This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4GXzpaZXhPX1HQ9_ZBzIL0_pykk.roa File: 4GXzpaZXhPX1HQ9_ZBzIL0_pykk.roa (raw, json) Hash identifier: qQkOJ53o4JOM2XvGq95yr6LhJjEPYAy6XJbj1zU06hg= Subject key identifier: E0:65:F3:A5:A6:57:84:F5:F5:1D:0F:7F:64:1C:C8:2F:4F:E9:CA:49 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019BE09EEEBA6F277B05845E152F7064D5CB Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4GXzpaZXhPX1HQ9_ZBzIL0_pykk.roa Signing time: Wed 21 Jan 2026 12:54:30 +0000 ROA not before: Wed 21 Jan 2026 12:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 87.101.0.0/24 maxlen: 24 87.101.1.0/24 maxlen: 24 87.101.2.0/24 maxlen: 24 87.101.3.0/24 maxlen: 24 87.101.4.0/24 maxlen: 24 87.101.5.0/24 maxlen: 24 87.101.6.0/24 maxlen: 24 87.101.7.0/24 maxlen: 24 185.227.72.0/24 maxlen: 24 185.227.73.0/24 maxlen: 24 185.227.74.0/24 maxlen: 24 185.227.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:9e:ee:ba:6f:27:7b:05:84:5e:15:2f:70:64:d5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 21 12:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e065f3a5a65784f5f51d0f7f641cc82f4fe9ca49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:64:d1:f9:6a:6f:c8:63:56:ef:fc:14:af: b4:5e:1e:8d:89:28:a3:76:0b:84:60:e3:3c:47:be: fb:3a:f7:54:ce:54:63:2b:de:5e:66:03:a5:7c:bf: 15:69:8e:2f:32:a7:f7:7f:f7:7c:28:61:bc:d1:21: 22:7b:d5:05:4a:6e:b0:5f:94:8e:6b:33:b6:d6:a0: 08:98:6c:4b:ac:13:ea:2e:9e:16:d8:38:dc:2e:fe: c9:78:55:6d:10:10:91:6e:77:ba:6e:40:d9:79:e7: 3f:cb:9e:2e:0e:a0:d7:7e:64:09:28:2d:01:25:48: 25:3e:f7:d0:ac:b4:6a:84:81:d0:dd:da:89:78:47: a4:82:af:15:17:67:b1:0b:6a:8d:29:7b:c0:1e:bd: 6f:42:51:fe:77:1c:bc:5b:24:31:c2:b1:fe:26:38: 4a:f1:e6:27:b9:72:16:21:05:e2:f7:97:79:da:10: 14:99:ef:2c:99:12:79:47:a2:f2:36:87:54:83:36: 59:66:f6:e1:ce:11:b3:0b:26:da:77:6c:5e:13:c4: 23:5f:53:83:d3:b6:9c:ae:0c:ea:60:45:42:17:cf: 54:e1:45:c7:dd:fc:55:75:6e:46:87:8e:ed:4b:4e: d5:ce:4b:20:f9:48:26:39:75:3b:91:45:2d:e0:44: 3a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:65:F3:A5:A6:57:84:F5:F5:1D:0F:7F:64:1C:C8:2F:4F:E9:CA:49 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4GXzpaZXhPX1HQ9_ZBzIL0_pykk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.101.0.0/21 185.227.72.0/22 Signature Algorithm: sha256WithRSAEncryption 33:d0:6b:da:a7:8c:f3:f7:3d:a6:7a:0c:e1:26:b3:3a:1e:ff: d5:c4:35:e6:8b:1c:c3:23:a2:94:57:bd:b7:36:b9:fc:4e:11: 12:a3:79:88:47:82:95:3e:d6:5b:49:8a:33:64:35:6e:52:a2: 95:f5:06:53:94:57:12:1a:a3:89:e9:ea:df:66:90:24:cc:86: ce:7d:4e:e5:1c:73:a6:9d:dc:b0:4e:2d:b5:7a:ee:5c:6c:71: 0a:ff:b7:61:59:ea:5d:2d:6d:6d:42:8f:a1:2a:ca:d9:90:f7: 24:ba:8b:e6:75:c3:99:3d:2b:a9:68:08:04:86:64:8c:8d:6c: 33:b1:d3:9c:5a:35:b9:be:f9:67:b2:32:3c:aa:3d:7b:8e:f7: af:b9:6e:4d:13:66:25:f0:85:de:b6:4f:41:ef:74:ae:ae:b3: 0d:f1:36:33:6f:89:a2:02:a0:17:27:e4:ea:a2:db:ca:77:40: 85:42:da:35:1c:c0:d1:77:58:dc:47:1f:fd:8d:00:4c:eb:8a: 3d:e3:78:a3:b1:b7:cd:bf:a5:fe:d6:95:53:ef:09:13:02:6f: 10:6f:7e:42:b8:fa:da:ae:e7:35:a2:a8:f5:1c:30:80:e6:75: ea:ba:7e:e7:55:48:4e:93:3f:a1:6f:09:29:67:a1:cf:c9:d3: be:b4:69:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvgnu66byd7BYReFS9wZNXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTIxMTI1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDY1ZjNhNWE2NTc4NGY1ZjUxZDBmN2Y2NDFjYzgyZjRmZTljYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw1k0flqb8hjVu/8FK+0Xh6NiSij dguEYOM8R777OvdUzlRjK95eZgOlfL8VaY4vMqf3f/d8KGG80SEie9UFSm6wX5SO azO21qAImGxLrBPqLp4W2DjcLv7JeFVtEBCRbne6bkDZeec/y54uDqDXfmQJKC0B JUglPvfQrLRqhIHQ3dqJeEekgq8VF2exC2qNKXvAHr1vQlH+dxy8WyQxwrH+JjhK 8eYnuXIWIQXi95d52hAUme8smRJ5R6LyNodUgzZZZvbhzhGzCybad2xeE8QjX1OD 07acrgzqYEVCF89U4UXH3fxVdW5Gh47tS07Vzksg+UgmOXU7kUUt4EQ6WQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOBl86WmV4T19R0Pf2QcyC9P6cpJMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvNEdYenBhWlhoUFgxSFE5X1pCeklMMF9weWtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV2UAAwQC ueNIMA0GCSqGSIb3DQEBCwUAA4IBAQAz0Gvap4zz9z2megzhJrM6Hv/VxDXmixzD I6KUV723Nrn8ThESo3mIR4KVPtZbSYozZDVuUqKV9QZTlFcSGqOJ6erfZpAkzIbO fU7lHHOmndywTi21eu5cbHEK/7dhWepdLW1tQo+hKsrZkPckuovmdcOZPSupaAgE hmSMjWwzsdOcWjW5vvlnsjI8qj17jvevuW5NE2Yl8IXetk9B73SurrMN8TYzb4mi AqAXJ+TqotvKd0CFQto1HMDRd1jcRx/9jQBM64o943ijsbfNv6X+1pVT7wkTAm8Q b35CuPraruc1oqj1HDCA5nXqun7nVUhOkz+hbwkpZ6HPydO+tGmc -----END CERTIFICATE-----Generated at Sun Jan 25 10:13:56 2026 by rpki-client