This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa File: aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa (raw, json) Hash identifier: ElYpbz1hT+tdDX0OO2S2lUgbf4kvMtgLbQtU+Xc+lMY= Subject key identifier: 69:16:60:C8:3D:49:80:40:33:86:2E:FC:CC:34:3E:AD:03:13:AB:AB Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b Certificate serial: 019B7BA46F9978EB27C4A7C2E235F3335EF9 Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa Signing time: Thu 01 Jan 2026 22:18:52 +0000 ROA not before: Thu 01 Jan 2026 22:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25248 IP address blocks: 82.99.128.0/18 maxlen: 18 84.244.64.0/18 maxlen: 18 85.207.0.0/16 maxlen: 16 85.207.220.0/22 maxlen: 22 212.158.128.0/19 maxlen: 19 2a02:a40::/32 maxlen: 32 2a02:a41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:6f:99:78:eb:27:c4:a7:c2:e2:35:f3:33:5e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b Validity Not Before: Jan 1 22:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=691660c83d49804033862efccc343ead0313abab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0c:57:b1:97:ce:19:cc:51:31:86:d4:6e:4e: 36:d3:1d:ec:a9:be:bb:f5:0b:8d:7c:f0:28:1b:f2: 69:86:9f:ac:f0:4f:40:de:45:53:95:6c:cd:4f:f3: c8:66:06:9c:3f:87:38:f1:a1:de:c7:72:40:5d:31: a7:67:cf:7c:71:6a:3e:3d:48:ec:6b:1e:11:00:84: 2b:e1:8f:4c:b5:00:b4:21:a0:bd:14:f8:b9:6b:bf: ea:31:d9:e1:32:a0:7f:71:ac:17:81:b7:08:fa:19: 24:dc:9d:84:1a:bc:cc:81:60:1c:dd:ac:6d:08:4f: ce:27:45:8e:b7:5d:0b:4d:36:1b:c8:66:ac:e9:06: 1a:9e:9f:e6:aa:26:0f:c0:d2:c1:ab:a8:ae:7b:49: 45:b8:44:01:9f:dc:82:3d:7c:4b:d4:d0:de:8a:cc: f2:80:a0:da:ad:22:29:69:63:88:1e:ec:ef:f0:8f: 4f:4d:f1:1c:1c:52:97:ed:3d:09:d4:cd:b9:58:37: df:da:98:85:01:95:40:b5:3b:86:3b:37:63:ba:81: 82:32:40:70:6b:13:42:eb:b3:17:64:47:cf:13:57: 71:37:7e:ef:d0:1c:1b:e5:ac:ae:4a:b5:a2:8d:b0: e7:64:78:1b:54:80:e5:3a:f1:f5:f3:14:98:c1:b1: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:16:60:C8:3D:49:80:40:33:86:2E:FC:CC:34:3E:AD:03:13:AB:AB X509v3 Authority Key Identifier: keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.99.128.0/18 84.244.64.0/18 85.207.0.0/16 212.158.128.0/19 IPv6: 2a02:a40::/31 Signature Algorithm: sha256WithRSAEncryption d9:a8:99:3f:60:46:4b:e5:2d:6f:0f:14:eb:3e:29:d8:5f:75: 4d:d9:c5:4d:a2:20:7f:99:75:53:90:fd:20:b7:4a:88:2b:9b: d4:ad:73:fe:ac:30:b0:56:6f:f9:7d:3b:77:2e:c5:c6:a8:ff: 86:b0:37:3a:f4:98:53:60:f0:06:55:03:7e:0c:01:30:95:2d: f5:73:3a:1f:c3:ad:b1:d4:2e:6d:41:b0:22:c4:49:53:af:31: de:99:50:fe:89:e8:f3:a2:c5:32:03:fa:bc:e9:50:63:49:96: 0a:6b:93:d7:71:24:9f:90:fc:f7:70:11:01:b0:95:98:cd:42: f2:72:ce:6a:34:0f:1a:3b:c2:3a:01:f3:50:d5:c1:6d:09:75: d5:78:db:f0:76:0a:a9:bd:1b:4e:df:33:0a:1c:b7:0f:1c:3e: 2f:14:bb:d4:d5:8b:05:86:3e:1a:39:22:78:73:49:33:70:20: ee:b0:7b:0d:53:6d:cf:bb:56:46:43:df:b8:df:0d:8e:18:e6: ff:9e:f6:cb:08:d1:06:11:6c:55:ef:0b:6a:b8:f1:15:e9:45: 84:05:e1:43:e9:48:df:cb:d7:ce:10:b3:ca:e9:2b:c4:d7:8e: f7:50:02:37:83:16:8a:4f:47:9b:49:eb:dc:34:55:0a:0f:94: 28:98:85:82 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt7pG+ZeOsnxKfC4jXzM175MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZjUyNTJjY2FjM2Y2ZGMxNDI2YjU1M2YyYzFjNzIzM2Fj Yzg5NGIwHhcNMjYwMTAxMjIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTE2NjBjODNkNDk4MDQwMzM4NjJlZmNjYzM0M2VhZDAzMTNhYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgxXsZfOGcxRMYbUbk420x3sqb67 9QuNfPAoG/Jphp+s8E9A3kVTlWzNT/PIZgacP4c48aHex3JAXTGnZ898cWo+PUjs ax4RAIQr4Y9MtQC0IaC9FPi5a7/qMdnhMqB/cawXgbcI+hkk3J2EGrzMgWAc3axt CE/OJ0WOt10LTTYbyGas6QYanp/mqiYPwNLBq6iue0lFuEQBn9yCPXxL1NDeiszy gKDarSIpaWOIHuzv8I9PTfEcHFKX7T0J1M25WDff2piFAZVAtTuGOzdjuoGCMkBw axNC67MXZEfPE1dxN37v0Bwb5ayuSrWijbDnZHgbVIDlOvH18xSYwbFYgQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGkWYMg9SYBAM4Yu/Mw0Pq0DE6urMB8GA1UdIwQY MBaAFL71JSzKw/bcFCa1U/LBxyM6zIlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmIt MTFlNWY2ZDEyZWYxLzEvYVJaZ3lEMUpnRUF6aGk3OHpEUS1yUU1UcTZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmItMTFlNWY2ZDEyZWYx LzEvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQGUmOAAwQG VPRAAwMAVc8DBAXUnoAwDQQCAAIwBwMFASoCCkAwDQYJKoZIhvcNAQELBQADggEB ANmomT9gRkvlLW8PFOs+KdhfdU3ZxU2iIH+ZdVOQ/SC3Sogrm9Stc/6sMLBWb/l9 O3cuxcao/4awNzr0mFNg8AZVA34MATCVLfVzOh/DrbHULm1BsCLESVOvMd6ZUP6J 6POixTID+rzpUGNJlgprk9dxJJ+Q/PdwEQGwlZjNQvJyzmo0Dxo7wjoB81DVwW0J ddV42/B2Cqm9G07fMwoctw8cPi8Uu9TViwWGPho5InhzSTNwIO6wew1Tbc+7VkZD 37jfDY4Y5v+e9ssI0QYRbFXvC2q48RXpRYQF4UPpSN/L184Qs8rpK8TXjvdQAjeD FopPR5tJ69w0VQoPlCiYhYI= -----END CERTIFICATE-----Generated at Wed Jan 21 10:35:10 2026 by rpki-client