This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/gYxZPFksv4lSJcSXaTgYs67dhTw.roa File: gYxZPFksv4lSJcSXaTgYs67dhTw.roa (raw, json) Hash identifier: Hl6M0EKBwCjHwIUsIeYI571biGIt0pR0cCNjY3LbJoU= Subject key identifier: 81:8C:59:3C:59:2C:BF:89:52:25:C4:97:69:38:18:B3:AE:DD:85:3C Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Certificate serial: 019B7FF14EAAEE80236F04AFADC477CB7527 Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/gYxZPFksv4lSJcSXaTgYs67dhTw.roa Signing time: Fri 02 Jan 2026 18:21:19 +0000 ROA not before: Fri 02 Jan 2026 18:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198682 IP address blocks: 45.88.140.0/22 maxlen: 24 109.71.136.0/21 maxlen: 24 109.205.0.0/21 maxlen: 24 185.220.72.0/22 maxlen: 24 185.230.96.0/22 maxlen: 24 193.176.64.0/22 maxlen: 24 2a00:1f10::/32 maxlen: 32 2a0b:f1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:4e:aa:ee:80:23:6f:04:af:ad:c4:77:cb:75:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Validity Not Before: Jan 2 18:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=818c593c592cbf895225c497693818b3aedd853c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:13:cb:cd:d7:5e:06:97:da:91:07:e9:ee: d3:12:27:fb:5e:e7:af:e4:cc:13:88:70:99:8c:7a: 74:60:fe:0f:6c:79:7d:f0:58:6d:87:f1:a7:b1:2e: 40:97:fe:d1:ed:98:32:5a:d6:35:e5:7e:fc:8e:3d: 26:01:f3:4d:3b:a2:cf:24:3a:1d:a6:32:36:3c:bb: 74:a6:aa:d8:b5:18:f0:75:c5:50:ad:01:b3:3b:59: 15:e3:b8:70:82:6e:5a:3b:b5:04:c1:26:c5:05:ff: 51:7a:bc:97:1f:55:bc:af:f6:b9:f2:23:e0:99:74: a6:02:32:4d:ee:f4:c3:a7:6f:4a:66:56:5b:ba:34: 0d:02:60:84:6f:c3:8e:0c:7b:b6:6a:7d:38:c6:07: 9f:cc:e4:14:51:12:6f:27:8f:84:8e:9e:06:4d:ee: 17:a0:dc:2d:a4:51:bb:8d:e4:31:d0:db:5e:ec:41: e7:fc:42:9a:e3:37:0a:bd:95:37:9b:14:07:6c:c1: 85:38:05:f5:24:36:17:b6:72:17:f3:c2:a1:41:47: 82:1b:48:7b:27:25:78:83:03:0d:e0:fe:92:4d:ef: fb:ff:92:0f:35:1a:bd:50:37:6e:14:2a:88:ef:fc: 15:29:38:a3:2d:ff:94:fd:c8:78:5c:60:2a:71:67: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8C:59:3C:59:2C:BF:89:52:25:C4:97:69:38:18:B3:AE:DD:85:3C X509v3 Authority Key Identifier: keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/gYxZPFksv4lSJcSXaTgYs67dhTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.140.0/22 109.71.136.0/21 109.205.0.0/21 185.220.72.0/22 185.230.96.0/22 193.176.64.0/22 IPv6: 2a00:1f10::/32 2a0b:f1c0::/32 Signature Algorithm: sha256WithRSAEncryption 12:4f:97:73:b1:d3:61:05:93:1e:aa:fa:77:4d:4a:1e:38:7e: f3:dd:50:48:92:5e:89:5a:a0:6f:08:cb:9f:db:59:91:36:b0: 86:c0:92:ee:d5:6d:57:c9:15:63:db:54:b8:00:4f:96:83:7b: c3:ff:d5:9b:a9:94:2f:b9:1b:97:f1:1d:86:91:27:e7:79:fc: b6:ae:21:db:45:33:1e:59:15:94:d0:88:51:d9:a4:33:33:8a: 1d:3f:00:59:9d:68:fc:0e:89:11:ff:11:04:57:d3:ab:d6:7a: f5:16:02:5c:c0:da:1f:99:83:d4:43:4c:3f:ab:79:27:b5:95: e5:71:d4:96:1e:53:ca:25:52:d4:76:8f:50:4b:82:65:58:f9: 6b:85:fa:59:9f:65:f7:61:53:0b:4a:63:18:88:20:fd:29:3d: 16:aa:8a:68:9c:3d:32:f2:cf:e9:ef:89:5a:66:fc:6e:2b:a8: 11:b9:95:29:e3:4c:33:0b:91:f1:a6:db:c1:27:e4:42:92:68: c4:42:67:44:9a:01:d4:62:6c:67:c5:39:a0:d5:e4:2c:83:07: 10:96:ac:fc:51:50:b2:c8:3e:80:48:67:af:03:2c:ef:e1:52: f3:74:28:9b:9a:0b:c6:3e:19:6d:fe:5b:cc:73:37:9f:a6:3d: dc:1c:b6:29 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt/8U6q7oAjbwSvrcR3y3UnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5 YTI2OTQwHhcNMjYwMTAyMTgyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MThjNTkzYzU5MmNiZjg5NTIyNWM0OTc2OTM4MThiM2FlZGQ4NTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KYTy83XXgaX2pEH6e7TEif7Xuev 5MwTiHCZjHp0YP4PbHl98Fhth/GnsS5Al/7R7ZgyWtY15X78jj0mAfNNO6LPJDod pjI2PLt0pqrYtRjwdcVQrQGzO1kV47hwgm5aO7UEwSbFBf9ReryXH1W8r/a58iPg mXSmAjJN7vTDp29KZlZbujQNAmCEb8OODHu2an04xgefzOQUURJvJ4+Ejp4GTe4X oNwtpFG7jeQx0Nte7EHn/EKa4zcKvZU3mxQHbMGFOAX1JDYXtnIX88KhQUeCG0h7 JyV4gwMN4P6STe/7/5IPNRq9UDduFCqI7/wVKTijLf+U/ch4XGAqcWfdUwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFIGMWTxZLL+JUiXEl2k4GLOu3YU8MB8GA1UdIwQY MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt ODM4ZWJmNDEyYTYxLzEvZ1l4WlBGa3N2NGxTSmNTWGFUZ1lzNjdkaFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQCLViMAwQD bUeIAwQDbc0AAwQCudxIAwQCueZgAwQCwbBAMBQEAgACMA4DBQAqAB8QAwUAKgvx wDANBgkqhkiG9w0BAQsFAAOCAQEAEk+Xc7HTYQWTHqr6d01KHjh+891QSJJeiVqg bwjLn9tZkTawhsCS7tVtV8kVY9tUuABPloN7w//Vm6mUL7kbl/EdhpEn53n8tq4h 20UzHlkVlNCIUdmkMzOKHT8AWZ1o/A6JEf8RBFfTq9Z69RYCXMDaH5mD1ENMP6t5 J7WV5XHUlh5TyiVS1HaPUEuCZVj5a4X6WZ9l92FTC0pjGIgg/Sk9FqqKaJw9MvLP 6e+JWmb8biuoEbmVKeNMMwuR8abbwSfkQpJoxEJnRJoB1GJsZ8U5oNXkLIMHEJas /FFQssg+gEhnrwMs7+FS83Qom5oLxj4Zbf5bzHM3n6Y93By2KQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:25 2026 by rpki-client