:58:4a:ce:f2:2f:be:e3:bf:98:98:e1:c1: 01:39:27:c9:8c:04:82:d4:7d:54:e9:d3:e0:8e:19: 9f:e8:20:89:4d:1b:96:fd:a8:70:c1:cb:aa:8a:86: 5b:80:d3:af:78:eb:aa:a9:1a:44:0d:09:e3:eb:e0: bf:f7:ae:ba:13:9d:9d:7c:e3:8c:47:39:40:d2:1d: a4:2d:69:d2:03:50:85:a4:09:b1:11:4b:d5:7b:7b: da:c0:21:cf:d6:71:fe:1a:26:9b:e1:b2:20:b8:cc: 6a:24:fe:e5:f8:f4:34:46:ff:67:24:e4:66:a5:1f: 61:40:65:8a:db:9c:60:d3:b6:44:40:6d:d3:7f:5f: 96:61:f9:c9:fb:b2:7f:7f:0d:0b:75:48:ea:83:7d: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6F:5E:81:73:E2:32:C5:BD:57:C9:8C:7A:7A:39:7F:58:BF:0C:0D X509v3 Authority Key Identifier: keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/Y29egXPiMsW9V8mMeno5f1i_DA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.176.160.0/23 193.30.126.0/23 194.33.191.0/24 Signature Algorithm: sha256WithRSAEncryption 27:57:58:f1:ac:96:c7:d8:74:bc:83:bc:b1:93:39:73:50:03: a3:4e:f4:40:b3:a7:53:ef:1f:3f:6e:d0:65:91:42:b4:24:0e: f7:59:16:50:07:1a:25:7a:a3:77:b6:7a:90:3d:0f:b0:9b:8d: 9f:b5:d1:20:9b:0a:c2:3e:47:a6:9b:a9:a7:90:33:02:c6:37: a6:39:4f:77:c1:d3:78:39:97:e4:f0:d3:00:09:fa:53:1d:07: a5:1c:86:35:71:c7:f4:d6:8d:f7:d6:78:19:92:90:b3:c9:17: 25:e6:78:1b:d8:87:7a:ef:60:7c:5a:1c:80:16:53:4e:77:78: 4c:8d:ae:66:f0:e5:64:45:37:f4:29:23:24:3c:e9:39:fd:07: 78:06:37:40:30:ba:d6:a0:00:f0:16:c3:d9:f3:81:c3:d3:16: 88:79:f8:e3:80:f7:1b:e4:e0:2d:e5:d4:fb:fb:8d:b6:2a:cb: 87:98:6e:f3:b0:0f:97:db:01:3a:6c:d3:05:1a:4e:f8:cf:e5: 4b:4f:92:16:f2:43:0a:be:d0:19:d7:00:12:d0:e1:30:b8:2c: 01:2b:54:57:fc:48:4c:2c:1c:ae:7e:be:32:ff:c5:ea:79:f3: f3:cc:c3:e1:c3:02:fd:1b:2d:bc:c9:e9:a5:a9:96:c5:d1:18: c6:83:d5:b8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/FeHsduhT8XpRl61Dweh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh NWQ0MGIwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzZmNWU4MTczZTIzMmM1YmQ1N2M5OGM3YTdhMzk3ZjU4YmYwYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MNWgAHb3uYyOV8afKz41xfpU2AP sL9cNk2D7D6wjnED1aVxYmQNpswCZFTv7voJb9udas6G+/VLTBuvXxG+IuB+I+/u DURoupaddojG52/5+8eYz8Oa584Zg2QW8M8QXgx8j/Gl9+477ydYSs7yL77jv5iY 4cEBOSfJjASC1H1U6dPgjhmf6CCJTRuW/ahwwcuqioZbgNOveOuqqRpEDQnj6+C/ 9666E52dfOOMRzlA0h2kLWnSA1CFpAmxEUvVe3vawCHP1nH+Giab4bIguMxqJP7l +PQ0Rv9nJORmpR9hQGWK25xg07ZEQG3Tf1+WYfnJ+7J/fw0LdUjqg31zCwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGNvXoFz4jLFvVfJjHp6OX9YvwwNMB8GA1UdIwQY MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2 LThjZTYwYTVjOGIxZi8xL1kyOWVnWFBpTXNXOVY4bU1lbm81ZjFpX0RBMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2LThjZTYwYTVjOGIx Zi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAFesKAD BAHBHn4DBADCIb8wDQYJKoZIhvcNAQELBQADggEBACdXWPGslsfYdLyDvLGTOXNQ A6NO9ECzp1PvHz9u0GWRQrQkDvdZFlAHGiV6o3e2epA9D7CbjZ+10SCbCsI+R6ab qaeQMwLGN6Y5T3fB03g5l+Tw0wAJ+lMdB6UchjVxx/TWjffWeBmSkLPJFyXmeBvY h3rvYHxaHIAWU053eEyNrmbw5WRFN/QpIyQ86Tn9B3gGN0AwutagAPAWw9nzgcPT Foh5+OOA9xvk4C3l1Pv7jbYqy4eYbvOwD5fbATps0wUaTvjP5UtPkhbyQwq+0BnX ABLQ4TC4LAErVFf8SEwsHK5+vjL/xep58/PMw+HDAv0bLbzJ6aWplsXRGMaD1bg= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:21 2026 by rpki-client