This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/y0R9OFgldF2xPpgLWZUCfSkApQg.roa File: y0R9OFgldF2xPpgLWZUCfSkApQg.roa (raw, json) Hash identifier: K3dYxSYTTkLjGKIU3PEtGoJyW8WxL0sMjVKEq6R8Rf4= Subject key identifier: CB:44:7D:38:58:25:74:5D:B1:3E:98:0B:59:95:02:7D:29:00:A5:08 Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b Certificate serial: 019B7EA7419742D5C31CEF6E55ED76B6F982 Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/y0R9OFgldF2xPpgLWZUCfSkApQg.roa Signing time: Fri 02 Jan 2026 12:20:49 +0000 ROA not before: Fri 02 Jan 2026 12:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215641 IP address blocks: 185.217.62.0/24 maxlen: 24 2a10:d900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:41:97:42:d5:c3:1c:ef:6e:55:ed:76:b6:f9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb447d385825745db13e980b5995027d2900a508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:84:88:cf:52:18:b7:47:fb:d2:8e:00:f1: de:66:86:2e:c2:ed:5b:3d:6a:a2:99:df:5f:2c:4b: c7:fb:6c:df:a3:00:f5:d2:f3:62:f3:a4:c7:3d:89: a1:18:6a:d1:45:a1:57:d8:e1:eb:2c:8e:51:6d:60: 8c:8d:36:e2:cd:8b:3c:31:97:bf:d5:e9:fe:88:c1: d9:38:d6:4a:0a:01:db:fc:10:ba:e9:3a:4b:3f:56: 33:aa:c6:69:0f:ad:ac:7e:bf:07:ec:b9:c1:14:9c: 52:b2:6a:b8:8a:dc:cb:ed:76:10:89:3d:da:03:f3: 37:45:0c:cf:ea:12:5c:ff:32:a6:b8:01:d5:bf:11: 7c:b4:86:22:20:62:d5:ec:8c:fa:c4:80:b9:5e:3e: e3:d5:a4:1c:f4:aa:c1:9c:c5:c3:1c:09:88:ee:0b: 85:43:98:ef:82:76:62:87:ca:2f:f5:38:e4:83:da: 2d:43:0f:62:cc:55:99:2f:f1:1d:a1:d2:85:01:34: 9d:f2:b8:82:1d:3c:66:f3:e0:c3:e2:b3:a8:57:f9: 13:0b:6b:32:42:f5:09:62:33:f8:ec:c7:e8:ae:af: 2d:08:8c:f1:2d:41:c5:bb:05:21:29:df:cf:97:87: 3a:ad:2e:8f:dc:28:20:72:1a:1c:54:11:00:a3:d8: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:44:7D:38:58:25:74:5D:B1:3E:98:0B:59:95:02:7D:29:00:A5:08 X509v3 Authority Key Identifier: keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/y0R9OFgldF2xPpgLWZUCfSkApQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.62.0/24 IPv6: 2a10:d900::/32 Signature Algorithm: sha256WithRSAEncryption 18:7c:b7:d6:5a:bb:2e:1d:3a:77:6b:26:8f:ef:d3:e0:4a:f5: 3f:41:bc:00:76:e2:8d:6d:d5:4a:91:60:82:03:a6:73:97:f4: 35:d3:cd:a1:5c:35:cd:80:33:4f:d7:34:fa:73:c5:02:b5:d4: 33:7c:a0:77:36:7f:55:e5:8c:47:1e:2d:65:5e:95:dd:72:d4: 15:39:2a:ce:55:66:c8:4c:ef:d8:2b:ff:59:b3:54:39:69:92: a2:c6:33:f2:e6:a3:26:01:90:a9:2e:fb:fa:66:ce:9b:c9:f0: 6f:1d:04:6c:b0:7d:04:8e:3b:6b:06:b1:24:11:d6:a4:4d:8c: a6:d4:1b:ef:4a:9e:90:79:d9:2d:4a:42:ed:00:43:5e:81:7e: 55:0e:c2:59:c9:a0:8f:38:4e:88:96:4f:c6:fd:53:f1:8a:5b: f5:10:0f:2b:fe:bc:38:d5:04:12:e3:92:5b:37:9a:5c:42:53: 46:0e:4c:6c:da:ca:ca:f3:cd:0e:56:60:c2:82:9c:19:fa:b7: 9b:c0:39:a0:e6:db:15:89:a0:8c:77:61:f2:72:c3:37:e2:6f: a4:11:fc:d6:b8:b5:e3:7f:52:65:5b:3a:15:98:2f:49:dd:d9: c8:2b:3c:a8:ad:1a:77:3c:5a:34:fb:ca:6d:5a:d0:83:87:35: 1d:2c:21:8f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+p0GXQtXDHO9uVe12tvmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOWVmMjA5M2RhMTVlZWM5MGVmYjgzN2I5NTAxNjQ2Njlm NjE5OGIwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjQ0N2QzODU4MjU3NDVkYjEzZTk4MGI1OTk1MDI3ZDI5MDBhNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWeEiM9SGLdH+9KOAPHeZoYuwu1b PWqimd9fLEvH+2zfowD10vNi86THPYmhGGrRRaFX2OHrLI5RbWCMjTbizYs8MZe/ 1en+iMHZONZKCgHb/BC66TpLP1YzqsZpD62sfr8H7LnBFJxSsmq4itzL7XYQiT3a A/M3RQzP6hJc/zKmuAHVvxF8tIYiIGLV7Iz6xIC5Xj7j1aQc9KrBnMXDHAmI7guF Q5jvgnZih8ov9Tjkg9otQw9izFWZL/EdodKFATSd8riCHTxm8+DD4rOoV/kTC2sy QvUJYjP47Mforq8tCIzxLUHFuwUhKd/Pl4c6rS6P3CggchocVBEAo9hS/wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMtEfThYJXRdsT6YC1mVAn0pAKUIMB8GA1UdIwQY MBaAFNCe8gk9oV7skO+4N7lQFkZp9hmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgt NmIyZTY4ZGRlMWUzLzEveTBSOU9GZ2xkRjJ4UHBnTFdaVUNmU2tBcFFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgtNmIyZTY4ZGRlMWUz LzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudk+MA0E AgACMAcDBQAqENkAMA0GCSqGSIb3DQEBCwUAA4IBAQAYfLfWWrsuHTp3ayaP79Pg SvU/QbwAduKNbdVKkWCCA6Zzl/Q1082hXDXNgDNP1zT6c8UCtdQzfKB3Nn9V5YxH Hi1lXpXdctQVOSrOVWbITO/YK/9Zs1Q5aZKixjPy5qMmAZCpLvv6Zs6byfBvHQRs sH0EjjtrBrEkEdakTYym1BvvSp6QedktSkLtAENegX5VDsJZyaCPOE6Ilk/G/VPx ilv1EA8r/rw41QQS45JbN5pcQlNGDkxs2srK880OVmDCgpwZ+rebwDmg5tsViaCM d2HycsM34m+kEfzWuLXjf1JlWzoVmC9J3dnIKzyorRp3PFo0+8ptWtCDhzUdLCGP -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:11 2026 by rpki-client