This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/ryDXnnwnZr1091-wn3Xn8hWEPlQ.roa File: ryDXnnwnZr1091-wn3Xn8hWEPlQ.roa (raw, json) Hash identifier: cLPzRbnAmpDPM25/ehEAiv6PVrI6yHFxO/FTdnRAlow= Subject key identifier: AF:20:D7:9E:7C:27:66:BD:74:F7:5F:B0:9F:75:E7:F2:15:84:3E:54 Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4 Certificate serial: 019B7F136E7C963D34BC05B9D00470B7D195 Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/ryDXnnwnZr1091-wn3Xn8hWEPlQ.roa Signing time: Fri 02 Jan 2026 14:18:58 +0000 ROA not before: Fri 02 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43311 IP address blocks: 185.83.189.0/24 maxlen: 24 185.83.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6e:7c:96:3d:34:bc:05:b9:d0:04:70:b7:d1:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4 Validity Not Before: Jan 2 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af20d79e7c2766bd74f75fb09f75e7f215843e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:da:95:86:17:d2:5f:e3:e2:9e:0b:d2:11: a4:99:db:41:40:88:6c:a4:c4:7d:31:e9:af:d7:79: 94:34:00:fc:93:9a:3a:d0:81:b6:4e:17:94:7d:a1: 58:13:9a:d7:31:cd:f5:df:fb:d9:3f:23:0b:24:3d: 70:73:7f:cc:92:fd:b5:9f:d8:68:50:f7:21:46:fb: 89:fd:53:37:aa:f0:4e:16:d5:cf:00:b1:15:6d:e3: 3d:ce:a2:54:7f:bb:d6:6c:d0:af:fb:4e:89:aa:63: 48:e1:d6:62:f0:7e:9c:54:e4:9b:3a:67:5c:fe:dd: 5a:38:4c:04:32:2f:c5:93:f1:bd:75:06:d5:7a:95: 89:c6:0f:81:5b:ba:63:12:37:fb:b7:7f:35:f2:88: 11:ce:af:27:d8:7a:fd:5a:ef:c6:6a:ac:3c:a9:e9: c7:4d:78:3b:2b:88:54:f5:ab:6b:b2:f5:a1:0b:5d: cd:db:20:5d:96:f5:c6:dc:17:a1:41:96:82:5f:fe: 8b:8e:77:5c:47:d0:f2:53:55:4e:0b:a7:e4:cc:21: 20:70:9d:ca:d7:1f:0f:96:d0:a6:4e:16:18:c1:47: 56:4e:fb:61:d4:5d:79:46:f1:79:6d:33:01:5c:77: d1:7b:d6:bd:d2:c7:14:cd:ee:4b:bc:91:fe:fd:5e: c6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:20:D7:9E:7C:27:66:BD:74:F7:5F:B0:9F:75:E7:F2:15:84:3E:54 X509v3 Authority Key Identifier: keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/ryDXnnwnZr1091-wn3Xn8hWEPlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.189.0/24 185.83.191.0/24 Signature Algorithm: sha256WithRSAEncryption 62:d2:c2:5a:21:1c:1c:14:98:15:c0:88:ec:08:55:7a:69:99: 62:9e:dd:db:30:cc:c7:f2:b6:a1:65:44:69:06:23:ae:52:7b: 45:33:40:1a:bf:35:c2:91:fe:32:51:be:54:55:e5:5f:65:83: 71:7d:97:85:11:8d:55:23:65:da:7d:f2:85:24:a5:6a:e2:96: 68:3e:8c:64:6e:ca:d0:2f:39:a4:55:a3:7e:0d:a0:e2:b5:c4: 65:39:4a:7d:dc:75:66:23:bf:c2:c9:d4:76:b3:b5:ef:5f:b4: 23:b8:68:49:94:15:f1:a4:34:02:c6:8d:8a:12:f7:73:00:ca: 32:d2:92:22:5f:05:9f:33:0b:69:81:d8:68:98:0a:db:d2:e3: 7e:0c:bd:2d:8f:af:0b:f5:32:4c:1d:34:16:fe:10:82:6d:05: 5d:a9:32:87:c2:ca:38:6f:28:9d:14:00:6a:64:24:67:4b:05: 1f:41:58:b3:ae:14:5b:d1:63:1f:d6:ec:d3:ac:17:f9:0b:0d: f2:bb:9b:53:bc:ee:8a:40:0c:7a:ee:3c:cf:65:22:19:96:95: 21:58:0d:4f:54:96:f8:31:89:ae:f6:47:e6:76:77:65:db:bb: 86:c3:1f:f7:71:ec:ca:73:22:80:2e:b7:4a:ee:40:da:47:91: 7d:50:35:59 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E258lj00vAW50ARwt9GVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZGE3YzhhZTAxNTBlYjhjOTQ2ZDdiZjFlMDVjMDQyZGRm NmEzZDQwHhcNMjYwMTAyMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjIwZDc5ZTdjMjc2NmJkNzRmNzVmYjA5Zjc1ZTdmMjE1ODQzZTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzanalYYX0l/j4p4L0hGkmdtBQIhs pMR9Memv13mUNAD8k5o60IG2TheUfaFYE5rXMc313/vZPyMLJD1wc3/Mkv21n9ho UPchRvuJ/VM3qvBOFtXPALEVbeM9zqJUf7vWbNCv+06JqmNI4dZi8H6cVOSbOmdc /t1aOEwEMi/Fk/G9dQbVepWJxg+BW7pjEjf7t3818ogRzq8n2Hr9Wu/Gaqw8qenH TXg7K4hU9atrsvWhC13N2yBdlvXG3BehQZaCX/6LjndcR9DyU1VOC6fkzCEgcJ3K 1x8PltCmThYYwUdWTvth1F15RvF5bTMBXHfRe9a90scUze5LvJH+/V7G+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK8g1558J2a9dPdfsJ915/IVhD5UMB8GA1UdIwQY MBaAFFDafIrgFQ64yUbXvx4FwELd9qPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5Nzgt YjZmMWYwMzE3MjFlLzEvcnlEWG5ud25acjEwOTEtd24zWG44aFdFUGxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5NzgtYjZmMWYwMzE3MjFl LzEvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVO9AwQA uVO/MA0GCSqGSIb3DQEBCwUAA4IBAQBi0sJaIRwcFJgVwIjsCFV6aZlint3bMMzH 8rahZURpBiOuUntFM0AavzXCkf4yUb5UVeVfZYNxfZeFEY1VI2XaffKFJKVq4pZo PoxkbsrQLzmkVaN+DaDitcRlOUp93HVmI7/CydR2s7XvX7QjuGhJlBXxpDQCxo2K EvdzAMoy0pIiXwWfMwtpgdhomArb0uN+DL0tj68L9TJMHTQW/hCCbQVdqTKHwso4 byidFABqZCRnSwUfQVizrhRb0WMf1uzTrBf5Cw3yu5tTvO6KQAx67jzPZSIZlpUh WA1PVJb4MYmu9kfmdndl27uGwx/3cezKcyKALrdK7kDaR5F9UDVZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:33 2026 by rpki-client