This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/GY4EnPb_q6Zazu0CJu5dhVQR9FU.roa File: GY4EnPb_q6Zazu0CJu5dhVQR9FU.roa (raw, json) Hash identifier: cIwRyJ89jjJ0ifkb1iiXIh0uKnfN3IaxGiXjhh7yXZA= Subject key identifier: 19:8E:04:9C:F6:FF:AB:A6:5A:CE:ED:02:26:EE:5D:85:54:11:F4:55 Certificate issuer: /CN=fd385a616398e416c70dcb322566f93e3d2fbf13 Certificate serial: 019B7F154141843E5B00DC1FC235CB9F4201 Authority key identifier: FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/GY4EnPb_q6Zazu0CJu5dhVQR9FU.roa Signing time: Fri 02 Jan 2026 14:20:57 +0000 ROA not before: Fri 02 Jan 2026 14:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204498 IP address blocks: 185.247.92.0/24 maxlen: 24 185.247.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:41:41:84:3e:5b:00:dc:1f:c2:35:cb:9f:42:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd385a616398e416c70dcb322566f93e3d2fbf13 Validity Not Before: Jan 2 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=198e049cf6ffaba65aceed0226ee5d855411f455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:68:b0:af:ad:73:e7:f2:42:a1:76:f9:e5:79: bd:a0:53:cc:d9:19:3d:ba:a3:1c:27:5b:f5:f7:be: ed:5e:fb:9e:58:5d:fc:d3:cf:3b:3b:f2:b6:cd:e6: a4:0e:da:80:be:f4:13:1d:e7:87:e0:c6:05:01:d5: d8:62:b3:cd:cd:94:82:6e:eb:73:e6:b8:b1:9b:70: 6a:87:9c:f5:66:4c:90:66:6b:85:f9:9d:0d:a7:73: 1f:21:f9:66:43:be:76:a2:69:09:aa:d8:30:ce:fd: 59:45:86:40:59:90:75:ba:cd:57:8c:8b:ce:e3:0e: b8:e0:14:cc:59:87:db:69:5b:ec:46:68:ee:72:e5: a2:85:30:d2:8b:bc:59:e9:8b:93:86:83:8c:27:5a: d8:ac:0f:c0:64:ef:1e:56:e3:86:7f:fa:94:aa:b6: f0:19:b0:41:0a:13:dc:f7:28:ce:3f:27:7f:9f:d1: d6:1c:63:1e:49:ab:ef:fe:99:81:5c:8d:aa:8f:48: 06:0d:5b:d8:67:e7:65:c8:30:91:c4:05:81:a1:67: 11:6c:a7:d5:e8:a5:2d:c8:c9:16:1e:d7:40:0e:39: a5:84:40:ed:1e:77:7c:a6:f2:7c:74:bf:83:7f:1e: df:47:f9:e7:fd:6e:ce:7c:15:5c:06:38:94:ec:17: 95:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:04:9C:F6:FF:AB:A6:5A:CE:ED:02:26:EE:5D:85:54:11:F4:55 X509v3 Authority Key Identifier: keyid:FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/GY4EnPb_q6Zazu0CJu5dhVQR9FU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.92.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:d0:7f:2d:6d:d5:69:fd:e9:8e:a0:71:67:56:69:ea:35:97: 12:43:54:4b:46:93:8d:24:3f:7c:3a:0b:46:f3:37:3c:91:35: 7f:77:26:be:18:60:c9:8d:ed:d4:34:83:fb:f7:40:1d:57:0c: bb:07:6e:f4:8c:f7:bf:a9:6a:50:f5:65:ea:70:91:29:79:04: 43:ee:ed:1b:49:05:a5:8f:dd:e3:99:e2:b2:50:2d:31:4d:b9: 93:d5:92:e0:ff:d1:1d:03:87:b2:08:c0:0b:d7:eb:e4:66:1c: 16:a0:49:85:df:ba:70:0c:ed:ca:32:a4:34:cd:61:72:36:64: f2:64:74:12:16:08:05:76:37:e6:ac:09:f1:e8:c6:94:40:91: 09:07:b3:82:a5:3b:7e:c1:94:13:94:57:1b:09:89:06:00:d8: 27:38:c7:80:50:5c:bc:5b:cf:08:40:92:6b:4c:2b:83:ed:8a: f5:22:e1:98:7a:d9:ac:91:72:27:b4:3e:31:7b:ad:9c:52:8f: 41:08:c3:21:01:01:cc:fc:90:7c:3b:a7:76:9a:9c:43:9b:72: 30:ec:30:d5:77:69:d6:62:d5:61:4b:f6:14:0e:16:12:22:4a: 93:13:ff:3d:fe:de:33:29:f5:e7:ed:94:2c:e9:e7:de:e2:66: b8:ff:eb:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FUFBhD5bANwfwjXLn0IBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzg1YTYxNjM5OGU0MTZjNzBkY2IzMjI1NjZmOTNlM2Qy ZmJmMTMwHhcNMjYwMTAyMTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOThlMDQ5Y2Y2ZmZhYmE2NWFjZWVkMDIyNmVlNWQ4NTU0MTFmNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62iwr61z5/JCoXb55Xm9oFPM2Rk9 uqMcJ1v1977tXvueWF380887O/K2zeakDtqAvvQTHeeH4MYFAdXYYrPNzZSCbutz 5rixm3Bqh5z1ZkyQZmuF+Z0Np3MfIflmQ752omkJqtgwzv1ZRYZAWZB1us1XjIvO 4w644BTMWYfbaVvsRmjucuWihTDSi7xZ6YuThoOMJ1rYrA/AZO8eVuOGf/qUqrbw GbBBChPc9yjOPyd/n9HWHGMeSavv/pmBXI2qj0gGDVvYZ+dlyDCRxAWBoWcRbKfV 6KUtyMkWHtdADjmlhEDtHnd8pvJ8dL+Dfx7fR/nn/W7OfBVcBjiU7BeVOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmOBJz2/6umWs7tAibuXYVUEfRVMB8GA1UdIwQY MBaAFP04WmFjmOQWxw3LMiVm+T49L78TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RoYVlXT1k1QmJIRGNzeUpXYjVQajB2dnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yNTdmZDctYTlmNy00Mjg0LWFjZjMt MzQzMDRmNWNkYTk4LzEvR1k0RW5QYl9xNlphenUwQ0p1NWRoVlFSOUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yNTdmZDctYTlmNy00Mjg0LWFjZjMtMzQzMDRmNWNkYTk4 LzEvX1RoYVlXT1k1QmJIRGNzeUpXYjVQajB2dnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufdcMA0G CSqGSIb3DQEBCwUAA4IBAQB/0H8tbdVp/emOoHFnVmnqNZcSQ1RLRpONJD98OgtG 8zc8kTV/dya+GGDJje3UNIP790AdVwy7B270jPe/qWpQ9WXqcJEpeQRD7u0bSQWl j93jmeKyUC0xTbmT1ZLg/9EdA4eyCMAL1+vkZhwWoEmF37pwDO3KMqQ0zWFyNmTy ZHQSFggFdjfmrAnx6MaUQJEJB7OCpTt+wZQTlFcbCYkGANgnOMeAUFy8W88IQJJr TCuD7Yr1IuGYetmskXIntD4xe62cUo9BCMMhAQHM/JB8O6d2mpxDm3Iw7DDVd2nW YtVhS/YUDhYSIkqTE/89/t4zKfXn7ZQs6efe4ma4/+vl -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:03 2026 by rpki-client