This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/RxByI3rH_YsmBp9MFWCFAA3GDzM.roa File: RxByI3rH_YsmBp9MFWCFAA3GDzM.roa (raw, json) Hash identifier: kPBLDDqbqmranSBPQ+O5l9xhMyzuVrqfoP6GlvpDNU8= Subject key identifier: 47:10:72:23:7A:C7:FD:8B:26:06:9F:4C:15:60:85:00:0D:C6:0F:33 Certificate issuer: /CN=6987d0047fb1d8912c63f911305a714f438b1e71 Certificate serial: 019B7EA4D35FFCB7A86121BE3FE92F988341 Authority key identifier: 69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/RxByI3rH_YsmBp9MFWCFAA3GDzM.roa Signing time: Fri 02 Jan 2026 12:18:09 +0000 ROA not before: Fri 02 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199900 IP address blocks: 185.41.16.0/22 maxlen: 24 2a01:5020::/48 maxlen: 48 2a01:5020:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d3:5f:fc:b7:a8:61:21:be:3f:e9:2f:98:83:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6987d0047fb1d8912c63f911305a714f438b1e71 Validity Not Before: Jan 2 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=471072237ac7fd8b26069f4c156085000dc60f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:59:b0:6d:f3:af:fa:72:2f:40:3a:56:cd: a5:1b:52:84:b0:0f:22:85:c8:09:bb:b4:08:9c:32: 52:51:f7:be:a1:75:e4:0a:28:0f:71:03:c4:2a:8a: 64:f0:d2:2b:3c:28:6a:26:8d:cb:4c:47:2c:b9:72: 0a:9b:0d:09:5e:91:78:44:ee:97:c5:7a:15:33:63: 06:5c:f1:e0:18:d9:59:ea:6b:c9:10:24:af:7e:95: 50:1d:09:71:16:b6:3c:47:5b:59:d2:b4:69:48:f2: 17:ed:4b:9c:de:e4:18:f7:40:26:e2:b5:0e:b6:2c: 3a:2e:02:4b:90:09:a5:ce:f1:8d:43:44:0b:e0:43: c6:df:5e:fb:63:cb:fc:da:7f:ef:7e:2d:52:ff:1c: 55:56:95:c4:39:e5:79:4e:26:6a:0a:8f:bb:3e:7f: 99:00:80:c4:15:21:de:7d:e7:c5:51:70:22:6f:e1: fb:5b:44:4d:c0:02:9f:83:90:ce:5f:0f:fa:32:c7: 06:9d:34:e8:cb:5c:76:cc:e7:54:2b:44:ef:de:7b: b9:e9:87:6b:7e:4b:18:26:28:e3:f4:4e:a7:03:2f: b4:75:90:5b:af:91:4c:fc:4d:b1:37:a9:b0:3e:a3: 71:ee:0f:b4:7b:b1:1d:33:29:88:f5:66:6f:91:28: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:10:72:23:7A:C7:FD:8B:26:06:9F:4C:15:60:85:00:0D:C6:0F:33 X509v3 Authority Key Identifier: keyid:69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/RxByI3rH_YsmBp9MFWCFAA3GDzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.16.0/22 IPv6: 2a01:5020::/47 Signature Algorithm: sha256WithRSAEncryption a0:06:f1:43:20:9d:c5:f9:4e:0c:ff:9f:16:d9:54:de:7e:bf: 72:ac:e6:3c:d2:4d:33:21:b5:1d:e8:8c:0a:a2:b0:50:ce:62: 