This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/vKBeybZ-BPvEivFuvFDPv3zlFVI.roa File: vKBeybZ-BPvEivFuvFDPv3zlFVI.roa (raw, json) Hash identifier: heDRl+5CJIT3LBTpdyFuDlaGLErqB2lP5/AVDbfgt+M= Subject key identifier: BC:A0:5E:C9:B6:7E:04:FB:C4:8A:F1:6E:BC:50:CF:BF:7C:E5:15:52 Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009 Certificate serial: 019B7C806C2F098CFADFF6E4B1BAFF1FC7C7 Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/vKBeybZ-BPvEivFuvFDPv3zlFVI.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43180 IP address blocks: 45.11.57.0/24 maxlen: 24 45.11.59.0/24 maxlen: 24 45.12.0.0/24 maxlen: 24 45.12.1.0/24 maxlen: 24 45.12.3.0/24 maxlen: 24 91.208.115.0/24 maxlen: 24 91.222.172.0/22 maxlen: 24 91.222.172.0/24 maxlen: 24 91.222.173.0/24 maxlen: 24 91.222.174.0/23 maxlen: 23 176.97.112.0/23 maxlen: 23 176.97.116.0/22 maxlen: 22 176.97.120.0/23 maxlen: 23 176.119.31.0/24 maxlen: 24 185.254.199.0/24 maxlen: 24 194.42.196.0/23 maxlen: 23 194.42.198.0/24 maxlen: 24 194.42.199.0/24 maxlen: 24 194.42.204.0/24 maxlen: 24 194.42.206.0/23 maxlen: 23 195.66.210.0/24 maxlen: 24 195.128.248.0/23 maxlen: 24 212.86.122.0/23 maxlen: 23 2a09:2dc2::/32 maxlen: 32 2a09:2dc3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6c:2f:09:8c:fa:df:f6:e4:b1:ba:ff:1f:c7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bca05ec9b67e04fbc48af16ebc50cfbf7ce51552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fa:a2:19:08:bb:82:be:0b:36:b8:d7:5e:a7: 19:3f:ff:ab:72:1d:0b:c4:0e:55:aa:b5:c5:92:2a: d3:42:09:ca:8d:1b:00:80:fb:e2:38:58:a5:80:6a: 40:10:8b:78:f1:e9:eb:80:3e:83:c9:bb:bd:80:50: 0f:9b:72:b1:9d:fa:0d:0d:28:71:96:ea:e7:98:cd: fc:b3:21:15:4a:cc:a9:7a:2c:b1:94:2d:6c:af:21: 5c:01:f6:23:e7:85:39:e2:70:24:39:3a:4b:ad:68: 03:c8:a1:77:bd:bd:2d:d6:62:64:e9:81:c8:4a:c1: 24:a8:66:2a:fc:67:d9:74:85:de:ad:6d:99:ff:31: 90:1b:32:db:3f:b4:29:85:82:ee:39:51:00:e3:32: e3:bb:61:7d:c7:40:17:6e:97:87:dd:d0:71:ca:08: 6c:d6:47:a3:d9:f6:09:30:eb:a4:e3:66:20:af:8c: e2:60:d0:ba:cd:fc:b6:15:80:8b:af:52:2d:de:eb: 59:11:8d:65:d0:a8:8d:4c:f7:13:57:b2:18:4e:2e: c4:e1:73:2e:20:40:8a:aa:7a:c4:28:9a:dd:7d:5b: 96:28:7a:dd:4e:95:22:ad:a1:6e:75:f2:ef:66:50: 72:31:6a:b2:01:d5:12:35:a7:0a:0b:2a:0a:1e:e0: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A0:5E:C9:B6:7E:04:FB:C4:8A:F1:6E:BC:50:CF:BF:7C:E5:15:52 X509v3 Authority Key Identifier: keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/vKBeybZ-BPvEivFuvFDPv3zlFVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.57.0/24 45.11.59.0/24 45.12.0.0/23 45.12.3.0/24 91.208.115.0/24 91.222.172.0/22 176.97.112.0/23 176.97.116.0-176.97.121.255 