This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/Y70zyG7I9pwPxufHMNaSl1DNGhY.roa File: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (raw, json) Hash identifier: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ= Subject key identifier: 63:BD:33:C8:6E:C8:F6:9C:0F:C6:E7:C7:30:D6:92:97:50:CD:1A:16 Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087 Certificate serial: 019B77C7135F2982624D2B36B2EEF32E2619 Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/Y70zyG7I9pwPxufHMNaSl1DNGhY.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 195.85.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:13:5f:29:82:62:4d:2b:36:b2:ee:f3:2e:26:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63bd33c86ec8f69c0fc6e7c730d6929750cd1a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:82:44:e9:fc:3e:d2:d5:93:2e:27:f4:63: 55:a9:9f:37:f9:7a:aa:d6:97:6e:c2:84:8b:a8:6a: d7:c2:a3:72:c3:99:38:e5:cc:56:08:8d:d6:fd:0f: b8:44:68:f4:17:ca:d7:6e:e6:11:61:07:25:35:72: d2:c2:da:2c:a6:1a:c4:ac:1f:44:54:8c:c4:5d:a6: 77:37:3f:d2:4a:de:0c:36:15:93:1a:06:e8:b0:e8: 91:c8:85:f4:af:e7:d3:73:2f:c3:06:4d:7e:b2:da: 15:66:17:14:1d:62:c6:e0:a9:74:88:32:01:16:98: 4f:c0:6a:3e:d8:c6:5c:29:00:62:ce:ad:d5:bb:7a: b4:f1:a4:b4:f2:fe:a3:3a:32:6b:9d:da:c8:e1:93: 12:e1:f8:b3:9b:1c:30:ee:d0:30:c6:6b:64:28:99: ab:da:4b:26:b5:6f:f4:36:27:d9:17:5b:f7:22:b3: ce:71:af:f4:e3:26:e4:46:89:02:ee:86:6d:e5:56: 24:ae:ce:9f:ec:d5:46:0d:1e:fb:1c:e6:de:8c:3b: 82:b8:3d:c7:ba:f8:e3:44:79:b1:e6:16:e2:03:14: 65:57:7c:b7:c2:d8:1f:ac:7b:f4:df:87:d1:e5:81: db:4b:64:b8:6a:ad:c5:99:15:fd:3f:53:fc:aa:a3: dc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:33:C8:6E:C8:F6:9C:0F:C6:E7:C7:30:D6:92:97:50:CD:1A:16 X509v3 Authority Key Identifier: keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/Y70zyG7I9pwPxufHMNaSl1DNGhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.12.0/24 Signature Algorithm: sha256WithRSAEncryption 24:78:11:d5:c5:84:47:f1:ac:69:29:96:b5:d7:85:c6:ad:a1: cb:07:98:a3:e0:5d:a7:04:5f:84:5c:7d:53:7a:12:2c:3a:14: 00:94:dd:93:a3:39:41:c2:08:1e:90:0b:70:d6:f9:16:3c:5b: 59:14:dd:9d:02:fd:2d:49:c7:b9:3f:a5:a2:38:e0:5d:2b:8d: af:54:23:50:72:cd:95:ab:ef:07:61:e1:98:93:7a:26:f8:c3: 6c:d7:50:45:08:92:32:33:f5:b8:46:c8:18:5d:ac:65:50:c3: a5:05:b9:6a:c9:f9:c4:d7:05:78:35:81:2b:4f:e6:56:4a:51: 4d:41:eb:7b:94:9e:32:3e:37:65:21:62:6c:7f:64:07:9f:b7: 42:94:6d:9e:ea:2d:07:52:4f:77:6b:f8:a7:1b:e3:d2:6e:79: 32:1e:00:18:f7:38:f7:a5:ff:75:9d:e4:3f:5a:ee:51:52:1a: fc:52:b0:8c:9a:89:21:37:54:82:ef:fa:49:b2:4a:7f:83:fb: cf:4c:02:cd:2d:29:c4:be:90:0b:f5:ca:ba:73:ec:8b:b9:0b: b2:6d:33:80:58:83:4f:49:4c:a2:8e:c6:9a:d8:d6:4c:d9:6e: 42:eb:52:4d:5e:86:dd:9c:0c:c3:08:52:02:12:68:2f:bc:2d: 31:c7:97:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxNfKYJiTSs2su7zLiYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YWIyMmZiMmRhNDczYzU0MjZiZmNjMWY4ODA4NjEwMDQw MTcwODcwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2JkMzNjODZlYzhmNjljMGZjNmU3YzczMGQ2OTI5NzUwY2QxYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDuCROn8PtLVky4n9GNVqZ83+Xqq 1pduwoSLqGrXwqNyw5k45cxWCI3W/Q+4RGj0F8rXbuYRYQclNXLSwtosphrErB9E VIzEXaZ3Nz/SSt4MNhWTGgbosOiRyIX0r+fTcy/DBk1+stoVZhcUHWLG4Kl0iDIB FphPwGo+2MZcKQBizq3Vu3q08aS08v6jOjJrndrI4ZMS4fizmxww7tAwxmtkKJmr 2ksmtW/0NifZF1v3IrPOca/04ybkRokC7oZt5VYkrs6f7NVGDR77HObejDuCuD3H uvjjRHmx5hbiAxRlV3y3wtgfrHv034fR5YHbS2S4aq3FmRX9P1P8qqPcdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGO9M8huyPacD8bnxzDWkpdQzRoWMB8GA1UdIwQY MBaAFCirIvstpHPFQmv8wfiAhhAEAXCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMt M2ExNTk1ZmM4NmVmLzEvWTcwenlHN0k5cHdQeHVmSE1OYVNsMUROR2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMtM2ExNTk1ZmM4NmVm LzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1UMMA0G CSqGSIb3DQEBCwUAA4IBAQAkeBHVxYRH8axpKZa114XGraHLB5ij4F2nBF+EXH1T ehIsOhQAlN2TozlBwggekAtw1vkWPFtZFN2dAv0tSce5P6WiOOBdK42vVCNQcs2V q+8HYeGYk3om+MNs11BFCJIyM/W4RsgYXaxlUMOlBblqyfnE1wV4NYErT+ZWSlFN Qet7lJ4yPjdlIWJsf2QHn7dClG2e6i0HUk93a/inG+PSbnkyHgAY9zj3pf91neQ/ Wu5RUhr8UrCMmokhN1SC7/pJskp/g/vPTALNLSnEvpAL9cq6c+yLuQuybTOAWINP SUyijsaa2NZM2W5C61JNXobdnAzDCFICEmgvvC0xx5d9 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:17 2026 by rpki-client