This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa File: Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa (raw, json) Hash identifier: Umh1axeyy2cYjkidrczQZIziQ2tY05LzkbHNxBOVUb8= Subject key identifier: 63:85:D6:4B:5A:F1:6D:1C:93:B2:B9:1E:84:91:E2:4D:F2:D1:B0:10 Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Certificate serial: 019B7910E5B24C6F257A805FFF1AF6FC3891 Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 185.122.12.0/24 maxlen: 24 185.122.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e5:b2:4c:6f:25:7a:80:5f:ff:1a:f6:fc:38:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6385d64b5af16d1c93b2b91e8491e24df2d1b010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3b:91:c3:b1:ee:e4:94:23:ed:16:96:4d:e2: 0b:75:7d:b3:42:8e:d9:e7:c5:e5:37:9d:da:f0:8b: 38:de:12:8a:d3:b1:bd:50:f4:2c:e1:1c:ef:0b:99: 2b:20:86:56:d9:3c:87:00:b0:b8:33:c5:1f:80:5a: f2:16:fd:16:b2:82:89:de:71:bf:32:07:e4:53:0b: a7:4d:1e:4c:81:4d:ff:73:3c:8f:a8:69:f8:c6:15: db:0d:14:e9:ac:54:63:91:f1:31:2c:85:07:01:57: 54:46:08:fb:a1:36:6d:93:4e:6a:3d:b0:3c:7e:63: 3e:37:9d:0d:d3:1a:e7:08:cd:10:2c:0d:c0:bb:79: 70:89:a9:81:a0:d8:c3:e1:50:82:27:78:9f:ec:3a: 38:68:2f:98:c3:50:4f:29:40:d3:c6:d4:36:7f:11: e0:0b:a9:ec:8f:10:ba:f5:14:38:da:f5:65:0a:42: cc:60:f0:bb:3b:a1:77:00:21:54:f1:e0:2e:b0:60: 1c:10:9f:8d:0d:16:16:17:28:40:5b:16:39:c9:e7: 5e:7b:e6:d5:4a:cd:13:46:c9:fe:2c:1b:4d:e0:7b: 07:07:3e:96:b3:49:1f:67:d8:86:7c:27:99:73:77: 23:17:d0:ad:d4:33:67:70:d0:ae:2c:41:0f:6d:b2: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:85:D6:4B:5A:F1:6D:1C:93:B2:B9:1E:84:91:E2:4D:F2:D1:B0:10 X509v3 Authority Key Identifier: keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.12.0/23 Signature Algorithm: sha256WithRSAEncryption 66:7a:12:e6:a2:6f:8e:96:b9:3b:63:4b:86:1f:75:08:7c:b7: 14:e3:fc:49:d9:e1:d5:02:0e:b8:2a:a7:ef:8a:6d:f4:df:89: 04:e4:6f:a8:a0:b9:e7:94:63:b0:d7:ca:40:83:91:b2:04:0c: ad:b5:1d:1d:db:61:9d:d5:86:96:dd:02:3f:22:71:84:7b:4e: 07:29:d8:2b:e7:e0:40:4c:7d:c6:9b:82:34:4f:9b:79:34:35: bb:f5:b9:7d:2c:d9:14:79:45:35:ed:72:8d:5c:13:f1:29:b7: 95:ea:92:86:ac:37:2e:42:de:72:a5:39:80:f8:2d:57:7b:37: d7:30:74:10:da:70:79:9d:9e:a6:f4:0b:aa:9b:39:47:ad:83: fe:e3:05:83:06:cd:0b:95:ad:5c:e5:bc:7d:49:64:36:7c:d8: 9f:e0:5a:9d:a2:40:fa:55:87:20:e0:d0:d6:fc:c0:5b:3c:84: c0:4e:75:0d:d8:cc:a6:2d:a0:99:ca:18:0d:ff:45:7a:af:52: 2a:e5:3c:cf:7f:14:ab:d5:b5:66:fc:02:04:f5:38:48:3e:df: 49:a4:3c:5f:03:84:3b:1d:3b:fd:2d:5a:a7:84:80:1c:8b:81: a1:47:43:88:8a:3f:a3:3c:84:76:ab:42:8b:a2:1c:2d:76:02: b5:c2:35:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOWyTG8leoBf/xr2/DiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3 NDVmNWUwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzg1ZDY0YjVhZjE2ZDFjOTNiMmI5MWU4NDkxZTI0ZGYyZDFiMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4juRw7Hu5JQj7RaWTeILdX2zQo7Z 58XlN53a8Is43hKK07G9UPQs4RzvC5krIIZW2TyHALC4M8UfgFryFv0WsoKJ3nG/ MgfkUwunTR5MgU3/czyPqGn4xhXbDRTprFRjkfExLIUHAVdURgj7oTZtk05qPbA8 fmM+N50N0xrnCM0QLA3Au3lwiamBoNjD4VCCJ3if7Do4aC+Yw1BPKUDTxtQ2fxHg C6nsjxC69RQ42vVlCkLMYPC7O6F3ACFU8eAusGAcEJ+NDRYWFyhAWxY5yedee+bV Ss0TRsn+LBtN4HsHBz6Ws0kfZ9iGfCeZc3cjF9Ct1DNncNCuLEEPbbKoMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGOF1kta8W0ck7K5HoSR4k3y0bAQMB8GA1UdIwQY MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt ODVkODBhNTQ0YmViLzEvWTRYV1MxcnhiUnlUc3JrZWhKSGlUZkxSc0JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXoMMA0G CSqGSIb3DQEBCwUAA4IBAQBmehLmom+Olrk7Y0uGH3UIfLcU4/xJ2eHVAg64Kqfv im3034kE5G+ooLnnlGOw18pAg5GyBAyttR0d22Gd1YaW3QI/InGEe04HKdgr5+BA TH3Gm4I0T5t5NDW79bl9LNkUeUU17XKNXBPxKbeV6pKGrDcuQt5ypTmA+C1XezfX MHQQ2nB5nZ6m9AuqmzlHrYP+4wWDBs0Lla1c5bx9SWQ2fNif4FqdokD6VYcg4NDW /MBbPITATnUN2MymLaCZyhgN/0V6r1Iq5TzPfxSr1bVm/AIE9ThIPt9JpDxfA4Q7 HTv9LVqnhIAci4GhR0OIij+jPIR2q0KLohwtdgK1wjXc -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:49 2026 by rpki-client