This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/yLV7lfd30bAjDnQWLnJQ_McSKtA.roa File: yLV7lfd30bAjDnQWLnJQ_McSKtA.roa (raw, json) Hash identifier: LMA6JBfDwM4DNAaRQWUraFrUGqg8Vgx8QA0i7GxUahs= Subject key identifier: C8:B5:7B:95:F7:77:D1:B0:23:0E:74:16:2E:72:50:FC:C7:12:2A:D0 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2D75EDF4F43C8FC0233B69670920 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/yLV7lfd30bAjDnQWLnJQ_McSKtA.roa Signing time: Fri 02 Jan 2026 08:19:20 +0000 ROA not before: Fri 02 Jan 2026 08:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39811 IP address blocks: 85.140.127.0/24 maxlen: 24 213.87.96.0/24 maxlen: 24 213.87.97.0/24 maxlen: 24 213.87.98.0/23 maxlen: 23 213.87.100.0/24 maxlen: 24 213.87.101.0/24 maxlen: 24 213.87.102.0/24 maxlen: 24 213.87.103.0/24 maxlen: 24 213.87.104.0/24 maxlen: 24 213.87.105.0/24 maxlen: 24 213.87.106.0/23 maxlen: 23 213.87.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2d:75:ed:f4:f4:3c:8f:c0:23:3b:69:67:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8b57b95f777d1b0230e74162e7250fcc7122ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:c1:67:cc:1e:4a:fd:58:02:a4:8d:86:e7: 36:3e:f7:85:d9:b3:36:27:d9:ee:32:d6:d9:d5:b8: e6:f7:f8:94:fe:55:fd:44:8a:ac:a3:d1:f4:c6:ab: a5:2a:c6:f1:f6:39:06:e2:bc:f7:12:c7:89:61:16: 42:9f:9b:31:fa:16:b4:18:49:c3:6f:19:b4:0c:7c: 92:8c:50:f6:48:05:6b:c7:70:d9:4b:22:7a:27:64: d1:2e:ea:72:6f:9f:b6:6a:6c:cd:5e:27:2a:05:ff: 7c:2b:f5:94:59:93:cc:a9:88:d1:a3:05:c2:46:d9: 94:8d:eb:1d:7f:5b:1e:4e:1a:0b:09:b0:e8:1c:7a: 65:8c:6b:b5:07:31:be:15:ef:2b:21:89:79:da:cb: ce:12:e8:6a:d2:36:d9:62:ee:4a:2a:09:8e:d0:b4: e8:57:4c:2f:3d:6e:86:77:6c:d3:59:e7:cb:bf:54: 17:32:fd:61:a1:8b:71:cb:5c:00:d2:1e:5d:a9:36: 16:77:ae:21:54:bc:13:1c:1f:56:f9:a3:a8:0f:9b: 46:76:35:5d:84:3b:0b:b8:79:35:21:4d:77:0c:eb: 8b:82:67:e0:a4:de:c9:f6:c5:35:64:70:62:78:b5: df:3a:f8:3c:61:c6:5b:31:9a:99:c8:0f:bc:75:36: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B5:7B:95:F7:77:D1:B0:23:0E:74:16:2E:72:50:FC:C7:12:2A:D0 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/yLV7lfd30bAjDnQWLnJQ_McSKtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.140.127.0/24 213.87.96.0-213.87.107.255 213.87.246.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:43:13:8e:ac:3e:52:52:0a:bb:04:04:7e:71:c7:5d:2c:7b: ba:6e:00:e9:3a:32:c0:bf:6b:4a:61:33:16:21:52:7f:83:cb: 3d:80:94:0f:8b:eb:15:ad:45:be:05:a4:f5:26:0b:45:50:8b: c4:80:29:f6:25:97:44:d7:c6:2f:36:23:b0:44:69:8d:60:a0: 03:a1:93:ea:3e:08:ca:cf:5d:1f:8f:db:cd:62:fe:2e:fd:01: 7e:41:df:1f:bc:b7:50:98:8a:f4:94:03:6b:4d:7c:ff:a8:b4: 52:2e:af:10:ad:34:9b:ae:b8:e8:a5:c0:fc:2b:50:fe:c6:69: 51:07:81:1f:6c:db:b6:15:6b:4c:c2:97:b0:06:0f:0f:ae:94: 3f:44:18:f2:0a:bd:ed:3c:97:b4:3a:19:66:59:27:ef:4e:00: a3:cd:70:51:c9:b7:8b:b5:47:40:6a:91:4b:78:48:08:b0:ea: 21:a4:a8:f5:5a:2d:84:a5:dd:b0:7b:c9:f1:94:57:62:ad:83: 82:b2:76:d5:fc:08:1f:b7:fe:b5:34:16:91:ea:7a:f3:73:49: ac:86:52:ca:a6:94:cb:2a:94:61:6f:de:7a:36:22:a5:81:7d: 8b:7e:d5:28:df:01:df:44:5e:a9:aa:75:8b:e9:01:ac:99:82: 36:04:c9:9d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9yi117fT0PI/AIztpZwkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGI1N2I5NWY3NzdkMWIwMjMwZTc0MTYyZTcyNTBmY2M3MTIyYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmerBZ8weSv1YAqSNhuc2PveF2bM2 J9nuMtbZ1bjm9/iU/lX9RIqso9H0xqulKsbx9jkG4rz3EseJYRZCn5sx+ha0GEnD bxm0DHySjFD2SAVrx3DZSyJ6J2TRLupyb5+2amzNXicqBf98K/WUWZPMqYjRowXC RtmUjesdf1seThoLCbDoHHpljGu1BzG+Fe8rIYl52svOEuhq0jbZYu5KKgmO0LTo V0wvPW6Gd2zTWefLv1QXMv1hoYtxy1wA0h5dqTYWd64hVLwTHB9W+aOoD5tGdjVd hDsLuHk1IU13DOuLgmfgpN7J9sU1ZHBieLXfOvg8YcZbMZqZyA+8dTb+UwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMi1e5X3d9GwIw50Fi5yUPzHEirQMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEveUxWN2xmZDMwYkFqRG5RV0xuSlFfTWNTS3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAVYx/MAwD BAXVV2ADBALVV2gDBADVV/YwDQYJKoZIhvcNAQELBQADggEBAH1DE46sPlJSCrsE BH5xx10se7puAOk6MsC/a0phMxYhUn+Dyz2AlA+L6xWtRb4FpPUmC0VQi8SAKfYl l0TXxi82I7BEaY1goAOhk+o+CMrPXR+P281i/i79AX5B3x+8t1CYivSUA2tNfP+o tFIurxCtNJuuuOilwPwrUP7GaVEHgR9s27YVa0zCl7AGDw+ulD9EGPIKve08l7Q6 GWZZJ+9OAKPNcFHJt4u1R0BqkUt4SAiw6iGkqPVaLYSl3bB7yfGUV2Ktg4KydtX8 CB+3/rU0FpHqevNzSayGUsqmlMsqlGFv3no2IqWBfYt+1SjfAd9EXqmqdYvpAayZ gjYEyZ0= -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:56 2026 by rpki-client