This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ayBrZuPdh5mQPkMPkmsTX2D_gKo.roa File: ayBrZuPdh5mQPkMPkmsTX2D_gKo.roa (raw, json) Hash identifier: YthmEfHVIMgqctztXHBFLwehyiv8qnNCrGIUFf5J2q0= Subject key identifier: 6B:20:6B:66:E3:DD:87:99:90:3E:43:0F:92:6B:13:5F:60:FF:80:AA Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFB254B5BD7A130786EC12D550BF4 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ayBrZuPdh5mQPkMPkmsTX2D_gKo.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39543 IP address blocks: 86.106.81.0/24 maxlen: 24 89.34.27.0/24 maxlen: 24 89.35.158.0/24 maxlen: 24 89.39.111.0/24 maxlen: 24 89.40.67.0/24 maxlen: 24 89.45.164.0/24 maxlen: 24 89.47.96.0/24 maxlen: 24 89.47.97.0/24 maxlen: 24 89.47.98.0/24 maxlen: 24 89.47.101.0/24 maxlen: 24 89.47.102.0/24 maxlen: 24 89.47.103.0/24 maxlen: 24 89.47.104.0/24 maxlen: 24 89.47.105.0/24 maxlen: 24 89.47.106.0/24 maxlen: 24 89.47.107.0/24 maxlen: 24 89.47.108.0/24 maxlen: 24 89.47.109.0/24 maxlen: 24 89.47.110.0/24 maxlen: 24 89.47.111.0/24 maxlen: 24 89.47.120.0/24 maxlen: 24 89.47.122.0/24 maxlen: 24 93.113.204.0/24 maxlen: 24 93.114.194.0/24 maxlen: 24 188.241.3.0/24 maxlen: 24 193.19.192.0/22 maxlen: 22 193.19.192.0/24 maxlen: 24 193.19.193.0/24 maxlen: 24 193.19.194.0/24 maxlen: 24 193.19.195.0/24 maxlen: 24 195.28.2.0/23 maxlen: 23 2001:4d18::/32 maxlen: 32 2001:4d18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fb:25:4b:5b:d7:a1:30:78:6e:c1:2d:55:0b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b206b66e3dd8799903e430f926b135f60ff80aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:60:1a:5e:b5:6c:51:20:65:f3:c3:5f:1a: 06:ba:11:7b:d4:4d:87:74:66:7f:23:eb:f3:56:64: e2:1a:76:67:a4:ff:a9:a6:e1:8c:8d:7a:b4:19:91: d8:e0:38:12:64:57:50:04:4d:60:c3:06:33:4d:2b: 64:59:aa:95:11:28:cb:95:71:87:d0:24:a3:67:77: 83:26:fa:f1:30:d0:70:6a:63:55:37:6d:10:e8:77: 9f:a8:da:21:dc:40:d2:c8:ed:da:3c:bd:63:f1:28: 33:ed:8b:d3:7d:4a:25:2f:62:ff:fd:cf:d1:ae:56: 92:71:77:23:5e:9b:5d:76:2f:f7:b6:02:e9:68:4f: 3f:7c:47:cd:97:c3:be:0c:56:53:b4:51:a3:db:d2: 6a:dc:08:b7:c5:31:07:f6:99:5a:24:53:20:0b:e5: 96:b2:bb:1d:54:f4:a3:3c:99:d5:c4:bd:ce:4e:f3: 43:3e:35:79:a3:39:31:1e:2a:c7:c4:ef:78:02:ef: 96:bb:67:c0:e4:df:45:0a:fa:46:59:63:68:20:fc: fa:9b:da:64:eb:94:10:cf:9d:8c:9c:0c:1c:f0:e4: 9b:88:16:92:e8:4d:40:ac:df:1e:aa:37:9b:46:f9: ba:50:3c:a9:86:5d:fc:b7:6a:40:06:66:ae:b4:9f: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:20:6B:66:E3:DD:87:99:90:3E:43:0F:92:6B:13:5F:60:FF:80:AA X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ayBrZuPdh5mQPkMPkmsTX2D_gKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.81.0/24 