This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/CYj7mZQ9dKeMc_-N6UL6LjIi3lk.roa File: CYj7mZQ9dKeMc_-N6UL6LjIi3lk.roa (raw, json) Hash identifier: JDVFtyDyR/x/eL6c4P6MCJwlsUYUOK+LfbQasczNpvA= Subject key identifier: 09:88:FB:99:94:3D:74:A7:8C:73:FF:8D:E9:42:FA:2E:32:22:DE:59 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED399411840B3F46C26F7D4A9D6D82 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/CYj7mZQ9dKeMc_-N6UL6LjIi3lk.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201341 IP address blocks: 37.153.134.0/24 maxlen: 24 37.156.6.0/24 maxlen: 24 46.102.251.0/24 maxlen: 24 85.204.245.0/24 maxlen: 24 85.204.251.0/24 maxlen: 24 86.105.7.0/24 maxlen: 24 86.105.13.0/24 maxlen: 24 86.107.102.0/24 maxlen: 24 89.33.117.0/24 maxlen: 24 89.33.118.0/24 maxlen: 24 89.34.172.0/24 maxlen: 24 89.35.126.0/24 maxlen: 24 89.36.142.0/24 maxlen: 24 89.36.225.0/24 maxlen: 24 89.37.234.0/24 maxlen: 24 89.39.122.0/24 maxlen: 24 94.177.22.0/24 maxlen: 24 176.223.67.0/24 maxlen: 24 185.77.164.0/22 maxlen: 22 185.77.164.0/24 maxlen: 24 185.77.165.0/24 maxlen: 24 185.77.166.0/24 maxlen: 24 185.77.167.0/24 maxlen: 24 188.208.102.0/24 maxlen: 24 188.211.26.0/24 maxlen: 24 188.213.218.0/24 maxlen: 24 188.215.34.0/24 maxlen: 24 188.240.69.0/24 maxlen: 24 188.240.211.0/24 maxlen: 24 2a05:6300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:39:94:11:84:0b:3f:46:c2:6f:7d:4a:9d:6d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0988fb99943d74a78c73ff8de942fa2e3222de59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:26:34:c8:e2:78:38:af:97:70:3b:39:8e: 73:79:a1:ce:c4:d0:12:36:61:41:b2:28:03:91:cb: 8b:89:3e:1d:ad:9c:2f:db:f0:d0:e5:98:ee:da:dd: 7f:03:c5:05:9d:c6:b2:aa:6d:85:dd:e2:f8:c5:e8: 3a:92:30:62:2d:13:7e:7a:a1:11:e8:a9:7e:63:a5: 04:d4:6a:ac:49:2f:30:b6:d7:90:99:cb:01:01:2f: 2f:27:64:52:29:43:89:0e:cb:e2:5f:28:cb:25:bb: 51:0f:e9:57:27:74:e4:51:38:6d:7b:e7:7f:16:b8: da:ac:0f:0a:c6:65:fd:de:51:ae:ee:fb:0b:1f:31: b2:e2:3d:79:69:eb:82:f3:57:18:1f:16:02:83:7e: 95:46:2d:ff:5b:ac:1c:ff:bc:14:f7:80:d7:21:19: 5d:22:fb:5e:ca:d3:0b:cc:8e:6e:39:4f:8e:3f:5e: ba:ae:07:b3:75:76:6a:da:a3:fc:05:d1:21:36:6e: 38:d7:d4:d9:c0:4b:76:a4:29:c8:82:d6:50:24:27: 1e:12:f5:4d:3b:b4:8c:13:ff:ed:7d:8f:cf:c6:6c: 62:b6:be:3e:85:2c:dc:72:9d:62:2d:c5:f2:54:3b: d7:af:40:e8:cf:8a:1f:50:a8:18:27:35:33:ef:9a: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:88:FB:99:94:3D:74:A7:8C:73:FF:8D:E9:42:FA:2E:32:22:DE:59 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/CYj7mZQ9dKeMc_-N6UL6LjIi3lk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.134.0/24 37.156.6.0/24 46.102.251.0/24 85.204.245.0/24 85.204.251.0/24 