This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2qayzYx_fDeMoXUFqpUBH1VW59E.roa File: 2qayzYx_fDeMoXUFqpUBH1VW59E.roa (raw, json) Hash identifier: TQKalMrk/z7Jxo0ygH3XLb0DSnpnXVlQ4GLH/I5urlk= Subject key identifier: DA:A6:B2:CD:8C:7F:7C:37:8C:A1:75:05:AA:95:01:1F:55:56:E7:D1 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A24C0B21DA832B514325BFBC51303D Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2qayzYx_fDeMoXUFqpUBH1VW59E.roa Signing time: Thu 01 Jan 2026 08:17:40 +0000 ROA not before: Thu 01 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 195.40.56.0/24 maxlen: 24 195.40.57.0/24 maxlen: 24 195.40.58.0/24 maxlen: 24 195.40.59.0/24 maxlen: 24 195.40.60.0/24 maxlen: 24 195.40.61.0/24 maxlen: 24 195.40.62.0/24 maxlen: 24 195.40.63.0/24 maxlen: 24 195.40.128.0/24 maxlen: 24 195.40.129.0/24 maxlen: 24 195.40.130.0/24 maxlen: 24 195.40.131.0/24 maxlen: 24 195.40.132.0/24 maxlen: 24 195.40.133.0/24 maxlen: 24 195.40.134.0/24 maxlen: 24 195.40.135.0/24 maxlen: 24 195.40.136.0/24 maxlen: 24 195.40.137.0/24 maxlen: 24 195.40.138.0/24 maxlen: 24 195.40.139.0/24 maxlen: 24 195.40.140.0/24 maxlen: 24 195.40.141.0/24 maxlen: 24 195.40.142.0/24 maxlen: 24 195.40.143.0/24 maxlen: 24 212.134.46.0/24 maxlen: 24 212.134.52.0/24 maxlen: 24 212.134.54.0/24 maxlen: 24 212.134.124.0/22 maxlen: 24 212.134.164.0/22 maxlen: 24 212.134.208.0/22 maxlen: 24 212.134.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4c:0b:21:da:83:2b:51:43:25:bf:bc:51:30:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daa6b2cd8c7f7c378ca17505aa95011f5556e7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:54:e9:92:c3:93:cc:d9:93:6c:3c:64:42:cb: c2:e3:36:03:a1:3d:55:76:e7:1f:83:c8:5d:d5:78: 96:4c:df:b9:79:69:28:d3:ea:e5:8f:3d:05:0e:6b: ec:fa:85:75:17:26:a1:ff:b8:a0:21:f3:f7:05:93: 68:6f:14:7c:cf:00:5c:49:a3:4b:15:c3:88:3b:f4: 36:12:b7:aa:48:59:4b:0c:6f:7c:2c:76:ad:87:87: a2:4c:b4:ae:80:ad:99:69:41:d3:a5:32:56:36:f9: 81:14:6a:34:56:fa:18:67:82:2c:65:b1:d6:d0:00: f3:ee:95:07:75:8f:76:cf:61:a3:72:64:b1:d3:db: 8e:24:1c:ea:8d:96:38:fe:07:0b:c1:0f:8a:7a:39: 0c:c9:b8:c5:f1:e8:8e:0e:19:c5:df:89:13:79:fd: 7b:0e:84:78:be:f1:82:01:c5:fc:a0:c0:ae:21:5a: 32:df:33:98:f7:4b:65:0f:66:95:74:29:5d:13:a8: 3d:9b:ef:9b:8e:80:f3:23:96:f4:88:1a:9b:f9:6e: 09:dc:eb:e7:8a:4b:76:a9:1c:99:77:c6:b4:58:9d: 02:b1:c3:d2:9d:ac:23:fc:d1:f0:e5:54:00:64:f6: b7:4a:79:1d:77:0b:63:8b:6c:92:b9:f7:31:25:87: 7f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A6:B2:CD:8C:7F:7C:37:8C:A1:75:05:AA:95:01:1F:55:56:E7:D1 