This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/yS_lGMVX6IuAVI6W1sAw8zbKOfs.roa File: yS_lGMVX6IuAVI6W1sAw8zbKOfs.roa (raw, json) Hash identifier: xRXUXVbiVTSPwLv7pVaMbiKs2q5E3HgTW6OSYD6dOfI= Subject key identifier: C9:2F:E5:18:C5:57:E8:8B:80:54:8E:96:D6:C0:30:F3:36:CA:39:FB Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95 Certificate serial: 019B7834E0237A18DA0A5F1E3EA525DCB32E Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/yS_lGMVX6IuAVI6W1sAw8zbKOfs.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209276 IP address blocks: 185.136.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e0:23:7a:18:da:0a:5f:1e:3e:a5:25:dc:b3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c92fe518c557e88b80548e96d6c030f336ca39fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:50:ca:90:4f:2d:aa:f4:d0:e8:22:de:1f: 35:02:8e:ce:89:96:4a:a4:52:6c:f0:8f:11:15:29: f8:9e:b2:3f:37:bc:3b:e6:1c:4d:26:f8:fd:67:77: f7:67:a7:07:0e:bb:15:d2:e6:be:a3:9d:2c:4f:e8: 2e:d4:17:b3:cf:56:aa:6d:5a:5d:c6:6e:c9:0d:01: 47:23:e0:80:2f:33:88:17:e0:58:1c:24:d8:a2:cd: ba:3c:dd:7f:0d:ea:0c:84:73:b1:59:b7:95:07:5e: f2:8c:83:e0:49:4d:d4:8c:52:76:b2:25:86:1d:a3: 1b:7e:f1:65:01:7f:ba:fe:f1:ad:db:f3:df:d4:80: c2:08:47:e0:f9:95:98:09:17:83:c2:4c:22:72:fb: ad:f5:8a:4c:cf:0a:42:7c:69:cc:7f:cf:aa:5e:ed: 3d:a5:c2:0f:69:2c:0a:ff:57:0b:0b:7c:c6:5a:0f: 6b:aa:6d:8d:ee:f7:5a:af:c5:a0:27:3e:7f:08:4e: 34:2b:33:27:9a:91:72:43:c2:80:87:ef:d5:1f:6b: 3c:4e:65:fe:cc:e6:4b:5b:60:98:0b:17:2c:49:18: 88:33:e6:16:ff:b2:0b:71:99:bc:fe:a1:b7:f3:c4: 7b:d1:59:70:4e:68:b2:0a:1b:3a:ec:82:27:4b:97: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2F:E5:18:C5:57:E8:8B:80:54:8E:96:D6:C0:30:F3:36:CA:39:FB X509v3 Authority Key Identifier: keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/yS_lGMVX6IuAVI6W1sAw8zbKOfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.226.0/24 Signature Algorithm: sha256WithRSAEncryption 06:90:fe:f2:08:c7:c6:a0:ad:58:ac:dc:53:78:43:d6:80:a4: 1d:4b:83:e1:3c:69:c6:00:fc:1d:dc:be:a6:8c:fb:d0:49:22: de:25:60:1d:dd:54:ac:aa:5c:68:fd:49:50:67:6f:19:72:4c: 7b:42:7b:c7:46:d5:1a:fc:c6:ac:2c:94:19:00:82:e1:61:70: 2b:48:5b:b4:a4:76:6e:3d:a2:4c:1e:c7:45:93:a9:38:ee:cd: e2:aa:ab:7a:02:b1:d9:aa:aa:df:0f:3e:3d:3b:d3:e2:fc:a2: bc:e2:0e:92:bd:28:e6:59:b1:96:c6:56:bf:6b:b1:05:d4:a9: d4:26:63:45:53:ac:35:51:18:08:57:64:83:d0:e3:1e:56:bc: f6:3d:b5:ce:cc:b0:d7:ed:5d:87:0d:df:44:cf:dc:ad:79:35: 52:4b:99:e0:ef:d4:97:77:3f:c3:42:a1:a8:67:83:f4:b9:6d: 00:fa:fb:6c:07:d3:51:fd:25:ca:8a:ef:33:09:70:de:4f:8d: 8b:ca:eb:37:83:c7:fe:28:2e:10:96:b7:77:c3:2e:df:de:8b: 91:bb:8e:a0:02:51:ad:72:37:75:1e:19:02:a1:60:7b:22:6d: 5b:62:17:18:4d:cf:2a:4d:a7:fa:0c:b7:c7:88:06:73:40:13: 93:f9:12:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOAjehjaCl8ePqUl3LMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzQwYzRjMDc5ZjJkMWRlZTg1NDM5ZjgyNzgxYjliYWU3 NTZhOTUwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTJmZTUxOGM1NTdlODhiODA1NDhlOTZkNmMwMzBmMzM2Y2EzOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq5QypBPLar00Ogi3h81Ao7OiZZK pFJs8I8RFSn4nrI/N7w75hxNJvj9Z3f3Z6cHDrsV0ua+o50sT+gu1Bezz1aqbVpd xm7JDQFHI+CALzOIF+BYHCTYos26PN1/DeoMhHOxWbeVB17yjIPgSU3UjFJ2siWG HaMbfvFlAX+6/vGt2/Pf1IDCCEfg+ZWYCReDwkwicvut9YpMzwpCfGnMf8+qXu09 pcIPaSwK/1cLC3zGWg9rqm2N7vdar8WgJz5/CE40KzMnmpFyQ8KAh+/VH2s8TmX+ zOZLW2CYCxcsSRiIM+YW/7ILcZm8/qG388R70VlwTmiyChs67IInS5fEkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMkv5RjFV+iLgFSOltbAMPM2yjn7MB8GA1UdIwQY MBaAFLF0DEwHny0d7oVDn4J4G5uudWqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQt ZWYwNjcxYzdjMGRmLzEveVNfbEdNVlg2SXVBVkk2VzFzQXc4emJLT2ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQtZWYwNjcxYzdjMGRm LzEvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYjiMA0G CSqGSIb3DQEBCwUAA4IBAQAGkP7yCMfGoK1YrNxTeEPWgKQdS4PhPGnGAPwd3L6m jPvQSSLeJWAd3VSsqlxo/UlQZ28Zckx7QnvHRtUa/MasLJQZAILhYXArSFu0pHZu PaJMHsdFk6k47s3iqqt6ArHZqqrfDz49O9Pi/KK84g6SvSjmWbGWxla/a7EF1KnU JmNFU6w1URgIV2SD0OMeVrz2PbXOzLDX7V2HDd9Ez9yteTVSS5ng79SXdz/DQqGo Z4P0uW0A+vtsB9NR/SXKiu8zCXDeT42Lyus3g8f+KC4Qlrd3wy7f3ouRu46gAlGt cjd1HhkCoWB7Im1bYhcYTc8qTaf6DLfHiAZzQBOT+RLV -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:02 2026 by rpki-client