This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/valzYXczYY3RJ6xb_g__yzBDYXU.roa File: valzYXczYY3RJ6xb_g__yzBDYXU.roa (raw, json) Hash identifier: bbU6NTwqQ5O7qErPjl86r7BZfQa4g2RHPM0gnU6rCb8= Subject key identifier: BD:A9:73:61:77:33:61:8D:D1:27:AC:5B:FE:0F:FF:CB:30:43:61:75 Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Certificate serial: 019B7F15D188D668C828D1BFE9BFB8A7909B Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/valzYXczYY3RJ6xb_g__yzBDYXU.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38915 IP address blocks: 193.203.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d1:88:d6:68:c8:28:d1:bf:e9:bf:b8:a7:90:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bda973617733618dd127ac5bfe0fffcb30436175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:be:85:6e:ae:64:1f:b8:9c:80:f9:97:ff: fc:dd:5e:ca:ed:2e:20:a2:2f:ea:33:f9:c9:d7:27: a7:da:fd:69:91:21:1f:9f:08:97:28:55:ab:cf:08: 3d:10:21:c8:e2:6f:55:a9:ba:4a:04:8b:c1:ae:5e: d9:48:88:96:2d:12:50:08:ba:be:89:8e:bc:3f:56: d4:0c:48:58:1a:56:fa:00:60:4f:4e:09:e4:75:d3: da:4a:b1:20:75:0d:86:15:24:a4:cc:68:56:46:34: 0c:5c:58:73:45:e3:ba:39:f2:d0:d0:0a:32:6c:90: 3a:18:9a:24:9a:a1:17:b9:d4:27:f0:87:6f:1b:74: 6e:9c:eb:56:30:b0:2d:d8:fa:11:3f:74:54:6b:51: 6c:6e:14:47:7a:3c:25:cb:d7:23:23:f5:ed:33:9f: ea:7d:0f:23:6b:bb:02:23:ec:4c:e8:b5:11:6d:4a: 74:8d:e9:a1:fe:5f:a2:00:03:d0:17:b0:55:a6:0c: 3a:47:dd:f2:7a:57:da:b4:d6:13:f7:89:06:be:cf: dc:b2:66:08:6e:70:65:66:9b:a2:4e:ee:d6:9e:12: b6:c3:38:1b:8a:ea:9c:ff:84:4d:be:c4:77:a2:74: 8e:e7:b6:07:4e:b5:ad:9f:4d:5a:91:10:7f:58:ff: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A9:73:61:77:33:61:8D:D1:27:AC:5B:FE:0F:FF:CB:30:43:61:75 X509v3 Authority Key Identifier: keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/valzYXczYY3RJ6xb_g__yzBDYXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.220.0/23 Signature Algorithm: sha256WithRSAEncryption 18:8b:3a:b3:37:52:df:9c:87:ab:b7:6c:90:32:ae:32:ab:f3: a9:5b:06:c2:4a:7f:6d:35:4d:12:49:e8:3a:df:79:ed:76:ad: 3c:23:f6:e8:ff:4f:d5:06:1d:ae:64:81:02:6d:82:49:37:2b: d5:14:42:23:8e:ba:15:88:0a:73:5e:66:2f:40:97:e7:2c:bf: 11:29:d8:cc:0e:ad:59:71:b8:a5:32:59:96:07:de:9f:97:ca: 02:45:b0:68:be:49:e7:ff:7f:bd:dd:03:c1:94:d0:a4:5a:b6: 2f:a3:5d:99:7f:1f:b3:3d:0a:52:b7:13:a6:57:67:f4:45:63: 3b:44:89:bc:82:f0:9f:ae:4d:f6:15:60:b8:e4:a3:7a:63:df: fc:f2:63:53:6a:a5:8a:4d:a6:36:13:e0:67:c2:cd:30:9e:1b: 06:bc:2b:c5:c6:b0:a5:5a:1d:3b:f4:cd:8f:35:5a:be:b6:9e: 97:67:13:e5:dd:9d:24:79:32:57:94:18:b5:88:9a:26:ed:f8: 41:b8:ef:0f:33:4a:6c:6b:1b:d9:c3:30:58:f7:75:95:cf:ee: b9:e3:87:7b:51:55:e6:e6:91:d7:b2:35:0b:96:2d:f1:5d:13: a1:ef:c2:07:ce:4b:1a:96:15:7d:3d:50:25:f8:67:85:84:5a: 4e:72:8d:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdGI1mjIKNG/6b+4p5CbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx NDQxYWYwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGE5NzM2MTc3MzM2MThkZDEyN2FjNWJmZTBmZmZjYjMwNDM2MTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mW+hW6uZB+4nID5l//83V7K7S4g oi/qM/nJ1yen2v1pkSEfnwiXKFWrzwg9ECHI4m9VqbpKBIvBrl7ZSIiWLRJQCLq+ iY68P1bUDEhYGlb6AGBPTgnkddPaSrEgdQ2GFSSkzGhWRjQMXFhzReO6OfLQ0Aoy bJA6GJokmqEXudQn8IdvG3RunOtWMLAt2PoRP3RUa1FsbhRHejwly9cjI/XtM5/q fQ8ja7sCI+xM6LURbUp0jemh/l+iAAPQF7BVpgw6R93yelfatNYT94kGvs/csmYI bnBlZpuiTu7WnhK2wzgbiuqc/4RNvsR3onSO57YHTrWtn01akRB/WP/RMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL2pc2F3M2GN0SesW/4P/8swQ2F1MB8GA1UdIwQY MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt NWRhYzYzNzg0MDU4LzEvdmFsellYY3pZWTNSSjZ4Yl9nX195ekJEWVhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4 LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcvcMA0G CSqGSIb3DQEBCwUAA4IBAQAYizqzN1LfnIert2yQMq4yq/OpWwbCSn9tNU0SSeg6 33ntdq08I/bo/0/VBh2uZIECbYJJNyvVFEIjjroViApzXmYvQJfnLL8RKdjMDq1Z cbilMlmWB96fl8oCRbBovknn/3+93QPBlNCkWrYvo12Zfx+zPQpStxOmV2f0RWM7 RIm8gvCfrk32FWC45KN6Y9/88mNTaqWKTaY2E+Bnws0wnhsGvCvFxrClWh079M2P NVq+tp6XZxPl3Z0keTJXlBi1iJom7fhBuO8PM0psaxvZwzBY93WVz+6544d7UVXm 5pHXsjULli3xXROh78IHzksalhV9PVAl+GeFhFpOco3X -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:58 2026 by rpki-client