This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa File: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (raw, json) Hash identifier: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8= Subject key identifier: 45:BC:B9:9C:BA:C9:72:F9:2B:30:C4:8A:24:3C:6F:D8:DD:43:93:38 Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Certificate serial: 019B7B367C40E280465EB1AA5D7E77F775A8 Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6939 IP address blocks: 185.149.68.0/24 maxlen: 24 185.149.69.0/24 maxlen: 24 185.149.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7c:40:e2:80:46:5e:b1:aa:5d:7e:77:f7:75:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45bcb99cbac972f92b30c48a243c6fd8dd439338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:0c:5c:5f:72:9f:33:42:0a:87:44:d5:17: 00:11:5d:62:42:cb:f6:54:ea:4a:b7:03:ad:89:e8: 1e:ee:f1:09:a5:bd:78:d6:b3:5f:56:00:fd:89:f0: 5b:73:b6:5a:f0:28:5d:27:77:ee:f1:af:30:a2:8f: b5:48:d0:41:8d:49:29:ae:b8:27:a2:eb:d5:d7:7a: 00:32:34:50:94:b8:f8:41:11:91:a7:e0:8d:7e:c8: 1b:5d:12:f2:fd:19:27:31:8b:fb:a0:35:e1:95:27: 74:c6:dd:d5:02:4b:7c:b5:a3:1c:0d:5b:e3:93:17: 29:57:8e:04:5a:4c:77:56:11:dd:0b:c6:7c:d9:cd: ef:a0:ec:2b:a2:e3:97:1e:c1:2f:55:e0:37:f6:02: 19:64:e6:bb:fe:11:eb:5d:bb:47:81:82:d1:f0:bf: cf:45:85:ef:c4:0a:4a:42:bc:b0:7d:a8:89:6a:06: 5e:c4:b1:a6:db:42:ca:06:fe:e3:51:62:9e:73:06: 5b:82:7c:43:98:3a:96:a8:53:c9:f3:74:64:5e:44: 99:0c:2f:b6:71:49:a4:f1:78:57:ba:1f:48:e8:42: 6b:66:d8:48:35:97:55:dc:35:e8:48:38:10:ef:49: 33:8d:c9:bd:4b:61:73:a8:b7:72:5c:13:3c:b2:2b: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BC:B9:9C:BA:C9:72:F9:2B:30:C4:8A:24:3C:6F:D8:DD:43:93:38 X509v3 Authority Key Identifier: keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.68.0-185.149.70.255 Signature Algorithm: sha256WithRSAEncryption 19:75:d1:75:2e:fb:ec:a1:24:a6:79:28:23:30:ea:8f:c2:d3: c9:5f:52:4d:55:2c:f1:15:df:b9:1d:d2:74:a1:56:16:55:de: 98:9b:16:24:78:8d:08:8e:7a:e6:aa:e4:b2:d3:0a:fe:f1:be: 62:10:01:77:06:1a:db:78:0c:c7:67:e5:ab:7a:0f:e2:cc:be: 72:d2:79:74:55:99:f6:95:26:06:63:79:e8:47:fe:8d:26:c1: ad:e0:b4:c4:fc:31:e6:af:42:3a:b4:9e:99:46:3b:c4:8a:5a: f1:36:6e:1b:8f:93:5c:15:ca:5b:85:15:5c:7f:94:4c:80:03: 37:41:d8:93:f2:fe:b2:9c:05:84:ff:f9:fe:f3:93:2e:0d:d4: a0:6c:73:11:b8:e1:c9:06:8b:a1:0d:b8:57:18:c5:f5:cf:e1: fd:15:47:c7:db:51:27:df:7d:a0:5e:78:3b:70:5b:1f:6f:38: bb:72:93:e6:ec:0b:d7:c3:b6:ec:0d:bf:e2:90:0c:ed:57:9e: b4:3b:88:f5:28:9a:a0:bb:83:ba:0a:7c:15:a3:e4:b3:fc:f2: 41:4e:10:d2:e0:02:c2:8e:5b:83:79:07:5d:0d:99:1f:6d:c1: d6:59:aa:70:d7:27:6a:35:77:22:c8:01:c4:27:91:12:da:f0: a3:47:44:30 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NnxA4oBGXrGqXX5393WoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi YmIzN2IwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWJjYjk5Y2JhYzk3MmY5MmIzMGM0OGEyNDNjNmZkOGRkNDM5MzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEkMXF9ynzNCCodE1RcAEV1iQsv2 VOpKtwOtiege7vEJpb141rNfVgD9ifBbc7Za8ChdJ3fu8a8woo+1SNBBjUkprrgn ouvV13oAMjRQlLj4QRGRp+CNfsgbXRLy/RknMYv7oDXhlSd0xt3VAkt8taMcDVvj kxcpV44EWkx3VhHdC8Z82c3voOwrouOXHsEvVeA39gIZZOa7/hHrXbtHgYLR8L/P RYXvxApKQrywfaiJagZexLGm20LKBv7jUWKecwZbgnxDmDqWqFPJ83RkXkSZDC+2 cUmk8XhXuh9I6EJrZthINZdV3DXoSDgQ70kzjcm9S2FzqLdyXBM8sit9QQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEW8uZy6yXL5KzDEiiQ8b9jdQ5M4MB8GA1UdIwQY MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt OThiZTMzNWYzYzU0LzEvUmJ5NW5MckpjdmtyTU1TS0pEeHYyTjFEa3pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0 LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5lUQD BAC5lUYwDQYJKoZIhvcNAQELBQADggEBABl10XUu++yhJKZ5KCMw6o/C08lfUk1V LPEV37kd0nShVhZV3pibFiR4jQiOeuaq5LLTCv7xvmIQAXcGGtt4DMdn5at6D+LM vnLSeXRVmfaVJgZjeehH/o0mwa3gtMT8MeavQjq0nplGO8SKWvE2bhuPk1wVyluF FVx/lEyAAzdB2JPy/rKcBYT/+f7zky4N1KBscxG44ckGi6ENuFcYxfXP4f0VR8fb USfffaBeeDtwWx9vOLtyk+bsC9fDtuwNv+KQDO1XnrQ7iPUomqC7g7oKfBWj5LP8 8kFOENLgAsKOW4N5B10NmR9twdZZqnDXJ2o1dyLIAcQnkRLa8KNHRDA= -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:53 2026 by rpki-client