90:f3:77:ba:11:87:77:7b:84:84:be:55:29:fb:5e:7e:85:e5: 6d:94:da:78:88:d8:2a:d2:84:f7:3b:31:5f:28:22:ea:c5:76: a9:11:3b:4c:0d:2f:61:3c:8c:7d:74:87:9e:7c:7f:d0:95:2f: 9e:51:ef:a1:d1:53:df:f6:9a:f5:09:e1:13:d5:20:58:b1:3f: 35:90:9d:19:2c:62:c0:b5:75:4c:ef:0f:40:49:35:87:da:86: fa:6d:49:ba:68:af:91:e3:1f:b7:a1:6c:32:8c:ea:68:72:77: 86:9f:da:ae:52:a0:0b:3c:81:1f:ed:da:88:54:dd:2c:bb:c6: 27:c4:45:6e:e4:a5:46:60:8a:98:3d:69:ae:37:1a:88:db:b0: b2:6b:96:64:46:a8:76:66:20:41:62:31:99:3a:10:1c:20:f9: dc:16:4c:b8:09:17:81:6d:3d:d2:ea:5c:b9:be:91:a8:58:55: d2:c4:57:83:dc:50:bb:87:07:bf:ce:20:60:d7:1f:6c:01:bf: 10:12:ac:6f:10:b2:f0:ff:27:f4:7c:bf:aa:11:7e:5c:de:f0: 7d:19:c6:c7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pNNf/LeoYSG+P+kvmINBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODdkMDA0N2ZiMWQ4OTEyYzYzZjkxMTMwNWE3MTRmNDM4 YjFlNzEwHhcNMjYwMTAyMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzEwNzIyMzdhYzdmZDhiMjYwNjlmNGMxNTYwODUwMDBkYzYwZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArchZsG3zr/pyL0A6Vs2lG1KEsA8i hcgJu7QInDJSUfe+oXXkCigPcQPEKopk8NIrPChqJo3LTEcsuXIKmw0JXpF4RO6X xXoVM2MGXPHgGNlZ6mvJECSvfpVQHQlxFrY8R1tZ0rRpSPIX7Uuc3uQY90Am4rUO tiw6LgJLkAmlzvGNQ0QL4EPG3177Y8v82n/vfi1S/xxVVpXEOeV5TiZqCo+7Pn+Z AIDEFSHefefFUXAib+H7W0RNwAKfg5DOXw/6MscGnTToy1x2zOdUK0Tv3nu56Ydr fksYJijj9E6nAy+0dZBbr5FM/E2xN6mwPqNx7g+0e7EdMymI9WZvkShDFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEcQciN6x/2LJgafTBVghQANxg8zMB8GA1UdIwQY MBaAFGmH0AR/sdiRLGP5ETBacU9Dix5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlmUUJILXgySkVzWV9rUk1GcHhUME9MSG5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kODM0NTQtZDM1OS00ZTllLTg0MWMt NDI5MTRiZTBhYTA0LzEvUnhCeUkzckhfWXNtQnA5TUZXQ0ZBQTNHRHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9kODM0NTQtZDM1OS00ZTllLTg0MWMtNDI5MTRiZTBhYTA0 LzEvYVlmUUJILXgySkVzWV9rUk1GcHhUME9MSG5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuSkQMA8E AgACMAkDBwEqAVAgAAAwDQYJKoZIhvcNAQELBQADggEBAKAG8UMgncX5Tgz/nxbZ VN5+v3Ks5jzSTTMhtR3ojAqisFDOYpDzd7oRh3d7hIS+VSn7Xn6F5W2U2niI2CrS hPc7MV8oIurFdqkRO0wNL2E8jH10h558f9CVL55R76HRU9/2mvUJ4RPVIFixPzWQ nRksYsC1dUzvD0BJNYfahvptSbpor5HjH7ehbDKM6mhyd4af2q5SoAs8gR/t2ohU 3Sy7xifERW7kpUZgipg9aa43GojbsLJrlmRGqHZmIEFiMZk6EBwg+dwWTLgJF4Ft PdLqXLm+kahYVdLEV4PcULuHB7/OIGDXH2wBvxASrG8QsvD/J/R8v6oRflze8H0Z xsc= -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:33 2026 by rpki-client