This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/Ry13RGPYJVvtpvhKEOm6pAfriNc.roa File: Ry13RGPYJVvtpvhKEOm6pAfriNc.roa (raw, json) Hash identifier: oTL00T36xjABiLlLnyyxwdABnaFfTiLLRpEKK+wxv9o= Subject key identifier: 47:2D:77:44:63:D8:25:5B:ED:A6:F8:4A:10:E9:BA:A4:07:EB:88:D7 Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7 Certificate serial: 019B797EBB954C34CDFB9EBE74BDE5936B3D Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/Ry13RGPYJVvtpvhKEOm6pAfriNc.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.240.18.0/24 maxlen: 24 185.240.19.0/24 maxlen: 24 185.244.178.0/24 maxlen: 24 185.244.179.0/24 maxlen: 24 204.154.200.0/24 maxlen: 24 204.154.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bb:95:4c:34:cd:fb:9e:be:74:bd:e5:93:6b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7 Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=472d774463d8255beda6f84a10e9baa407eb88d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:5d:cf:ed:f0:dc:6d:04:f0:c0:58:99:9d: 4a:e7:6c:52:66:09:4b:12:47:91:1f:3f:a5:f1:27: 5f:69:8f:4b:7e:42:13:39:92:ee:f9:a6:4b:9e:a2: 0e:bd:a3:37:f1:f2:d0:74:90:b2:27:09:87:90:67: 1a:68:5f:1e:e8:f3:2e:55:c2:16:61:92:3f:32:23: 23:48:9c:3e:48:2a:58:47:10:74:6f:d8:0e:d1:dd: 57:f0:bb:bf:21:54:ab:68:c1:57:01:f0:29:93:ef: 8a:9e:8e:66:f1:c4:ba:28:65:af:77:40:e9:15:6a: 7f:33:07:c4:4b:72:17:7c:16:1c:c2:15:86:2a:b5: c5:4d:b1:89:bd:4b:1a:3d:4a:30:00:7f:ae:3c:25: 43:18:f0:0c:42:d2:61:9c:1a:50:69:bb:e2:39:0b: 1f:da:b5:8b:af:81:0d:42:70:65:dd:43:e1:ca:93: 7d:49:d4:aa:2c:2a:af:25:a2:d8:36:97:98:15:df: bc:c2:ba:ef:c6:d1:a4:4d:94:99:b6:0f:d2:7d:53: 05:11:84:c0:04:03:6d:fd:f9:34:78:f2:4d:5a:09: cb:6a:bd:0f:69:70:1b:d7:88:d4:42:2e:a7:bb:00: 0f:b3:54:8d:57:e8:42:f5:3b:27:08:c8:ff:c4:76: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2D:77:44:63:D8:25:5B:ED:A6:F8:4A:10:E9:BA:A4:07:EB:88:D7 X509v3 Authority Key Identifier: keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/Ry13RGPYJVvtpvhKEOm6pAfriNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.18.0/23 185.244.178.0/23 204.154.200.0/23 Signature Algorithm: sha256WithRSAEncryption 91:ac:42:b5:6b:6e:d0:27:c8:b4:5c:a8:d9:ac:db:22:ea:25: bd:b8:bb:2a:41:d4:cc:99:a4:9d:51:28:96:94:24:f0:23:a8: 9a:dd:2e:71:dc:0c:02:f2:11:4f:bd:fb:4e:03:4f:1a:0f:97: df:c0:23:82:79:fd:3f:2f:4e:55:9a:62:76:5a:d0:75:43:85: 19:85:74:b7:3a:e6:60:8a:c1:8e:33:4c:3f:62:66:2d:1a:7b: 67:aa:e1:ea:80:51:70:13:c3:0c:33:05:13:bb:eb:f4:d9:aa: 53:b6:02:4b:72:e1:4a:08:5a:bf:ad:fc:06:33:db:44:d6:0a: c8:78:77:b1:76:66:11:ce:ea:61:80:ec:d9:f2:61:9b:a2:af: c9:a2:3c:97:24:10:c4:0a:54:dc:ad:d3:41:1e:c7:20:0e:59: 55:09:be:71:30:0c:30:24:b3:e8:a5:7d:ae:02:1a:f7:a7:24: aa:99:65:da:41:71:37:1d:a7:98:52:d1:7c:f2:47:13:69:ed: 47:af:3b:70:98:63:73:92:10:ef:79:32:ea:ec:e9:88:37:47: 0f:a6:05:68:bc:92:74:f3:5f:4c:34:c7:77:4f:f3:b6:ff:3b: 80:09:9e:df:a7:aa:f1:dd:f8:e8:e4:8f:5c:b6:85:ad:5d:16: 73:bc:0d:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fruVTDTN+56+dL3lk2s9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxN2I0OTFkY2NiNTYzMjIxNmQ4MGI0OGY4ZDYyODZiMWVm ZmQ4ZDcwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzJkNzc0NDYzZDgyNTViZWRhNmY4NGExMGU5YmFhNDA3ZWI4OGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAxdz+3w3G0E8MBYmZ1K52xSZglL EkeRHz+l8SdfaY9LfkITOZLu+aZLnqIOvaM38fLQdJCyJwmHkGcaaF8e6PMuVcIW YZI/MiMjSJw+SCpYRxB0b9gO0d1X8Lu/IVSraMFXAfApk++Kno5m8cS6KGWvd0Dp FWp/MwfES3IXfBYcwhWGKrXFTbGJvUsaPUowAH+uPCVDGPAMQtJhnBpQabviOQsf 2rWLr4ENQnBl3UPhypN9SdSqLCqvJaLYNpeYFd+8wrrvxtGkTZSZtg/SfVMFEYTA BANt/fk0ePJNWgnLar0PaXAb14jUQi6nuwAPs1SNV+hC9TsnCMj/xHZMoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEctd0Rj2CVb7ab4ShDpuqQH64jXMB8GA1UdIwQY MBaAFCF7SR3MtWMiFtgLSPjWKGse/9jXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAt NmRlMDVhMzE2MjM5LzEvUnkxM1JHUFlKVnZ0cHZoS0VPbTZwQWZyaU5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAtNmRlMDVhMzE2MjM5 LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBufASAwQB ufSyAwQBzJrIMA0GCSqGSIb3DQEBCwUAA4IBAQCRrEK1a27QJ8i0XKjZrNsi6iW9 uLsqQdTMmaSdUSiWlCTwI6ia3S5x3AwC8hFPvftOA08aD5ffwCOCef0/L05VmmJ2 WtB1Q4UZhXS3OuZgisGOM0w/YmYtGntnquHqgFFwE8MMMwUTu+v02apTtgJLcuFK CFq/rfwGM9tE1grIeHexdmYRzuphgOzZ8mGboq/JojyXJBDEClTcrdNBHscgDllV Cb5xMAwwJLPopX2uAhr3pySqmWXaQXE3HaeYUtF88kcTae1HrztwmGNzkhDveTLq 7OmIN0cPpgVovJJ0819MNMd3T/O2/zuACZ7fp6rx3fjo5I9ctoWtXRZzvA2Q -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:07 2026 by rpki-client