89.34.27.0/24 89.35.158.0/24 89.39.111.0/24 89.40.67.0/24 89.45.164.0/24 89.47.96.0-89.47.98.255 89.47.101.0-89.47.111.255 89.47.120.0/24 89.47.122.0/24 93.113.204.0/24 93.114.194.0/24 188.241.3.0/24 193.19.192.0/22 195.28.2.0/23 IPv6: 2001:4d18::/32 Signature Algorithm: sha256WithRSAEncryption 4c:fa:db:4e:69:f7:15:31:ad:06:67:93:80:80:4a:d9:33:ec: 5a:c4:f2:1d:24:7e:a2:e9:5f:75:f5:b8:e0:e8:36:b8:46:3d: da:38:66:cd:23:cc:a0:00:93:ab:5e:70:3b:ec:f9:21:f9:ed: 40:46:6c:1a:ec:ee:6b:0f:6d:f5:7b:68:2e:05:c9:2a:d6:50: dc:7e:89:92:39:84:d1:cb:9c:e3:93:f2:b5:0f:90:cd:8e:27: d6:2c:39:55:4a:ea:7e:e3:2d:c4:cd:41:8b:c7:28:b1:e1:a2: 16:82:ad:6a:1a:b4:05:10:93:96:7b:58:84:87:85:85:f1:9f: 41:49:34:40:df:c4:fd:15:45:4e:a5:74:80:2a:5a:80:83:0e: 26:6a:35:5c:cf:7b:5b:14:59:19:78:9e:63:e9:c3:43:6d:6f: fa:7b:d8:d0:a2:43:bd:9c:c0:1a:7f:cd:45:12:8c:73:04:da: 4e:03:3d:ed:1c:73:7a:48:f3:68:d7:38:6c:04:84:e7:b6:ca: 5b:aa:c1:f4:3e:44:00:48:5d:5d:c8:0d:86:8b:d5:30:b7:21: 7e:28:39:a4:83:df:bc:5b:f6:7b:0a:3f:1e:78:d1:d6:06:7e: de:18:ea:50:07:db:1f:57:76:a0:1b:7a:60:7b:c5:7c:bc:20: 6c:70:22:f1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9WvslS1vXoTB4bsEtVQv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjIwNmI2NmUzZGQ4Nzk5OTAzZTQzMGY5MjZiMTM1ZjYwZmY4MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5xgGl61bFEgZfPDXxoGuhF71E2H dGZ/I+vzVmTiGnZnpP+ppuGMjXq0GZHY4DgSZFdQBE1gwwYzTStkWaqVESjLlXGH 0CSjZ3eDJvrxMNBwamNVN20Q6HefqNoh3EDSyO3aPL1j8Sgz7YvTfUolL2L//c/R rlaScXcjXptddi/3tgLpaE8/fEfNl8O+DFZTtFGj29Jq3Ai3xTEH9plaJFMgC+WW srsdVPSjPJnVxL3OTvNDPjV5ozkxHirHxO94Au+Wu2fA5N9FCvpGWWNoIPz6m9pk 65QQz52MnAwc8OSbiBaS6E1ArN8eqjebRvm6UDyphl38t2pABmautJ8kTwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGsga2bj3YeZkD5DD5JrE19g/4CqMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvYXlCclp1UGRoNW1RUGtNUGttc1RYMkRfZ0tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBwBAIAATBqAwQAVmpR AwQAWSIbAwQAWSOeAwQAWSdvAwQAWShDAwQAWS2kMAwDBAVZL2ADBABZL2IwDAME AFkvZQMEBFkvYAMEAFkveAMEAFkvegMEAF1xzAMEAF1ywgMEALzxAwMEAsETwAME AcMcAjANBAIAAjAHAwUAIAFNGDANBgkqhkiG9w0BAQsFAAOCAQEATPrbTmn3FTGt BmeTgIBK2TPsWsTyHSR+oulfdfW44Og2uEY92jhmzSPMoACTq15wO+z5IfntQEZs Guzuaw9t9XtoLgXJKtZQ3H6JkjmE0cuc45PytQ+QzY4n1iw5VUrqfuMtxM1Bi8co seGiFoKtahq0BRCTlntYhIeFhfGfQUk0QN/E/RVFTqV0gCpagIMOJmo1XM97WxRZ GXieY+nDQ21v+nvY0KJDvZzAGn/NRRKMcwTaTgM97RxzekjzaNc4bASE57bKW6rB 9D5EAEhdXcgNhovVMLchfig5pIPfvFv2ewo/HnjR1gZ+3hjqUAfbH1d2oBt6YHvF fLwgbHAi8Q== -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:14 2026 by rpki-client