This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/y8Erf7oDqsDbiw7iSwdN4CNhd_I.roa File: y8Erf7oDqsDbiw7iSwdN4CNhd_I.roa (raw, json) Hash identifier: rypvlKQBui/mc1XY3OqD0s710e5y1IdgbvnR6X8SWA8= Subject key identifier: CB:C1:2B:7F:BA:03:AA:C0:DB:8B:0E:E2:4B:07:4D:E0:23:61:77:F2 Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7 Certificate serial: 019B7B36E0641D52279F2F468C82083E284C Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/y8Erf7oDqsDbiw7iSwdN4CNhd_I.roa Signing time: Thu 01 Jan 2026 20:19:12 +0000 ROA not before: Thu 01 Jan 2026 20:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12417 IP address blocks: 91.234.46.0/24 maxlen: 24 178.218.160.0/20 maxlen: 24 178.218.163.0/24 maxlen: 24 178.218.170.0/24 maxlen: 24 178.218.171.0/24 maxlen: 24 178.218.172.0/24 maxlen: 24 178.218.173.0/24 maxlen: 24 178.218.174.0/24 maxlen: 24 185.220.24.0/22 maxlen: 24 185.220.24.0/24 maxlen: 24 185.220.25.0/24 maxlen: 24 185.220.27.0/24 maxlen: 24 2a0b:ee41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e0:64:1d:52:27:9f:2f:46:8c:82:08:3e:28:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7 Validity Not Before: Jan 1 20:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbc12b7fba03aac0db8b0ee24b074de0236177f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:af:b6:58:44:3e:af:9d:1f:e8:a2:0a:87: 6a:87:fb:49:96:b9:2c:b8:1c:ca:0f:ed:6f:13:b8: 7c:c9:c3:7e:1c:99:08:d9:17:7b:aa:aa:e6:e9:55: e7:b8:d4:ab:6b:27:27:8f:9f:b9:b5:07:f4:f6:5c: 6c:83:d6:f3:a1:91:35:e3:91:18:e5:01:96:5c:8a: 63:5e:02:9c:da:28:3e:54:5a:50:54:ad:50:8a:f2: f2:e0:59:01:9b:76:78:83:b3:16:fd:71:40:ee:8e: cd:91:7f:2b:1e:13:81:a1:05:ec:01:fa:ac:c8:06: 9c:25:4d:d7:6f:ba:8a:6d:a9:1f:15:12:50:23:8c: c3:5a:c0:95:d8:f5:96:37:35:19:0f:df:a6:f4:8a: 6b:56:d9:f4:8f:dd:fe:b9:ef:57:49:6d:74:ac:ab: 04:57:b4:d7:d6:aa:91:68:53:09:23:fa:15:4d:50: 02:e9:d5:81:f2:cf:26:b1:d6:bc:c4:b8:e3:68:1e: 6a:d9:b4:dd:d4:27:c0:2b:b9:0a:2c:59:f4:db:d4: ca:b9:39:f8:f5:c4:13:52:df:28:99:80:66:c9:9f: 72:6f:3f:f0:41:f8:d3:90:16:84:75:57:f4:ec:50: e6:8e:72:9a:fb:12:87:72:5a:db:0e:e4:dd:95:f7: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C1:2B:7F:BA:03:AA:C0:DB:8B:0E:E2:4B:07:4D:E0:23:61:77:F2 X509v3 Authority Key Identifier: keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/y8Erf7oDqsDbiw7iSwdN4CNhd_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.46.0/24 178.218.160.0/20 185.220.24.0/22 IPv6: 2a0b:ee41::/32 Signature Algorithm: sha256WithRSAEncryption 