This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa File: eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa (raw, json) Hash identifier: O9RU0zVHK29OhSRSOJLSNO075vgHiZ+2AECagLjqPhA= Subject key identifier: 79:3C:88:66:A1:81:79:1B:3D:96:54:C0:C7:B6:4C:0B:4C:17:D1:AE Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5 Certificate serial: 019B7BA3774D3A1E3F62ADFEB334FC20D796 Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa Signing time: Thu 01 Jan 2026 22:17:49 +0000 ROA not before: Thu 01 Jan 2026 22:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57829 IP address blocks: 45.83.60.0/22 maxlen: 22 45.137.208.0/22 maxlen: 24 81.201.208.0/20 maxlen: 24 84.19.128.0/20 maxlen: 24 84.19.144.0/21 maxlen: 24 91.192.252.0/22 maxlen: 24 91.223.51.0/24 maxlen: 24 91.224.36.0/23 maxlen: 24 185.56.212.0/22 maxlen: 24 185.57.168.0/22 maxlen: 24 185.114.104.0/22 maxlen: 24 185.224.56.0/22 maxlen: 24 188.65.152.0/21 maxlen: 24 193.41.118.0/23 maxlen: 24 193.138.74.0/24 maxlen: 24 193.254.192.0/23 maxlen: 24 195.78.36.0/24 maxlen: 24 195.78.37.0/24 maxlen: 24 2a00:e900::/29 maxlen: 48 2a01:4400::/32 maxlen: 48 2a02:5120::/32 maxlen: 48 2a0b:fd80::/32 maxlen: 48 2a0b:fd81::/32 maxlen: 48 2a0b:fd82::/32 maxlen: 48 2a0b:fd87::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:77:4d:3a:1e:3f:62:ad:fe:b3:34:fc:20:d7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5 Validity Not Before: Jan 1 22:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=793c8866a181791b3d9654c0c7b64c0b4c17d1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:07:1f:f9:8b:9a:ca:66:e9:2a:24:66:9c: 84:6d:57:e1:35:84:7b:b5:3b:03:d5:a6:95:a1:06: 5b:a6:95:3a:ef:72:51:a4:64:37:c3:fc:50:4e:22: 5d:7f:d0:8a:de:e8:74:07:45:e6:78:47:3b:4b:ae: 9b:95:9e:00:a8:ca:a6:c1:84:47:aa:f0:f8:56:c6: 26:99:42:ca:25:53:d4:95:c3:1e:99:f8:63:e6:27: fe:16:58:7f:ad:41:9e:7d:43:50:da:dd:48:5b:dc: f0:33:a6:ad:f2:2a:11:7e:65:65:ec:80:a8:85:be: 18:c8:ab:d7:6c:4f:a3:36:d9:8f:28:02:81:95:0b: 7c:f5:41:11:a5:9f:26:ad:d8:c3:87:49:f0:7d:48: 93:ae:45:2b:a8:d2:79:a5:6c:d2:30:c8:b0:a5:5c: fa:0f:8a:97:88:22:41:a9:a4:2c:ae:bc:83:9b:9b: 1a:da:55:22:36:35:cb:5f:08:0b:68:7f:e2:d3:57: 14:da:20:6e:ba:cb:06:7e:9c:3c:2b:84:4c:5c:28: 3b:d0:41:ff:fd:02:a9:19:fc:bb:59:b4:bd:a2:ec: 8d:67:87:be:ad:72:47:83:74:fc:f5:57:88:f0:6f: 38:78:57:9b:85:21:5f:13:b7:2e:db:78:b5:fb:dd: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3C:88:66:A1:81:79:1B:3D:96:54:C0:C7:B6:4C:0B:4C:17:D1:AE X509v3 Authority Key Identifier: keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.60.0/22 45.137.208.0/22 81.201.208.0/20 84.19.128.0-84.19.151.255 91.192.252.0/22 91.223.51.0/24 91.224.36.0/23 185.56.212.0/22 