This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/vYV80pMOfJdsEu4niWAcrkBUgNc.roa File: vYV80pMOfJdsEu4niWAcrkBUgNc.roa (raw, json) Hash identifier: gHF1ZhItzUzKri2+egaA2O0GGW8DIyzH1CkBWVld6xw= Subject key identifier: BD:85:7C:D2:93:0E:7C:97:6C:12:EE:27:89:60:1C:AE:40:54:80:D7 Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Certificate serial: 019B7759095238154F4FCD17A0E8C9A00615 Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/vYV80pMOfJdsEu4niWAcrkBUgNc.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 85.198.34.0/24 maxlen: 24 85.198.35.0/24 maxlen: 24 85.198.38.0/24 maxlen: 24 85.198.39.0/24 maxlen: 24 85.198.42.0/24 maxlen: 24 85.198.43.0/24 maxlen: 24 91.123.12.0/24 maxlen: 24 91.123.13.0/24 maxlen: 24 91.123.14.0/24 maxlen: 24 91.123.15.0/24 maxlen: 24 190.106.177.0/24 maxlen: 24 190.106.178.0/24 maxlen: 24 190.106.179.0/24 maxlen: 24 190.106.180.0/24 maxlen: 24 190.106.181.0/24 maxlen: 24 190.106.182.0/24 maxlen: 24 190.106.184.0/24 maxlen: 24 206.195.137.0/24 maxlen: 24 206.195.138.0/24 maxlen: 24 206.195.139.0/24 maxlen: 24 206.195.140.0/24 maxlen: 24 206.195.141.0/24 maxlen: 24 206.195.142.0/24 maxlen: 24 206.195.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:09:52:38:15:4f:4f:cd:17:a0:e8:c9:a0:06:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd857cd2930e7c976c12ee2789601cae405480d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:12:01:88:fe:70:b0:47:b3:ff:ea:f8:07: 88:f4:c6:bd:e9:f7:4b:cf:80:c0:66:cc:9e:1a:14: e2:e8:8e:8a:b9:1f:37:f3:aa:3e:ab:e7:b2:0c:14: 55:f5:1b:93:d1:83:cc:a8:76:c9:d9:33:76:12:c1: 23:ce:fb:7d:3c:cd:92:8c:7c:e7:c9:ba:e5:cc:07: 59:3f:ab:40:44:28:39:37:23:78:29:ac:bf:c7:37: 13:89:08:04:10:fb:df:e9:ce:8e:7c:74:2e:cf:99: 4f:4d:8c:ff:c9:9e:40:61:4f:ff:86:32:ea:8b:d1: ed:aa:7d:7a:ef:c1:88:10:85:b5:33:aa:44:68:b2: 5a:07:00:38:f8:0f:2a:15:a8:e1:dc:8d:6f:74:04: 87:2c:0c:26:e2:aa:6c:06:a5:04:81:15:e4:97:e1: 00:7a:26:24:f3:1d:49:74:6c:f7:38:aa:6b:40:9c: 54:97:f2:3f:d9:6a:e5:6e:36:f4:85:3c:1e:71:a9: 7e:9c:3b:f5:15:57:24:b2:50:9d:af:21:b4:11:fa: 4d:1d:85:1f:f0:5b:cc:08:49:2e:1d:ee:c2:0b:47: 63:b4:2a:2a:f4:c5:b7:43:e1:1d:33:b5:7f:44:e5: ac:54:07:5f:57:83:c6:73:01:11:f4:50:ab:d6:d0: 87:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:85:7C:D2:93:0E:7C:97:6C:12:EE:27:89:60:1C:AE:40:54:80:D7 X509v3 Authority Key Identifier: keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/vYV80pMOfJdsEu4niWAcrkBUgNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.198.34.0/23 85.198.38.0/23 85.198.42.0/23 