This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/BRc2c3EDcZakZfA0W_dY8bIp5oc.roa File: BRc2c3EDcZakZfA0W_dY8bIp5oc.roa (raw, json) Hash identifier: 8BEI3S2LfJbhhRBz8Cr9mCLe0EnYlfgBmkbf0JQfcno= Subject key identifier: 05:17:36:73:71:03:71:96:A4:65:F0:34:5B:F7:58:F1:B2:29:E6:87 Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a Certificate serial: 019B7F15D161FE14C8EF3D19F39183D41C71 Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/BRc2c3EDcZakZfA0W_dY8bIp5oc.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39375 IP address blocks: 89.161.0.0/22 maxlen: 22 89.161.4.0/22 maxlen: 22 89.161.8.0/22 maxlen: 22 89.161.12.0/22 maxlen: 22 89.161.16.0/22 maxlen: 22 89.161.20.0/22 maxlen: 22 89.161.24.0/24 maxlen: 24 89.161.25.0/24 maxlen: 24 89.161.26.0/24 maxlen: 24 89.161.27.0/24 maxlen: 24 89.161.28.0/24 maxlen: 24 89.161.29.0/24 maxlen: 24 89.161.30.0/24 maxlen: 24 89.161.31.0/24 maxlen: 24 89.161.32.0/22 maxlen: 22 89.161.36.0/22 maxlen: 22 89.161.40.0/22 maxlen: 22 89.161.44.0/22 maxlen: 22 89.161.48.0/22 maxlen: 22 89.161.52.0/22 maxlen: 22 89.161.56.0/24 maxlen: 24 89.161.57.0/24 maxlen: 24 89.161.58.0/24 maxlen: 24 89.161.59.0/24 maxlen: 24 89.161.60.0/23 maxlen: 23 89.161.62.0/24 maxlen: 24 89.161.63.0/24 maxlen: 24 89.161.64.0/20 maxlen: 20 89.161.64.0/24 maxlen: 24 89.161.65.0/24 maxlen: 24 89.161.66.0/24 maxlen: 24 89.161.67.0/24 maxlen: 24 89.161.68.0/24 maxlen: 24 89.161.69.0/24 maxlen: 24 89.161.70.0/24 maxlen: 24 89.161.71.0/24 maxlen: 24 89.161.72.0/24 maxlen: 24 89.161.73.0/24 maxlen: 24 89.161.74.0/23 maxlen: 23 89.161.76.0/22 maxlen: 22 89.161.80.0/22 maxlen: 22 89.161.84.0/22 maxlen: 22 89.161.88.0/24 maxlen: 24 89.161.89.0/24 maxlen: 24 89.161.90.0/24 maxlen: 24 89.161.91.0/24 maxlen: 24 89.161.92.0/22 maxlen: 22 89.161.96.0/24 maxlen: 24 89.161.97.0/24 maxlen: 24 89.161.98.0/24 maxlen: 24 89.161.99.0/24 maxlen: 24 89.161.100.0/24 maxlen: 24 89.161.101.0/24 maxlen: 24 89.161.102.0/23 maxlen: 23 89.161.104.0/23 maxlen: 23 89.161.106.0/23 maxlen: 23 89.161.108.0/23 maxlen: 23 185.212.40.0/24 maxlen: 24 185.212.41.0/24 maxlen: 24 185.212.42.0/24 maxlen: 24 185.212.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d1:61:fe:14:c8:ef:3d:19:f3:91:83:d4:1c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0517367371037196a465f0345bf758f1b229e687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:6c:0e:06:8a:a6:d9:dd:b3:f3:97:c9:c3: 2d:0d:15:8b:a2:09:1a:15:18:c1:3c:07:65:7d:79: 2b:a2:81:9d:26:7d:85:c7:b3:58:1f:ab:e3:f7:76: 7a:91:04:b7:86:52:f7:8f:f5:9b:92:b0:c7:3b:fe: 6e:66:31:e0:16:ee:77:87:3b:5d:43:2a:9c:dd:6b: 2d:ca:3a:23:76:83:5a:34:9b:85:bb:c5:c1:c5:f5: 5c:e0:fa:45:1f:c8:a9:86:19:1b:6b:c0:6d:78:87: b4:d7:d7:5c:af:e4:11:9d:aa:20:17:4c:3c:72:b8: 65:f6:7b:79:2d:9f:37:63:3b:73:55:2c:cc:4e:cb: f9:4f:63:92:94:a7:03:ab:9b:b1:bd:74:16:ba:4b: 6a:5f:e8:7d:a3:4d:e2:50:ed:08:6a:c5:e2:4e:03: 1c:a8:75:4f:a4:fe:d3:88:80:eb:b4:ca:f3:a9:30: 