This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RyDKbD1CfCYXlMfCBrcZbLy40E4.roa File: RyDKbD1CfCYXlMfCBrcZbLy40E4.roa (raw, json) Hash identifier: tPfm6St61WDo14LtuXb670uNMmAgesv8XHHvFZsaE7s= Subject key identifier: 47:20:CA:6C:3D:42:7C:26:17:94:C7:C2:06:B7:19:6C:BC:B8:D0:4E Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019BE09B4550F43F805A6B2C217DDA553188 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RyDKbD1CfCYXlMfCBrcZbLy40E4.roa Signing time: Wed 21 Jan 2026 12:50:30 +0000 ROA not before: Wed 21 Jan 2026 12:50:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 158.173.216.0/24 maxlen: 24 158.173.221.0/24 maxlen: 24 170.62.112.0/22 maxlen: 24 170.62.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:9b:45:50:f4:3f:80:5a:6b:2c:21:7d:da:55:31:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 21 12:50:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4720ca6c3d427c261794c7c206b7196cbcb8d04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a7:20:02:18:e0:c7:a6:4f:be:cf:4e:43:f7: 7e:b5:33:b8:8f:69:bd:f4:9d:f8:94:d1:ed:57:e0: 4a:fa:50:4a:e5:34:03:19:e4:a7:6d:8a:78:03:6f: dc:12:b4:58:49:83:a5:6c:e2:51:58:30:f0:cf:72: e4:8a:90:81:49:6d:55:43:20:ae:32:90:f5:77:57: 41:c3:12:28:63:fb:e6:14:3f:52:fa:52:93:65:7a: 76:30:ba:50:6d:27:a7:ec:6f:e3:d2:31:a8:5b:e2: be:f3:89:11:14:69:a8:02:90:9f:a9:d6:3b:fd:6a: d5:cc:bc:52:7b:ce:dc:66:49:da:1a:f5:c0:59:3c: d7:39:d4:61:43:f8:78:55:88:8e:b0:b8:08:d0:e7: 4e:ac:17:c8:a0:29:b6:b0:4b:a0:95:41:a6:97:f7: f5:13:a1:b0:f2:61:a1:16:16:e5:64:b4:3f:11:4a: 13:e6:2a:32:19:9d:fb:81:b2:91:d5:70:c3:73:ac: 1d:56:8e:c9:5e:9c:05:0a:bf:6c:07:ca:ee:81:27: 4e:49:0b:cd:43:24:3f:e7:08:b5:85:11:52:6f:30: ea:35:ac:6b:e7:09:c6:a5:d2:c8:df:00:4c:e7:c9: 40:d6:69:72:ea:aa:f3:15:34:76:a1:1c:27:40:f7: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:20:CA:6C:3D:42:7C:26:17:94:C7:C2:06:B7:19:6C:BC:B8:D0:4E X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RyDKbD1CfCYXlMfCBrcZbLy40E4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.216.0/24 158.173.221.0/24 170.62.112.0/21 Signature Algorithm: sha256WithRSAEncryption 18:b8:85:f0:cc:3c:26:af:b0:3c:3d:d1:7b:97:27:ba:38:ea: d6:39:be:47:f9:0a:70:de:39:60:62:32:5e:62:a4:bc:a4:da: fd:d7:4b:02:f4:c4:19:ee:17:99:9d:79:4d:19:b5:aa:07:60: 0f:ed:ed:63:92:b0:86:38:5d:d6:c0:48:97:fe:cf:78:10:0c: 7c:83:e2:2d:e8:f7:52:64:2f:d0:bd:2a:2a:97:10:27:dd:54: a5:19:75:57:6b:1c:89:d4:99:22:ae:c8:51:71:ca:11:00:13: 1f:ea:1a:c5:fb:bb:79:b3:3b:e6:0b:e9:44:92:58:13:04:2d: 9c:af:e8:22:d4:48:09:a1:75:27:af:9a:eb:56:f1:30:05:24: 9c:9b:58:f0:a1:a1:5b:2a:8e:2a:ad:fd:f9:07:99:21:df:59: 0f:bd:60:77:1f:5f:08:88:94:84:47:a5:2e:3b:60:fa:84:05: 16:1f:33:a0:06:00:01:22:55:c4:72:f2:12:85:a6:4e:ed:14: 28:0a:ca:04:6b:3b:a1:84:2d:18:d4:e4:5d:e4:91:6f:e4:33: 40:c1:54:cd:2f:ec:c0:d3:70:e4:90:c4:8c:73:8b:23:dc:fc: 76:27:bd:e5:61:c5:f6:66:ab:ec:03:5a:70:bd:a7:94:e4:28: da:36:b9:f7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvgm0VQ9D+AWmssIX3aVTGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTIxMTI1MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzIwY2E2YzNkNDI3YzI2MTc5NGM3YzIwNmI3MTk2Y2JjYjhkMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6cgAhjgx6ZPvs9OQ/d+tTO4j2m9 9J34lNHtV+BK+lBK5TQDGeSnbYp4A2/cErRYSYOlbOJRWDDwz3LkipCBSW1VQyCu MpD1d1dBwxIoY/vmFD9S+lKTZXp2MLpQbSen7G/j0jGoW+K+84kRFGmoApCfqdY7 /WrVzLxSe87cZknaGvXAWTzXOdRhQ/h4VYiOsLgI0OdOrBfIoCm2sEuglUGml/f1 E6Gw8mGhFhblZLQ/EUoT5ioyGZ37gbKR1XDDc6wdVo7JXpwFCr9sB8rugSdOSQvN QyQ/5wi1hRFSbzDqNaxr5wnGpdLI3wBM58lA1mly6qrzFTR2oRwnQPfrVwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEcgymw9QnwmF5THwga3GWy8uNBOMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvUnlES2JEMUNmQ1lYbE1mQ0JyY1piTHk0MEU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnq3YAwQA nq3dAwQDqj5wMA0GCSqGSIb3DQEBCwUAA4IBAQAYuIXwzDwmr7A8PdF7lye6OOrW Ob5H+Qpw3jlgYjJeYqS8pNr910sC9MQZ7heZnXlNGbWqB2AP7e1jkrCGOF3WwEiX /s94EAx8g+It6PdSZC/QvSoqlxAn3VSlGXVXaxyJ1JkirshRccoRABMf6hrF+7t5 szvmC+lEklgTBC2cr+gi1EgJoXUnr5rrVvEwBSScm1jwoaFbKo4qrf35B5kh31kP vWB3H18IiJSER6UuO2D6hAUWHzOgBgABIlXEcvIShaZO7RQoCsoEazuhhC0Y1ORd 5JFv5DNAwVTNL+zA03DkkMSMc4sj3Px2J73lYcX2ZqvsA1pwvaeU5CjaNrn3 -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:13 2026 by rpki-client