This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/pSkX1aYvpV_dMUNcdVmcgt_RWLc.roa File: pSkX1aYvpV_dMUNcdVmcgt_RWLc.roa (raw, json) Hash identifier: RU574/zI5Cc9m5YzsYmknlaHbPU4tmMSrGJBMMiXggA= Subject key identifier: A5:29:17:D5:A6:2F:A5:5F:DD:31:43:5C:75:59:9C:82:DF:D1:58:B7 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA66CA4CBD07993511D97BB30D46618 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/pSkX1aYvpV_dMUNcdVmcgt_RWLc.roa Signing time: Fri 02 Jan 2026 12:19:54 +0000 ROA not before: Fri 02 Jan 2026 12:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15974 IP address blocks: 83.234.164.0/22 maxlen: 32 93.157.208.0/21 maxlen: 32 185.44.120.0/22 maxlen: 32 193.22.6.0/24 maxlen: 32 213.80.128.0/17 maxlen: 32 217.23.64.0/19 maxlen: 32 2a02:e840::/32 maxlen: 128 2a02:e841::/32 maxlen: 128 2a02:e842::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 23:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6c:a4:cb:d0:79:93:51:1d:97:bb:30:d4:66:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a52917d5a62fa55fdd31435c75599c82dfd158b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:c6:66:a6:40:91:57:43:a5:79:50:2e:69: 42:d0:38:fe:87:7e:87:68:99:f9:7f:b6:8c:32:f8: 3f:75:f4:60:c7:d9:1b:85:f6:8e:4f:4c:3b:62:18: a5:bd:31:b4:96:74:83:10:26:fe:59:7c:75:48:e0: 8b:af:99:f5:80:3d:60:b0:49:a5:5b:71:b1:b4:2b: 49:44:1c:65:58:f3:c5:b0:e6:8d:d5:da:5a:38:10: f6:ef:2f:b0:ba:ec:21:87:2c:92:b9:3f:9a:87:1e: 4a:36:12:e1:ac:4d:06:47:d7:c3:12:65:a2:e6:e3: 85:81:9a:bd:29:09:51:35:c1:6b:a5:c5:39:e2:98: 64:3f:ae:21:b0:82:f6:58:0f:ae:6e:55:f2:9e:1c: 37:06:f6:de:8d:42:b6:a5:f8:3c:88:69:c2:c0:6c: f7:62:12:0f:13:e4:64:41:42:fe:7f:c2:bb:e2:6e: 9c:67:66:71:a3:70:0e:fb:48:45:43:54:8c:13:4b: 1c:61:01:b3:d5:f7:3b:11:44:69:19:5a:3c:40:d9: dd:ed:37:af:c6:15:bc:1a:61:dd:fa:89:27:18:2d: ef:fc:51:22:8e:fc:97:0c:1b:5d:60:0b:6d:66:ec: 6d:f8:41:a6:e1:0d:1b:ed:83:1e:f3:74:ff:85:48: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:17:D5:A6:2F:A5:5F:DD:31:43:5C:75:59:9C:82:DF:D1:58:B7 X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/pSkX1aYvpV_dMUNcdVmcgt_RWLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.234.164.0/22 93.157.208.0/21 185.44.120.0/22 193.22.6.0/24 213.80.128.0/17 217.23.64.0/19 IPv6: 2a02:e840::-2a02:e842:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b9:00:54:8a:7b:bf:f2:fb:31:de:de:59:56:9a:56:26:67:33: 53:71:ea:77:80:ae:6c:bf:5b:e3:17:3d:f7:01:b6:86:b6:3f: c0:8d:82:3b:8f:1d:3a:a4:35:13:9a:df:9c:78:ed:51:f6:00: 4f:6d:83:05:4f:aa:ff:65:b0:c9:16:79:4b:e4:ae:f0:93:3e: c1:85:79:62:81:93:65:bd:1c:c0:97:1b:0c:7a:33:5b:a8:00: 2c:b6:86:d2:4c:0f:a2:93:71:79:30:26:21:24:98:ae:f1:d6: 20:9d:cf:d0:cf:26:6f:74:ad:8e:94:2a:1c:0e:17:10:06:4a: a8:5d:5f:74:c2:0b:dc:bd:88:5c:f5:43:de:06:4c:ea:d5:d4: 7e:e0:9f:0d:00:32:bd:c3:1d:71:85:22:92:54:61:be:f5:be: fb:a3:db:49:cc:cc:dc:66:89:5d:de:75:47:86:e3:b3:40:a3: 97:80:b7:5d:a6:8c:d5:bf:d2:9a:3e:72:aa:a0:c5:d2:05:41: 1a:4a:45:ba:90:ad:b3:12:37:c9:68:c2:a6:87:b8:55:b9:29: b3:9b:07:c8:13:79:9d:f1:3e:5e:8a:99:a1:27:d4:46:38:3f: fb:36:62:ac:81:31:26:05:2b:0f:dc:3b:c2:7b:66:3c:47:b9: 87:a5:fd:ce -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt+pmyky9B5k1Edl7sw1GYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTI5MTdkNWE2MmZhNTVmZGQzMTQzNWM3NTU5OWM4MmRmZDE1OGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJbGZqZAkVdDpXlQLmlC0Dj+h36H aJn5f7aMMvg/dfRgx9kbhfaOT0w7YhilvTG0lnSDECb+WXx1SOCLr5n1gD1gsEml W3GxtCtJRBxlWPPFsOaN1dpaOBD27y+wuuwhhyySuT+ahx5KNhLhrE0GR9fDEmWi 5uOFgZq9KQlRNcFrpcU54phkP64hsIL2WA+ublXynhw3BvbejUK2pfg8iGnCwGz3 YhIPE+RkQUL+f8K74m6cZ2Zxo3AO+0hFQ1SME0scYQGz1fc7EURpGVo8QNnd7Tev xhW8GmHd+oknGC3v/FEijvyXDBtdYAttZuxt+EGm4Q0b7YMe83T/hUjtxQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFKUpF9WmL6Vf3TFDXHVZnILf0Vi3MB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvcFNrWDFhWXZwVl9kTVVOY2RWbWNndF9SV0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQCU+qkAwQD XZ3QAwQCuSx4AwQAwRYGAwQH1VCAAwQF2RdAMBYEAgACMBAwDgMFBioC6EADBQAq AuhCMA0GCSqGSIb3DQEBCwUAA4IBAQC5AFSKe7/y+zHe3llWmlYmZzNTcep3gK5s v1vjFz33AbaGtj/AjYI7jx06pDUTmt+ceO1R9gBPbYMFT6r/ZbDJFnlL5K7wkz7B hXligZNlvRzAlxsMejNbqAAstobSTA+ik3F5MCYhJJiu8dYgnc/QzyZvdK2OlCoc DhcQBkqoXV90wgvcvYhc9UPeBkzq1dR+4J8NADK9wx1xhSKSVGG+9b77o9tJzMzc Zold3nVHhuOzQKOXgLddpozVv9KaPnKqoMXSBUEaSkW6kK2zEjfJaMKmh7hVuSmz mwfIE3md8T5eipmhJ9RGOD/7NmKsgTEmBSsP3DvCe2Y8R7mHpf3O -----END CERTIFICATE-----Generated at Sat Jan 31 07:24:44 2026 by rpki-client