This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa File: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (raw, json) Hash identifier: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI= Subject key identifier: 8F:25:46:0B:21:A0:10:15:89:0C:7A:76:24:49:F4:CA:52:CE:42:9C Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Certificate serial: 019B78A36CFFF41EC52A1A7A95D27F9C1C48 Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204176 IP address blocks: 185.112.60.0/24 maxlen: 24 185.112.61.0/24 maxlen: 24 185.112.62.0/24 maxlen: 24 185.112.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6c:ff:f4:1e:c5:2a:1a:7a:95:d2:7f:9c:1c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f25460b21a01015890c7a762449f4ca52ce429c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:e1:50:e9:c1:72:45:34:db:1e:b6:fc:a4: df:1b:b0:de:59:50:fb:c7:db:ad:c9:a8:83:0f:1c: 2d:33:36:ec:5e:82:2b:89:5c:c2:65:1e:b7:15:7d: 11:c3:f6:9c:b1:5a:f8:d7:5f:f4:2a:58:83:4b:26: 87:5a:d5:be:af:15:fd:96:68:76:d5:6e:58:42:82: 41:78:db:7a:13:5b:91:bd:fb:0b:7a:26:6d:73:df: 9c:9f:fc:25:6d:dd:9d:c7:36:fa:1d:7b:6f:d7:f0: 16:15:89:96:df:67:d0:14:10:29:14:6e:98:9f:3c: 10:6e:0b:8e:47:83:e9:16:98:ae:e7:74:e4:88:ac: f2:d2:6d:09:29:38:d5:3a:66:23:4b:c2:e8:a7:eb: 18:f3:97:a5:ad:c7:a7:a2:cd:90:0a:1d:1b:a6:01: 49:06:01:aa:86:6f:36:d7:25:a4:f3:c2:89:29:be: a1:42:13:1a:f5:be:11:72:f6:f7:9a:3e:e7:a2:e9: 9a:41:53:b9:47:81:31:d3:f4:54:fc:4c:a4:d1:07: bd:93:5c:6e:81:34:01:93:04:ae:f8:3b:fb:77:2f: 60:af:c2:29:28:83:c2:09:52:c1:e2:cf:de:bd:5a: 54:f4:fb:e0:57:07:4f:dc:16:9d:02:a2:ad:8c:d0: 98:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:25:46:0B:21:A0:10:15:89:0C:7A:76:24:49:F4:CA:52:CE:42:9C X509v3 Authority Key Identifier: keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.60.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:71:e2:9b:2c:c4:1d:8a:7c:a9:43:2c:2d:f0:0e:d5:7f:68: a6:75:b7:68:2f:c4:66:6e:1f:a2:71:0f:1d:35:27:9f:57:6a: 27:b5:4b:f1:aa:41:2d:c4:45:c4:51:25:a5:e7:f2:8c:37:53: 41:62:56:90:50:b8:ae:90:0a:b0:cd:b7:f2:4a:27:b8:55:e7: 2e:8b:f5:93:30:3d:08:55:b9:85:4b:b5:85:cf:43:0d:69:7e: d7:41:7a:83:98:fb:c5:83:cc:92:79:9e:49:76:38:2b:9f:69: ba:6a:36:3b:9c:5a:2a:96:d5:aa:40:c8:88:4d:34:b3:af:f3: 30:e8:f5:53:2d:a2:3e:1f:d1:96:74:20:9d:9d:e3:6f:4f:ea: d9:0c:0f:33:df:79:85:ef:d4:83:d7:b8:15:27:f8:9c:04:c9: cf:f5:94:5a:92:a7:51:cb:45:34:c8:ff:7e:9b:a3:db:97:7f: 5c:e3:de:f3:62:1a:92:d5:4a:c3:5f:70:f0:58:ec:44:56:a6: fa:12:04:0a:89:2f:0f:fa:da:9c:8b:fd:cf:61:29:29:bc:d6: c4:3b:3d:ea:50:be:50:7c:b7:6c:bd:08:2c:f0:c3:20:ed:f4: 7e:86:6d:47:3d:5d:ec:c6:da:82:e9:e8:99:ae:c7:d6:c1:03: 75:af:98:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2z/9B7FKhp6ldJ/nBxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzQ5MTMwOTRhMjEyNjhjNzNhNjc2NTNhMzczOGQ3M2U1 YzU5YTcwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjI1NDYwYjIxYTAxMDE1ODkwYzdhNzYyNDQ5ZjRjYTUyY2U0MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFPhUOnBckU02x62/KTfG7DeWVD7 x9utyaiDDxwtMzbsXoIriVzCZR63FX0Rw/acsVr411/0KliDSyaHWtW+rxX9lmh2 1W5YQoJBeNt6E1uRvfsLeiZtc9+cn/wlbd2dxzb6HXtv1/AWFYmW32fQFBApFG6Y nzwQbguOR4PpFpiu53TkiKzy0m0JKTjVOmYjS8Lop+sY85elrcenos2QCh0bpgFJ BgGqhm821yWk88KJKb6hQhMa9b4Rcvb3mj7noumaQVO5R4Ex0/RU/Eyk0Qe9k1xu gTQBkwSu+Dv7dy9gr8IpKIPCCVLB4s/evVpU9PvgVwdP3BadAqKtjNCYZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI8lRgshoBAViQx6diRJ9MpSzkKcMB8GA1UdIwQY MBaAFNHEkTCUohJoxzpnZTo3ONc+XFmnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAt MzNhODJhYjVmNTEzLzEvanlWR0N5R2dFQldKREhwMkpFbjB5bExPUXB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAtMzNhODJhYjVmNTEz LzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXA8MA0G CSqGSIb3DQEBCwUAA4IBAQAMceKbLMQdinypQywt8A7Vf2imdbdoL8Rmbh+icQ8d NSefV2ontUvxqkEtxEXEUSWl5/KMN1NBYlaQULiukAqwzbfySie4Vecui/WTMD0I VbmFS7WFz0MNaX7XQXqDmPvFg8ySeZ5Jdjgrn2m6ajY7nFoqltWqQMiITTSzr/Mw 6PVTLaI+H9GWdCCdneNvT+rZDA8z33mF79SD17gVJ/icBMnP9ZRakqdRy0U0yP9+ m6Pbl39c497zYhqS1UrDX3DwWOxEVqb6EgQKiS8P+tqci/3PYSkpvNbEOz3qUL5Q fLdsvQgs8MMg7fR+hm1HPV3sxtqC6eiZrsfWwQN1r5gS -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:12 2026 by rpki-client