This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa File: nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa (raw, json) Hash identifier: SjtdaWQXMJk13J5xCejsgWLSIcSxD709iSf13daT5JQ= Subject key identifier: 9F:22:EF:86:57:90:13:08:55:99:31:A1:37:F3:B9:38:9D:9D:48:D9 Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68 Certificate serial: 019B79ECB0AC320068B4B905CCE48C744912 Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa Signing time: Thu 01 Jan 2026 14:18:33 +0000 ROA not before: Thu 01 Jan 2026 14:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208570 IP address blocks: 185.63.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b0:ac:32:00:68:b4:b9:05:cc:e4:8c:74:49:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68 Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f22ef8657901308559931a137f3b9389d9d48d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:27:a2:ce:70:cc:30:f2:ef:bc:77:19:c3: e2:af:a4:4a:c6:ff:b7:85:84:ae:f1:d3:36:e3:36: 35:a2:2b:f7:46:e8:79:6a:e3:76:a6:3e:09:d7:77: a5:5c:66:3e:fc:a5:15:a5:1f:e0:29:70:d1:aa:48: e3:08:13:19:7d:a7:3d:7e:98:6e:fa:b5:62:2a:12: e1:c7:83:3e:61:ba:fa:42:3e:9b:e4:1d:0f:ce:e8: c6:a9:b8:ba:a5:58:c3:34:c2:95:c4:5a:fd:db:72: 73:f5:93:cc:ec:09:47:4b:59:51:c3:bd:a5:0d:66: 33:21:9c:88:02:ce:90:97:4d:d1:ff:71:c8:18:1c: e2:46:7d:1a:fb:4d:17:ae:61:d1:5b:54:50:90:5b: 41:88:ef:cc:14:4e:6e:f6:f7:6d:7d:d5:c8:19:dd: ec:6e:7e:98:6e:23:a9:7d:30:3b:12:11:30:cc:95: 14:9a:a1:23:ed:d4:a9:65:54:ed:3f:85:30:da:34: 42:57:ae:d9:19:56:af:44:8f:a1:27:b7:98:4a:4d: d2:6e:3c:57:da:48:71:5d:d8:d9:d0:33:ee:df:a0: 46:18:47:d2:b1:56:ea:3e:94:8f:76:49:52:c4:d1: 4e:a0:4b:28:bb:7c:af:a2:75:d8:c3:90:92:80:7c: ef:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:22:EF:86:57:90:13:08:55:99:31:A1:37:F3:B9:38:9D:9D:48:D9 X509v3 Authority Key Identifier: keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.85.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:8f:7c:0c:58:f2:1a:15:c0:2c:e0:77:4a:6e:f4:c6:4f:7b: d1:66:4b:e9:61:fd:1e:80:f6:cb:ff:56:81:17:2d:58:9e:93: a7:a5:f0:fc:bc:f4:c5:b3:43:78:cd:04:ca:23:12:34:bd:95: 0d:ad:ef:ce:e3:76:c4:ab:14:a6:55:ed:d6:84:d9:8b:32:91: 9d:81:ce:c1:1e:09:6c:d2:47:82:af:85:db:62:82:fb:9c:28: af:1a:c7:fa:b3:99:3d:7f:0f:e2:5c:05:53:8c:ff:cb:54:bd: 86:3a:f4:6c:26:a7:37:ef:b6:7a:24:1f:fb:c3:85:2a:8e:98: 87:00:07:c4:55:50:93:53:3f:54:ae:10:0a:2c:4e:e3:f8:6b: da:0a:44:a3:5d:b7:a5:fe:a7:5e:f3:bb:2a:f3:13:13:e0:7f: 94:4e:10:ea:25:22:82:e0:12:38:e6:49:6d:aa:ff:fb:c0:92: a8:7e:ce:a6:28:fc:d3:81:85:0d:5b:6c:29:24:2c:d5:4e:37: 76:68:64:dc:f5:44:db:be:f0:2c:90:b1:77:77:74:57:f5:cc: 00:69:a9:4d:af:05:c3:81:bb:7a:b5:d0:00:cb:35:c2:5a:6d: fa:18:b7:99:a7:33:6e:d8:7f:69:b6:d6:ee:e4:c9:7d:f5:6d: f0:d1:40:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LCsMgBotLkFzOSMdEkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOTkyNzE5MTkxYTg5NGQwNjhkYmE4ZDBhMTAwNmU5ZmVh ZGFhNjgwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjIyZWY4NjU3OTAxMzA4NTU5OTMxYTEzN2YzYjkzODlkOWQ0OGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+cnos5wzDDy77x3GcPir6RKxv+3 hYSu8dM24zY1oiv3Ruh5auN2pj4J13elXGY+/KUVpR/gKXDRqkjjCBMZfac9fphu +rViKhLhx4M+Ybr6Qj6b5B0PzujGqbi6pVjDNMKVxFr923Jz9ZPM7AlHS1lRw72l DWYzIZyIAs6Ql03R/3HIGBziRn0a+00XrmHRW1RQkFtBiO/MFE5u9vdtfdXIGd3s bn6YbiOpfTA7EhEwzJUUmqEj7dSpZVTtP4Uw2jRCV67ZGVavRI+hJ7eYSk3SbjxX 2khxXdjZ0DPu36BGGEfSsVbqPpSPdklSxNFOoEsou3yvonXYw5CSgHzvGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8i74ZXkBMIVZkxoTfzuTidnUjZMB8GA1UdIwQY MBaAFI2ZJxkZGolNBo26jQoQBun+rapoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalprbkdSa2FpVTBHamJxTkNoQUc2ZjZ0cW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83OWVkMDQtYmUxMS00Mzg4LWE2NmEt NDgyZWM3ZDY4NzJlLzEvbnlMdmhsZVFFd2hWbVRHaE5fTzVPSjJkU05rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83OWVkMDQtYmUxMS00Mzg4LWE2NmEtNDgyZWM3ZDY4NzJl LzEvalprbkdSa2FpVTBHamJxTkNoQUc2ZjZ0cW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT9VMA0G CSqGSIb3DQEBCwUAA4IBAQBcj3wMWPIaFcAs4HdKbvTGT3vRZkvpYf0egPbL/1aB Fy1YnpOnpfD8vPTFs0N4zQTKIxI0vZUNre/O43bEqxSmVe3WhNmLMpGdgc7BHgls 0keCr4XbYoL7nCivGsf6s5k9fw/iXAVTjP/LVL2GOvRsJqc377Z6JB/7w4UqjpiH AAfEVVCTUz9UrhAKLE7j+GvaCkSjXbel/qde87sq8xMT4H+UThDqJSKC4BI45klt qv/7wJKofs6mKPzTgYUNW2wpJCzVTjd2aGTc9UTbvvAskLF3d3RX9cwAaalNrwXD gbt6tdAAyzXCWm36GLeZpzNu2H9pttbu5Ml99W3w0UBZ -----END CERTIFICATE-----Generated at Wed Jan 28 23:43:34 2026 by rpki-client