This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/urYTLQYh8641hOjXNB8I0xPTJp4.roa File: urYTLQYh8641hOjXNB8I0xPTJp4.roa (raw, json) Hash identifier: qKry8wA9GCHWhD14aMa+QDgQCymbSwDj6VFbXfpDG6Y= Subject key identifier: BA:B6:13:2D:06:21:F3:AE:35:84:E8:D7:34:1F:08:D3:13:D3:26:9E Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A26189D941907F4C9CBDA6F1A741B8 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/urYTLQYh8641hOjXNB8I0xPTJp4.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 263812 IP address blocks: 93.152.30.0/23 maxlen: 24 93.152.38.0/23 maxlen: 24 93.152.46.0/23 maxlen: 24 93.152.52.0/23 maxlen: 24 93.152.56.0/23 maxlen: 24 93.152.62.0/23 maxlen: 24 93.152.76.0/23 maxlen: 24 93.152.80.0/23 maxlen: 24 93.152.84.0/23 maxlen: 24 93.152.94.0/23 maxlen: 24 93.152.98.0/23 maxlen: 24 93.152.102.0/23 maxlen: 24 93.152.124.0/23 maxlen: 24 109.174.220.0/22 maxlen: 24 109.174.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:61:89:d9:41:90:7f:4c:9c:bd:a6:f1:a7:41:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bab6132d0621f3ae3584e8d7341f08d313d3269e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:42:89:5b:b5:43:ed:59:84:f7:90:c8:1c: f4:9f:54:3e:db:d1:4e:37:c0:b4:18:65:63:24:1b: 4e:2f:55:df:66:1b:4c:c2:22:1a:2b:5d:8c:2d:11: d7:70:53:db:a1:27:e5:51:7b:b3:29:ae:50:c5:97: 17:41:6c:b2:c3:72:2d:5f:79:b9:9c:f8:95:09:44: 51:f0:c0:b7:94:26:17:bb:06:d0:98:86:93:4a:0c: ac:04:b5:12:bf:68:9d:bc:06:81:e8:1b:eb:06:a3: 0a:66:34:11:d9:a6:2f:fa:80:b4:7c:a1:11:74:0d: 97:96:21:d1:5a:97:56:81:48:b2:e9:d6:2e:c6:26: a6:d9:84:c0:a7:d6:f0:42:c8:3a:b7:ab:f9:06:7d: cb:d0:3e:4c:e7:f2:77:d5:1f:1f:00:e9:28:1f:cb: 76:71:89:22:23:72:d9:53:69:b3:d6:91:78:0f:09: 08:81:b4:43:69:83:c9:a5:f2:06:34:ae:b4:55:31: a4:e0:fd:56:f7:b8:d0:9e:ec:95:f4:ad:fe:23:c6: 0e:34:29:6b:4d:26:48:75:7f:3b:1d:82:11:a4:52: e6:13:bb:4c:32:d5:38:44:85:91:54:e6:db:e2:1a: d9:bc:ee:e9:b0:e8:51:0c:cf:d6:38:65:6c:8a:f1: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B6:13:2D:06:21:F3:AE:35:84:E8:D7:34:1F:08:D3:13:D3:26:9E X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/urYTLQYh8641hOjXNB8I0xPTJp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.152.30.0/23 93.152.38.0/23 93.152.46.0/23 93.152.52.0/23 93.152.56.0/23 93.152.62.0/23 93.152.76.0/23 93.152.80.0/23 93.152.84.0/23 93.152.94.0/23 93.152.98.0/23 93.152.102.0/23 93.152.124.0/23 109.174.220.0/22 109.174.236.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:f7:f9:e1:23:69:d5:e7:f2:2b:76:73:1d:53:c5:eb:8c:ef: f1:b3:30:11:a0:4d:60:f6:89:fa:20:21:86:35:bb:b2:58:ed: fd:a4:9d:ca:6e:0a:b7:39:97:0b:b5:41:db:c8:cb:ab:c0:7c: 22:ab:18:21:e1:f7:12:b2:c3:13:77:b8:a6:43:b1:c1:21:05: e9:60:62:be:3a:98:85:5b:cd:d9:86:65:b1:a9:d7:8a:6d:24: f9:8a:56:ea:79:b6:94:c2:04:b6:34:b2:fc:2b:4c:51:c9:b2: f1:4a:bc:41:3d:70:7c:92:84:4f:58:5a:b1:80:46:60:7e:3e: 06:c5:31:7d:f5:8a:62:ca:c0:90:15:06:cc:cb:4a:15:7c:84: 7a:79:dc:1e:5e:7f:99:e4:ac:8e:9e:07:16:a3:ad:79:87:83: d5:81:a7:32:74:e4:34:a0:49:73:fa:15:75:9b:bd:93:b0:25: fc:25:80:ed:ed:f0:22:6a:58:2b:cc:35:11:0d:d9:29:d5:10: a6:e0:ee:6a:6c:92:52:88:ca:d3:94:91:15:87:68:87:db:40: 8c:d7:12:0b:c8:3a:d9:7c:37:4e:74:f6:6e:9a:7b:fb:ae:40: b1:51:af:63:97:10:b9:aa:64:b1:a5:6e:08:30:a9:5f:63:2d: 4f:65:a4:7f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt4omGJ2UGQf0ycvabxp0G4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWI2MTMyZDA2MjFmM2FlMzU4NGU4ZDczNDFmMDhkMzEzZDMyNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYtCiVu1Q+1ZhPeQyBz0n1Q+29FO N8C0GGVjJBtOL1XfZhtMwiIaK12MLRHXcFPboSflUXuzKa5QxZcXQWyyw3ItX3m5 nPiVCURR8MC3lCYXuwbQmIaTSgysBLUSv2idvAaB6BvrBqMKZjQR2aYv+oC0fKER dA2XliHRWpdWgUiy6dYuxiam2YTAp9bwQsg6t6v5Bn3L0D5M5/J31R8fAOkoH8t2 cYkiI3LZU2mz1pF4DwkIgbRDaYPJpfIGNK60VTGk4P1W97jQnuyV9K3+I8YONClr TSZIdX87HYIRpFLmE7tMMtU4RIWRVObb4hrZvO7psOhRDM/WOGVsivF7YQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFLq2Ey0GIfOuNYTo1zQfCNMT0yaeMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvdXJZVExRWWg4NjQxaE9qWE5COEkweFBUSnA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQBXZgeAwQB XZgmAwQBXZguAwQBXZg0AwQBXZg4AwQBXZg+AwQBXZhMAwQBXZhQAwQBXZhUAwQB XZheAwQBXZhiAwQBXZhmAwQBXZh8AwQCba7cAwQCba7sMA0GCSqGSIb3DQEBCwUA A4IBAQB+9/nhI2nV5/IrdnMdU8XrjO/xszARoE1g9on6ICGGNbuyWO39pJ3Kbgq3 OZcLtUHbyMurwHwiqxgh4fcSssMTd7imQ7HBIQXpYGK+OpiFW83ZhmWxqdeKbST5 ilbqebaUwgS2NLL8K0xRybLxSrxBPXB8koRPWFqxgEZgfj4GxTF99YpiysCQFQbM y0oVfIR6edweXn+Z5KyOngcWo615h4PVgacydOQ0oElz+hV1m72TsCX8JYDt7fAi algrzDURDdkp1RCm4O5qbJJSiMrTlJEVh2iH20CM1xILyDrZfDdOdPZumnv7rkCx Ua9jlxC5qmSxpW4IMKlfYy1PZaR/ -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:36 2026 by rpki-client