This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/RARY0MBtXzXjlSGHoFlRPn0hCiQ.roa File: RARY0MBtXzXjlSGHoFlRPn0hCiQ.roa (raw, json) Hash identifier: ZrgOfCyXMwUf2+1ETktXAnh/PpEp/4OLHDdKnDuqBVM= Subject key identifier: 44:04:58:D0:C0:6D:5F:35:E3:95:21:87:A0:59:51:3E:7D:21:0A:24 Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019B7C120169C0CB7189CFAF0D8C7A71250E Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/RARY0MBtXzXjlSGHoFlRPn0hCiQ.roa Signing time: Fri 02 Jan 2026 00:18:33 +0000 ROA not before: Fri 02 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202220 IP address blocks: 83.230.14.0/24 maxlen: 24 195.82.162.0/24 maxlen: 24 195.82.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:01:69:c0:cb:71:89:cf:af:0d:8c:7a:71:25:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Jan 2 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=440458d0c06d5f35e3952187a059513e7d210a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:36:d4:7e:a5:2b:c8:a0:36:1f:cd:0c:f6: 2f:b6:a2:06:06:58:2c:b6:57:8d:95:8e:4c:5e:c2: 87:76:1e:e2:ea:df:ea:6f:b6:9a:0b:02:bd:28:6f: b1:60:00:71:ba:19:dd:d4:30:fe:f5:46:ba:73:96: f3:c7:68:70:97:a5:f7:7c:44:a1:51:cd:60:ab:be: 0c:b7:6b:1f:20:5a:eb:30:32:45:24:59:06:b7:81: 9f:92:f1:fd:e2:a2:87:0f:40:d6:74:1d:10:88:90: 86:88:00:ab:90:2c:b4:ee:9d:89:e7:a8:b6:4c:ff: 6e:79:a2:e1:e9:ce:96:60:f3:ca:03:c4:2f:1c:b1: 7b:42:ca:08:08:68:56:cd:77:9c:45:d1:03:0d:16: d4:58:2b:46:2d:f3:72:2c:a8:8f:fd:34:a1:92:f2: c5:fd:e9:c9:d8:16:59:c7:88:b4:90:7f:d9:b6:48: 7f:00:a3:e5:0d:f5:8b:cc:c0:ea:33:74:9c:ce:70: be:8d:2f:d6:04:3d:b8:09:90:26:ad:bc:7d:ce:dc: 03:3a:b6:71:f8:aa:59:f6:68:3e:9f:8e:44:9c:79: 01:29:ee:ca:e3:2b:b5:d9:78:8f:f8:7d:0a:18:57: 26:24:3d:58:cf:96:e4:39:ee:90:a2:62:b8:cd:4b: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:04:58:D0:C0:6D:5F:35:E3:95:21:87:A0:59:51:3E:7D:21:0A:24 X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/RARY0MBtXzXjlSGHoFlRPn0hCiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.230.14.0/24 195.82.162.0/24 195.82.166.0/24 Signature Algorithm: sha256WithRSAEncryption 26:85:a4:88:86:8b:d8:89:a4:84:08:56:8d:20:3f:fe:90:d0: f6:ec:d2:4c:2a:2b:77:6c:ed:01:a3:3e:47:f3:e0:7a:e3:9b: fa:0b:fb:23:1d:df:86:1f:bb:dc:fb:fc:d2:48:a7:ce:59:17: e8:4d:43:d3:ea:0d:e0:a5:0c:00:9d:57:a4:18:60:28:28:ce: ba:32:b7:96:6c:8f:98:30:2a:fe:1e:56:e9:48:51:5f:8e:d8: 98:b1:55:ce:d4:bc:c0:25:98:d3:0f:6e:de:8c:a6:9c:8b:e2: a2:06:5e:82:96:6c:51:ed:ef:81:1d:3c:f0:7c:59:bb:cf:35: 65:6f:11:74:c8:2c:7c:39:71:e2:33:e5:15:cb:a3:12:18:be: 50:95:5d:e6:0a:32:f2:9f:7f:58:5d:ac:af:1f:b2:e0:3a:35: 5b:69:77:1b:7c:27:ea:d3:f7:15:c9:7e:be:3c:58:c8:eb:c4: 0b:0f:68:85:0d:a6:f4:41:ce:2b:b0:3a:5e:90:c4:d4:a2:d1: 08:5c:4d:79:6b:fa:f9:c9:54:0c:04:7b:5a:be:9f:b8:84:70: a3:c5:4a:e9:6d:b4:10:cf:48:29:f0:75:c4:52:89:95:fa:26: 6b:32:7f:59:bd:80:38:96:0f:ae:66:cb:45:36:5f:fb:98:dd: 9f:e7:a8:32 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EgFpwMtxic+vDYx6cSUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjYwMTAyMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDA0NThkMGMwNmQ1ZjM1ZTM5NTIxODdhMDU5NTEzZTdkMjEwYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3c21H6lK8igNh/NDPYvtqIGBlgs tleNlY5MXsKHdh7i6t/qb7aaCwK9KG+xYABxuhnd1DD+9Ua6c5bzx2hwl6X3fESh Uc1gq74Mt2sfIFrrMDJFJFkGt4GfkvH94qKHD0DWdB0QiJCGiACrkCy07p2J56i2 TP9ueaLh6c6WYPPKA8QvHLF7QsoICGhWzXecRdEDDRbUWCtGLfNyLKiP/TShkvLF /enJ2BZZx4i0kH/Ztkh/AKPlDfWLzMDqM3ScznC+jS/WBD24CZAmrbx9ztwDOrZx +KpZ9mg+n45EnHkBKe7K4yu12XiP+H0KGFcmJD1Yz5bkOe6QomK4zUupXwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEQEWNDAbV8145Uhh6BZUT59IQokMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUkFSWTBNQnRYelhqbFNHSG9GbFJQbjBoQ2lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU+YOAwQA w1KiAwQAw1KmMA0GCSqGSIb3DQEBCwUAA4IBAQAmhaSIhovYiaSECFaNID/+kND2 7NJMKit3bO0Boz5H8+B645v6C/sjHd+GH7vc+/zSSKfOWRfoTUPT6g3gpQwAnVek GGAoKM66MreWbI+YMCr+HlbpSFFfjtiYsVXO1LzAJZjTD27ejKaci+KiBl6ClmxR 7e+BHTzwfFm7zzVlbxF0yCx8OXHiM+UVy6MSGL5QlV3mCjLyn39YXayvH7LgOjVb aXcbfCfq0/cVyX6+PFjI68QLD2iFDab0Qc4rsDpekMTUotEIXE15a/r5yVQMBHta vp+4hHCjxUrpbbQQz0gp8HXEUomV+iZrMn9ZvYA4lg+uZstFNl/7mN2f56gy -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:08 2026 by rpki-client