This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa File: iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa (raw, json) Hash identifier: Z7LmDISHgR4hvkBzhbrt82iLoWV0bIm5VCFXVRx3m9I= Subject key identifier: 8B:2D:17:B3:85:EE:42:60:62:2D:37:08:CD:EC:12:D2:5F:23:D8:CC Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6 Certificate serial: 019B7B35D27D25551B9CA7273843BF5420F7 Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa Signing time: Thu 01 Jan 2026 20:18:03 +0000 ROA not before: Thu 01 Jan 2026 20:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48448 IP address blocks: 45.85.73.0/24 maxlen: 24 87.236.32.0/24 maxlen: 24 95.175.141.0/24 maxlen: 24 202.14.113.0/24 maxlen: 24 203.33.38.0/24 maxlen: 24 2a0e:bb81::/48 maxlen: 48 2a0e:bb81:a1::/48 maxlen: 48 2a0e:bb81:a2::/48 maxlen: 48 2a0e:bb81:b1::/48 maxlen: 48 2a0e:bb81:b2::/48 maxlen: 48 2a0e:bb81:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d2:7d:25:55:1b:9c:a7:27:38:43:bf:54:20:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6 Validity Not Before: Jan 1 20:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b2d17b385ee4260622d3708cdec12d25f23d8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:f8:e8:bf:ef:95:bb:db:c1:5f:47:9a:d9: cf:d3:ae:6b:69:5c:93:86:dc:ff:df:44:1a:f1:9c: 1f:70:c0:22:a1:8c:39:e6:7b:0d:f2:f4:76:20:29: ea:fc:04:dd:f8:83:13:45:2b:eb:69:e3:4d:66:4c: d5:30:c6:6c:08:b9:1f:99:20:43:db:b1:08:de:aa: ce:04:b5:f3:6a:9d:8e:d5:35:69:01:12:e0:ef:40: c3:dd:1f:58:ec:35:e0:fa:66:32:51:c4:69:3b:0a: a6:b9:bf:70:3d:18:f3:31:60:13:23:4a:c8:2c:7c: 71:2a:76:35:10:c6:db:b8:02:88:eb:af:01:32:a7: 43:af:6f:4a:47:d9:dc:87:8f:1f:49:6f:f2:9c:ce: 2c:e0:f0:f9:76:dc:9e:f4:b2:c7:0c:fd:ac:9d:d4: cf:33:43:d3:3c:d5:7b:de:5e:e3:b0:eb:ac:4c:a6: 5e:37:1c:fd:c7:10:d2:b3:aa:9c:fc:8c:52:c6:3c: 5a:66:83:d5:e5:76:d2:15:fd:40:6c:71:97:0a:36: b4:bb:5a:1f:2a:a9:61:a2:85:8e:51:bd:7b:eb:f5: 52:7f:2b:22:cd:8c:e3:54:79:2d:2f:cb:8d:d5:a8: c4:c3:8b:b7:d5:7c:5a:e6:31:50:3c:b9:fb:e1:cb: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2D:17:B3:85:EE:42:60:62:2D:37:08:CD:EC:12:D2:5F:23:D8:CC X509v3 Authority Key Identifier: keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/iy0Xs4XuQmBiLTcIzewS0l8j2Mw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.73.0/24 87.236.32.0/24 95.175.141.0/24 202.14.113.0/24 203.33.38.0/24 IPv6: 2a0e:bb81::/48 2a0e:bb81:a1::-2a0e:bb81:a2:ffff:ffff:ffff:ffff:ffff 2a0e:bb81:b1::-2a0e:bb81:b2:ffff:ffff:ffff:ffff:ffff 2a0e:bb81:1000::/48 