91.123.12.0/22 190.106.177.0-190.106.182.255 190.106.184.0/24 206.195.137.0-206.195.143.255 Signature Algorithm: sha256WithRSAEncryption 14:e3:c9:c1:ec:d6:f4:ac:f0:a4:c7:42:aa:fb:45:ca:13:cf: 97:8f:e9:6e:ac:52:14:14:92:cf:f5:06:3b:41:b2:2d:48:95: 78:1c:02:f7:80:a7:a0:9f:36:21:0a:05:cd:f3:88:43:b2:10: 8a:b2:6a:87:88:04:62:20:5f:6d:d9:72:67:d0:58:85:f7:ed: 58:12:fd:13:d9:72:b0:c2:ea:99:5f:88:e4:55:00:5c:32:bc: 4e:30:7a:d7:06:5e:e8:e8:04:91:c3:36:46:a4:df:49:11:e0: bf:f4:f8:7a:0d:a2:1c:86:96:b5:ed:e7:98:46:1c:7b:59:dc: 76:69:52:e5:fa:38:29:49:e0:7d:18:b0:2c:b5:ee:b1:f0:f2: 9b:92:24:fb:5b:58:d6:cc:e2:99:2e:cc:92:ce:31:2f:e0:2f: 8c:0d:eb:de:56:f2:be:6c:d4:c8:ea:d2:3d:52:b3:f3:e0:6d: ad:9a:c2:af:6c:b0:22:47:15:71:a9:4a:5d:12:01:33:f3:8b: 73:fa:75:92:f2:00:d9:b3:bc:18:2b:2f:34:f5:8f:fa:4a:60: 6c:c8:25:a5:a1:d4:b5:b1:42:37:cc:7c:c8:c0:4c:3a:b6:42: a4:e2:96:5b:e0:cf:8e:2f:75:59:c8:09:a6:40:cf:a2:b5:8c: 11:e3:fa:41 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt3WQlSOBVPT80XoOjJoAYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZjUxYmJkZjAxMDg4ZDM0YzZiYWFlZWY4NmJkYTI1YTlm MDIxOTYwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDg1N2NkMjkzMGU3Yzk3NmMxMmVlMjc4OTYwMWNhZTQwNTQ4MGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo4SAYj+cLBHs//q+AeI9Ma96fdL z4DAZsyeGhTi6I6KuR8386o+q+eyDBRV9RuT0YPMqHbJ2TN2EsEjzvt9PM2SjHzn ybrlzAdZP6tARCg5NyN4Kay/xzcTiQgEEPvf6c6OfHQuz5lPTYz/yZ5AYU//hjLq i9Htqn1678GIEIW1M6pEaLJaBwA4+A8qFajh3I1vdASHLAwm4qpsBqUEgRXkl+EA eiYk8x1JdGz3OKprQJxUl/I/2Wrlbjb0hTwecal+nDv1FVckslCdryG0EfpNHYUf 8FvMCEkuHe7CC0djtCoq9MW3Q+EdM7V/ROWsVAdfV4PGcwER9FCr1tCH0wIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFL2FfNKTDnyXbBLuJ4lgHK5AVIDXMB8GA1UdIwQY MBaAFCT1G73wEIjTTGuq7vhr2iWp8CGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYt NTIwMWEyM2Q3YTQ5LzEvdllWODBwTU9mSmRzRXU0bmlXQWNya0JVZ05jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYtNTIwMWEyM2Q3YTQ5 LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQBVcYiAwQB VcYmAwQBVcYqAwQCW3sMMAwDBAC+arEDBAC+arYDBAC+argwDAMEAM7DiQMEBM7D gDANBgkqhkiG9w0BAQsFAAOCAQEAFOPJwezW9KzwpMdCqvtFyhPPl4/pbqxSFBSS z/UGO0GyLUiVeBwC94CnoJ82IQoFzfOIQ7IQirJqh4gEYiBfbdlyZ9BYhfftWBL9 E9lysMLqmV+I5FUAXDK8TjB61wZe6OgEkcM2RqTfSRHgv/T4eg2iHIaWte3nmEYc e1ncdmlS5fo4KUngfRiwLLXusfDym5Ik+1tY1szimS7Mks4xL+AvjA3r3lbyvmzU yOrSPVKz8+BtrZrCr2ywIkcVcalKXRIBM/OLc/p1kvIA2bO8GCsvNPWP+kpgbMgl paHUtbFCN8x8yMBMOrZCpOKWW+DPji91WcgJpkDPorWMEeP6QQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:47 2026 by rpki-client