This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aUyX-6TUSuOfRHvuQ1KGPkeEeGs.roa File: aUyX-6TUSuOfRHvuQ1KGPkeEeGs.roa (raw, json) Hash identifier: MsmUJPRpTfFu1Am19mIjsUFfhTbaKUSgfEWSt6WorfY= Subject key identifier: 69:4C:97:FB:A4:D4:4A:E3:9F:44:7B:EE:43:52:86:3E:47:84:78:6B Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019BEB7A7839C0AA9E500FCFCFF5C2BFBE79 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aUyX-6TUSuOfRHvuQ1KGPkeEeGs.roa Signing time: Fri 23 Jan 2026 15:30:30 +0000 ROA not before: Fri 23 Jan 2026 15:30:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205090 IP address blocks: 89.44.86.0/24 maxlen: 24 89.44.87.0/24 maxlen: 24 91.200.12.0/24 maxlen: 24 91.200.13.0/24 maxlen: 24 95.81.121.0/24 maxlen: 24 95.81.122.0/24 maxlen: 24 103.71.20.0/24 maxlen: 24 103.71.21.0/24 maxlen: 24 104.128.133.0/24 maxlen: 24 104.128.134.0/24 maxlen: 24 104.128.135.0/24 maxlen: 24 109.69.62.0/24 maxlen: 24 185.105.88.0/24 maxlen: 24 185.105.89.0/24 maxlen: 24 185.105.90.0/24 maxlen: 24 185.105.91.0/24 maxlen: 24 185.128.104.0/24 maxlen: 24 185.128.105.0/24 maxlen: 24 185.128.106.0/24 maxlen: 24 185.128.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:7a:78:39:c0:aa:9e:50:0f:cf:cf:f5:c2:bf:be:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 23 15:30:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=694c97fba4d44ae39f447bee4352863e4784786b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:8c:ad:cd:dd:17:fb:0e:c2:b9:b5:d8:08:eb: 2a:90:bf:65:b6:86:31:77:ab:a1:5f:df:9e:bb:87: ca:3c:4e:bc:45:32:d8:c3:34:d3:f0:f0:c3:4b:c5: 9a:3e:36:60:7d:e1:40:24:a2:56:59:be:7e:7b:4d: 66:af:2b:5c:d4:5f:4c:9b:5f:6f:85:16:28:ef:a0: f8:2d:59:6d:0f:96:e8:14:b2:89:86:b5:ea:4a:c0: ff:0f:fa:3f:66:35:c3:34:0c:ec:41:64:ff:29:a5: fd:15:89:f3:bc:a1:0e:81:29:0c:42:0f:a0:d4:1a: 3c:f4:27:c7:4e:67:c6:a8:b9:d7:cf:e3:9c:20:90: 01:a7:a7:a6:c1:79:d7:c9:f0:6c:59:b0:6d:e8:39: 6b:49:e6:a9:a2:7b:ef:d8:76:53:9e:1c:52:7f:f9: f4:68:ae:78:f1:4d:2c:3d:ac:fe:3a:dc:be:02:b4: e0:d1:b3:ec:56:4d:60:f5:da:0a:70:95:8f:58:fc: 12:61:a9:cd:24:ef:bd:13:9b:8c:e0:e1:0b:b7:fb: d6:4b:02:3c:ab:21:6a:19:37:87:45:31:85:5c:b1: d7:10:c2:84:02:93:9a:6f:44:d7:32:0a:cd:e3:05: 6d:7d:ee:f0:61:1c:86:ba:d0:0f:44:9f:19:d0:23: f2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4C:97:FB:A4:D4:4A:E3:9F:44:7B:EE:43:52:86:3E:47:84:78:6B X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aUyX-6TUSuOfRHvuQ1KGPkeEeGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.86.0/23 