This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa File: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (raw, json) Hash identifier: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw= Subject key identifier: 03:25:E3:05:14:A6:1B:88:46:CD:4D:F0:14:A1:2D:66:35:66:A1:99 Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Certificate serial: 019B797EF77BE63986467D5BEF6918226143 Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202090 IP address blocks: 81.91.190.0/24 maxlen: 24 81.91.191.0/24 maxlen: 24 178.159.44.0/22 maxlen: 22 178.159.44.0/24 maxlen: 24 178.159.45.0/24 maxlen: 24 178.159.46.0/24 maxlen: 24 178.159.47.0/24 maxlen: 24 185.47.152.0/23 maxlen: 24 185.65.136.0/24 maxlen: 24 185.65.137.0/24 maxlen: 24 185.99.142.0/23 maxlen: 24 185.99.142.0/24 maxlen: 24 185.99.143.0/24 maxlen: 24 193.176.180.0/22 maxlen: 22 193.176.180.0/24 maxlen: 24 193.176.181.0/24 maxlen: 24 193.176.182.0/24 maxlen: 24 193.176.183.0/24 maxlen: 24 2a0c:b1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f7:7b:e6:39:86:46:7d:5b:ef:69:18:22:61:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0325e30514a61b8846cd4df014a12d663566a199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:22:2f:b4:3f:a7:d8:af:c8:31:bf:ec:27:ed: 5f:3e:d8:3f:bc:1d:85:4c:c0:50:07:1d:83:e3:34: 9d:12:4a:e9:26:c0:77:f9:cb:3e:96:70:21:54:22: c9:47:9b:7c:41:58:15:42:95:cd:c3:b5:8e:e4:f5: 06:5e:e7:2d:a1:a1:91:7a:ad:6c:8d:68:36:b3:6e: cf:fa:53:2e:85:fd:b3:f8:06:2b:3a:d6:e1:80:9d: 19:b1:05:63:07:85:c4:ee:4f:fb:90:e4:f8:e7:ca: 05:27:af:99:ab:51:de:0a:18:6d:47:d8:64:6d:84: c2:63:c7:db:96:15:d4:28:05:db:49:aa:65:17:e3: 2e:9c:5d:7d:23:b5:cf:df:b9:75:54:66:ec:e9:d1: 42:7c:b9:33:8c:81:82:0f:64:29:6e:be:46:70:68: 14:9c:35:3b:b0:15:f9:92:8a:b2:2b:cd:be:8f:f0: dc:c7:92:d9:f9:5a:83:61:cb:d6:92:e7:57:38:44: 01:0f:7b:74:29:df:f7:17:6e:20:a6:42:8e:95:85: 76:e4:e3:0e:19:80:6c:64:3f:eb:a3:7c:3f:64:49: 9d:81:12:04:36:ee:27:95:39:04:ed:d5:6c:a9:b9: 9a:d1:4a:a8:c2:fe:46:76:e9:fe:9b:c4:fd:03:d1: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:25:E3:05:14:A6:1B:88:46:CD:4D:F0:14:A1:2D:66:35:66:A1:99 X509v3 Authority Key Identifier: keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.91.190.0/23 178.159.44.0/22 185.47.152.0/23 185.65.136.0/23 185.99.142.0/23 193.176.180.0/22 IPv6: 2a0c:b1c0::/32 Signature Algorithm: sha256WithRSAEncryption 9f:f8:ec:ea:3e:46:a5:78:0e:0a:e0:46:cc:aa:e2:9a:86:ef: ce:89:9f:0b:fd:01:d7:cb:31:66:59:92:da:0a:e6:fa:34:bf: 1c:0c:b9:a7:d2:b5:9c:7a:73:16:5d:18:f9:bc:fc:28:29:e4: 6d:6f:44:13:bb:c9:0a:c5:f0:88:2f:88:e4:c5:ee:a3:ef:06: 32:3b:ca:2d:b1:a1:4c:e0:bf:44:a6:f4:ca:be:6d:22:c5:5e: 09:9d:dd:e7:04:83:2c:7a:c0:2e:e8:cd:c4:a4:3f:1c:2e:e3: 2d:0e:4c:42:b9:0b:c9:69:a3:ea:cc:8e:5b:37:81:33:80:d2: 50:92:ae:3b:64:2f:66:e4:a5:95:7c:74:b2:38:5d:73:51:10: 08:05:a4:04:81:5c:a5:aa:f5:fa:57:f8:f9:30:9f:94:88:76: 9e:6e:2f:8d:c1:15:35:2b:b6:a2:c0:a2:c5:2c:7f:a7:6c:d4: 96:74:1b:98:7a:2c:b7:ad:bb:90:34:0e:2c:3a:7d:48:55:f2: a6:91:91:8c:74:15:76:b5:1f:c0:51:58:af:ed:61:79:c1:65: 1e:c6:61:5b:ed:64:6d:4d:b7:2d:cb:78:89:9a:13:74:7a:68: 04:fd:d8:aa:82:8a:92:e5:de:86:e3:5e:44:82:2d:7c:18:cf: ea:d1:f7:c6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt5fvd75jmGRn1b72kYImFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk MWM4NzkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzI1ZTMwNTE0YTYxYjg4NDZjZDRkZjAxNGExMmQ2NjM1NjZhMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyIvtD+n2K/IMb/sJ+1fPtg/vB2F TMBQBx2D4zSdEkrpJsB3+cs+lnAhVCLJR5t8QVgVQpXNw7WO5PUGXuctoaGReq1s jWg2s27P+lMuhf2z+AYrOtbhgJ0ZsQVjB4XE7k/7kOT458oFJ6+Zq1HeChhtR9hk bYTCY8fblhXUKAXbSaplF+MunF19I7XP37l1VGbs6dFCfLkzjIGCD2Qpbr5GcGgU nDU7sBX5koqyK82+j/Dcx5LZ+VqDYcvWkudXOEQBD3t0Kd/3F24gpkKOlYV25OMO GYBsZD/ro3w/ZEmdgRIENu4nlTkE7dVsqbma0Uqowv5Gdun+m8T9A9HfNQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFAMl4wUUphuIRs1N8BShLWY1ZqGZMB8GA1UdIwQY MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt NGJjZDNkNTg0NjNhLzEvQXlYakJSU21HNGhHelUzd0ZLRXRaalZtb1prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBUVu+AwQC sp8sAwQBuS+YAwQBuUGIAwQBuWOOAwQCwbC0MA0EAgACMAcDBQAqDLHAMA0GCSqG SIb3DQEBCwUAA4IBAQCf+OzqPkaleA4K4EbMquKahu/OiZ8L/QHXyzFmWZLaCub6 NL8cDLmn0rWcenMWXRj5vPwoKeRtb0QTu8kKxfCIL4jkxe6j7wYyO8otsaFM4L9E pvTKvm0ixV4Jnd3nBIMsesAu6M3EpD8cLuMtDkxCuQvJaaPqzI5bN4EzgNJQkq47 ZC9m5KWVfHSyOF1zURAIBaQEgVylqvX6V/j5MJ+UiHaebi+NwRU1K7aiwKLFLH+n bNSWdBuYeiy3rbuQNA4sOn1IVfKmkZGMdBV2tR/AUViv7WF5wWUexmFb7WRtTbct y3iJmhN0emgE/diqgoqS5d6G415Egi18GM/q0ffG -----END CERTIFICATE-----Generated at Tue Jan 27 07:43:40 2026 by rpki-client