This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/C_5yyZCFvKCe1q25gF_5oZ_pygY.roa File: C_5yyZCFvKCe1q25gF_5oZ_pygY.roa (raw, json) Hash identifier: blUVsXaM11h0aXpR0/ZhyzARymiUeJDD6sZq8PuA4SY= Subject key identifier: 0B:FE:72:C9:90:85:BC:A0:9E:D6:AD:B9:80:5F:F9:A1:9F:E9:CA:06 Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9 Certificate serial: 019B79110F5CBB9246A0C2B45A1771E2AD81 Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/C_5yyZCFvKCe1q25gF_5oZ_pygY.roa Signing time: Thu 01 Jan 2026 10:18:39 +0000 ROA not before: Thu 01 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43571 IP address blocks: 46.182.184.0/21 maxlen: 24 78.40.248.0/21 maxlen: 24 91.220.138.0/24 maxlen: 24 149.126.80.0/21 maxlen: 24 157.97.0.0/19 maxlen: 24 178.19.48.0/20 maxlen: 24 185.40.120.0/22 maxlen: 24 185.111.36.0/22 maxlen: 24 185.152.116.0/22 maxlen: 24 213.181.96.0/19 maxlen: 24 2a01:6f00::/29 maxlen: 48 2a01:8280::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0f:5c:bb:92:46:a0:c2:b4:5a:17:71:e2:ad:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bfe72c99085bca09ed6adb9805ff9a19fe9ca06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:01:1a:0d:10:ee:e4:66:bb:11:1f:d2:5e: 5e:ca:35:9e:a5:38:ab:c0:98:08:f9:22:71:f9:57: 0e:ba:8a:60:69:55:60:66:32:80:b7:bf:64:1e:59: 33:bc:22:c1:63:aa:b8:f3:9a:92:cb:8d:a6:c1:a2: 39:dc:bb:e2:a8:1c:78:bc:a8:5b:65:f2:91:d2:7f: ad:d0:44:2d:26:ee:aa:1b:9b:ff:52:e4:69:42:d1: 01:e6:45:c3:6f:df:ca:46:5c:94:6a:df:21:ef:e0: 35:ed:45:67:6a:46:16:c5:c0:2e:07:c9:65:8d:4a: 81:07:46:da:4f:63:d7:15:28:46:17:1b:8a:5d:65: 43:49:b4:ca:a1:ba:14:19:2a:88:d2:2f:d7:8c:1a: 21:e2:5e:49:29:b9:eb:6d:16:1a:bc:fb:0a:3e:35: 2c:97:40:dc:66:84:da:ca:a1:cc:14:22:6d:40:03: ff:ee:49:2d:4a:7e:67:4e:88:ee:b1:8a:5d:3f:65: a9:69:a4:0d:83:3f:fb:f9:40:d0:2e:51:f8:16:65: f9:d8:fd:95:50:22:58:9c:c8:10:54:39:0a:05:db: 99:a2:64:1f:a6:9e:39:67:fa:34:04:ef:06:04:12: e5:53:32:bc:00:1a:ca:d7:e3:5d:3e:b8:56:5e:c3: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FE:72:C9:90:85:BC:A0:9E:D6:AD:B9:80:5F:F9:A1:9F:E9:CA:06 X509v3 Authority Key Identifier: keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/C_5yyZCFvKCe1q25gF_5oZ_pygY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.184.0/21 78.40.248.0/21 91.220.138.0/24 149.126.80.0/21 157.97.0.0/19 178.19.48.0/20 185.40.120.0/22 185.111.36.0/22 185.152.116.0/22 213.181.96.0/19 IPv6: 2a01:6f00::/29 2a01:8280::/32 Signature