This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/LYw_86zqqUU-5ZAgDmKGuBI8moU.roa File: LYw_86zqqUU-5ZAgDmKGuBI8moU.roa (raw, json) Hash identifier: yws9eccxGXYISJMC2IFo/HR97Yy0+NyB/dp085XRJR8= Subject key identifier: 2D:8C:3F:F3:AC:EA:A9:45:3E:E5:90:20:0E:62:86:B8:12:3C:9A:85 Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2 Certificate serial: 019B78A31E52CAA7C1FB633991F02DD333D7 Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/LYw_86zqqUU-5ZAgDmKGuBI8moU.roa Signing time: Thu 01 Jan 2026 08:18:34 +0000 ROA not before: Thu 01 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205390 IP address blocks: 185.220.0.0/22 maxlen: 24 2a0b:ecc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1e:52:ca:a7:c1:fb:63:39:91:f0:2d:d3:33:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2 Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d8c3ff3aceaa9453ee590200e6286b8123c9a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:49:8e:a4:75:5f:64:a1:0e:2e:f6:9c:07: bb:d9:e0:de:6f:2e:f7:36:59:ae:53:06:17:24:be: 14:5f:e1:69:cd:c3:f1:96:bb:d0:58:4e:97:ee:47: 6e:30:3d:70:6c:c1:6a:d5:c8:f3:01:e7:22:96:ce: ce:4e:9c:6f:3a:04:cc:09:35:9b:f4:94:02:f5:12: 7b:af:ce:0c:72:4e:f5:1e:81:4c:a9:35:35:58:2c: cf:ad:f8:c6:45:09:e3:71:0d:3a:16:59:bf:2a:57: 52:d5:68:22:90:2d:91:b0:7b:1e:1a:73:0d:be:12: a7:85:33:f6:15:46:5b:d4:ac:04:1b:d0:40:f0:5d: 31:7d:25:cf:11:0b:76:31:85:27:a4:b3:e0:96:68: b1:cf:2b:1f:b7:c9:5f:bf:5f:90:59:37:d7:65:99: 33:fa:a0:fa:a5:8d:be:d8:0d:63:41:34:e1:7d:85: 25:79:28:2d:3f:28:00:98:2b:16:7e:bf:e9:c9:5b: 0f:f7:27:6b:83:50:33:3c:e0:4d:93:00:cc:3a:67: 59:59:be:0c:ff:56:1e:32:34:25:f6:72:3d:22:2f: d6:e6:60:9e:80:3c:b9:3c:ee:fb:81:47:51:08:3c: 3b:9b:6b:64:8a:7d:91:fc:4a:52:cf:00:e9:02:c7: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8C:3F:F3:AC:EA:A9:45:3E:E5:90:20:0E:62:86:B8:12:3C:9A:85 X509v3 Authority Key Identifier: keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/LYw_86zqqUU-5ZAgDmKGuBI8moU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.0.0/22 IPv6: 2a0b:ecc0::/29 Signature Algorithm: sha256WithRSAEncryption ae:58:26:1a:d7:11:26:71:3a:47:3a:41:b2:9c:2e:7c:da:04: 15:57:ac:27:d1:58:09:10:00:67:64:ba:77:a7:f7:25:a5:de: 67:13:a6:04:17:b0:95:63:f5:02:e8:9c:8b:90:99:2f:7e:cf: fd:04:e1:12:ff:f1:50:7a:1f:aa:e1:a9:54:57:96:d6:22:5e: d3:07:23:98:75:1b:40:ad:9b:68:e7:de:d8:a9:09:97:19:f5: 1e:12:57:27:e5:d7:04:0d:a8:3b:06:22:3a:c2:bb:86:09:cb: ea:85:8b:4f:9e:94:aa:9f:54:90:52:f2:c2:17:b5:2b:86:13: f5:43:71:75:59:c2:9d:12:6f:c2:dc:9f:bc:61:cf:75:25:3e: 0a:4a:f7:b7:22:20:dd:f9:1f:49:d8:dc:c6:28:2a:c4:5a:2d: 60:4c:ca:e3:9a:5d:be:70:39:40:6e:92:f9:8d:26:df:4f:42: 61:9e:ab:5c:85:4a:06:4b:7b:3b:27:99:3a:53:4d:6d:97:1f: 58:17:9e:be:bf:e5:19:ee:a4:1f:51:db:f4:37:d3:4a:c5:fe: 0a:0c:ca:73:b5:5a:c3:b3:22:46:1d:60:bd:ad:48:35:b1:e7: 3d:70:46:7d:9a:cd:eb:7c:d2:3c:c5:2f:89:13:99:c5:77:02: 48:48:6d:53 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ox5SyqfB+2M5kfAt0zPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYjA2MDE2NmQ2NGNlYWQwZTI5NTc5N2U4ZDI3YzU1ZDg4 OThiYzIwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDhjM2ZmM2FjZWFhOTQ1M2VlNTkwMjAwZTYyODZiODEyM2M5YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1NJjqR1X2ShDi72nAe72eDeby73 NlmuUwYXJL4UX+FpzcPxlrvQWE6X7kduMD1wbMFq1cjzAecils7OTpxvOgTMCTWb 9JQC9RJ7r84Mck71HoFMqTU1WCzPrfjGRQnjcQ06Flm/KldS1WgikC2RsHseGnMN vhKnhTP2FUZb1KwEG9BA8F0xfSXPEQt2MYUnpLPglmixzysft8lfv1+QWTfXZZkz +qD6pY2+2A1jQTThfYUleSgtPygAmCsWfr/pyVsP9ydrg1AzPOBNkwDMOmdZWb4M /1YeMjQl9nI9Ii/W5mCegDy5PO77gUdRCDw7m2tkin2R/EpSzwDpAsdB1wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC2MP/Os6qlFPuWQIA5ihrgSPJqFMB8GA1UdIwQY MBaAFKuwYBZtZM6tDilXl+jSfFXYiYvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQt NmIxMzY0OTRlM2RjLzEvTFl3Xzg2enFxVVUtNVpBZ0RtS0d1Qkk4bW9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQtNmIxMzY0OTRlM2Rj LzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudwAMA0E AgACMAcDBQMqC+zAMA0GCSqGSIb3DQEBCwUAA4IBAQCuWCYa1xEmcTpHOkGynC58 2gQVV6wn0VgJEABnZLp3p/clpd5nE6YEF7CVY/UC6JyLkJkvfs/9BOES//FQeh+q 4alUV5bWIl7TByOYdRtArZto597YqQmXGfUeElcn5dcEDag7BiI6wruGCcvqhYtP npSqn1SQUvLCF7UrhhP1Q3F1WcKdEm/C3J+8Yc91JT4KSve3IiDd+R9J2NzGKCrE Wi1gTMrjml2+cDlAbpL5jSbfT0JhnqtchUoGS3s7J5k6U01tlx9YF56+v+UZ7qQf Udv0N9NKxf4KDMpztVrDsyJGHWC9rUg1sec9cEZ9ms3rfNI8xS+JE5nFdwJISG1T -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:44 2026 by rpki-client