This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/ROVyIAsBNfwBer4Npp8bVnXZW2U.roa File: ROVyIAsBNfwBer4Npp8bVnXZW2U.roa (raw, json) Hash identifier: Z2rohR1T9JeCw9lXsHTXnEJbzYMGmnxfv3f6fLAZwjY= Subject key identifier: 44:E5:72:20:0B:01:35:FC:01:7A:BE:0D:A6:9F:1B:56:75:D9:5B:65 Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Certificate serial: 019B77590A36C86B2E3DE1037ED9925BF518 Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/ROVyIAsBNfwBer4Npp8bVnXZW2U.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 85.198.36.0/24 maxlen: 24 85.198.41.0/24 maxlen: 24 85.198.46.0/24 maxlen: 24 91.123.9.0/24 maxlen: 24 190.106.176.0/24 maxlen: 24 206.195.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0a:36:c8:6b:2e:3d:e1:03:7e:d9:92:5b:f5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44e572200b0135fc017abe0da69f1b5675d95b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:1c:82:0a:9a:90:53:f0:c1:0a:c6:91:07: b4:00:1c:9a:92:40:cb:49:c5:8b:3b:c3:ae:3b:01: 50:91:3c:e3:49:a8:a2:19:ef:2f:39:e2:88:ad:df: b5:9a:45:20:d5:51:35:40:a1:5c:28:f0:1c:42:72: b8:4c:27:26:ad:19:ae:e2:e8:34:43:04:97:98:58: 2c:f4:08:00:c6:9e:46:f2:db:79:72:32:6e:77:58: 9f:03:db:d3:40:d5:d8:6b:27:fd:d2:0b:24:b2:a4: de:a2:ff:a9:53:1c:ac:e0:46:92:4a:8b:fe:3a:0f: 07:52:3b:bd:b5:bc:d0:89:51:30:28:d2:be:ee:56: fd:39:8d:5c:10:6e:d3:c0:5a:ef:43:b5:d4:e4:6b: f3:b1:8c:4c:d4:fb:a4:48:42:1f:fd:21:12:5b:33: 0c:98:f9:75:58:fa:13:d0:c4:8c:fc:e3:59:e2:44: 2b:52:b1:60:f3:d7:ef:12:64:0e:10:40:de:c9:63: a7:8a:1e:ab:6c:47:91:e0:65:a3:7d:88:02:2b:e0: 42:ff:1b:d3:31:80:cf:31:f5:c7:e8:7d:ec:7a:23: 36:f7:ef:91:8f:f6:b8:d5:f7:33:3a:d9:be:58:ac: 0f:23:9b:26:84:d2:56:a9:f9:5f:ff:2d:80:be:a4: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E5:72:20:0B:01:35:FC:01:7A:BE:0D:A6:9F:1B:56:75:D9:5B:65 X509v3 Authority Key Identifier: keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/ROVyIAsBNfwBer4Npp8bVnXZW2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.198.36.0/24 85.198.41.0/24 85.198.46.0/24 91.123.9.0/24 190.106.176.0/24 206.195.143.0/24 Signature Algorithm: sha256WithRSAEncryption 63:d4:12:c4:49:9f:e4:bd:18:fd:a2:05:29:23:98:95:a0:47: 1c:f3:df:a3:10:7b:52:76:bc:60:15:4b:b8:57:26:d2:ee:c7: 81:21:5f:17:eb:f9:0f:06:b0:6a:ce:90:be:b8:4b:da:50:b9: b0:12:b2:bb:22:89:bb:30:15:51:a0:9d:82:f0:f0:30:cd:8c: 37:fa:cc:19:64:07:58:b8:af:00:30:4e:19:37:b0:00:68:c1: aa:4a:0a:eb:c6:de:5b:b0:27:94:5c:55:00:d4:80:16:45:a2: 89:f4:a4:fa:67:f2:67:b3:a7:ce:50:cb:e9:dc:b9:49:00:8d: 8f:7f:14:e6:bc:37:5e:df:73:6d:67:69:44:ef:c0:29:4c:61: 39:c8:9f:50:ee:81:a3:24:5e:95:06:32:29:e5:06:4b:0f:25: 99:db:77:84:dc:f6:10:a1:98:9c:1b:a5:02:49:83:e4:4c:8d: 88:f6:47:01:b2:7a:59:2e:9d:a3:f3:c3:43:19:c5:20:c8:30: 8b:d8:f9:c1:38:1d:71:74:9f:fc:f5:77:49:55:e0:7e:34:62: c8:bf:70:5e:8d:56:04:ce:00:b4:83:b9:7c:52:22:4a:9f:c9: 56:46:4c:7a:80:96:18:bd:13:be:3b:21:28:87:44:cb:ae:82: 6a:db:7d:9e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3WQo2yGsuPeEDftmSW/UYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZjUxYmJkZjAxMDg4ZDM0YzZiYWFlZWY4NmJkYTI1YTlm MDIxOTYwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGU1NzIyMDBiMDEzNWZjMDE3YWJlMGRhNjlmMWI1Njc1ZDk1YjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlukcggqakFPwwQrGkQe0AByakkDL ScWLO8OuOwFQkTzjSaiiGe8vOeKIrd+1mkUg1VE1QKFcKPAcQnK4TCcmrRmu4ug0 QwSXmFgs9AgAxp5G8tt5cjJud1ifA9vTQNXYayf90gsksqTeov+pUxys4EaSSov+ Og8HUju9tbzQiVEwKNK+7lb9OY1cEG7TwFrvQ7XU5GvzsYxM1PukSEIf/SESWzMM mPl1WPoT0MSM/ONZ4kQrUrFg89fvEmQOEEDeyWOnih6rbEeR4GWjfYgCK+BC/xvT MYDPMfXH6H3seiM29++Rj/a41fczOtm+WKwPI5smhNJWqflf/y2AvqSu8wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFETlciALATX8AXq+DaafG1Z12VtlMB8GA1UdIwQY MBaAFCT1G73wEIjTTGuq7vhr2iWp8CGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYt NTIwMWEyM2Q3YTQ5LzEvUk9WeUlBc0JOZndCZXI0TnBwOGJWblhaVzJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYtNTIwMWEyM2Q3YTQ5 LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVcYkAwQA VcYpAwQAVcYuAwQAW3sJAwQAvmqwAwQAzsOPMA0GCSqGSIb3DQEBCwUAA4IBAQBj 1BLESZ/kvRj9ogUpI5iVoEcc89+jEHtSdrxgFUu4VybS7seBIV8X6/kPBrBqzpC+ uEvaULmwErK7Iom7MBVRoJ2C8PAwzYw3+swZZAdYuK8AME4ZN7AAaMGqSgrrxt5b sCeUXFUA1IAWRaKJ9KT6Z/Jns6fOUMvp3LlJAI2PfxTmvDde33NtZ2lE78ApTGE5 yJ9Q7oGjJF6VBjIp5QZLDyWZ23eE3PYQoZicG6UCSYPkTI2I9kcBsnpZLp2j88ND GcUgyDCL2PnBOB1xdJ/89XdJVeB+NGLIv3BejVYEzgC0g7l8UiJKn8lWRkx6gJYY vRO+OyEoh0TLroJq232e -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:25 2026 by rpki-client