Algorithm: sha256WithRSAEncryption 41:e2:79:1a:fa:1f:bd:99:e6:6a:bb:a2:a5:94:b5:84:9f:6c: 8e:80:29:00:60:42:e6:df:40:b5:40:3f:de:0d:06:47:62:19: 56:a1:22:c6:c3:61:48:5a:2b:ec:76:8f:84:db:bb:6d:3c:0c: e5:70:a4:9a:84:80:da:2e:3c:10:dd:d6:77:c2:f1:ac:30:d0: 51:c7:83:2d:37:2d:63:4a:c7:71:55:eb:15:01:66:d3:96:46: 87:53:52:f4:2e:12:12:07:28:c5:6e:de:3f:41:26:8d:62:66: b6:33:e9:1b:3c:5a:b7:9e:86:c6:53:5b:1b:58:85:d2:9a:f7: 92:4b:fc:cb:b0:61:0f:7a:82:5a:d0:9f:16:83:65:13:f2:c5: 13:f4:71:eb:8e:66:f0:f9:53:b5:24:34:9e:19:62:4b:17:37: a6:a9:c8:ae:71:7b:0f:60:57:67:cc:24:52:26:65:75:23:8b: 7e:78:25:37:4a:a3:a4:a9:a0:f6:5a:3f:7b:de:54:1e:73:48: 1b:f1:d8:7d:92:ac:43:bc:d2:4b:ba:be:82:95:9b:61:0b:18: 9c:1f:28:f8:6b:6b:da:1b:4d:31:41:b4:40:ab:3c:8a:b4:e9: 0b:9d:ad:31:71:c3:29:ca:17:7b:5a:11:4f:d2:43:b9:b4:94: 28:ec:76:e8 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt5EQ9cu5JGoMK0Whdx4q2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYTc5NTE2N2QyZDlmYjQyMDk0MWYxNzI4N2JkZjNjNWVl ZDhkZjkwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmZlNzJjOTkwODViY2EwOWVkNmFkYjk4MDVmZjlhMTlmZTljYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzgBGg0Q7uRmuxEf0l5eyjWepTir wJgI+SJx+VcOuopgaVVgZjKAt79kHlkzvCLBY6q485qSy42mwaI53LviqBx4vKhb ZfKR0n+t0EQtJu6qG5v/UuRpQtEB5kXDb9/KRlyUat8h7+A17UVnakYWxcAuB8ll jUqBB0baT2PXFShGFxuKXWVDSbTKoboUGSqI0i/XjBoh4l5JKbnrbRYavPsKPjUs l0DcZoTayqHMFCJtQAP/7kktSn5nTojusYpdP2WpaaQNgz/7+UDQLlH4FmX52P2V UCJYnMgQVDkKBduZomQfpp45Z/o0BO8GBBLlUzK8ABrK1+NdPrhWXsOl2QIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFAv+csmQhbygntatuYBf+aGf6coGMB8GA1UdIwQY MBaAFB+nlRZ9LZ+0IJQfFyh73zxe7Y35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDkt N2I3ZTk3NmM4NDEyLzEvQ181eXlaQ0Z2S0NlMXEyNWdGXzVvWl9weWdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDktN2I3ZTk3NmM4NDEy LzEvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQDLra4AwQD Tij4AwQAW9yKAwQDlX5QAwQFnWEAAwQEshMwAwQCuSh4AwQCuW8kAwQCuZh0AwQF 1bVgMBQEAgACMA4DBQMqAW8AAwUAKgGCgDANBgkqhkiG9w0BAQsFAAOCAQEAQeJ5 GvofvZnmaruipZS1hJ9sjoApAGBC5t9AtUA/3g0GR2IZVqEixsNhSFor7HaPhNu7 bTwM5XCkmoSA2i48EN3Wd8LxrDDQUceDLTctY0rHcVXrFQFm05ZGh1NS9C4SEgco xW7eP0EmjWJmtjPpGzxat56GxlNbG1iF0pr3kkv8y7BhD3qCWtCfFoNlE/LFE/Rx 645m8PlTtSQ0nhliSxc3pqnIrnF7D2BXZ8wkUiZldSOLfnglN0qjpKmg9lo/e95U HnNIG/HYfZKsQ7zSS7q+gpWbYQsYnB8o+Gtr2htNMUG0QKs8irTpC52tMXHDKcoX e1oRT9JDubSUKOx26A== -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:56 2026 by rpki-client