This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/YHr6sMN1EVbEwUde6FetuHcueOA.roa File: YHr6sMN1EVbEwUde6FetuHcueOA.roa (raw, json) Hash identifier: 0BAOQ2lWNPhsH0gX4p/TlQYVZnjFg2uh0FOWf3CJEt0= Subject key identifier: 60:7A:FA:B0:C3:75:11:56:C4:C1:47:5E:E8:57:AD:B8:77:2E:78:E0 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019B7F843502852CA28BF21071E133990DAF Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/YHr6sMN1EVbEwUde6FetuHcueOA.roa Signing time: Fri 02 Jan 2026 16:22:09 +0000 ROA not before: Fri 02 Jan 2026 16:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 185.252.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:35:02:85:2c:a2:8b:f2:10:71:e1:33:99:0d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Jan 2 16:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=607afab0c3751156c4c1475ee857adb8772e78e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:20:91:37:00:2e:f4:6e:bd:de:8e:8b:e4: de:be:98:b6:91:1d:e8:fc:ac:2d:94:e3:d3:1a:b5: d3:47:db:f6:98:23:59:8d:4d:68:97:76:86:73:05: 97:a5:6d:50:ab:ec:28:51:6f:9c:d1:fd:46:49:d3: 12:6c:b1:dc:cf:74:32:75:ee:1c:40:ce:b0:2b:68: e9:9c:d0:40:da:c6:0e:81:e2:22:8c:d3:3d:46:72: a1:24:89:a6:37:cc:b4:43:7f:44:18:3a:e7:63:2c: 32:08:52:b5:7d:43:9f:38:38:9a:42:5a:cb:19:5c: 63:95:35:8d:46:a3:4e:00:f5:35:06:9e:ab:21:f6: a1:22:19:ef:02:bf:5e:82:2e:cc:03:0d:29:f7:f3: ec:2a:dd:6b:cd:ce:b2:0e:24:e9:07:e4:97:ae:a0: 63:6a:c0:80:5d:ad:a4:ff:64:1f:f3:ea:16:3f:02: 10:8f:61:0f:20:c9:8c:2a:10:00:fc:86:11:04:0a: 1e:fb:dc:f7:dc:8b:16:f1:1e:0f:3e:b7:ee:3d:5e: 2f:05:86:65:99:62:07:2a:aa:b7:3e:d9:42:69:c4: 6b:65:76:1b:0d:4c:23:93:9a:f4:1b:f6:bf:dc:04: 57:12:6f:00:12:a4:ff:fe:24:45:ee:02:51:52:51: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7A:FA:B0:C3:75:11:56:C4:C1:47:5E:E8:57:AD:B8:77:2E:78:E0 X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/YHr6sMN1EVbEwUde6FetuHcueOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.212.0/24 Signature Algorithm: sha256WithRSAEncryption b9:81:3c:0b:bc:0b:09:04:5f:ac:82:44:e9:43:01:1f:7f:23: 95:d9:10:2b:45:83:df:12:1a:ef:98:82:2b:01:5e:eb:a4:a2: 10:ca:75:40:88:44:50:0f:17:c9:fe:76:e8:91:c6:26:be:92: d8:4a:93:96:2e:2e:30:d3:b6:65:a6:db:69:7f:67:80:13:20: a4:dc:7a:2b:b7:05:95:66:d2:26:c1:d1:2a:11:15:c9:86:bc: 3a:9a:a3:a7:f8:9b:91:39:90:d9:80:3d:9b:a8:67:e9:48:83: 02:8d:b8:85:65:eb:e5:91:95:a8:12:3b:f4:c1:12:d5:3b:2b: 70:f9:24:e2:1f:4f:e8:ca:7b:83:06:cf:f2:fd:66:a4:a2:d3: 4d:e3:31:a9:3d:0a:5c:4f:ae:16:27:a3:4c:16:73:24:d0:3a: 3f:f4:c5:15:b7:c2:b3:e0:42:dd:fa:82:0d:d0:e3:4b:23:a6: 2e:6d:20:90:3f:70:d6:dc:ca:be:7b:f8:26:2f:db:44:4b:f8: 4b:3d:a3:b3:e5:a5:fe:68:e6:06:fa:4e:a5:b1:83:b9:f2:2c: 21:4d:ac:fd:dd:d4:29:72:f7:1d:c7:55:31:78:a7:b8:83:ea: fd:85:87:d3:ec:b1:ba:5a:80:ff:52:45:01:eb:6e:49:39:98: 42:df:4c:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDUChSyii/IQceEzmQ2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjYwMTAyMTYyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDdhZmFiMGMzNzUxMTU2YzRjMTQ3NWVlODU3YWRiODc3MmU3OGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLsgkTcALvRuvd6Oi+Tevpi2kR3o /KwtlOPTGrXTR9v2mCNZjU1ol3aGcwWXpW1Qq+woUW+c0f1GSdMSbLHcz3Qyde4c QM6wK2jpnNBA2sYOgeIijNM9RnKhJImmN8y0Q39EGDrnYywyCFK1fUOfODiaQlrL GVxjlTWNRqNOAPU1Bp6rIfahIhnvAr9egi7MAw0p9/PsKt1rzc6yDiTpB+SXrqBj asCAXa2k/2Qf8+oWPwIQj2EPIMmMKhAA/IYRBAoe+9z33IsW8R4PPrfuPV4vBYZl mWIHKqq3PtlCacRrZXYbDUwjk5r0G/a/3ARXEm8AEqT//iRF7gJRUlEnXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGB6+rDDdRFWxMFHXuhXrbh3LnjgMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvWUhyNnNNTjFFVmJFd1VkZTZGZXR1SGN1ZU9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufzUMA0G CSqGSIb3DQEBCwUAA4IBAQC5gTwLvAsJBF+sgkTpQwEffyOV2RArRYPfEhrvmIIr AV7rpKIQynVAiERQDxfJ/nbokcYmvpLYSpOWLi4w07Zlpttpf2eAEyCk3HortwWV ZtImwdEqERXJhrw6mqOn+JuROZDZgD2bqGfpSIMCjbiFZevlkZWoEjv0wRLVOytw +STiH0/oynuDBs/y/WakotNN4zGpPQpcT64WJ6NMFnMk0Do/9MUVt8Kz4ELd+oIN 0ONLI6YubSCQP3DW3Mq+e/gmL9tES/hLPaOz5aX+aOYG+k6lsYO58iwhTaz93dQp cvcdx1UxeKe4g+r9hYfT7LG6WoD/UkUB625JOZhC30zm -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:51 2026 by rpki-client