This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/lyFAZNxDoVB_4-IZx9taISL-h1Y.roa File: lyFAZNxDoVB_4-IZx9taISL-h1Y.roa (raw, json) Hash identifier: kzhZQdnTTMEyyH8y5o2LcLLVtV/D0+7gimOZT6GoW+A= Subject key identifier: 97:21:40:64:DC:43:A1:50:7F:E3:E2:19:C7:DB:5A:21:22:FE:87:56 Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c Certificate serial: 019B7AC9266844EF329CA9C161C00CAA86F3 Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/lyFAZNxDoVB_4-IZx9taISL-h1Y.roa Signing time: Thu 01 Jan 2026 18:19:21 +0000 ROA not before: Thu 01 Jan 2026 18:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213075 IP address blocks: 185.243.84.0/22 maxlen: 22 185.243.84.0/23 maxlen: 23 185.243.86.0/23 maxlen: 23 185.243.86.0/24 maxlen: 24 185.243.87.0/24 maxlen: 24 193.200.250.0/24 maxlen: 24 2a0d:d81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:26:68:44:ef:32:9c:a9:c1:61:c0:0c:aa:86:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c Validity Not Before: Jan 1 18:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97214064dc43a1507fe3e219c7db5a2122fe8756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:0f:1b:07:93:32:59:ea:fe:ca:19:83:98: 54:3b:92:c7:41:a2:74:99:2a:23:d9:a6:16:28:79: d8:d0:9d:60:8c:45:68:02:bd:68:64:7e:cf:54:e7: dc:83:47:5b:f6:a2:75:9f:59:1d:bc:4f:a4:13:8b: 25:30:44:54:a2:ef:15:72:0d:19:f4:ea:4e:c3:5c: f1:22:ba:59:ce:e6:14:09:ea:89:ec:ef:4c:f5:ad: d7:9c:4a:cb:a2:20:ea:eb:b2:3a:d9:e8:88:62:cd: d0:0d:e9:59:ee:b6:ef:6c:96:de:9a:e7:06:92:fb: 46:08:bd:de:4b:55:3e:d3:d3:3c:74:33:33:73:4f: b5:08:d5:08:38:6d:7c:49:38:ab:2f:2e:9d:b7:dd: 59:94:7a:35:b6:8f:ec:fe:4b:b5:b7:23:f9:a3:f2: f0:6a:59:08:6d:0f:3e:e2:b9:dd:bc:ca:f0:8a:0a: 00:4f:bf:dd:84:2d:99:05:de:7d:10:8a:1d:c9:7a: 3b:f4:22:11:23:32:cb:eb:f2:40:7d:23:e4:79:31: 11:7d:0e:75:e6:b7:ee:15:84:45:5c:2c:a1:36:b5: 28:e8:a8:a9:93:ad:52:26:19:39:bf:ea:d0:09:f6: fe:61:ec:35:5a:73:6f:55:46:bf:e9:4a:d9:72:a1: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:21:40:64:DC:43:A1:50:7F:E3:E2:19:C7:DB:5A:21:22:FE:87:56 X509v3 Authority Key Identifier: keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/lyFAZNxDoVB_4-IZx9taISL-h1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.84.0/22 193.200.250.0/24 IPv6: 2a0d:d81::/32 Signature Algorithm: sha256WithRSAEncryption 8d:82:5e:e7:6f:a5:42:35:a9:4e:ed:2b:c7:5a:0f:46:1a:69: ce:bd:eb:61:8d:a8:e7:70:c7:a6:5b:53:af:6a:c6:d2:8b:b1: b5:14:9b:a5:84:07:4f:dc:d4:a0:e8:47:12:26:9f:8f:40:73: e9:67:0a:14:32:50:b8:4f:d0:eb:8f:b3:de:78:53:5e:16:5a: fa:b5:52:97:52:91:7a:e8:47:80:67:59:59:07:b6:aa:8c:2d: b7:55:2b:49:b2:54:be:90:60:22:f4:b6:da:3f:e5:83:49:29: c9:5a:76:36:cb:ab:14:d7:1f:82:c7:c7:05:22:c6:90:4c:0e: 8b:60:a4:04:41:8c:b5:87:ae:25:39:d5:11:f0:0d:15:9e:a2: 4f:be:62:e2:88:2a:ca:29:ba:f8:6a:26:f0:e6:96:26:f9:fd: 31:78:17:a2:52:ef:c6:41:8b:b8:2d:fc:60:38:0b:00:14:75: 45:20:8e:aa:93:dd:89:85:a3:b9:df:49:4a:07:b9:f4:ed:8a: 07:36:a5:27:b5:50:64:68:b7:b8:73:fe:db:7f:1c:35:9a:aa: 85:1b:39:bc:58:de:e0:e6:ae:7d:1a:ea:f1:2e:60:5d:d4:55: 1e:b9:86:1d:94:34:d9:09:82:78:33:00:57:90:7e:86:d6:3e: 23:4f:72:d5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6ySZoRO8ynKnBYcAMqobzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MjhkYjI0MTU0MWQ2YjZhNjQ5MDAwNDA2MGFhNzFhZDZl YzE4OWMwHhcNMjYwMTAxMTgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzIxNDA2NGRjNDNhMTUwN2ZlM2UyMTljN2RiNWEyMTIyZmU4NzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHsPGweTMlnq/soZg5hUO5LHQaJ0 mSoj2aYWKHnY0J1gjEVoAr1oZH7PVOfcg0db9qJ1n1kdvE+kE4slMERUou8Vcg0Z 9OpOw1zxIrpZzuYUCeqJ7O9M9a3XnErLoiDq67I62eiIYs3QDelZ7rbvbJbemucG kvtGCL3eS1U+09M8dDMzc0+1CNUIOG18STirLy6dt91ZlHo1to/s/ku1tyP5o/Lw alkIbQ8+4rndvMrwigoAT7/dhC2ZBd59EIodyXo79CIRIzLL6/JAfSPkeTERfQ51 5rfuFYRFXCyhNrUo6Kipk61SJhk5v+rQCfb+Yew1WnNvVUa/6UrZcqH+pQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJchQGTcQ6FQf+PiGcfbWiEi/odWMB8GA1UdIwQY MBaAFCko2yQVQda2pkkABAYKpxrW7BicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQt MjkzNTYzNDFjNWZkLzEvbHlGQVpOeERvVkJfNC1JWng5dGFJU0wtaDFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hNDc0NzUtMTc5Yi00NzdmLWI1NTQtMjkzNTYzNDFjNWZk LzEvS1NqYkpCVkIxcmFtU1FBRUJncW5HdGJzR0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCufNUAwQA wcj6MA0EAgACMAcDBQAqDQ2BMA0GCSqGSIb3DQEBCwUAA4IBAQCNgl7nb6VCNalO 7SvHWg9GGmnOvethjajncMemW1OvasbSi7G1FJulhAdP3NSg6EcSJp+PQHPpZwoU MlC4T9Drj7PeeFNeFlr6tVKXUpF66EeAZ1lZB7aqjC23VStJslS+kGAi9LbaP+WD SSnJWnY2y6sU1x+Cx8cFIsaQTA6LYKQEQYy1h64lOdUR8A0VnqJPvmLiiCrKKbr4 aibw5pYm+f0xeBeiUu/GQYu4LfxgOAsAFHVFII6qk92JhaO530lKB7n07YoHNqUn tVBkaLe4c/7bfxw1mqqFGzm8WN7g5q59GurxLmBd1FUeuYYdlDTZCYJ4MwBXkH6G 1j4jT3LV -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:48 2026 by rpki-client