185.57.168.0/22 185.114.104.0/22 185.224.56.0/22 188.65.152.0/21 193.41.118.0/23 193.138.74.0/24 193.254.192.0/23 195.78.36.0/23 IPv6: 2a00:e900::/29 2a01:4400::/32 2a02:5120::/32 2a0b:fd80::-2a0b:fd82:ffff:ffff:ffff:ffff:ffff:ffff 2a0b:fd87::/32 Signature Algorithm: sha256WithRSAEncryption 25:9b:fc:8a:b6:82:42:6c:d2:ac:4c:39:61:4d:fb:16:f0:73: 97:91:21:a3:f2:4b:04:74:a4:98:40:6d:85:02:f7:96:66:98: 7f:9f:7c:b0:35:7e:a6:6d:a8:ed:f9:b6:0a:ca:a4:0f:3d:96: b1:3b:12:0f:b4:4c:cf:19:cb:e3:5f:e9:aa:70:49:50:de:a6: ee:ba:b2:6c:ab:f1:59:7a:96:db:28:1f:75:42:07:f7:5a:dc: 8e:e4:82:d0:75:e7:46:2b:25:02:ac:d2:9f:cc:49:57:02:17: 9f:5b:95:21:c8:0a:5d:35:83:5c:c1:52:72:f0:2c:43:1c:cc: 7e:65:9a:bb:af:fc:66:59:b5:7e:13:8a:7a:8e:d8:ad:cf:10: 57:e2:ed:6b:81:08:88:06:9d:7a:f0:dc:42:ba:d8:b1:37:7e: 0e:6d:a1:10:c4:e5:cd:5f:3a:15:1b:19:7b:3d:03:dd:09:e1: f3:a9:be:c0:c2:91:0e:41:19:7d:ce:19:1e:b6:dc:c5:74:63: f0:32:b8:7c:58:96:ce:79:2a:64:ec:f5:23:a9:79:ad:69:99: 1d:a4:34:4a:34:20:b3:6f:9b:d7:e2:66:ea:83:17:91:9f:c8: e2:93:80:ad:0b:6c:ec:5e:a1:02:f0:86:31:29:b3:15:f1:3f: b6:86:a6:b4 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt7o3dNOh4/Yq3+szT8INeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj NDE1ZDUwHhcNMjYwMTAxMjIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTNjODg2NmExODE3OTFiM2Q5NjU0YzBjN2I2NGMwYjRjMTdkMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmEHH/mLmspm6SokZpyEbVfhNYR7 tTsD1aaVoQZbppU673JRpGQ3w/xQTiJdf9CK3uh0B0XmeEc7S66blZ4AqMqmwYRH qvD4VsYmmULKJVPUlcMemfhj5if+Flh/rUGefUNQ2t1IW9zwM6at8ioRfmVl7ICo hb4YyKvXbE+jNtmPKAKBlQt89UERpZ8mrdjDh0nwfUiTrkUrqNJ5pWzSMMiwpVz6 D4qXiCJBqaQsrryDm5sa2lUiNjXLXwgLaH/i01cU2iBuussGfpw8K4RMXCg70EH/ /QKpGfy7WbS9ouyNZ4e+rXJHg3T89VeI8G84eFebhSFfE7cu23i1+91MnwIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFHk8iGahgXkbPZZUwMe2TAtMF9GuMB8GA1UdIwQY MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt OGZkMzk0YjUzNTdjLzEvZVR5SVpxR0JlUnM5bGxUQXg3Wk1DMHdYMGE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDBuBAIAATBoAwQCLVM8 AwQCLYnQAwQEUcnQMAwDBAdUE4ADBANUE5ADBAJbwPwDBABb3zMDBAFb4CQDBAK5 ONQDBAK5OagDBAK5cmgDBAK54DgDBAO8QZgDBAHBKXYDBADBikoDBAHB/sADBAHD TiQwMgQCAAIwLAMFAyoA6QADBQAqAUQAAwUAKgJRIDAOAwUHKgv9gAMFACoL/YID BQAqC/2HMA0GCSqGSIb3DQEBCwUAA4IBAQAlm/yKtoJCbNKsTDlhTfsW8HOXkSGj 8ksEdKSYQG2FAveWZph/n3ywNX6mbajt+bYKyqQPPZaxOxIPtEzPGcvjX+mqcElQ 3qbuurJsq/FZepbbKB91Qgf3WtyO5ILQdedGKyUCrNKfzElXAhefW5UhyApdNYNc wVJy8CxDHMx+ZZq7r/xmWbV+E4p6jtitzxBX4u1rgQiIBp168NxCutixN34ObaEQ xOXNXzoVGxl7PQPdCeHzqb7AwpEOQRl9zhkettzFdGPwMrh8WJbOeSpk7PUjqXmt aZkdpDRKNCCzb5vX4mbqgxeRn8jik4CtC2zsXqEC8IYxKbMV8T+2hqa0 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:31 2026 by rpki-client