This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/tYHsABD7wqlyFO9X8Yy_-luDgKw.roa File: tYHsABD7wqlyFO9X8Yy_-luDgKw.roa (raw, json) Hash identifier: i2ZdarVr8LLRaDGxjRmRFhWtnj6AvxOcMrUABRbNylE= Subject key identifier: B5:81:EC:00:10:FB:C2:A9:72:14:EF:57:F1:8C:BF:FA:5B:83:80:AC Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a Certificate serial: 019B77592A396B8C9A2DC0A901FDC6334E63 Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/tYHsABD7wqlyFO9X8Yy_-luDgKw.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205108 IP address blocks: 185.230.132.0/22 maxlen: 22 2a0c:1f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2a:39:6b:8c:9a:2d:c0:a9:01:fd:c6:33:4e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b581ec0010fbc2a97214ef57f18cbffa5b8380ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fb:55:53:4a:e8:03:4e:c9:4d:dd:cb:18:11: 6a:7f:81:b0:31:b2:6b:07:91:e0:14:ab:19:b5:52: 2b:fd:81:30:0c:82:72:51:40:d7:08:ca:ee:19:1c: d8:17:d1:3a:ee:68:e0:d6:73:e1:56:bf:b1:76:2e: ac:fb:07:5d:95:7e:d4:70:ff:63:b0:f3:4f:99:72: a9:b6:d8:c6:87:cd:6b:d3:a0:11:8b:d4:4c:e8:e8: cd:24:eb:b4:8d:ea:93:bf:c1:17:16:97:4c:8d:61: 0c:5c:8f:ce:be:37:81:d4:13:ac:bb:d5:0c:0d:27: b7:25:d7:e2:2f:ed:3e:67:fb:b0:7b:83:c4:da:e2: b3:7d:dd:34:f1:72:25:db:fc:48:2c:9f:ee:bb:4e: aa:5b:3d:ac:8b:e0:5f:63:30:f8:65:14:93:e1:0b: 10:94:56:de:88:60:91:58:0a:78:46:9d:be:1a:2a: 14:37:70:1e:b4:8a:92:17:53:38:c0:86:8f:f3:cd: d8:99:ff:9f:83:d1:0a:b4:6e:44:1b:bb:5d:2e:c5: ef:9d:ba:ff:7f:2f:4d:b8:9e:9c:e0:ac:8e:82:49: 1c:05:cd:bf:4b:01:49:0e:6a:41:c9:f6:53:ca:6f: 51:73:ed:9b:8b:f0:80:67:ca:29:80:53:c9:78:8b: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:81:EC:00:10:FB:C2:A9:72:14:EF:57:F1:8C:BF:FA:5B:83:80:AC X509v3 Authority Key Identifier: keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/tYHsABD7wqlyFO9X8Yy_-luDgKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.132.0/22 IPv6: 2a0c:1f00::/29 Signature Algorithm: sha256WithRSAEncryption 1b:ad:e1:1b:fb:b8:fa:2b:08:b9:bc:85:a9:a1:4d:79:b8:05: c9:4b:b9:18:6d:e3:52:4a:c9:f4:9d:47:1d:14:d2:9d:67:a0: ac:21:c1:a3:47:1e:4b:92:4e:ec:20:46:b4:11:e4:09:1e:f8: 56:f7:50:2e:5b:fa:d2:40:f4:88:dc:4c:d7:1c:13:d5:d9:63: d9:bc:9f:db:0d:e8:0c:48:14:56:96:15:47:04:a1:84:25:09: 1e:01:eb:c7:ed:a2:62:c4:b8:c4:48:24:72:3b:d6:76:a9:98: 18:e2:d2:7c:0d:fc:69:67:17:37:da:04:da:e5:24:ff:06:0f: ba:b2:11:59:19:3b:93:d0:55:b4:a5:84:6a:02:30:d3:5f:3c: 8d:9a:63:5b:3f:2c:df:ac:f7:ef:21:26:0b:1b:7a:b5:69:b7: 32:66:0e:3a:04:7e:2c:bc:01:a7:0e:a8:da:8a:90:9d:41:7f: e7:5f:f6:90:49:e6:ec:70:e0:33:b6:fe:39:8c:58:9d:08:09: b8:8b:e3:ee:47:77:ee:ea:98:93:d2:b4:ae:06:86:f1:d2:81: f3:be:98:94:35:79:22:f8:3f:3c:58:85:98:e6:a6:87:a2:55: 4d:c7:05:1f:74:11:23:89:59:df:af:99:ed:b8:6f:48:23:e6: 98:e0:f6:84 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WSo5a4yaLcCpAf3GM05jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MDQ2MTA4YjU0MjYxNDQyNDIyYzBmYmM4MGIzZmE5ODZl YmU5M2EwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTgxZWMwMDEwZmJjMmE5NzIxNGVmNTdmMThjYmZmYTViODM4MGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/tVU0roA07JTd3LGBFqf4GwMbJr B5HgFKsZtVIr/YEwDIJyUUDXCMruGRzYF9E67mjg1nPhVr+xdi6s+wddlX7UcP9j sPNPmXKpttjGh81r06ARi9RM6OjNJOu0jeqTv8EXFpdMjWEMXI/OvjeB1BOsu9UM DSe3JdfiL+0+Z/uwe4PE2uKzfd008XIl2/xILJ/uu06qWz2si+BfYzD4ZRST4QsQ lFbeiGCRWAp4Rp2+GioUN3AetIqSF1M4wIaP883Ymf+fg9EKtG5EG7tdLsXvnbr/ fy9NuJ6c4KyOgkkcBc2/SwFJDmpByfZTym9Rc+2bi/CAZ8opgFPJeIueKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLWB7AAQ+8KpchTvV/GMv/pbg4CsMB8GA1UdIwQY MBaAFJQEYQi1QmFEJCLA+8gLP6mG6+k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zMmNlN2QtZmI0Ni00MTljLWFmMWQt OTM5NDkyNGMzYzc2LzEvdFlIc0FCRDd3cWx5Rk85WDhZeV8tbHVEZ0t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zMmNlN2QtZmI0Ni00MTljLWFmMWQtOTM5NDkyNGMzYzc2 LzEvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueaEMA0E AgACMAcDBQMqDB8AMA0GCSqGSIb3DQEBCwUAA4IBAQAbreEb+7j6Kwi5vIWpoU15 uAXJS7kYbeNSSsn0nUcdFNKdZ6CsIcGjRx5Lkk7sIEa0EeQJHvhW91AuW/rSQPSI 3EzXHBPV2WPZvJ/bDegMSBRWlhVHBKGEJQkeAevH7aJixLjESCRyO9Z2qZgY4tJ8 DfxpZxc32gTa5ST/Bg+6shFZGTuT0FW0pYRqAjDTXzyNmmNbPyzfrPfvISYLG3q1 abcyZg46BH4svAGnDqjaipCdQX/nX/aQSebscOAztv45jFidCAm4i+PuR3fu6piT 0rSuBobx0oHzvpiUNXki+D88WIWY5qaHolVNxwUfdBEjiVnfr5ntuG9II+aY4PaE -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:57 2026 by rpki-client