This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bYMH4SrE0wcYa2DS-1D_fzvQTjc.roa File: bYMH4SrE0wcYa2DS-1D_fzvQTjc.roa (raw, json) Hash identifier: WFf79frQjxd1wXwUAnRiqWojIY3Im2qQcYC0RhxUiFM= Subject key identifier: 6D:83:07:E1:2A:C4:D3:07:18:6B:60:D2:FB:50:FF:7F:3B:D0:4E:37 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B0C9319712BBDAD8031BF34139C06 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bYMH4SrE0wcYa2DS-1D_fzvQTjc.roa Signing time: Fri 02 Jan 2026 06:17:57 +0000 ROA not before: Fri 02 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 89.34.224.0/23 maxlen: 24 89.34.228.0/24 maxlen: 24 89.34.231.0/24 maxlen: 24 89.37.119.0/24 maxlen: 24 89.38.228.0/24 maxlen: 24 89.38.229.0/24 maxlen: 24 89.40.82.0/24 maxlen: 24 89.42.80.0/24 maxlen: 24 89.42.81.0/24 maxlen: 24 89.42.82.0/24 maxlen: 24 89.42.85.0/24 maxlen: 24 89.42.86.0/24 maxlen: 24 89.42.89.0/24 maxlen: 24 89.42.92.0/24 maxlen: 24 89.42.93.0/24 maxlen: 24 89.42.95.0/24 maxlen: 24 89.43.140.0/24 maxlen: 24 89.43.142.0/24 maxlen: 24 89.43.143.0/24 maxlen: 24 89.46.3.0/24 maxlen: 24 89.46.4.0/24 maxlen: 24 89.47.99.0/24 maxlen: 24 89.47.115.0/24 maxlen: 24 89.47.117.0/24 maxlen: 24 89.47.118.0/24 maxlen: 24 89.47.119.0/24 maxlen: 24 89.47.123.0/24 maxlen: 24 89.47.124.0/24 maxlen: 24 89.47.125.0/24 maxlen: 24 89.47.126.0/24 maxlen: 24 93.113.176.0/24 maxlen: 24 93.113.181.0/24 maxlen: 24 93.113.183.0/24 maxlen: 24 93.114.90.0/24 maxlen: 24 93.114.91.0/24 maxlen: 24 93.119.106.0/24 maxlen: 24 185.101.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0c:93:19:71:2b:bd:ad:80:31:bf:34:13:9c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d8307e12ac4d307186b60d2fb50ff7f3bd04e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:1a:ae:f6:c5:5b:6b:8f:42:c2:75:aa:69: 14:b2:ba:ff:ce:8f:8f:74:a0:c5:c8:9d:20:79:5a: 01:c5:f7:bd:72:72:30:67:08:3a:f8:b5:31:ba:db: 62:20:98:ed:b6:2e:d7:98:a4:b7:c4:82:4b:14:f5: 98:f6:4f:7f:b4:e1:5b:f0:2c:cf:6e:1f:16:a5:25: b4:61:74:74:4f:48:51:2f:3f:72:4d:6e:0e:7b:03: 17:90:45:dc:47:fc:01:d4:eb:33:cf:eb:64:42:35: ce:10:b8:5b:0a:09:26:97:4e:4a:b3:00:c1:88:a2: 06:21:72:ce:9e:ae:89:be:40:a5:ee:0a:e7:f8:67: aa:fd:e7:d9:19:b4:22:ba:91:ca:96:20:00:83:b5: 31:aa:f8:96:0d:bf:d2:9a:ba:09:47:0f:e4:b2:17: ba:fe:43:b2:c9:f2:df:6a:cd:91:3d:78:b1:54:99: 48:3c:e2:b3:6a:14:0a:67:71:83:ee:63:ce:09:89: 31:b3:bb:a9:7a:3f:00:58:91:3e:0c:3c:e6:91:97: 36:b3:44:d9:71:b0:e3:0a:87:b1:b5:a1:0e:90:4e: 13:3b:e5:59:75:90:ea:f6:87:be:fc:10:bb:b1:aa: cc:39:37:54:b3:4a:6a:16:b3:a8:88:d6:03:52:b6: 1c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:83:07:E1:2A:C4:D3:07:18:6B:60:D2:FB:50:FF:7F:3B:D0:4E:37 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bYMH4SrE0wcYa2DS-1D_fzvQTjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.224.0/23 