This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/rVy-EArmTwTvF4lNpYbhnPQG_qs.roa File: rVy-EArmTwTvF4lNpYbhnPQG_qs.roa (raw, json) Hash identifier: zs/KIT3kYT9IMK9eNhSYD1TaujdAGeA5UeKvsJ3/T+E= Subject key identifier: AD:5C:BE:10:0A:E6:4F:04:EF:17:89:4D:A5:86:E1:9C:F4:06:FE:AB Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39 Certificate serial: 019B7EA5855CE4ED87D0F1E7F52286E5E1FF Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/rVy-EArmTwTvF4lNpYbhnPQG_qs.roa Signing time: Fri 02 Jan 2026 12:18:55 +0000 ROA not before: Fri 02 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 212.39.33.0/24 maxlen: 24 212.39.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:85:5c:e4:ed:87:d0:f1:e7:f5:22:86:e5:e1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39 Validity Not Before: Jan 2 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad5cbe100ae64f04ef17894da586e19cf406feab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:52:bd:9a:52:9a:6b:da:52:33:fe:a9:c0: 37:fe:d0:c9:e2:e4:e3:59:9d:a8:6e:42:2d:43:ac: 67:de:f2:d8:32:97:81:f4:da:f8:8a:27:48:39:5b: b2:f1:3b:a1:02:a0:6e:d0:99:8d:9e:46:32:6a:62: eb:d1:da:2b:d7:7a:f8:09:f4:bf:bf:ee:25:af:d2: 9b:95:d5:4e:de:8c:52:14:7b:63:67:c7:20:ee:da: 3a:ab:f2:8b:45:dc:c3:f1:a2:30:37:ff:6b:36:bc: c3:1a:d5:b8:6f:b5:31:0c:62:88:43:ca:a4:a2:34: b5:87:67:61:18:73:39:14:91:26:30:bc:8c:b0:74: 6b:52:dc:e8:01:6b:1b:e0:74:35:7a:38:1f:97:fe: 66:04:f3:8f:fd:d1:df:97:a2:a0:83:cf:2f:7f:3e: fe:b4:bb:0a:c3:01:0b:37:e4:06:d6:0a:d6:d5:78: 47:11:13:f8:25:26:19:9d:1c:4a:f6:b5:83:b0:ea: 85:22:f8:e4:f1:64:77:5c:f4:a6:a4:ba:d2:36:06: 5f:60:9b:89:af:c2:73:9a:76:a7:76:07:f8:35:2d: 3e:6e:13:09:c9:76:d3:e7:f1:10:18:13:86:ff:e6: 07:b9:ed:4f:69:f8:b2:a5:a6:33:00:d1:06:5a:72: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5C:BE:10:0A:E6:4F:04:EF:17:89:4D:A5:86:E1:9C:F4:06:FE:AB X509v3 Authority Key Identifier: keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/rVy-EArmTwTvF4lNpYbhnPQG_qs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.39.33.0/24 212.39.42.0/24 Signature Algorithm: sha256WithRSAEncryption a2:7d:e4:aa:99:82:60:b3:88:d3:c2:a5:f3:31:e1:58:4d:ad: 44:4d:7f:0b:1d:f5:dd:b9:48:a2:67:85:9e:77:9c:47:a2:02: 98:aa:da:97:c5:39:c4:5c:25:57:93:2f:f9:8a:b6:bc:a9:91: 60:50:f5:ad:65:64:c5:f3:64:3d:04:96:69:b9:df:1b:09:00: 70:97:e2:10:1f:83:70:77:80:68:2b:85:12:0f:bf:23:6f:cf: 7c:1f:31:64:0d:05:d9:79:d5:ec:7e:04:2c:3e:bc:41:8c:37: 46:7c:0e:3e:0a:95:d1:ae:13:94:0f:28:36:c7:4a:e7:1a:ab: 78:29:e9:f3:48:f4:7e:43:b8:ff:44:14:49:5e:62:f2:3a:e7: 0f:4b:ec:d9:82:42:4e:c7:fc:35:07:5e:2f:d0:ac:1e:46:b8: d0:d2:63:4e:87:a1:7d:04:cc:e9:0a:84:d6:32:d9:9d:7c:8d: ca:69:48:32:b9:f0:40:55:4c:11:30:15:4a:20:87:b4:c1:b6: 5a:78:80:9d:af:b3:2c:02:14:09:64:dc:11:c5:a9:fa:58:e4: 03:4d:ed:76:22:f2:8c:00:fd:01:6a:45:18:6d:d3:92:ea:04: ea:0b:12:77:bf:b5:2c:77:25:bb:83:87:ed:71:b6:3a:e7:01: 94:31:3f:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pYVc5O2H0PHn9SKG5eH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmRjN2JkYmM5ZDA5NzMzNmRlNjI0M2I1NTBhYjE3MzM3 NWVhMzkwHhcNMjYwMTAyMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDVjYmUxMDBhZTY0ZjA0ZWYxNzg5NGRhNTg2ZTE5Y2Y0MDZmZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVZSvZpSmmvaUjP+qcA3/tDJ4uTj WZ2obkItQ6xn3vLYMpeB9Nr4iidIOVuy8TuhAqBu0JmNnkYyamLr0dor13r4CfS/ v+4lr9KbldVO3oxSFHtjZ8cg7to6q/KLRdzD8aIwN/9rNrzDGtW4b7UxDGKIQ8qk ojS1h2dhGHM5FJEmMLyMsHRrUtzoAWsb4HQ1ejgfl/5mBPOP/dHfl6Kgg88vfz7+ tLsKwwELN+QG1grW1XhHERP4JSYZnRxK9rWDsOqFIvjk8WR3XPSmpLrSNgZfYJuJ r8Jzmnandgf4NS0+bhMJyXbT5/EQGBOG/+YHue1PafiypaYzANEGWnIi3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK1cvhAK5k8E7xeJTaWG4Zz0Bv6rMB8GA1UdIwQY MBaAFKktx728nQlzNt5iQ7VQqxczdeo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYjQ2MjktMzljYy00ZTZjLTllMWMt OTkxYjdhZWU3NDZjLzEvclZ5LUVBcm1Ud1R2RjRsTnBZYmhuUFFHX3FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wYjQ2MjktMzljYy00ZTZjLTllMWMtOTkxYjdhZWU3NDZj LzEvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1CchAwQA 1CcqMA0GCSqGSIb3DQEBCwUAA4IBAQCifeSqmYJgs4jTwqXzMeFYTa1ETX8LHfXd uUiiZ4Wed5xHogKYqtqXxTnEXCVXky/5ira8qZFgUPWtZWTF82Q9BJZpud8bCQBw l+IQH4Nwd4BoK4USD78jb898HzFkDQXZedXsfgQsPrxBjDdGfA4+CpXRrhOUDyg2 x0rnGqt4KenzSPR+Q7j/RBRJXmLyOucPS+zZgkJOx/w1B14v0KweRrjQ0mNOh6F9 BMzpCoTWMtmdfI3KaUgyufBAVUwRMBVKIIe0wbZaeICdr7MsAhQJZNwRxan6WOQD Te12IvKMAP0BakUYbdOS6gTqCxJ3v7UsdyW7g4ftcbY65wGUMT9b -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:41 2026 by rpki-client