This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/e4Y82jz5m9Po29WmrpJsedcmzmk.roa File: e4Y82jz5m9Po29WmrpJsedcmzmk.roa (raw, json) Hash identifier: uEEEYOKhA29NBvJQq3WwP47mr+GKJzQ+1OrC0QbpDj8= Subject key identifier: 7B:86:3C:DA:3C:F9:9B:D3:E8:DB:D5:A6:AE:92:6C:79:D7:26:CE:69 Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee Certificate serial: 019B797EBA049F2D1F8541F5B35D9BB950FB Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/e4Y82jz5m9Po29WmrpJsedcmzmk.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20253 IP address blocks: 84.201.208.0/20 maxlen: 24 84.201.221.0/24 maxlen: 24 146.19.181.0/24 maxlen: 26 217.20.48.0/24 maxlen: 24 217.20.49.0/24 maxlen: 24 217.20.50.0/24 maxlen: 24 217.20.51.0/24 maxlen: 24 217.20.52.0/24 maxlen: 24 217.20.53.0/24 maxlen: 24 217.20.54.0/24 maxlen: 24 217.20.55.0/24 maxlen: 24 217.20.56.0/24 maxlen: 24 217.20.57.0/24 maxlen: 24 217.20.58.0/24 maxlen: 24 217.20.59.0/24 maxlen: 24 217.20.60.0/24 maxlen: 24 217.20.61.0/24 maxlen: 24 217.20.62.0/24 maxlen: 24 217.20.63.0/24 maxlen: 24 2a12:45c7:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ba:04:9f:2d:1f:85:41:f5:b3:5d:9b:b9:50:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b863cda3cf99bd3e8dbd5a6ae926c79d726ce69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4d:11:0b:9a:67:19:4c:c9:52:58:94:d2:90: 77:52:4e:cb:fa:f4:2b:1a:24:2d:ce:4a:fc:25:44: 82:e8:21:6e:2c:77:41:52:6a:7f:e7:52:2d:48:22: 55:e2:2f:61:51:c5:f8:06:f7:02:6c:d2:4b:3a:3d: ba:99:6c:c2:03:66:c4:9e:b2:8c:4f:7d:b6:85:0e: 27:e2:ce:f0:34:88:90:e8:94:6e:46:2d:f6:5e:38: a2:c5:ce:88:29:99:ec:e7:7b:3a:f7:14:bc:fd:72: 99:d0:5e:a8:1d:16:6b:ca:95:d3:d4:35:dc:bc:5a: ab:e2:be:16:49:d1:a1:02:8d:01:0a:9e:2a:30:ab: da:0e:33:40:00:09:a9:02:14:5f:b3:3b:42:5b:e5: 52:d9:cb:75:94:9b:99:f7:d9:98:54:d9:c4:7a:80: dc:21:9e:18:66:9e:0b:56:0f:3d:f7:9c:1f:c3:cb: de:85:97:02:f9:37:65:de:38:40:49:0e:2b:13:ab: 8c:70:bb:b7:02:24:42:8d:10:5e:68:34:a3:d2:c2: b7:d0:8f:cd:6c:d3:c8:b9:11:60:b7:1c:be:17:53: 60:c9:82:9a:66:29:53:5e:6a:76:6a:4d:5f:4c:d1: 37:0e:77:6e:8a:4f:8c:b4:ad:dc:d4:0a:08:d4:b4: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:86:3C:DA:3C:F9:9B:D3:E8:DB:D5:A6:AE:92:6C:79:D7:26:CE:69 X509v3 Authority Key Identifier: keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/e4Y82jz5m9Po29WmrpJsedcmzmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.201.208.0/20 146.19.181.0/24 217.20.48.0/20 IPv6: 2a12:45c7:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 