This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa File: YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa (raw, json) Hash identifier: BS0hH0Mha3OYh1/nE9dhHNhWJCR5meHAHOyRx5kHC3Q= Subject key identifier: 62:B2:B4:38:5C:B4:73:5C:D7:0F:FC:1B:C5:28:98:87:21:83:14:E7 Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e Certificate serial: 019B7F147D1932431BB3CB8FB4555F80A61E Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa Signing time: Fri 02 Jan 2026 14:20:07 +0000 ROA not before: Fri 02 Jan 2026 14:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.124.148.0/24 maxlen: 24 185.124.149.0/24 maxlen: 24 185.124.150.0/24 maxlen: 24 185.124.151.0/24 maxlen: 24 193.58.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:7d:19:32:43:1b:b3:cb:8f:b4:55:5f:80:a6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e Validity Not Before: Jan 2 14:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62b2b4385cb4735cd70ffc1bc5289887218314e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:f4:b0:f3:cb:84:d1:54:57:18:9c:26:af: 35:e5:25:96:2b:60:1c:e3:1e:f8:0c:d0:c9:dd:aa: 31:95:78:41:e3:54:ba:80:7d:d4:72:09:e3:d9:b9: 68:ce:f2:8d:73:f7:b6:ff:9b:de:42:05:09:dd:c7: e2:d7:81:17:84:70:7c:d9:3b:75:d6:c1:e2:6a:11: 92:d4:b5:8e:a9:e5:19:64:91:91:c9:42:42:84:06: 45:62:51:c6:46:97:e0:17:09:af:da:c5:bd:5b:2c: cf:d1:35:21:65:2e:49:ba:c3:7a:08:6a:fa:b2:d7: 37:8f:07:b0:72:76:79:fb:83:08:f1:b3:33:52:ac: 24:53:bc:7f:4f:4e:78:47:bf:c1:86:bf:81:3a:99: 98:f6:e9:4b:ef:b0:9a:c2:f8:0c:3a:55:bc:21:52: f7:39:1e:a2:72:73:d4:29:35:60:a3:7a:96:32:2f: 33:01:64:43:67:2f:79:1e:c9:31:90:20:92:8b:48: b8:97:d4:ed:a7:52:51:82:ff:f7:56:3c:10:13:08: 63:f9:bb:e0:1f:8f:c3:46:1c:ed:97:16:d1:14:de: 2c:df:dc:f9:00:97:6f:9b:57:e8:1d:78:7f:ed:bb: 8a:bb:25:54:6a:b7:78:8a:dc:47:ea:c3:19:41:05: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B2:B4:38:5C:B4:73:5C:D7:0F:FC:1B:C5:28:98:87:21:83:14:E7 X509v3 Authority Key Identifier: keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.148.0/22 193.58.117.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:82:34:0a:66:c9:a4:aa:38:65:23:58:80:db:56:cc:a0:83: fa:71:9c:2b:fa:c1:15:56:ae:f1:86:6e:bb:88:f2:76:d7:e1: 64:a7:8a:d0:56:3b:3e:80:ea:f0:82:f1:2e:cd:87:d3:6b:91: 8a:0f:da:88:51:37:02:f6:17:b4:11:fc:81:61:ef:88:4a:a2: 79:5f:15:e8:d3:ac:c6:80:ad:71:4d:3f:a1:17:66:d2:76:b5: 4e:a1:75:cf:83:7e:1c:fe:a2:b6:c2:5f:2d:3c:63:0e:29:e1: 8c:98:4a:db:ed:6a:15:a2:02:64:95:ae:b1:8e:1e:24:17:ea: 9a:7d:b8:36:5d:8c:a1:8c:b5:7e:cc:c4:98:a1:65:b1:ce:a4: 06:7e:e2:7f:c2:4a:db:48:90:e0:9c:76:0d:78:d2:71:ec:da: ae:6b:21:8a:2b:5e:53:60:3d:d3:b4:28:9c:bb:66:91:ff:ef: 3f:99:93:bb:c6:58:a7:05:68:10:5a:85:22:d8:23:6c:eb:76: 4d:8f:2f:21:a3:b9:42:02:8c:c7:ed:81:2c:56:2d:12:67:b7: 05:19:ff:87:5e:5b:e6:80:2c:c9:d4:57:59:1e:ea:34:d7:9d: 85:a9:a7:79:29:44:50:e1:aa:be:46:3c:e4:ee:43:ff:a1:f3: 9c:8e:e5:84 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FH0ZMkMbs8uPtFVfgKYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlN2NhY2ZhNzM1Y2VlYWZkZDJhMjE0YzA5ZWU3MjQ2OTQy NTI1MGUwHhcNMjYwMTAyMTQyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmIyYjQzODVjYjQ3MzVjZDcwZmZjMWJjNTI4OTg4NzIxODMxNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwr0sPPLhNFUVxicJq815SWWK2Ac 4x74DNDJ3aoxlXhB41S6gH3Ucgnj2blozvKNc/e2/5veQgUJ3cfi14EXhHB82Tt1 1sHiahGS1LWOqeUZZJGRyUJChAZFYlHGRpfgFwmv2sW9WyzP0TUhZS5JusN6CGr6 stc3jwewcnZ5+4MI8bMzUqwkU7x/T054R7/Bhr+BOpmY9ulL77CawvgMOlW8IVL3 OR6icnPUKTVgo3qWMi8zAWRDZy95HskxkCCSi0i4l9Ttp1JRgv/3VjwQEwhj+bvg H4/DRhztlxbRFN4s39z5AJdvm1foHXh/7buKuyVUard4itxH6sMZQQWnYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGKytDhctHNc1w/8G8UomIchgxTnMB8GA1UdIwQY MBaAFM58rPpzXO6v3SohTAnuckaUJSUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYt Yjg0ZWRhMmU4NDZhLzEvWXJLME9GeTBjMXpYRF93YnhTaVloeUdERk9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYtYjg0ZWRhMmU4NDZh LzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXyUAwQA wTp1MA0GCSqGSIb3DQEBCwUAA4IBAQA6gjQKZsmkqjhlI1iA21bMoIP6cZwr+sEV Vq7xhm67iPJ21+Fkp4rQVjs+gOrwgvEuzYfTa5GKD9qIUTcC9he0EfyBYe+ISqJ5 XxXo06zGgK1xTT+hF2bSdrVOoXXPg34c/qK2wl8tPGMOKeGMmErb7WoVogJkla6x jh4kF+qafbg2XYyhjLV+zMSYoWWxzqQGfuJ/wkrbSJDgnHYNeNJx7NquayGKK15T YD3TtCicu2aR/+8/mZO7xlinBWgQWoUi2CNs63ZNjy8ho7lCAozH7YEsVi0SZ7cF Gf+HXlvmgCzJ1FdZHuo0152Fqad5KURQ4aq+Rjzk7kP/ofOcjuWE -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:47 2026 by rpki-client