This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/CyzrSFUI29l-l0QPonrwjhkM4lI.roa File: CyzrSFUI29l-l0QPonrwjhkM4lI.roa (raw, json) Hash identifier: 03vTi7Zx5voekvu5qCeL/+Lz/HwxWRtTR8EGhwzeWSc= Subject key identifier: 0B:2C:EB:48:55:08:DB:D9:7E:97:44:0F:A2:7A:F0:8E:19:0C:E2:52 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA54B04762783F48765C4959DC51EC8 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/CyzrSFUI29l-l0QPonrwjhkM4lI.roa Signing time: Thu 01 Jan 2026 22:19:48 +0000 ROA not before: Thu 01 Jan 2026 22:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205132 IP address blocks: 46.10.156.0/24 maxlen: 24 46.10.179.0/24 maxlen: 24 77.85.170.0/24 maxlen: 24 77.85.198.0/24 maxlen: 24 82.137.69.0/24 maxlen: 24 83.228.61.0/24 maxlen: 24 83.228.86.0/24 maxlen: 24 83.228.87.0/24 maxlen: 24 83.228.89.0/24 maxlen: 24 84.238.167.0/24 maxlen: 24 84.238.192.0/24 maxlen: 24 84.238.193.0/24 maxlen: 24 84.238.194.0/24 maxlen: 24 87.126.134.0/24 maxlen: 24 94.236.169.0/24 maxlen: 24 212.72.199.0/24 maxlen: 24 212.72.221.0/24 maxlen: 24 213.91.157.0/24 maxlen: 24 213.91.173.0/24 maxlen: 24 213.91.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4b:04:76:27:83:f4:87:65:c4:95:9d:c5:1e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b2ceb485508dbd97e97440fa27af08e190ce252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f1:d5:b8:ce:81:46:57:c8:24:bf:2c:ba:b6: d0:00:a5:09:f1:fb:50:b0:4d:c3:50:6f:9e:22:59: 70:75:8d:83:ba:07:74:05:03:d0:61:02:74:d9:a1: 9d:a1:37:7b:f4:6b:31:95:19:42:eb:2d:fa:4b:cc: 12:82:63:4a:bb:dc:62:38:aa:57:e3:dc:c2:27:9f: 67:c5:03:61:1e:2c:6e:b9:a3:f0:71:24:e4:22:90: ca:54:13:e7:73:e9:c9:f7:21:fb:89:fe:0a:4e:06: 19:db:12:df:78:70:19:91:0f:99:36:69:c5:c0:28: cc:7f:fe:f8:81:29:3a:5f:2e:8d:23:e1:ba:dc:84: 10:c7:e1:75:25:5a:f5:aa:18:66:c4:11:e8:80:81: ba:fb:a9:87:2c:b0:47:49:6e:37:0f:0a:7a:b1:06: 2c:ab:99:24:3f:c8:a3:59:b3:6d:ba:08:cc:d4:fc: 8a:8b:f8:c5:cf:f0:a3:4b:fa:91:e4:67:9a:36:e4: bf:59:64:3a:ca:e6:a6:a5:f1:d6:ce:50:82:c8:b2: df:a2:ab:fa:46:5c:ad:52:ce:6e:8c:c2:de:a1:5b: fd:b6:ee:cd:5b:80:37:86:e3:1d:1f:42:9d:80:da: 18:c9:4e:b6:3e:95:ec:61:54:d5:8c:60:c2:c9:d2: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2C:EB:48:55:08:DB:D9:7E:97:44:0F:A2:7A:F0:8E:19:0C:E2:52 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/CyzrSFUI29l-l0QPonrwjhkM4lI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.10.156.0/24 46.10.179.0/24 77.85.170.0/24 77.85.198.0/24 