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2qayzYx_fDeMoXUFqpUBH1VW59E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.56.0/21 195.40.128.0/20 212.134.46.0/24 212.134.52.0/24 212.134.54.0/24 212.134.124.0/22 212.134.164.0/22 212.134.208.0/22 212.134.224.0/22 Signature Algorithm: sha256WithRSAEncryption 48:d8:94:03:da:1d:03:c5:2c:92:49:0e:1f:70:6b:db:14:4f: 79:d7:2a:47:72:35:f8:93:fa:27:98:b6:1a:2b:e6:9c:ae:ff: 1a:cc:3b:17:fb:64:0f:50:ae:a6:e0:af:58:b4:11:0f:e4:5a: eb:33:fe:3b:dd:1a:6b:c1:8a:5a:be:65:80:c5:71:37:85:23: 42:21:13:40:7f:9d:9a:05:5c:dc:a9:2a:c1:94:db:d5:6e:c2: 9e:14:39:e9:ac:73:cb:02:88:1d:e7:d3:59:ce:79:ea:46:93: aa:d5:38:5b:2f:19:a8:8b:ce:36:47:af:5a:05:8c:8b:92:69: 33:c9:1f:34:c4:ea:a6:6c:c8:6f:b9:50:32:23:d8:5a:26:7f: 20:1c:d9:b8:5b:51:33:e3:97:dd:a6:a2:7f:da:f8:40:28:d8: 58:b7:e9:eb:23:49:f3:09:8c:5c:a5:1a:28:0f:74:9d:85:28: 8f:0b:09:b8:18:70:29:a7:39:92:98:54:ba:07:15:f6:19:98: 7a:41:18:d1:2a:34:f0:c5:b4:85:ad:e9:43:bb:14:73:7e:f5: 7b:bb:52:70:f8:04:a7:e9:ea:1b:47:88:8b:38:4c:62:57:0f: 74:1e:84:d9:90:79:8f:5b:37:7f:cf:a4:0d:70:46:1c:e1:05: 91:48:4f:e8 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt4okwLIdqDK1FDJb+8UTA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWE2YjJjZDhjN2Y3YzM3OGNhMTc1MDVhYTk1MDExZjU1NTZlN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71TpksOTzNmTbDxkQsvC4zYDoT1V ducfg8hd1XiWTN+5eWko0+rljz0FDmvs+oV1Fyah/7igIfP3BZNobxR8zwBcSaNL FcOIO/Q2EreqSFlLDG98LHath4eiTLSugK2ZaUHTpTJWNvmBFGo0VvoYZ4IsZbHW 0ADz7pUHdY92z2GjcmSx09uOJBzqjZY4/gcLwQ+KejkMybjF8eiODhnF34kTef17 DoR4vvGCAcX8oMCuIVoy3zOY90tlD2aVdCldE6g9m++bjoDzI5b0iBqb+W4J3Ovn ikt2qRyZd8a0WJ0CscPSnawj/NHw5VQAZPa3Snkddwtji2ySufcxJYd/hwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFNqmss2Mf3w3jKF1BaqVAR9VVufRMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvMnFheXpZeF9mRGVNb1hVRnFwVUJIMVZXNTlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQDwyg4AwQE wyiAAwQA1IYuAwQA1IY0AwQA1IY2AwQC1IZ8AwQC1IakAwQC1IbQAwQC1IbgMA0G CSqGSIb3DQEBCwUAA4IBAQBI2JQD2h0DxSySSQ4fcGvbFE951ypHcjX4k/onmLYa K+acrv8azDsX+2QPUK6m4K9YtBEP5FrrM/473RprwYpavmWAxXE3hSNCIRNAf52a BVzcqSrBlNvVbsKeFDnprHPLAogd59NZznnqRpOq1ThbLxmoi842R69aBYyLkmkz yR80xOqmbMhvuVAyI9haJn8gHNm4W1Ez45fdpqJ/2vhAKNhYt+nrI0nzCYxcpRoo D3SdhSiPCwm4GHAppzmSmFS6BxX2GZh6QRjRKjTwxbSFrelDuxRzfvV7u1Jw+ASn 6eobR4iLOExiVw90HoTZkHmPWzd/z6QNcEYc4QWRSE/o -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:57 2026 by rpki-client