This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/YmvEy21Oo_K93uY9_6q4yH9waAs.roa File: YmvEy21Oo_K93uY9_6q4yH9waAs.roa (raw, json) Hash identifier: Dd5U/8FlVGfaWd8sQ9wxYRvKK+HxQrbJ5WW1os00xSE= Subject key identifier: 62:6B:C4:CB:6D:4E:A3:F2:BD:DE:E6:3D:FF:AA:B8:C8:7F:70:68:0B Certificate issuer: /CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57 Certificate serial: 019B7E378F62439C7AD3D3A5D7A56E0A607D Authority key identifier: 8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/YmvEy21Oo_K93uY9_6q4yH9waAs.roa Signing time: Fri 02 Jan 2026 10:18:49 +0000 ROA not before: Fri 02 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214100 IP address blocks: 185.209.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8f:62:43:9c:7a:d3:d3:a5:d7:a5:6e:0a:60:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57 Validity Not Before: Jan 2 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=626bc4cb6d4ea3f2bddee63dffaab8c87f70680b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:63:23:09:c7:28:63:a0:d5:2a:f9:26:d4: 7e:77:24:85:3b:28:3a:96:37:ff:3c:30:dd:f4:d7: 80:d7:36:cb:e3:c1:c3:d7:2e:46:55:56:dd:8b:ba: 17:0d:32:5b:4d:9e:f7:d0:8d:49:20:94:97:42:74: de:b8:bc:89:bb:72:58:02:be:73:17:b8:83:74:e4: 8b:1b:38:a8:9f:9d:f6:9f:20:e4:9e:62:40:db:ed: 41:1c:d0:ed:5e:53:e2:fa:54:bc:32:d5:9b:0d:68: 35:78:f7:3c:67:97:1e:7b:31:bf:be:54:35:79:ee: 8f:0d:07:f5:ef:a7:55:c0:79:b7:b9:db:54:37:a0: 00:dc:5a:96:21:1a:d9:cb:4f:36:be:23:ae:f9:9f: 6f:23:8b:87:7a:df:15:31:b6:46:c2:12:dd:b0:30: 58:5d:88:8c:7e:26:32:cb:19:6a:52:91:6c:75:de: e5:1a:4f:bd:1f:a9:1d:ee:29:9b:6e:28:af:fd:f9: fa:eb:8e:20:ac:ca:06:c6:5b:59:c6:b7:ee:e9:5f: 35:96:40:24:fe:6a:6c:8d:8f:9d:0d:18:b4:c0:3a: ff:72:b1:85:04:2a:95:24:6c:2a:91:68:1d:4c:00: 44:9a:6b:00:3b:c7:59:f9:5f:0e:ea:c2:cc:d1:58: 19:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6B:C4:CB:6D:4E:A3:F2:BD:DE:E6:3D:FF:AA:B8:C8:7F:70:68:0B X509v3 Authority Key Identifier: keyid:8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/YmvEy21Oo_K93uY9_6q4yH9waAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.40.0/24 Signature Algorithm: sha256WithRSAEncryption a2:1b:00:d4:9a:86:d3:5f:47:c7:ec:24:87:22:91:94:18:34: bf:a6:96:91:b3:75:83:c0:4b:90:50:4a:cb:28:2b:f6:68:7c: 9a:53:9a:79:9c:87:55:f2:10:19:85:c3:52:e6:73:31:05:f9: 87:e1:22:cd:e2:a1:7a:1b:05:0b:9b:2e:8b:39:87:2a:a5:6e: d4:40:70:3c:80:7b:cd:76:25:82:9a:40:2f:e7:7b:05:09:f4: ff:a2:67:6d:06:46:d5:39:19:53:c3:27:2d:1b:46:1a:90:95: 5d:c0:38:8a:f9:50:25:72:25:85:ae:82:63:aa:39:74:e1:87: f5:ef:8e:be:2b:f0:bf:bf:d2:99:d7:d9:52:8f:3d:48:03:14: 5a:f3:2d:f9:1c:d5:ca:78:f7:4f:4e:3f:ba:1e:fa:4d:66:9d: 17:28:84:c9:81:7d:07:d9:b0:eb:06:cf:35:84:a4:50:32:93: 36:d0:d8:b3:fc:07:99:49:e7:6b:25:d9:fb:61:1b:89:bc:4e: 7b:6c:d7:af:ef:d2:f1:b3:b2:e9:ee:da:4a:9f:08:7a:8b:c1: c5:71:4f:21:14:0b:c6:8f:e3:93:03:1b:31:58:9c:1c:f1:62: d8:92:da:8b:dc:5c:6e:58:c6:b8:4d:7c:49:54:00:ad:73:42: 6d:7e:82:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N49iQ5x609Ol16VuCmB9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYzVhOGY3NmRmMTU2ODdmODM0NDFjOWE2YjU1NDU3OGYz Y2RmNTcwHhcNMjYwMTAyMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjZiYzRjYjZkNGVhM2YyYmRkZWU2M2RmZmFhYjhjODdmNzA2ODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPxjIwnHKGOg1Sr5JtR+dySFOyg6 ljf/PDDd9NeA1zbL48HD1y5GVVbdi7oXDTJbTZ730I1JIJSXQnTeuLyJu3JYAr5z F7iDdOSLGzion532nyDknmJA2+1BHNDtXlPi+lS8MtWbDWg1ePc8Z5ceezG/vlQ1 ee6PDQf176dVwHm3udtUN6AA3FqWIRrZy082viOu+Z9vI4uHet8VMbZGwhLdsDBY XYiMfiYyyxlqUpFsdd7lGk+9H6kd7imbbiiv/fn6644grMoGxltZxrfu6V81lkAk /mpsjY+dDRi0wDr/crGFBCqVJGwqkWgdTABEmmsAO8dZ+V8O6sLM0VgZxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGJrxMttTqPyvd7mPf+quMh/cGgLMB8GA1UdIwQY MBaAFIvFqPdt8VaH+DRByaa1VFePPN9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNWU4M2QtMjM2NS00MTI2LTlhYTct OTRiOWNmMmNkMmVmLzEvWW12RXkyMU9vX0s5M3VZOV82cTR5SDl3YUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yNWU4M2QtMjM2NS00MTI2LTlhYTctOTRiOWNmMmNkMmVm LzEvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudEoMA0G CSqGSIb3DQEBCwUAA4IBAQCiGwDUmobTX0fH7CSHIpGUGDS/ppaRs3WDwEuQUErL KCv2aHyaU5p5nIdV8hAZhcNS5nMxBfmH4SLN4qF6GwULmy6LOYcqpW7UQHA8gHvN diWCmkAv53sFCfT/omdtBkbVORlTwyctG0YakJVdwDiK+VAlciWFroJjqjl04Yf1 746+K/C/v9KZ19lSjz1IAxRa8y35HNXKePdPTj+6HvpNZp0XKITJgX0H2bDrBs81 hKRQMpM20Niz/AeZSedrJdn7YRuJvE57bNev79Lxs7Lp7tpKnwh6i8HFcU8hFAvG j+OTAxsxWJwc8WLYktqL3FxuWMa4TXxJVACtc0JtfoL3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:11 2026 by rpki-client