This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa File: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (raw, json) Hash identifier: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg= Subject key identifier: 71:8E:7E:D5:0F:A0:0A:E7:43:BE:FB:23:9E:D7:0C:F4:B1:CD:27:91 Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019B7EA51129C571501D28D6B8D8376DA2DC Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa Signing time: Fri 02 Jan 2026 12:18:25 +0000 ROA not before: Fri 02 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48629 IP address blocks: 185.170.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:11:29:c5:71:50:1d:28:d6:b8:d8:37:6d:a2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Jan 2 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=718e7ed50fa00ae743befb239ed70cf4b1cd2791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:31:03:9a:4a:dd:6b:e2:40:3c:09:e5:01: f0:1c:73:e4:71:1f:db:dd:a8:b4:c4:a8:8c:73:91: b2:38:98:34:7b:05:20:e5:a2:19:8b:07:01:bc:f9: ac:92:cc:28:b0:48:48:e7:4c:90:6f:cc:d7:67:58: c6:88:9c:31:e7:5d:9d:e0:3b:d8:ec:07:15:b7:ea: 1f:b3:10:b9:d6:2b:8b:43:68:91:46:b8:d6:b2:ea: a8:ea:81:09:ec:18:ca:81:c1:95:43:fe:11:af:a1: f0:0c:6d:de:36:6c:7e:a7:02:bd:d2:e8:56:9d:e7: b8:ae:26:5c:cb:cf:1d:9b:af:8f:58:0d:c8:af:54: be:cc:04:2d:b3:1d:a4:1c:b6:3a:f0:8a:01:87:e0: c3:14:24:9a:76:93:10:b9:2a:49:24:8e:b3:42:5f: fc:62:f4:91:e0:50:c9:e5:44:2c:17:72:4b:c7:b9: d5:86:aa:11:13:99:d6:16:41:0d:33:80:ea:5e:ae: dd:63:39:3c:98:6b:45:b0:0c:04:b2:48:73:70:10: 6e:bb:cc:0a:32:7a:09:08:60:96:ce:fc:44:2a:f9: 31:5b:ae:b7:31:7e:4a:1b:75:b9:e6:fa:ad:f4:dc: a9:1c:ed:bc:7a:96:d3:0d:fe:52:fe:ae:46:68:ca: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8E:7E:D5:0F:A0:0A:E7:43:BE:FB:23:9E:D7:0C:F4:B1:CD:27:91 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.131.0/24 Signature Algorithm: sha256WithRSAEncryption 61:06:af:7a:64:75:1c:42:fe:75:4a:2a:39:92:0a:44:19:e6: 61:97:a2:7a:af:6f:57:45:05:e6:29:c1:70:7d:1b:f1:ac:9f: 7e:60:11:a1:42:c7:89:9f:9e:86:1c:80:70:bd:62:8a:59:21: 7a:e5:e2:76:a4:aa:68:77:25:57:87:8f:86:c0:c1:ff:02:c2: ad:36:98:9f:04:0e:b6:61:e3:9c:a0:69:13:73:c9:c5:57:e5: aa:b7:89:1b:da:d8:dd:27:d8:10:a2:b2:9d:4c:93:85:fc:2b: d9:70:3e:c3:52:88:24:1b:a3:1f:85:ac:0a:59:77:9d:7e:b9: 38:65:87:3e:fb:8c:6f:ca:9d:f4:cb:2c:1a:0c:bf:00:04:c1: 73:49:62:0f:35:90:7d:e8:25:9d:46:42:98:34:b1:85:91:46: e7:8f:b0:6f:d9:09:84:bd:75:05:15:16:5f:65:03:b4:57:03: 02:37:cb:ed:be:00:be:9e:b3:1f:57:85:13:cb:80:88:00:18: 63:e4:6c:99:8b:c8:ec:17:23:16:3b:f4:98:4e:ce:25:01:e8: 7f:e7:b1:25:a4:bf:cb:d5:1c:db:bf:9c:11:81:36:1f:f6:e0: 61:8d:20:45:2d:ac:af:c2:39:39:b7:a4:5f:94:1c:a9:da:38: 49:c4:df:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pREpxXFQHSjWuNg3baLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjYwMTAyMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MThlN2VkNTBmYTAwYWU3NDNiZWZiMjM5ZWQ3MGNmNGIxY2QyNzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9sxA5pK3WviQDwJ5QHwHHPkcR/b 3ai0xKiMc5GyOJg0ewUg5aIZiwcBvPmskswosEhI50yQb8zXZ1jGiJwx512d4DvY 7AcVt+ofsxC51iuLQ2iRRrjWsuqo6oEJ7BjKgcGVQ/4Rr6HwDG3eNmx+pwK90uhW nee4riZcy88dm6+PWA3Ir1S+zAQtsx2kHLY68IoBh+DDFCSadpMQuSpJJI6zQl/8 YvSR4FDJ5UQsF3JLx7nVhqoRE5nWFkENM4DqXq7dYzk8mGtFsAwEskhzcBBuu8wK MnoJCGCWzvxEKvkxW663MX5KG3W55vqt9NypHO28epbTDf5S/q5GaMoMSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHGOftUPoArnQ777I57XDPSxzSeRMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvY1k1LTFRLWdDdWREdnZzam50Y005TEhOSjVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaqDMA0G CSqGSIb3DQEBCwUAA4IBAQBhBq96ZHUcQv51Sio5kgpEGeZhl6J6r29XRQXmKcFw fRvxrJ9+YBGhQseJn56GHIBwvWKKWSF65eJ2pKpodyVXh4+GwMH/AsKtNpifBA62 YeOcoGkTc8nFV+Wqt4kb2tjdJ9gQorKdTJOF/CvZcD7DUogkG6MfhawKWXedfrk4 ZYc++4xvyp30yywaDL8ABMFzSWIPNZB96CWdRkKYNLGFkUbnj7Bv2QmEvXUFFRZf ZQO0VwMCN8vtvgC+nrMfV4UTy4CIABhj5GyZi8jsFyMWO/SYTs4lAeh/57ElpL/L 1Rzbv5wRgTYf9uBhjSBFLayvwjk5t6RflByp2jhJxN/i -----END CERTIFICATE-----Generated at Fri Jan 23 09:21:42 2026 by rpki-client