This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y0Lzv2o7dGpO6l8bP14mSSDsSoc.roa File: y0Lzv2o7dGpO6l8bP14mSSDsSoc.roa (raw, json) Hash identifier: Q7YsbaZewKlt0tddR8pbLVn0j+mklFCbj0ITFJyGdqs= Subject key identifier: CB:42:F3:BF:6A:3B:74:6A:4E:EA:5F:1B:3F:5E:26:49:20:EC:4A:87 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12CACE9AFB451B0FEC44DD31A1C1C7 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y0Lzv2o7dGpO6l8bP14mSSDsSoc.roa Signing time: Fri 02 Jan 2026 00:19:24 +0000 ROA not before: Fri 02 Jan 2026 00:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20764 IP address blocks: 185.121.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ca:ce:9a:fb:45:1b:0f:ec:44:dd:31:a1:c1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb42f3bf6a3b746a4eea5f1b3f5e264920ec4a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:76:06:87:09:36:58:6c:d4:4f:e4:b4:7e: 1b:98:8a:75:78:db:75:7d:0c:11:20:21:4e:68:07: 93:70:1b:75:3c:85:a0:d2:f4:15:81:8d:e9:8f:76: 2e:47:4e:9f:e1:97:3b:ea:c8:81:33:4e:bb:9c:c3: 4d:a9:83:94:1b:53:08:24:61:7c:f4:81:0c:97:9a: d5:c4:f8:5e:c5:b2:47:0e:57:f5:29:66:66:ca:61: ba:70:85:e5:ff:72:1f:9c:68:af:29:e6:44:49:f8: de:07:58:b1:f3:74:11:b6:59:8d:e9:ef:98:78:9f: 35:f6:95:03:e7:44:94:3e:d7:be:84:d8:60:45:a8: b6:ef:4a:42:f1:20:ec:ec:73:1d:39:78:cd:25:f0: 09:ec:39:99:16:dc:8f:ca:4b:62:3b:fd:5a:f3:d7: 3c:06:70:14:04:45:5b:a1:2a:d9:4a:8c:94:49:64: 01:0b:25:27:1c:b4:d4:c1:71:73:02:97:49:73:a0: 62:2f:18:ed:bd:c4:f5:e4:e5:f2:2f:a2:46:ef:ad: e0:e3:82:a2:c2:35:44:77:d4:b2:b9:a7:35:a7:05: ca:f3:cc:1b:74:4e:71:6e:07:28:56:a4:c8:10:ae: 77:34:a9:57:ec:6c:79:60:0c:cb:2f:15:34:17:c1: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:42:F3:BF:6A:3B:74:6A:4E:EA:5F:1B:3F:5E:26:49:20:EC:4A:87 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y0Lzv2o7dGpO6l8bP14mSSDsSoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.71.0/24 Signature Algorithm: sha256WithRSAEncryption 26:f1:b2:bb:8d:de:88:33:f0:98:ee:b8:f8:86:46:55:a5:7c: 02:6b:26:84:fe:43:b6:6a:9b:f7:99:94:4c:96:ea:20:b6:30: 16:0e:1d:bd:fe:98:cb:76:7b:e9:6d:9f:01:fd:69:ee:a2:41: 95:61:9b:fc:8a:d3:92:d2:77:be:44:48:28:ef:46:90:92:4b: ef:c0:9f:7c:c6:15:d9:9a:10:ce:f3:dd:92:93:e2:8e:39:2c: a9:a1:26:e7:81:76:12:a0:34:9b:63:da:17:db:4d:9b:a5:ad: af:5d:a9:12:4e:b3:0d:5b:ed:34:b7:00:9c:c0:20:f5:d5:11: 2e:45:e4:ae:fe:6e:f6:09:fb:16:4d:d0:42:b4:ae:57:a6:78: e7:1c:ea:9e:f2:9c:79:b2:58:94:f9:aa:f5:1d:f9:cf:10:de: a4:8a:c7:c6:5d:42:50:3a:22:8f:4e:96:ef:95:9b:a0:c2:a2: 78:51:75:7d:85:78:a5:3b:b5:03:df:e0:1b:81:2f:69:40:80: b1:d0:cb:5d:ad:34:1a:5a:63:22:44:5e:43:16:43:29:9c:b4: 2b:f5:a4:e3:86:d8:c8:8d:cf:ae:62:70:94:84:4b:8b:f3:7e: 74:91:77:e5:b0:58:f1:cc:84:4a:df:c1:45:1c:91:de:a6:76: cf:d2:3b:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsrOmvtFGw/sRN0xocHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjQyZjNiZjZhM2I3NDZhNGVlYTVmMWIzZjVlMjY0OTIwZWM0YTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnR2BocJNlhs1E/ktH4bmIp1eNt1 fQwRICFOaAeTcBt1PIWg0vQVgY3pj3YuR06f4Zc76siBM067nMNNqYOUG1MIJGF8 9IEMl5rVxPhexbJHDlf1KWZmymG6cIXl/3IfnGivKeZESfjeB1ix83QRtlmN6e+Y eJ819pUD50SUPte+hNhgRai270pC8SDs7HMdOXjNJfAJ7DmZFtyPyktiO/1a89c8 BnAUBEVboSrZSoyUSWQBCyUnHLTUwXFzApdJc6BiLxjtvcT15OXyL6JG763g44Ki wjVEd9Syuac1pwXK88wbdE5xbgcoVqTIEK53NKlX7Gx5YAzLLxU0F8FBqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMtC879qO3RqTupfGz9eJkkg7EqHMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEveTBMenYybzdkR3BPNmw4YlAxNG1TU0RzU29jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXlHMA0G CSqGSIb3DQEBCwUAA4IBAQAm8bK7jd6IM/CY7rj4hkZVpXwCayaE/kO2apv3mZRM luogtjAWDh29/pjLdnvpbZ8B/WnuokGVYZv8itOS0ne+REgo70aQkkvvwJ98xhXZ mhDO892Sk+KOOSypoSbngXYSoDSbY9oX202bpa2vXakSTrMNW+00twCcwCD11REu ReSu/m72CfsWTdBCtK5XpnjnHOqe8px5sliU+ar1HfnPEN6kisfGXUJQOiKPTpbv lZugwqJ4UXV9hXilO7UD3+AbgS9pQICx0MtdrTQaWmMiRF5DFkMpnLQr9aTjhtjI jc+uYnCUhEuL8350kXflsFjxzIRK38FFHJHepnbP0jt3 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:31 2026 by rpki-client