91.200.12.0/23 95.81.121.0-95.81.122.255 103.71.20.0/23 104.128.133.0-104.128.135.255 109.69.62.0/24 185.105.88.0/22 185.128.104.0/22 Signature Algorithm: sha256WithRSAEncryption a7:1a:b1:98:26:4a:8b:54:c5:73:74:dc:d9:ca:20:b3:06:80: 08:31:09:a4:da:04:22:5e:99:41:2d:a5:f7:9a:e5:de:04:0c: e1:4c:89:bc:10:3a:8f:9b:f4:47:1f:4b:84:3d:cf:5e:01:f0: 83:e8:c8:2f:f0:cc:85:df:d1:5c:aa:ce:5b:31:0d:2b:f9:b3: 22:f2:e7:e9:2f:54:5e:80:c9:d2:c6:0d:e9:0e:38:84:92:0b: 16:af:c1:5b:2b:00:3b:6a:17:72:e5:2d:10:a2:05:59:af:17: 8f:e1:d5:91:fe:7c:cd:1f:ab:ef:17:41:31:85:64:6f:b7:e4: 4f:89:2a:14:0a:0c:5f:97:7e:1d:43:11:7f:39:b6:96:8a:56: 0a:5c:a1:53:68:d0:92:8d:e5:cf:35:58:8a:fe:bd:c1:2a:be: db:42:23:a2:92:cc:ea:e0:6b:6f:87:8d:37:d3:d3:8b:2b:7c: 12:a6:bc:bd:07:ed:7b:3e:39:5d:2d:09:ad:8f:98:9a:aa:45: 58:c9:d2:a5:3a:4c:8f:39:ae:f9:40:e3:d6:e8:d5:f7:a7:48: 36:c0:fe:4b:68:0c:3c:04:70:b6:e4:cf:ad:8b:11:0c:44:aa: 80:e7:3a:01:0a:71:17:55:6a:96:e8:b6:7c:1c:26:d1:b5:6b: f4:12:a1:05 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZvreng5wKqeUA/Pz/XCv755MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTIzMTUzMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTRjOTdmYmE0ZDQ0YWUzOWY0NDdiZWU0MzUyODYzZTQ3ODQ3ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/oytzd0X+w7CubXYCOsqkL9ltoYx d6uhX9+eu4fKPE68RTLYwzTT8PDDS8WaPjZgfeFAJKJWWb5+e01mrytc1F9Mm19v hRYo76D4LVltD5boFLKJhrXqSsD/D/o/ZjXDNAzsQWT/KaX9FYnzvKEOgSkMQg+g 1Bo89CfHTmfGqLnXz+OcIJABp6emwXnXyfBsWbBt6DlrSeaponvv2HZTnhxSf/n0 aK548U0sPaz+Oty+ArTg0bPsVk1g9doKcJWPWPwSYanNJO+9E5uM4OELt/vWSwI8 qyFqGTeHRTGFXLHXEMKEApOab0TXMgrN4wVtfe7wYRyGutAPRJ8Z0CPyiQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFGlMl/uk1Erjn0R77kNShj5HhHhrMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvYVV5WC02VFVTdU9mUkh2dVExS0dQa2VFZUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQBWSxWAwQB W8gMMAwDBABfUXkDBABfUXoDBAFnRxQwDAMEAGiAhQMEA2iAgAMEAG1FPgMEArlp WAMEArmAaDANBgkqhkiG9w0BAQsFAAOCAQEApxqxmCZKi1TFc3Tc2cogswaACDEJ pNoEIl6ZQS2l95rl3gQM4UyJvBA6j5v0Rx9LhD3PXgHwg+jIL/DMhd/RXKrOWzEN K/mzIvLn6S9UXoDJ0sYN6Q44hJILFq/BWysAO2oXcuUtEKIFWa8Xj+HVkf58zR+r 7xdBMYVkb7fkT4kqFAoMX5d+HUMRfzm2lopWClyhU2jQko3lzzVYiv69wSq+20Ij opLM6uBrb4eNN9PTiyt8Eqa8vQftez45XS0JrY+YmqpFWMnSpTpMjzmu+UDj1ujV 96dINsD+S2gMPARwtuTPrYsRDESqgOc6AQpxF1Vqlui2fBwm0bVr9BKhBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:14 2026 by rpki-client