86.105.7.0/24 86.105.13.0/24 86.107.102.0/24 89.33.117.0-89.33.118.255 89.34.172.0/24 89.35.126.0/24 89.36.142.0/24 89.36.225.0/24 89.37.234.0/24 89.39.122.0/24 94.177.22.0/24 176.223.67.0/24 185.77.164.0/22 188.208.102.0/24 188.211.26.0/24 188.213.218.0/24 188.215.34.0/24 188.240.69.0/24 188.240.211.0/24 IPv6: 2a05:6300::/29 Signature Algorithm: sha256WithRSAEncryption d4:d8:3b:4d:e3:08:de:da:53:ff:ae:33:ea:b0:28:cd:43:04: 68:31:e3:ea:f2:31:41:62:81:58:0c:a4:c2:40:13:d4:e3:81: 44:c5:c8:ff:9e:25:31:d0:a4:ca:d6:e8:37:5d:0b:ff:56:df: 19:b3:e3:da:ae:2f:91:f6:13:a5:ca:e7:8e:78:3b:e5:4c:7f: 83:76:09:9f:be:82:62:05:ed:9e:72:90:04:7f:4b:02:36:0d: 8b:6e:c9:6f:97:b1:43:a2:36:b0:f9:f3:f7:cd:39:f5:ec:dd: 8d:f1:47:71:3a:37:d9:ee:2f:1d:60:4b:a1:a8:ce:de:8c:9f: 9c:b3:87:79:c5:86:e8:ff:10:1e:ed:7f:ba:1b:31:0b:d3:cd: 1f:e8:c7:3c:93:27:3f:20:2c:8b:b3:c7:87:0a:47:ff:97:4c: 93:a4:e2:12:48:36:67:88:c9:cc:0b:47:34:f1:50:42:34:61: ef:a4:8a:27:21:b0:1f:fb:6a:0f:82:14:13:e8:44:35:88:ce: ec:e7:fc:3f:c8:ec:d1:c9:cb:3d:39:ca:fe:22:93:fe:d9:08: 29:12:33:8e:c1:77:84:ca:0a:05:65:49:24:d5:3e:59:86:ad: 0e:6f:9e:1b:30:5f:2a:b9:ce:12:1f:21:11:b6:0b:20:c2:5d: 61:a7:bf:57 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57TmUEYQLP0bCb31KnW2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTg4ZmI5OTk0M2Q3NGE3OGM3M2ZmOGRlOTQyZmEyZTMyMjJkZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPAmNMjieDivl3A7OY5zeaHOxNAS NmFBsigDkcuLiT4drZwv2/DQ5Zju2t1/A8UFncayqm2F3eL4xeg6kjBiLRN+eqER 6Kl+Y6UE1GqsSS8wtteQmcsBAS8vJ2RSKUOJDsviXyjLJbtRD+lXJ3TkUThte+d/ FrjarA8KxmX93lGu7vsLHzGy4j15aeuC81cYHxYCg36VRi3/W6wc/7wU94DXIRld IvteytMLzI5uOU+OP166rgezdXZq2qP8BdEhNm4419TZwEt2pCnIgtZQJCceEvVN O7SME//tfY/Pxmxitr4+hSzccp1iLcXyVDvXr0Doz4ofUKgYJzUz75rJoQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAmI+5mUPXSnjHP/jelC+i4yIt5ZMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvQ1lqN21aUTlkS2VNY18tTjZVTDZMaklpM2xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTCBnwQCAAEwgZgDBAAl mYYDBAAlnAYDBAAuZvsDBABVzPUDBABVzPsDBABWaQcDBABWaQ0DBABWa2YwDAME AFkhdQMEAFkhdgMEAFkirAMEAFkjfgMEAFkkjgMEAFkk4QMEAFkl6gMEAFknegME AF6xFgMEALDfQwMEArlNpAMEALzQZgMEALzTGgMEALzV2gMEALzXIgMEALzwRQME ALzw0zANBAIAAjAHAwUDKgVjADANBgkqhkiG9w0BAQsFAAOCAQEA1Ng7TeMI3tpT /64z6rAozUMEaDHj6vIxQWKBWAykwkAT1OOBRMXI/54lMdCkytboN10L/1bfGbPj 2q4vkfYTpcrnjng75Ux/g3YJn76CYgXtnnKQBH9LAjYNi27Jb5exQ6I2sPnz9805 9ezdjfFHcTo32e4vHWBLoajO3oyfnLOHecWG6P8QHu1/uhsxC9PNH+jHPJMnPyAs i7PHhwpH/5dMk6TiEkg2Z4jJzAtHNPFQQjRh76SKJyGwH/tqD4IUE+hENYjO7Of8 P8js0cnLPTnK/iKT/tkIKRIzjsF3hMoKBWVJJNU+WYatDm+eGzBfKrnOEh8hEbYL IMJdYae/Vw== -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:59 2026 by rpki-client