This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/Y-wzvP3OyKelpaxWEwdHMeF9K8k.roa File: Y-wzvP3OyKelpaxWEwdHMeF9K8k.roa (raw, json) Hash identifier: V1H9z7tRL5qSfBvpxCwsmztKo7ytMvvx2XjMrup+mfA= Subject key identifier: 63:EC:33:BC:FD:CE:C8:A7:A5:A5:AC:56:13:07:47:31:E1:7D:2B:C9 Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5 Certificate serial: 019B7834DC9B3FFD8347BFCBD027A41F8D35 Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/Y-wzvP3OyKelpaxWEwdHMeF9K8k.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43754 IP address blocks: 185.128.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dc:9b:3f:fd:83:47:bf:cb:d0:27:a4:1f:8d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63ec33bcfdcec8a7a5a5ac5613074731e17d2bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:c5:c7:fe:7e:b4:f8:44:25:67:2e:37:80: 73:46:96:ee:55:c9:43:a2:d6:47:ce:b0:3d:17:4e: 60:51:58:d1:19:19:75:8b:5e:77:d9:05:5f:6a:0a: 6d:53:04:26:ab:d6:4d:96:84:41:5a:09:64:de:b7: 1a:d4:f5:81:69:dc:42:5a:07:81:16:63:47:9f:6e: b7:e4:93:b1:4e:54:3b:ea:70:f5:89:df:63:9a:2e: 02:ac:ff:78:8a:11:4d:ff:c1:bd:bc:c7:6c:2c:48: 42:ea:15:63:7d:ef:82:d4:f1:e6:d2:5f:d2:f0:8a: 4f:b6:fb:64:97:d6:3b:53:59:ed:c7:fe:21:51:b3: 0a:c4:9e:6b:2f:e5:44:03:72:ff:1a:dd:62:22:82: e9:26:d0:44:79:05:e9:11:52:61:ac:db:a4:cc:db: 60:f6:18:1b:5d:dd:6b:48:bb:8d:5e:f1:fb:bd:65: a3:eb:fd:dc:4b:24:39:ca:e6:22:45:c3:bf:8c:2d: cf:9f:7a:46:8d:27:0d:06:89:b4:1c:6f:79:04:b8: 1c:ad:e7:f2:25:5d:ee:03:d9:da:92:5a:fb:64:3b: 65:f3:b6:32:33:03:13:d5:05:5c:59:ba:6f:ce:84: c2:d9:8d:89:2b:cb:e1:b8:c1:db:59:a2:a2:af:62: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EC:33:BC:FD:CE:C8:A7:A5:A5:AC:56:13:07:47:31:E1:7D:2B:C9 X509v3 Authority Key Identifier: keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/Y-wzvP3OyKelpaxWEwdHMeF9K8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.167.0/24 Signature Algorithm: sha256WithRSAEncryption 82:e9:87:f3:6f:e9:32:f9:d2:6d:19:00:de:70:cf:8f:0e:5c: 65:db:70:4a:a2:d9:48:ae:0c:73:a1:0e:b4:00:10:07:d7:44: 81:96:45:bb:24:5e:81:3f:19:5b:ac:4d:7b:3a:71:89:0d:1f: 38:c2:ba:ae:f6:2f:3b:fa:4c:53:47:ba:bf:be:62:0c:fc:99: 4f:e8:83:c4:ba:7e:df:29:03:f8:42:ad:5e:0f:11:c9:4a:de: 46:89:45:e9:63:26:55:23:ca:00:ce:ba:43:db:33:34:3d:ef: a3:04:d3:9b:94:80:3f:8f:12:16:04:5d:3c:b3:94:62:e1:88: 71:8c:d6:7f:f3:ed:38:9c:62:a2:c2:74:45:2d:c1:03:29:be: 88:0d:15:6f:4d:1b:33:ab:bc:5c:de:9b:61:d2:9d:85:c0:de: f0:ec:37:1b:f4:5e:ad:44:c8:eb:c7:1f:ce:55:99:aa:bd:7d: 2b:ee:32:60:52:e6:8c:80:2a:70:d8:09:42:86:3a:7d:5d:9a: 19:9a:0d:83:fc:75:e8:17:ea:ec:79:f9:44:df:5c:8b:c5:f2: f2:4b:75:d4:71:2a:d9:7c:c0:50:1b:7e:b2:b0:15:cc:27:e6: 0f:bd:7b:ea:53:90:72:55:2b:ab:3c:12:e0:f1:e9:02:0c:3e: 7c:e6:ef:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNybP/2DR7/L0CekH401MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNGYxZTZiMDExZjRkNjMzMWExMjc5NTVhNTQ4ZmE1MDUy NTgwYTUwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2VjMzNiY2ZkY2VjOGE3YTVhNWFjNTYxMzA3NDczMWUxN2QyYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7bFx/5+tPhEJWcuN4BzRpbuVclD otZHzrA9F05gUVjRGRl1i1532QVfagptUwQmq9ZNloRBWglk3rca1PWBadxCWgeB FmNHn2635JOxTlQ76nD1id9jmi4CrP94ihFN/8G9vMdsLEhC6hVjfe+C1PHm0l/S 8IpPtvtkl9Y7U1ntx/4hUbMKxJ5rL+VEA3L/Gt1iIoLpJtBEeQXpEVJhrNukzNtg 9hgbXd1rSLuNXvH7vWWj6/3cSyQ5yuYiRcO/jC3Pn3pGjScNBom0HG95BLgcrefy JV3uA9naklr7ZDtl87YyMwMT1QVcWbpvzoTC2Y2JK8vhuMHbWaKir2JGSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPsM7z9zsinpaWsVhMHRzHhfSvJMB8GA1UdIwQY MBaAFLxPHmsBH01jMaEnlVpUj6UFJYClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGIt YzU1NDc2NzU5ZDBjLzEvWS13enZQM095S2VscGF4V0V3ZEhNZUY5SzhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGItYzU1NDc2NzU5ZDBj LzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYCnMA0G CSqGSIb3DQEBCwUAA4IBAQCC6Yfzb+ky+dJtGQDecM+PDlxl23BKotlIrgxzoQ60 ABAH10SBlkW7JF6BPxlbrE17OnGJDR84wrqu9i87+kxTR7q/vmIM/JlP6IPEun7f KQP4Qq1eDxHJSt5GiUXpYyZVI8oAzrpD2zM0Pe+jBNOblIA/jxIWBF08s5Ri4Yhx jNZ/8+04nGKiwnRFLcEDKb6IDRVvTRszq7xc3pth0p2FwN7w7Dcb9F6tRMjrxx/O VZmqvX0r7jJgUuaMgCpw2AlChjp9XZoZmg2D/HXoF+rseflE31yLxfLyS3XUcSrZ fMBQG36ysBXMJ+YPvXvqU5ByVSurPBLg8ekCDD585u9f -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:34 2026 by rpki-client