This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa File: RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa (raw, json) Hash identifier: Mpj7iy2/6clWPzb2aVRARaYOeEI5SbFcnwOqd9+kHL4= Subject key identifier: 45:5C:A8:13:69:8D:30:D7:8B:DC:53:00:AF:66:02:E9:92:1E:52:97 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C671B4DD90DE394E8AAA7B2C169C4A Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25374 IP address blocks: 212.21.130.0/24 maxlen: 24 212.21.140.0/22 maxlen: 24 212.21.144.0/21 maxlen: 24 212.21.152.0/22 maxlen: 24 212.21.156.0/23 maxlen: 24 212.21.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 16:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:71:b4:dd:90:de:39:4e:8a:aa:7b:2c:16:9c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=455ca813698d30d78bdc5300af6602e9921e5297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:38:42:b3:a3:a9:67:71:7d:30:df:8c:4c: e3:34:5d:1d:79:80:fe:ea:fa:49:a7:1d:77:73:a8: 4a:55:52:a4:c4:c9:24:eb:39:f7:ac:4c:08:92:c0: ce:4a:58:99:af:f0:f0:b8:8c:80:9d:24:ef:43:12: 8b:d7:23:da:a3:13:48:0a:a4:7e:d0:8d:6a:ed:2f: 63:52:db:42:6a:f6:0f:c4:b6:83:51:6e:f9:9b:2c: ba:3b:f5:26:8f:d7:3e:1b:e9:04:02:a3:8b:c4:d1: 46:3f:dd:e0:ff:9b:c4:00:bf:4c:28:9c:c7:b7:a4: bc:55:57:28:22:1a:74:5a:62:54:0f:1a:ca:fc:ce: 43:da:58:22:40:ca:fe:6e:34:4f:50:83:a5:ff:2f: 55:71:76:0e:2a:f5:c0:6e:b2:2d:56:92:eb:4f:12: 08:7c:c1:b5:19:3c:b7:60:ae:b2:2f:1a:b5:b8:bc: cb:5b:ac:69:e8:56:b2:9d:bc:5f:5e:10:7b:09:c9: 14:81:5b:20:3d:82:2f:7f:d4:64:c3:d8:6c:da:7c: 97:28:ee:6e:86:48:f8:de:01:61:5d:1d:3e:10:31: 95:a6:25:ba:95:0c:f7:13:21:57:0e:31:f8:14:86: c9:63:de:41:ed:71:a0:f3:94:67:7b:22:cd:f6:62: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5C:A8:13:69:8D:30:D7:8B:DC:53:00:AF:66:02:E9:92:1E:52:97 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.21.130.0/24 212.21.140.0-212.21.158.255 Signature Algorithm: sha256WithRSAEncryption 31:7d:d8:37:b3:f5:bc:09:a5:ba:d6:6d:6a:15:f1:25:23:f2: 9c:49:66:27:3d:91:f3:6d:11:f8:b4:96:70:27:b4:c9:16:59: c5:bc:d8:3e:62:10:58:62:8a:d8:3e:0c:bc:7b:51:7b:de:ef: ad:15:ca:b1:76:e9:c0:de:cb:80:80:ab:cc:93:59:19:fb:5f: c9:5f:9d:c4:e2:8b:2e:f9:31:fd:0c:27:da:09:8a:cc:05:93: 6d:66:39:6c:5f:be:2b:13:ef:ca:90:f2:c4:23:d2:51:40:0e: 28:34:a5:dc:3e:10:02:e3:37:83:0e:66:8e:05:40:12:aa:24: 8c:c8:89:75:cb:a5:29:e8:ef:05:02:1b:8c:24:21:1c:7c:df: ab:ad:3c:6c:88:3a:68:69:e3:e6:20:f0:a2:dc:9d:fa:0c:48: b9:08:ad:f8:f9:1b:d3:41:e3:ab:bf:48:f1:ea:be:48:92:22: ba:51:c3:b9:0f:32:1a:fe:74:bd:b5:f2:32:80:78:01:81:a8: ba:f2:a8:a4:77:1e:63:75:9a:7f:8d:e9:0a:14:50:89:f0:3f: d3:e8:64:bf:2c:fd:cf:b3:5f:d3:ef:0e:e8:6f:21:7f:83:5c: e8:ab:1a:29:35:55:c6:b6:f5:a6:fd:7f:18:a2:cb:14:a2:d3: 35:5b:af:b4 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3xnG03ZDeOU6KqnssFpxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTVjYTgxMzY5OGQzMGQ3OGJkYzUzMDBhZjY2MDJlOTkyMWU1Mjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzE4QrOjqWdxfTDfjEzjNF0deYD+ 6vpJpx13c6hKVVKkxMkk6zn3rEwIksDOSliZr/DwuIyAnSTvQxKL1yPaoxNICqR+ 0I1q7S9jUttCavYPxLaDUW75myy6O/Umj9c+G+kEAqOLxNFGP93g/5vEAL9MKJzH t6S8VVcoIhp0WmJUDxrK/M5D2lgiQMr+bjRPUIOl/y9VcXYOKvXAbrItVpLrTxII fMG1GTy3YK6yLxq1uLzLW6xp6FaynbxfXhB7CckUgVsgPYIvf9Rkw9hs2nyXKO5u hkj43gFhXR0+EDGVpiW6lQz3EyFXDjH4FIbJY95B7XGg85RneyLN9mJKhwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEVcqBNpjTDXi9xTAK9mAumSHlKXMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvUlZ5b0UybU5NTmVMM0ZNQXIyWUM2WkllVXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA1BWCMAwD BALUFYwDBADUFZ4wDQYJKoZIhvcNAQELBQADggEBADF92Dez9bwJpbrWbWoV8SUj 8pxJZic9kfNtEfi0lnAntMkWWcW82D5iEFhiitg+DLx7UXve760VyrF26cDey4CA q8yTWRn7X8lfncTiiy75Mf0MJ9oJiswFk21mOWxfvisT78qQ8sQj0lFADig0pdw+ EALjN4MOZo4FQBKqJIzIiXXLpSno7wUCG4wkIRx836utPGyIOmhp4+Yg8KLcnfoM SLkIrfj5G9NB46u/SPHqvkiSIrpRw7kPMhr+dL218jKAeAGBqLryqKR3HmN1mn+N 6QoUUInwP9PoZL8s/c+zX9PvDuhvIX+DXOirGik1Vca29ab9fxiiyxSi0zVbr7Q= -----END CERTIFICATE-----Generated at Fri Jan 23 21:34:40 2026 by rpki-client