71:cc:b5:81:d8:3b:02:7f:fc:94:ee:40:31:e2:4c:cf:68:4a: 20:12:48:f3:0c:61:bc:0e:32:45:ba:33:46:b9:07:e9:5f:b1: df:77:3c:02:63:fd:fd:86:99:9c:87:7e:49:00:0b:a4:9d:99: 0a:90:70:84:fa:c2:33:e9:da:f5:7f:66:41:fa:33:62:01:ec: d8:fd:44:f1:c5:65:70:42:29:e4:57:3d:41:b7:9d:18:b2:aa: bb:d3:b6:ed:e0:6a:e2:49:43:04:f5:29:6a:36:4a:5a:e0:ec: d0:e0:5d:6f:51:90:9d:59:8f:c9:a5:44:7f:36:c4:53:92:44: 4f:16:ee:81:26:7a:d4:a8:5c:d8:33:53:8c:a1:e9:e6:6a:76: 2b:b5:b6:be:78:0f:c2:f3:da:08:88:27:6c:96:9f:b6:f8:09: ab:3b:63:c0:01:f8:af:2c:8e:66:5c:24:34:44:44:d7:39:0d: 0e:7d:80:1c:74:46:de:5c:77:a4:a9:1d:d8:2a:cf:2c:5e:2f: c5:33:0d:57:8e:a2:eb:ee:8b:23:b3:f0:c6:2a:90:28:30:6c: 39:f2:23:35:ad:67:92:ff:e1:cb:e3:e8:ea:55:51:d3:ff:c3: a0:d7:f2:d6:1b:91:d2:d3:9f:47:ed:fc:80:da:8c:08:f7:e3: e1:eb:5f:f9 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5froEny0fhUH1s12buVD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzYzZTVkYjA0MzVjMmQzZTc0YTZiMjhhZDNkOWMzMGQ2 YThjZWUwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjg2M2NkYTNjZjk5YmQzZThkYmQ1YTZhZTkyNmM3OWQ3MjZjZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik0RC5pnGUzJUliU0pB3Uk7L+vQr GiQtzkr8JUSC6CFuLHdBUmp/51ItSCJV4i9hUcX4BvcCbNJLOj26mWzCA2bEnrKM T322hQ4n4s7wNIiQ6JRuRi32Xjiixc6IKZns53s69xS8/XKZ0F6oHRZrypXT1DXc vFqr4r4WSdGhAo0BCp4qMKvaDjNAAAmpAhRfsztCW+VS2ct1lJuZ99mYVNnEeoDc IZ4YZp4LVg8995wfw8vehZcC+Tdl3jhASQ4rE6uMcLu3AiRCjRBeaDSj0sK30I/N bNPIuRFgtxy+F1NgyYKaZilTXmp2ak1fTNE3Dnduik+MtK3c1AoI1LQQXQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFHuGPNo8+ZvT6NvVpq6SbHnXJs5pMB8GA1UdIwQY MBaAFD7GPl2wQ1wtPnSmsorT2cMNaozuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNZLVhiQkRYQzAtZEtheWl0UFp3dzFxak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80NmQ5NDMtOGNiZC00MWEyLWI5ZjIt NTIwNThmOGE5YTFhLzEvZTRZODJqejVtOVBvMjlXbXJwSnNlZGNtem1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS80NmQ5NDMtOGNiZC00MWEyLWI5ZjItNTIwNThmOGE5YTFh LzEvUHNZLVhiQkRYQzAtZEtheWl0UFp3dzFxak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQEVMnQAwQA khO1AwQE2RQwMA8EAgACMAkDBwAqEkXH//8wDQYJKoZIhvcNAQELBQADggEBAHHM tYHYOwJ//JTuQDHiTM9oSiASSPMMYbwOMkW6M0a5B+lfsd93PAJj/f2GmZyHfkkA C6SdmQqQcIT6wjPp2vV/ZkH6M2IB7Nj9RPHFZXBCKeRXPUG3nRiyqrvTtu3gauJJ QwT1KWo2Slrg7NDgXW9RkJ1Zj8mlRH82xFOSRE8W7oEmetSoXNgzU4yh6eZqdiu1 tr54D8Lz2giIJ2yWn7b4Cas7Y8AB+K8sjmZcJDRERNc5DQ59gBx0Rt5cd6SpHdgq zyxeL8UzDVeOouvuiyOz8MYqkCgwbDnyIzWtZ5L/4cvj6OpVUdP/w6DX8tYbkdLT n0ft/IDajAj34+HrX/k= -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:07 2026 by rpki-client