82.137.69.0/24 83.228.61.0/24 83.228.86.0/23 83.228.89.0/24 84.238.167.0/24 84.238.192.0-84.238.194.255 87.126.134.0/24 94.236.169.0/24 212.72.199.0/24 212.72.221.0/24 213.91.157.0/24 213.91.173.0/24 213.91.191.0/24 Signature Algorithm: sha256WithRSAEncryption 33:74:df:6b:13:27:3c:3a:17:aa:5d:bd:e7:4a:23:70:28:9b: 49:65:5d:a2:ea:91:d9:ec:4c:39:4a:52:d2:0a:3b:4c:bd:d0: 77:7f:78:94:8f:00:4b:88:bb:5d:20:93:03:b1:cd:cb:23:ca: 07:aa:fb:87:b4:d4:49:14:a5:7d:d9:8b:f7:1c:61:9f:98:2b: 50:b9:77:d6:c7:43:9c:89:57:c9:99:73:c5:18:ff:39:64:7a: cf:64:04:69:fa:b9:17:99:00:48:f8:4b:d4:30:ad:e0:ce:bc: cb:59:a8:32:09:3f:9f:dd:9e:16:0f:c2:d1:26:92:bd:7e:e9: 90:2f:ea:a9:ce:b8:8f:4d:ab:9e:57:31:8c:f3:45:45:12:aa: eb:08:34:6c:3e:b3:82:5c:c4:29:cc:88:0c:66:98:01:d7:ef: 85:b6:77:0e:21:75:09:d1:62:a4:79:0c:33:d9:a4:a8:c8:3f: e9:cf:32:cc:1d:12:1b:e8:c0:83:8a:f4:db:83:26:c4:bf:de: 9f:50:8b:06:a5:79:c8:d8:8b:81:1d:5c:92:3c:eb:67:15:7a: ab:82:34:c4:fc:f9:44:2f:c3:13:eb:7f:4a:08:89:6a:1d:0c: 63:b5:55:37:c9:67:59:4f:1f:c2:0a:55:25:50:4f:28:f9:50: a4:52:1e:16 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZt7pUsEdieD9IdlxJWdxR7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjJjZWI0ODU1MDhkYmQ5N2U5NzQ0MGZhMjdhZjA4ZTE5MGNlMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PHVuM6BRlfIJL8surbQAKUJ8ftQ sE3DUG+eIllwdY2Dugd0BQPQYQJ02aGdoTd79GsxlRlC6y36S8wSgmNKu9xiOKpX 49zCJ59nxQNhHixuuaPwcSTkIpDKVBPnc+nJ9yH7if4KTgYZ2xLfeHAZkQ+ZNmnF wCjMf/74gSk6Xy6NI+G63IQQx+F1JVr1qhhmxBHogIG6+6mHLLBHSW43Dwp6sQYs q5kkP8ijWbNtugjM1PyKi/jFz/CjS/qR5GeaNuS/WWQ6yuampfHWzlCCyLLfoqv6 RlytUs5ujMLeoVv9tu7NW4A3huMdH0KdgNoYyU62PpXsYVTVjGDCydJ20QIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFAss60hVCNvZfpdED6J68I4ZDOJSMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvQ3l6clNGVUkyOWwtbDBRUG9ucndqaGtNNGxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAC4KnAME AC4KswMEAE1VqgMEAE1VxgMEAFKJRQMEAFPkPQMEAVPkVgMEAFPkWQMEAFTupzAM AwQGVO7AAwQAVO7CAwQAV36GAwQAXuypAwQA1EjHAwQA1EjdAwQA1VudAwQA1Vut AwQA1Vu/MA0GCSqGSIb3DQEBCwUAA4IBAQAzdN9rEyc8OheqXb3nSiNwKJtJZV2i 6pHZ7Ew5SlLSCjtMvdB3f3iUjwBLiLtdIJMDsc3LI8oHqvuHtNRJFKV92Yv3HGGf mCtQuXfWx0OciVfJmXPFGP85ZHrPZARp+rkXmQBI+EvUMK3gzrzLWagyCT+f3Z4W D8LRJpK9fumQL+qpzriPTaueVzGM80VFEqrrCDRsPrOCXMQpzIgMZpgB1++FtncO IXUJ0WKkeQwz2aSoyD/pzzLMHRIb6MCDivTbgybEv96fUIsGpXnI2IuBHVySPOtn FXqrgjTE/PlEL8MT639KCIlqHQxjtVU3yWdZTx/CClUlUE8o+VCkUh4W -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:41 2026 by rpki-client