01:0d:e9:d8:a0:8e:0d:6f:a3:24:7a:fd:15:6b:66:c1:4a:7b: 6c:58:37:ae:19:7f:88:f3:7a:be:21:ef:88:ac:d0:07:e2:2e: 5f:b4:37:db:53:b2:17:19:ba:86:db:a9:b2:7d:2c:da:ad:de: 14:c3:12:87:76:e8:1e:7f:50:87:82:3c:04:1d:7c:2b:8a:f2: 4d:7a:e1:99:cf:80:6b:04:5a:74:84:f5:30:ce:1a:d1:47:92: 75:2d:a7:4e:ba:57:f7:ec:4a:54:96:6f:44:1d:35:d8:f7:33: 8f:c1:40:6f:5f:f8:a8:ec:53:ea:10:af:c2:5b:70:17:17:13: c0:20:33:1f:e4:4f:c4:7c:c7:21:6d:3c:91:85:3f:d8:da:45: cc:50:38:7c:a5:4e:59:fc:fe:6f:18:e5:9d:21:81:7e:8e:62: a3:c9:5b:09:ab:ce:59:93:cf:9d:1f:3a:a7:0e:90:fb:ee:81: da:5e:a3:6c:f8:b1:e0:1f:25:a4:44:e2:00:50:42:c0:ac:b4: 05:38:e9:fc:b1:45:fe:e2:70:65:91:02:c0:38:e5:87:85:4a: ba:2d:94:7f:60:99:73:1a:2c:42:73:7a:3b:dd:57:07:36:f2: c0:47:78:ff:4c:14:2f:fc:d9:73:69:cf:b3:e7:e5:49:22:93: 32:98:1e:8e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7NuBkHVInny9GjIIIPihMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5M2I1M2ZiOTMwNjM0NmYyNzI0OTQ5MjhkNzc4MzljYmFm OWRkYzcwHhcNMjYwMTAxMjAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmMxMmI3ZmJhMDNhYWMwZGI4YjBlZTI0YjA3NGRlMDIzNjE3N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTmvtlhEPq+dH+iiCodqh/tJlrks uBzKD+1vE7h8ycN+HJkI2Rd7qqrm6VXnuNSraycnj5+5tQf09lxsg9bzoZE145EY 5QGWXIpjXgKc2ig+VFpQVK1QivLy4FkBm3Z4g7MW/XFA7o7NkX8rHhOBoQXsAfqs yAacJU3Xb7qKbakfFRJQI4zDWsCV2PWWNzUZD9+m9IprVtn0j93+ue9XSW10rKsE V7TX1qqRaFMJI/oVTVAC6dWB8s8msda8xLjjaB5q2bTd1CfAK7kKLFn029TKuTn4 9cQTUt8omYBmyZ9ybz/wQfjTkBaEdVf07FDmjnKa+xKHclrbDuTdlfdsTQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMvBK3+6A6rA24sO4ksHTeAjYXfyMB8GA1UdIwQY MBaAFFk7U/uTBjRvJySUko13g5y6+d3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1R0VC01TUdORzhuSkpTU2pYZURuTHI1M2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmZjOWUtZWEzYi00MWMwLTk1MGUt NDQ3NWE5YmYyNTBlLzEveThFcmY3b0Rxc0RiaXc3aVN3ZE40Q05oZF9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMmZjOWUtZWEzYi00MWMwLTk1MGUtNDQ3NWE5YmYyNTBl LzEvV1R0VC01TUdORzhuSkpTU2pYZURuTHI1M2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW+ouAwQE stqgAwQCudwYMA0EAgACMAcDBQAqC+5BMA0GCSqGSIb3DQEBCwUAA4IBAQABDenY oI4Nb6Mkev0Va2bBSntsWDeuGX+I83q+Ie+IrNAH4i5ftDfbU7IXGbqG26myfSza rd4UwxKHdugef1CHgjwEHXwrivJNeuGZz4BrBFp0hPUwzhrRR5J1LadOulf37EpU lm9EHTXY9zOPwUBvX/io7FPqEK/CW3AXFxPAIDMf5E/EfMchbTyRhT/Y2kXMUDh8 pU5Z/P5vGOWdIYF+jmKjyVsJq85Zk8+dHzqnDpD77oHaXqNs+LHgHyWkROIAUELA rLQFOOn8sUX+4nBlkQLAOOWHhUq6LZR/YJlzGixCc3o73VcHNvLAR3j/TBQv/Nlz ac+z5+VJIpMymB6O -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:36 2026 by rpki-client