This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/wYpHa59YPrwp7w7D2dTnVQglgA8.roa
File: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (raw, json)
Hash identifier: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=
Subject key identifier: C1:8A:47:6B:9F:58:3E:BC:29:EF:0E:C3:D9:D4:E7:55:08:25:80:0F
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019B7C7FDDAFAC73D34A7DCAC68F67E66BFC
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/wYpHa59YPrwp7w7D2dTnVQglgA8.roa
Signing time: Fri 02 Jan 2026 02:18:33 +0000
ROA not before: Fri 02 Jan 2026 02:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48314
IP address blocks: 185.135.55.0/24 maxlen: 24
2a02:faa0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:dd:af:ac:73:d3:4a:7d:ca:c6:8f:67:e6:6b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Jan 2 02:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c18a476b9f583ebc29ef0ec3d9d4e7550825800f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:0f:8a:87:79:01:ac:fc:68:6a:3b:33:f6:
4c:38:58:34:95:af:29:fb:05:9b:0d:27:08:e6:25:
0b:9b:f5:1b:3f:f3:d9:19:39:b5:a4:2d:39:70:da:
9b:9b:fc:57:96:88:7f:f8:38:f7:7a:1f:9e:0b:5b:
e6:b3:3d:aa:c1:21:99:f3:28:a4:95:a9:29:2e:1f:
f1:5c:94:dc:2f:51:98:72:4c:e1:bc:b2:52:4d:3d:
87:f0:3e:f7:50:73:bf:21:7a:29:ba:5c:7e:20:eb:
13:07:ed:22:0e:fa:e4:0b:23:75:33:18:d3:a1:47:
63:aa:37:86:f4:ce:39:2a:c5:b0:bb:94:44:ca:d1:
41:f3:4e:69:0e:9d:a0:2f:b3:02:e4:39:2f:0c:8a:
54:a1:43:bb:76:c8:a8:fd:02:a4:96:fd:cf:cc:7a:
7a:ac:ae:9e:16:a1:24:19:ff:2e:ae:0d:aa:bc:73:
54:ea:87:37:c3:74:83:09:a6:a5:d9:fc:d9:5f:83:
c7:5a:6c:a3:46:aa:28:7f:df:ad:be:1b:55:f5:2d:
2d:ef:a6:ca:ac:e3:36:2e:7b:be:4c:51:09:9d:5d:
d1:af:57:df:b3:51:e3:34:b3:b4:c5:c4:9a:ff:9c:
4b:11:7e:99:8e:e2:62:5e:17:03:84:96:b4:f3:bb:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8A:47:6B:9F:58:3E:BC:29:EF:0E:C3:D9:D4:E7:55:08:25:80:0F
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/wYpHa59YPrwp7w7D2dTnVQglgA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.55.0/24
IPv6:
2a02:faa0:3::/48
Signature Algorithm: sha256WithRSAEncryption
38:d3:79:af:24:99:0a:f1:3f:da:6f:ee:a1:20:27:3b:7f:3e:
99:21:3f:3e:bb:17:5d:a1:a3:6a:a3:ac:92:03:58:33:38:f4:
71:69:d1:a4:df:d0:c2:1a:64:8c:99:01:82:ed:db:22:ef:48:
b1:d9:7c:66:b7:72:4e:7b:1f:03:5c:a1:41:d2:25:68:83:b6:
46:4d:88:12:34:4f:85:25:78:6f:4b:38:5f:df:58:f3:34:f8:
e5:5c:a5:93:ce:2e:20:16:49:3a:f1:72:3e:b4:9f:e7:5e:95:
e2:37:2c:9d:78:76:e2:ce:a6:85:46:ee:62:63:b6:4c:4d:30:
13:3d:6a:72:3f:00:c6:d1:b6:68:9d:32:bf:12:70:40:9d:45:
10:3e:dd:72:7e:8d:a1:44:ea:01:c5:b7:c3:9d:ff:2b:06:32:
ee:99:0f:50:19:41:42:f4:d9:8f:6a:b8:38:2e:ca:e6:ad:27:
59:82:54:3e:aa:9e:a6:59:ee:db:9c:50:2e:a0:a2:24:49:74:
4c:69:34:0e:66:f1:0b:dd:fd:4f:e9:b0:13:46:9c:6a:88:a6:
bd:17:60:51:6d:1d:02:4d:80:d5:45:00:7e:81:45:ce:d3:ee:
65:42:3c:01:94:ce:1e:11:07:de:48:34:f9:76:19:3d:69:54:
dc:80:55:34
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt8f92vrHPTSn3Kxo9n5mv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5
NjcyZDEwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMThhNDc2YjlmNTgzZWJjMjllZjBlYzNkOWQ0ZTc1NTA4MjU4MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTEPiod5Aaz8aGo7M/ZMOFg0la8p
+wWbDScI5iULm/UbP/PZGTm1pC05cNqbm/xXloh/+Dj3eh+eC1vmsz2qwSGZ8yik
lakpLh/xXJTcL1GYckzhvLJSTT2H8D73UHO/IXopulx+IOsTB+0iDvrkCyN1MxjT
oUdjqjeG9M45KsWwu5REytFB805pDp2gL7MC5DkvDIpUoUO7dsio/QKklv3PzHp6
rK6eFqEkGf8urg2qvHNU6oc3w3SDCaal2fzZX4PHWmyjRqoof9+tvhtV9S0t76bK
rOM2Lnu+TFEJnV3Rr1ffs1HjNLO0xcSa/5xLEX6ZjuJiXhcDhJa087vKLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMGKR2ufWD68Ke8Ow9nU51UIJYAPMB8GA1UdIwQY
MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt
NGVmNDg4ZGM2ZGM0LzEvd1lwSGE1OVlQcndwN3c3RDJkVG5WUWdsZ0E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0
LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuYc3MA8E
AgACMAkDBwAqAvqgAAMwDQYJKoZIhvcNAQELBQADggEBADjTea8kmQrxP9pv7qEg
Jzt/PpkhPz67F12ho2qjrJIDWDM49HFp0aTf0MIaZIyZAYLt2yLvSLHZfGa3ck57
HwNcoUHSJWiDtkZNiBI0T4UleG9LOF/fWPM0+OVcpZPOLiAWSTrxcj60n+deleI3
LJ14duLOpoVG7mJjtkxNMBM9anI/AMbRtmidMr8ScECdRRA+3XJ+jaFE6gHFt8Od
/ysGMu6ZD1AZQUL02Y9quDguyuatJ1mCVD6qnqZZ7tucUC6goiRJdExpNA5m8Qvd
/U/psBNGnGqIpr0XYFFtHQJNgNVFAH6BRc7T7mVCPAGUzh4RB95INPl2GT1pVNyA
VTQ=
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:19:49 2026 by rpki-client