89.34.228.0/24 89.34.231.0/24 89.37.119.0/24 89.38.228.0/23 89.40.82.0/24 89.42.80.0-89.42.82.255 89.42.85.0-89.42.86.255 89.42.89.0/24 89.42.92.0/23 89.42.95.0/24 89.43.140.0/24 89.43.142.0/23 89.46.3.0-89.46.4.255 89.47.99.0/24 89.47.115.0/24 89.47.117.0-89.47.119.255 89.47.123.0-89.47.126.255 93.113.176.0/24 93.113.181.0/24 93.113.183.0/24 93.114.90.0/23 93.119.106.0/24 185.101.105.0/24 Signature Algorithm: sha256WithRSAEncryption 79:bb:23:e7:94:07:86:74:86:29:46:42:6c:6a:7d:04:31:5b: d6:e2:4b:16:98:db:78:37:0f:e4:9f:e0:de:58:f4:ec:82:cf: 93:bd:4f:7c:fa:35:05:83:f7:7e:25:34:c9:b1:e8:32:db:39: cc:db:c7:01:2d:ee:9c:10:da:a4:d5:a1:c2:bc:19:bd:4b:68: 9f:fc:34:fb:c3:7b:ea:55:a5:1d:e6:71:0e:ef:4c:72:b8:69: e2:0e:a3:c4:81:17:4d:11:8c:8e:bb:a6:d4:75:cf:9c:43:bc: af:27:fa:e0:d2:8d:81:52:84:88:cc:2d:7f:07:d4:5d:ec:6f: 70:90:d2:21:96:52:cb:6c:18:2c:a7:51:5e:2a:e6:bb:78:4b: bc:ea:e3:ba:e4:07:5e:2f:ee:51:12:f5:86:72:f3:05:ad:ee: 43:49:b1:32:a6:bd:2f:cf:b5:73:78:c0:6e:55:57:f6:c4:4d: 5f:07:ea:c7:95:3f:5b:dc:2d:22:29:52:84:bb:9f:57:2d:a5: 3c:7d:58:c4:4d:6a:2e:0a:30:72:8f:e1:80:8e:9c:1f:1a:c6: 5b:97:16:f6:55:b9:85:87:d6:d5:3a:1d:a2:1d:00:8d:11:0a: 6e:39:1e:a0:6f:f4:b8:67:75:90:8f:05:41:25:b5:76:96:60: 2a:14:89:f9 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt9WwyTGXErva2AMb80E5wGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDgzMDdlMTJhYzRkMzA3MTg2YjYwZDJmYjUwZmY3ZjNiZDA0ZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQAarvbFW2uPQsJ1qmkUsrr/zo+P dKDFyJ0geVoBxfe9cnIwZwg6+LUxuttiIJjtti7XmKS3xIJLFPWY9k9/tOFb8CzP bh8WpSW0YXR0T0hRLz9yTW4OewMXkEXcR/wB1Oszz+tkQjXOELhbCgkml05KswDB iKIGIXLOnq6JvkCl7grn+Geq/efZGbQiupHKliAAg7UxqviWDb/SmroJRw/kshe6 /kOyyfLfas2RPXixVJlIPOKzahQKZ3GD7mPOCYkxs7upej8AWJE+DDzmkZc2s0TZ cbDjCoextaEOkE4TO+VZdZDq9oe+/BC7sarMOTdUs0pqFrOoiNYDUrYcRwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFG2DB+EqxNMHGGtg0vtQ/3870E43MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvYllNSDRTckUwd2NZYTJEUy0xRF9menZRVGpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHVBggrBgEFBQcBBwEB/wSBxTCBwjCBvwQCAAEwgbgDBAFZ IuADBABZIuQDBABZIucDBABZJXcDBAFZJuQDBABZKFIwDAMEBFkqUAMEAFkqUjAM AwQAWSpVAwQAWSpWAwQAWSpZAwQBWSpcAwQAWSpfAwQAWSuMAwQBWSuOMAwDBABZ LgMDBABZLgQDBABZL2MDBABZL3MwDAMEAFkvdQMEA1kvcDAMAwQAWS97AwQAWS9+ AwQAXXGwAwQAXXG1AwQAXXG3AwQBXXJaAwQAXXdqAwQAuWVpMA0GCSqGSIb3DQEB CwUAA4IBAQB5uyPnlAeGdIYpRkJsan0EMVvW4ksWmNt4Nw/kn+DeWPTsgs+TvU98 +jUFg/d+JTTJsegy2znM28cBLe6cENqk1aHCvBm9S2if/DT7w3vqVaUd5nEO70xy uGniDqPEgRdNEYyOu6bUdc+cQ7yvJ/rg0o2BUoSIzC1/B9Rd7G9wkNIhllLLbBgs p1FeKua7eEu86uO65AdeL+5REvWGcvMFre5DSbEypr0vz7VzeMBuVVf2xE1fB+rH lT9b3C0iKVKEu59XLaU8fVjETWouCjByj+GAjpwfGsZblxb2VbmFh9bVOh2iHQCN EQpuOR6gb/S4Z3WQjwVBJbV2lmAqFIn5 -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:15 2026 by rpki-client