This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/vDyYxaD_OvQHT43TMjNvoifQbS0.roa File: vDyYxaD_OvQHT43TMjNvoifQbS0.roa (raw, json) Hash identifier: OGyJnll9v3Henpio/RUnMctAX/okbHPj8xqJsYAY++E= Subject key identifier: BC:3C:98:C5:A0:FF:3A:F4:07:4F:8D:D3:32:33:6F:A2:27:D0:6D:2D Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9 Certificate serial: 019B7EA6FD96DB344C176F720045BD3194E4 Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/vDyYxaD_OvQHT43TMjNvoifQbS0.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48197 IP address blocks: 94.127.152.0/23 maxlen: 25 94.127.152.0/24 maxlen: 25 94.127.152.0/25 maxlen: 25 94.127.152.128/25 maxlen: 25 94.127.153.0/24 maxlen: 25 94.127.153.0/25 maxlen: 25 94.127.153.128/25 maxlen: 25 94.127.154.0/23 maxlen: 25 94.127.154.0/24 maxlen: 25 94.127.154.0/25 maxlen: 25 94.127.154.128/25 maxlen: 25 94.127.155.0/24 maxlen: 25 94.127.155.0/25 maxlen: 25 94.127.155.128/25 maxlen: 25 94.127.156.0/22 maxlen: 25 94.127.156.0/23 maxlen: 25 94.127.156.0/24 maxlen: 25 94.127.156.0/25 maxlen: 25 94.127.156.128/25 maxlen: 25 94.127.157.0/24 maxlen: 25 94.127.157.0/25 maxlen: 25 94.127.157.128/25 maxlen: 25 94.127.158.0/24 maxlen: 25 94.127.158.0/25 maxlen: 25 94.127.158.128/25 maxlen: 25 94.127.159.0/24 maxlen: 25 94.127.159.0/25 maxlen: 25 94.127.159.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fd:96:db:34:4c:17:6f:72:00:45:bd:31:94:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc3c98c5a0ff3af4074f8dd332336fa227d06d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:c6:93:11:5b:1d:23:96:dc:b1:7c:a4:89: cd:17:f9:4e:dd:b5:21:f5:e0:dc:e5:57:a9:54:2b: ff:6b:b7:f5:6d:bb:88:53:fe:fe:36:24:5b:d2:ee: 34:4d:fe:4b:03:76:e6:57:05:f8:ce:d1:e5:c7:54: 23:34:1d:d6:4c:8a:1b:1f:54:cd:06:aa:28:1c:4a: a1:74:45:ba:51:2b:9a:2f:c1:57:fd:59:65:bd:eb: b2:fa:d5:3e:98:52:f8:67:42:ee:c1:5b:95:9d:f7: 7e:14:aa:ad:7a:d4:5b:6c:a8:2b:53:81:8f:c3:32: c9:d1:76:a5:14:f9:d9:b3:70:72:ce:a5:7b:17:7a: 53:21:c7:54:de:cf:de:76:46:33:cc:dc:c8:c3:a6: 1e:d5:bc:44:2d:ce:0c:cb:44:83:3c:45:ac:78:db: ee:94:af:ac:b8:75:05:92:6f:e9:b7:35:a5:61:4e: ba:6e:09:42:fd:10:39:ee:21:eb:d8:4f:0c:bb:34: a0:fd:44:c7:12:1f:32:52:47:8e:56:11:11:26:22: 00:d0:0b:78:59:40:99:dc:49:bc:00:1c:72:cb:2f: f4:57:5e:66:0e:ad:06:83:48:22:5a:c8:c6:f6:43: e2:ac:15:5b:54:25:a4:50:f5:81:32:26:0c:ac:d4: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3C:98:C5:A0:FF:3A:F4:07:4F:8D:D3:32:33:6F:A2:27:D0:6D:2D X509v3 Authority Key Identifier: keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/vDyYxaD_OvQHT43TMjNvoifQbS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.127.152.0/21 Signature Algorithm: sha256WithRSAEncryption 66:c1:88:10:eb:ad:36:d5:82:40:14:74:5d:83:a0:66:d8:89: 99:47:db:36:54:7a:5b:49:7a:1f:12:46:fe:aa:57:2a:0d:61: 1a:9e:3b:8d:20:a0:4c:62:c2:a2:ab:9a:e0:42:9e:14:9d:e3: a8:d2:0f:dd:c7:0b:da:8c:fe:76:f2:0a:01:c2:ab:4d:6e:34: fd:c9:02:d3:97:e0:e8:fb:40:99:92:03:5f:03:5e:ec:83:e9: 9f:51:34:2d:80:23:32:dd:cb:9b:29:ea:5e:e7:53:41:2f:c2: 43:8a:e4:f5:19:85:24:c8:30:b7:75:fc:f6:82:36:a9:f9:e4: 72:e4:32:d5:c7:31:57:68:39:54:43:9e:b8:8e:47:e2:bc:2c: 65:2a:ca:04:0d:19:e4:ce:fb:c4:fb:5a:85:27:e0:f1:72:02: 82:37:da:c6:c2:70:0b:f5:93:aa:77:ea:c3:45:93:2f:e2:69: 65:85:10:9f:36:a6:f9:cf:fc:7f:ef:f1:03:06:bf:5c:ff:98: 52:42:87:50:4f:3c:14:d6:e4:02:a6:cf:b7:b1:e0:61:d8:33: c8:b6:99:48:5f:71:0c:18:8d:78:e0:95:71:e0:b0:8a:3e:d7: 90:4a:a1:8c:a7:80:d2:43:8b:3e:e2:fd:6f:53:f6:1f:1f:00: 70:f0:3f:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pv2W2zRMF29yAEW9MZTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNDI2Yzg3ZGZiY2M1NTJkYzc5MGZlYzNlZDFjZGU3YThm ODg2ZTkwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzNjOThjNWEwZmYzYWY0MDc0ZjhkZDMzMjMzNmZhMjI3ZDA2ZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBHGkxFbHSOW3LF8pInNF/lO3bUh 9eDc5VepVCv/a7f1bbuIU/7+NiRb0u40Tf5LA3bmVwX4ztHlx1QjNB3WTIobH1TN BqooHEqhdEW6USuaL8FX/Vllveuy+tU+mFL4Z0LuwVuVnfd+FKqtetRbbKgrU4GP wzLJ0XalFPnZs3ByzqV7F3pTIcdU3s/edkYzzNzIw6Ye1bxELc4My0SDPEWseNvu lK+suHUFkm/ptzWlYU66bglC/RA57iHr2E8MuzSg/UTHEh8yUkeOVhERJiIA0At4 WUCZ3Em8ABxyyy/0V15mDq0Gg0giWsjG9kPirBVbVCWkUPWBMiYMrNTIAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLw8mMWg/zr0B0+N0zIzb6In0G0tMB8GA1UdIwQY MBaAFE5CbIffvMVS3HkP7D7Rzeeo+IbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDct MTNkYTc0Y2QzNWE0LzEvdkR5WXhhRF9PdlFIVDQzVE1qTnZvaWZRYlMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDctMTNkYTc0Y2QzNWE0 LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXn+YMA0G CSqGSIb3DQEBCwUAA4IBAQBmwYgQ66021YJAFHRdg6Bm2ImZR9s2VHpbSXofEkb+ qlcqDWEanjuNIKBMYsKiq5rgQp4UneOo0g/dxwvajP528goBwqtNbjT9yQLTl+Do +0CZkgNfA17sg+mfUTQtgCMy3cubKepe51NBL8JDiuT1GYUkyDC3dfz2gjap+eRy 5DLVxzFXaDlUQ564jkfivCxlKsoEDRnkzvvE+1qFJ+DxcgKCN9rGwnAL9ZOqd+rD RZMv4mllhRCfNqb5z/x/7/EDBr9c/5hSQodQTzwU1uQCps+3seBh2DPItplIX3EM GI144JVx4LCKPteQSqGMp4DSQ4s+4v1vU/YfHwBw8D/e -----END CERTIFICATE-----Generated at Mon Jan 12 03:09:38 2026 by rpki-client