Signature Algorithm: sha256WithRSAEncryption 4a:2d:88:88:45:9f:c9:c4:12:ce:40:f1:e3:12:08:32:a8:d7: 7a:0e:bd:8a:b8:26:30:31:dc:33:b8:5f:c9:9f:88:6b:c1:c4: 76:d4:33:fc:f6:72:a1:a7:4e:bd:04:d7:c5:34:25:87:a1:c6: 60:7c:31:c6:b2:f8:51:39:24:f7:02:e3:18:95:4a:88:0a:c2: 9f:f1:4a:d7:30:75:bf:98:22:c8:33:a7:97:f2:82:0f:32:c6: e2:00:ff:4b:09:6c:32:ee:6a:38:1a:fd:ef:3f:8f:1d:1b:b6: 33:cd:3c:0d:10:40:e6:ae:0b:d2:a4:c3:ed:87:96:73:d5:36: 88:6f:dc:49:39:98:ff:1f:91:28:53:33:07:6e:f9:58:62:53: 57:b1:6c:5f:d8:07:b0:66:e0:ed:c7:c8:a1:a2:03:36:e4:17: 0a:ac:98:51:1b:eb:69:73:18:a4:42:1b:0d:e6:d8:ed:d9:d7: b4:fc:92:d0:2c:a4:7a:1e:2a:85:4f:09:cd:22:7d:fa:5b:55: 12:12:34:a7:d3:0c:4f:57:b6:c3:ab:c5:56:e0:ae:66:e4:36: 0e:96:12:cd:22:31:2f:e6:dc:66:af:bd:a7:10:ec:24:83:e1: 3d:89:af:93:69:53:4c:42:7c:45:76:f3:54:b1:32:22:2e:23: eb:88:d0:ac -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt7NdJ9JVUbnKcnOEO/VCD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzY5ZDZlNGEwZmMyYzk4MDEzYjcyMmViMmJlYjllNmU4 NzFmYzYwHhcNMjYwMTAxMjAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjJkMTdiMzg1ZWU0MjYwNjIyZDM3MDhjZGVjMTJkMjVmMjNkOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZz46L/vlbvbwV9HmtnP065raVyT htz/30Qa8ZwfcMAioYw55nsN8vR2ICnq/ATd+IMTRSvraeNNZkzVMMZsCLkfmSBD 27EI3qrOBLXzap2O1TVpARLg70DD3R9Y7DXg+mYyUcRpOwqmub9wPRjzMWATI0rI LHxxKnY1EMbbuAKI668BMqdDr29KR9nch48fSW/ynM4s4PD5dtye9LLHDP2sndTP M0PTPNV73l7jsOusTKZeNxz9xxDSs6qc/IxSxjxaZoPV5XbSFf1AbHGXCja0u1of KqlhooWOUb176/VSfysizYzjVHktL8uN1ajEw4u31Xxa5jFQPLn74cv24wIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFIstF7OF7kJgYi03CM3sEtJfI9jMMB8GA1UdIwQY MBaAFHJ2nW5KD8LJgBO3Iusr655uhx/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGIt NjkzM2E5MGM1M2ZhLzEvaXkwWHM0WHVRbUJpTFRjSXpld1MwbDhqMk13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGItNjkzM2E5MGM1M2Zh LzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDAkBAIAATAeAwQALVVJAwQA V+wgAwQAX6+NAwQAyg5xAwQAyyEmMEAEAgACMDoDBwAqDruBAAAwEgMHACoOu4EA oQMHACoOu4EAojASAwcAKg67gQCxAwcAKg67gQCyAwcAKg67gRAAMA0GCSqGSIb3 DQEBCwUAA4IBAQBKLYiIRZ/JxBLOQPHjEggyqNd6Dr2KuCYwMdwzuF/Jn4hrwcR2 1DP89nKhp069BNfFNCWHocZgfDHGsvhROST3AuMYlUqICsKf8UrXMHW/mCLIM6eX 8oIPMsbiAP9LCWwy7mo4Gv3vP48dG7YzzTwNEEDmrgvSpMPth5Zz1TaIb9xJOZj/ H5EoUzMHbvlYYlNXsWxf2AewZuDtx8ihogM25BcKrJhRG+tpcxikQhsN5tjt2de0 /JLQLKR6HiqFTwnNIn36W1USEjSn0wxPV7bDq8VW4K5m5DYOlhLNIjEv5txmr72n EOwkg+E9ia+TaVNMQnxFdvNUsTIiLiPriNCs -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:26 2026 by rpki-client