06:6c:2b:69:16:7f:60:28:b0:21:a8:34:33:38:6f: 48:22:16:c0:ba:1e:a0:12:c3:10:9b:28:6b:a1:19: 05:c0:1e:47:fa:14:e0:13:af:90:91:38:0a:23:70: d5:e9:9b:c7:bc:72:95:34:e8:b9:87:3f:71:2d:88: 2a:f4:0a:1b:93:66:0e:ce:ff:c2:39:c6:07:01:a2: a6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:17:36:73:71:03:71:96:A4:65:F0:34:5B:F7:58:F1:B2:29:E6:87 X509v3 Authority Key Identifier: keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/BRc2c3EDcZakZfA0W_dY8bIp5oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.161.0.0-89.161.109.255 185.212.40.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:e0:51:0b:d8:c7:15:de:2a:b3:28:59:60:6d:b3:64:1a:15: 13:2e:72:0b:66:e8:71:0c:07:d0:34:35:cf:2c:d4:69:ca:43: 2e:44:3d:71:20:b8:6f:a0:be:4e:89:22:81:7a:79:4c:65:f5: ac:a8:06:16:6d:46:4a:1a:a9:d0:3d:85:85:89:dc:4c:55:eb: bc:ab:9d:ac:56:39:03:4d:71:b6:5e:bf:1c:cd:5c:81:83:76: 29:4c:d2:5b:42:80:ef:63:cf:d8:b0:9f:9e:9a:9c:10:39:92: b8:1b:6f:c3:6a:5b:e1:02:e5:c7:36:10:ea:40:12:c9:38:bd: 14:98:07:5f:9d:5a:eb:3b:91:43:db:e3:fa:e4:c1:ce:64:d6: e3:64:77:72:ff:4a:ac:60:ab:83:9b:2a:cc:38:bb:af:d3:46: cb:84:f1:ee:de:23:2d:79:db:f2:6e:53:87:b7:50:60:f6:35: 5b:44:84:2c:e2:2f:5e:a6:e2:9f:ff:33:3f:d4:aa:98:0d:5f: 79:d4:bb:32:47:94:d1:c1:87:4d:fd:62:69:0c:20:e0:4a:1e: 19:3d:84:79:0d:60:96:3c:08:84:72:03:52:ab:4c:df:ad:ee: b4:0f:a3:73:51:d3:b5:81:e2:e3:59:3b:54:bd:c2:35:c7:23: bd:96:3b:ea -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt/FdFh/hTI7z0Z85GD1BxxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODNjNDM2Mjc5NTM3ZDRmNzI2ZDIzMTBjZWYxNGE0MmYx YjJiOGEwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTE3MzY3MzcxMDM3MTk2YTQ2NWYwMzQ1YmY3NThmMWIyMjllNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cNsDgaKptnds/OXycMtDRWLogka FRjBPAdlfXkrooGdJn2Fx7NYH6vj93Z6kQS3hlL3j/WbkrDHO/5uZjHgFu53hztd Qyqc3WstyjojdoNaNJuFu8XBxfVc4PpFH8iphhkba8BteIe019dcr+QRnaogF0w8 crhl9nt5LZ83YztzVSzMTsv5T2OSlKcDq5uxvXQWuktqX+h9o03iUO0IasXiTgMc qHVPpP7TiIDrtMrzqTAGbCtpFn9gKLAhqDQzOG9IIhbAuh6gEsMQmyhroRkFwB5H +hTgE6+QkTgKI3DV6ZvHvHKVNOi5hz9xLYgq9Aobk2YOzv/COcYHAaKmMQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFAUXNnNxA3GWpGXwNFv3WPGyKeaHMB8GA1UdIwQY MBaAFBCDxDYnlTfU9ybSMQzvFKQvGyuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTIt ODEyMjQ4YjY1MzcwLzEvQlJjMmMzRURjWmFrWmZBMFdfZFk4YklwNW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTItODEyMjQ4YjY1Mzcw LzEvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwBZoQME AVmhbAMEArnUKDANBgkqhkiG9w0BAQsFAAOCAQEAfeBRC9jHFd4qsyhZYG2zZBoV Ey5yC2bocQwH0DQ1zyzUacpDLkQ9cSC4b6C+TokigXp5TGX1rKgGFm1GShqp0D2F hYncTFXrvKudrFY5A01xtl6/HM1cgYN2KUzSW0KA72PP2LCfnpqcEDmSuBtvw2pb 4QLlxzYQ6kASyTi9FJgHX51a6zuRQ9vj+uTBzmTW42R3cv9KrGCrg5sqzDi7r9NG y4Tx7t4jLXnb8m5Th7dQYPY1W0SELOIvXqbin/8zP9SqmA1fedS7MkeU0cGHTf1i aQwg4EoeGT2EeQ1gljwIhHIDUqtM363utA+jc1HTtYHi41k7VL3CNccjvZY76g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:53 2026 by rpki-client