176.119.31.0/24 185.254.199.0/24 194.42.196.0/22 194.42.204.0/24 194.42.206.0/23 195.66.210.0/24 195.128.248.0/23 212.86.122.0/23 IPv6: 2a09:2dc2::/31 Signature Algorithm: sha256WithRSAEncryption 0b:34:20:26:d0:4c:20:63:23:95:74:1d:e5:60:10:ca:e9:6a: 7b:99:f8:77:8f:bd:e9:33:96:1f:7b:44:33:ca:5d:99:19:44: fd:99:bf:cf:2b:de:74:c4:9c:b2:f8:3b:38:da:24:88:bf:2c: 0e:2b:d1:8f:6c:f3:3c:0e:5a:8d:e2:a7:b1:51:0e:09:ae:47: e3:48:f2:68:d2:21:df:d0:20:bc:df:8d:43:c5:5f:be:60:32: b0:c2:45:e1:1c:de:da:63:26:59:6b:e9:f8:6d:33:dd:40:3e: bb:a6:a4:a8:be:95:cc:fa:1d:f2:f8:27:64:6d:6b:cf:54:d6: 14:f7:c5:a4:90:25:0f:89:df:8d:5b:d7:b8:4d:e5:9e:d5:40: 1f:97:7f:bb:4a:da:0c:73:c7:6b:06:48:93:32:a5:7e:29:3a: 2d:8c:0b:e3:00:d9:ca:27:f0:bf:c6:53:76:15:a7:f4:d6:e1: 8e:e5:6d:65:8f:0d:59:0d:ba:bf:2f:1f:96:96:0b:fa:23:c3: 59:45:67:4c:df:0a:f4:05:4e:76:2d:86:50:dc:09:04:bd:65: 32:91:de:53:f9:14:c3:6f:84:f8:21:86:66:ab:d6:16:1b:fd: c9:17:9d:fd:f1:bb:81:a4:26:58:08:80:f5:1e:e9:b0:90:b0: b8:3e:5f:d0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZt8gGwvCYz63/bksbr/H8fHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmM5YzI2ZGY3Y2NkOGFkMzhkODliZDVkNDkzODBiOTNi MWUwMDkwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2EwNWVjOWI2N2UwNGZiYzQ4YWYxNmViYzUwY2ZiZjdjZTUxNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/qiGQi7gr4LNrjXXqcZP/+rch0L xA5VqrXFkirTQgnKjRsAgPviOFilgGpAEIt48enrgD6Dybu9gFAPm3KxnfoNDShx lurnmM38syEVSsypeiyxlC1sryFcAfYj54U54nAkOTpLrWgDyKF3vb0t1mJk6YHI SsEkqGYq/GfZdIXerW2Z/zGQGzLbP7QphYLuOVEA4zLju2F9x0AXbpeH3dBxyghs 1kej2fYJMOuk42Ygr4ziYNC6zfy2FYCLr1It3utZEY1l0KiNTPcTV7IYTi7E4XMu IECKqnrEKJrdfVuWKHrdTpUiraFudfLvZlByMWqyAdUSNacKCyoKHuA8owIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFLygXsm2fgT7xIrxbrxQz7985RVSMB8GA1UdIwQY MBaAFLMsnCbffM2K042JvV1JOAuTseAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjIt Y2IxMWJjNWIyZjFiLzEvdktCZXliWi1CUHZFaXZGdXZGRFB2M3psRlZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjItY2IxMWJjNWIyZjFi LzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBAAtCzkD BAAtCzsDBAEtDAADBAAtDAMDBABb0HMDBAJb3qwDBAGwYXAwDAMEArBhdAMEAbBh eAMEALB3HwMEALn+xwMEAsIqxAMEAMIqzAMEAcIqzgMEAMNC0gMEAcOA+AMEAdRW ejANBAIAAjAHAwUBKgktwjANBgkqhkiG9w0BAQsFAAOCAQEACzQgJtBMIGMjlXQd 5WAQyulqe5n4d4+96TOWH3tEM8pdmRlE/Zm/zyvedMScsvg7ONokiL8sDivRj2zz PA5ajeKnsVEOCa5H40jyaNIh39AgvN+NQ8VfvmAysMJF4Rze2mMmWWvp+G0z3UA+ u6akqL6VzPod8vgnZG1rz1TWFPfFpJAlD4nfjVvXuE3lntVAH5d/u0raDHPHawZI kzKlfik6LYwL4wDZyifwv8ZTdhWn9NbhjuVtZY8NWQ26vy8flpYL+iPDWUVnTN8K 9AVOdi2GUNwJBL1lMpHeU/kUw2+E+CGGZqvWFhv9yRed/fG7gaQmWAiA9R7psJCw uD5f0A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:00 2026 by rpki-client