This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/y7cO-uvd-g6IKXPnSmNUZia9w1s.roa File: y7cO-uvd-g6IKXPnSmNUZia9w1s.roa (raw, json) Hash identifier: aa7Xz8229L+R/TET5wKLzyMqkiPkHrosbEK4nrHeitk= Subject key identifier: CB:B7:0E:FA:EB:DD:FA:0E:88:29:73:E7:4A:63:54:66:26:BD:C3:5B Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2 Certificate serial: 019B76EB45C3BADF27AC8161AC16E9ED9CE7 Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/y7cO-uvd-g6IKXPnSmNUZia9w1s.roa Signing time: Thu 01 Jan 2026 00:18:08 +0000 ROA not before: Thu 01 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29385 IP address blocks: 94.230.224.0/24 maxlen: 24 94.230.227.0/24 maxlen: 24 213.206.32.0/24 maxlen: 24 213.206.33.0/24 maxlen: 24 213.206.34.0/24 maxlen: 24 213.206.35.0/24 maxlen: 24 213.206.36.0/24 maxlen: 24 213.206.37.0/24 maxlen: 24 213.206.38.0/24 maxlen: 24 213.206.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:45:c3:ba:df:27:ac:81:61:ac:16:e9:ed:9c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbb70efaebddfa0e882973e74a63546626bdc35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:e9:cb:b8:95:0c:f4:3f:bd:30:ef:bd:e3: 74:c4:43:bb:cf:19:22:8e:76:41:86:76:3e:25:1d: 29:45:4d:b1:cc:f0:b6:6f:6a:db:17:de:c4:ff:83: 17:47:46:bd:43:f1:f2:a4:0f:bc:a3:85:52:82:b3: 0f:9a:3f:8d:b8:cb:50:a9:d7:2b:d5:0a:97:4d:ef: e9:9c:27:2e:da:ed:18:38:5c:84:a1:75:b5:cc:0f: ac:0e:ea:de:85:c5:9a:5d:cc:19:b9:4f:60:59:ad: 3a:df:ae:8f:f3:79:0f:6b:22:63:64:5c:f5:c9:e8: b2:be:0a:f0:5f:bd:b1:79:d5:95:e8:e5:e9:98:7a: a0:e3:fe:fc:4d:0c:2c:17:d0:9a:c1:74:98:86:58: 21:67:36:b7:da:f7:0d:ed:82:66:f1:94:69:81:8b: 16:06:87:a7:e0:67:03:32:63:9b:29:ab:3b:7e:27: 64:51:d7:dd:34:84:91:4b:40:5a:eb:ee:4b:91:70: 8a:1c:c9:b1:b6:c8:fd:ce:3f:05:b9:79:f5:cc:f0: b4:78:0b:f0:b9:61:ee:5c:7f:d3:77:9b:7a:67:ed: bb:bf:cd:6a:6d:a9:71:34:0f:02:8c:c6:ea:e7:a7: 46:e6:09:0e:38:00:97:d6:c3:7a:c8:10:7c:9f:18: b0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B7:0E:FA:EB:DD:FA:0E:88:29:73:E7:4A:63:54:66:26:BD:C3:5B X509v3 Authority Key Identifier: keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/y7cO-uvd-g6IKXPnSmNUZia9w1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.230.224.0/24 94.230.227.0/24 213.206.32.0-213.206.38.255 213.206.43.0/24 Signature Algorithm: sha256WithRSAEncryption 36:3b:23:90:bf:62:6a:ba:92:d3:7c:00:e2:86:06:f7:9f:36: be:8f:0b:39:f1:1e:62:d6:0e:92:f3:0b:6e:8c:71:77:a6:a2: 4a:de:9e:ca:f7:23:4e:07:2f:d8:6e:aa:f4:d9:a6:55:10:5c: d8:66:02:c9:ef:cd:ca:7f:f9:ce:f7:1a:c2:39:a5:f1:53:d8: b3:5a:ea:40:ee:ef:e9:80:2e:67:d8:95:71:fd:17:89:cf:67: fc:55:56:f5:3b:19:58:26:4a:f0:fd:fe:38:cd:dd:62:cb:75: 75:bc:5d:56:71:32:73:e3:d0:d1:9c:6e:85:f0:05:af:43:58: c5:7f:9f:58:91:09:2a:8b:8a:72:7c:01:c9:c5:d9:65:d8:3b: 08:de:d8:51:63:20:b2:37:ef:8f:0a:c1:8b:66:96:fa:9d:bc: 64:b2:b0:39:a3:fa:30:29:c4:81:98:4b:bb:63:e0:1b:44:89: 8a:74:c8:db:ae:13:9b:e9:7d:0b:11:b0:c5:3c:4e:dd:50:da: 42:a7:b0:e9:d3:49:57:72:cd:d3:ea:72:fa:ad:c0:ca:41:2f: c9:69:e3:72:a5:d6:8d:09:ae:bc:7b:55:b6:c3:7c:b9:bc:a8: 3a:e6:93:1e:ae:d8:b4:63:62:45:a4:ac:c0:4f:d9:1b:01:6d: 39:de:bd:d1 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt260XDut8nrIFhrBbp7ZznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw NmVhZjIwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmI3MGVmYWViZGRmYTBlODgyOTczZTc0YTYzNTQ2NjI2YmRjMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvjpy7iVDPQ/vTDvveN0xEO7zxki jnZBhnY+JR0pRU2xzPC2b2rbF97E/4MXR0a9Q/HypA+8o4VSgrMPmj+NuMtQqdcr 1QqXTe/pnCcu2u0YOFyEoXW1zA+sDurehcWaXcwZuU9gWa06366P83kPayJjZFz1 yeiyvgrwX72xedWV6OXpmHqg4/78TQwsF9CawXSYhlghZza32vcN7YJm8ZRpgYsW Boen4GcDMmObKas7fidkUdfdNISRS0Ba6+5LkXCKHMmxtsj9zj8FuXn1zPC0eAvw uWHuXH/Td5t6Z+27v81qbalxNA8CjMbq56dG5gkOOACX1sN6yBB8nxiwCwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFMu3Dvrr3foOiClz50pjVGYmvcNbMB8GA1UdIwQY MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt NGE2ZjU1NzcxYmQxLzEveTdjTy11dmQtZzZJS1hQblNtTlVaaWE5dzFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAXubgAwQA XubjMAwDBAXVziADBADVziYDBADVziswDQYJKoZIhvcNAQELBQADggEBADY7I5C/ Ymq6ktN8AOKGBvefNr6PCznxHmLWDpLzC26McXemokrensr3I04HL9huqvTZplUQ XNhmAsnvzcp/+c73GsI5pfFT2LNa6kDu7+mALmfYlXH9F4nPZ/xVVvU7GVgmSvD9 /jjN3WLLdXW8XVZxMnPj0NGcboXwBa9DWMV/n1iRCSqLinJ8AcnF2WXYOwje2FFj ILI3748KwYtmlvqdvGSysDmj+jApxIGYS7tj4BtEiYp0yNuuE5vpfQsRsMU8Tt1Q 2kKnsOnTSVdyzdPqcvqtwMpBL8lp43Kl1o0Jrrx7VbbDfLm8qDrmkx6u2LRjYkWk rMBP2RsBbTnevdE= -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:52 2026 by rpki-client