This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/iYwrp0w-YMmm0ibxrh86XDfftXk.roa File: iYwrp0w-YMmm0ibxrh86XDfftXk.roa (raw, json) Hash identifier: ondL4ek6tcywdsndKqkoZF68C1amMGdy1QAaB/ONx9M= Subject key identifier: 89:8C:2B:A7:4C:3E:60:C9:A6:D2:26:F1:AE:1F:3A:5C:37:DF:B5:79 Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b Certificate serial: 019B79112E0ECEB8A45C99428E1CD074D9F0 Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/iYwrp0w-YMmm0ibxrh86XDfftXk.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.180.0/24 maxlen: 24 2001:7f8:fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2e:0e:ce:b8:a4:5c:99:42:8e:1c:d0:74:d9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=898c2ba74c3e60c9a6d226f1ae1f3a5c37dfb579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:a5:8c:19:97:8a:9c:96:22:5b:f7:c7:bb: 82:26:53:31:61:51:9b:21:8c:d0:5f:7d:f8:db:73: d7:d8:17:f8:0b:e7:01:ff:18:12:26:51:d0:3e:d3: cb:73:11:eb:a1:eb:79:20:79:69:e8:4b:72:43:af: eb:9e:2d:7a:11:17:90:50:9c:18:ef:bd:21:2f:1c: 42:8e:8c:e9:48:db:34:68:6f:1a:3a:fd:86:68:dd: ec:f1:b1:14:57:22:96:68:6b:b0:c8:ee:8d:dd:5c: 9e:b3:b3:61:58:5c:f1:ac:d7:bd:cf:4b:b7:28:9d: b9:e5:92:49:37:84:c1:47:b4:d0:fb:2a:7a:17:37: 65:84:03:66:ac:ef:00:a9:e3:66:1c:3f:7d:c6:c5: 13:06:1b:cb:a0:34:71:5b:1d:06:ff:c2:c8:a1:0d: 3e:0e:1f:dd:00:d6:b0:cf:2a:71:f3:6d:2b:b9:cb: 9f:66:65:da:b0:40:20:c6:0d:5a:68:5b:c5:02:a2: 04:2f:ea:d3:c6:67:0b:cc:ca:3f:ec:d0:25:2d:b4: a3:f6:ad:f0:58:ce:65:2f:ca:c1:2e:00:b2:b0:39: 3a:49:b7:3f:94:f3:fd:76:65:ac:8f:b5:b2:e4:fe: 97:1b:bf:d2:88:6e:1d:57:44:b0:ba:67:4d:1c:87: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8C:2B:A7:4C:3E:60:C9:A6:D2:26:F1:AE:1F:3A:5C:37:DF:B5:79 X509v3 Authority Key Identifier: keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/iYwrp0w-YMmm0ibxrh86XDfftXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.180.0/24 IPv6: 2001:7f8:fd::/48 Signature Algorithm: sha256WithRSAEncryption bc:4b:5a:0d:85:7e:29:aa:96:e3:f0:79:62:58:d4:0b:ce:df: 90:57:f2:4d:6f:a7:d9:dd:1d:03:c3:5f:cb:57:41:92:cb:ef: 96:52:b4:ef:71:ec:cc:33:88:f6:3a:8c:7a:e4:a1:0a:a5:7f: 6c:ae:33:ce:9b:33:59:5e:71:9f:dd:8c:8a:0d:2a:07:74:e5: d4:36:52:3e:b8:84:22:4b:5a:5c:98:72:e3:03:4d:97:59:aa: ae:14:7e:71:21:19:42:82:57:b5:e5:ee:25:fc:e3:50:94:ba: e9:73:71:ce:e2:52:88:a1:ae:53:5f:e0:e7:d2:e5:e1:7b:2d: 42:5a:74:c7:f8:1b:e5:d8:21:f0:79:79:3e:8f:82:8a:c8:19: ca:4d:aa:fe:d0:b9:a7:90:d3:5e:6d:c5:7e:0f:dc:ef:3f:ce: c6:0c:a3:ae:bf:f2:1b:2d:7f:74:a4:f1:5c:a4:b3:37:58:48: e8:8f:46:ae:4f:3c:26:fb:86:24:9c:8c:7c:b7:df:e1:31:17: 1c:8f:2a:ec:47:88:3e:08:28:b3:6b:4f:26:7b:74:28:06:52: 76:f8:7a:17:a2:b0:11:60:a1:b1:37:d4:74:37:fb:fc:e5:68: 9c:1a:c5:40:1b:43:f8:59:a0:63:af:3c:c1:82:1b:20:9e:d4: 38:53:c8:4e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ES4OzrikXJlCjhzQdNnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx MzJhNmIwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OThjMmJhNzRjM2U2MGM5YTZkMjI2ZjFhZTFmM2E1YzM3ZGZiNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyySljBmXipyWIlv3x7uCJlMxYVGb IYzQX33423PX2Bf4C+cB/xgSJlHQPtPLcxHroet5IHlp6EtyQ6/rni16EReQUJwY 770hLxxCjozpSNs0aG8aOv2GaN3s8bEUVyKWaGuwyO6N3Vyes7NhWFzxrNe9z0u3 KJ255ZJJN4TBR7TQ+yp6FzdlhANmrO8AqeNmHD99xsUTBhvLoDRxWx0G/8LIoQ0+ Dh/dANawzypx820rucufZmXasEAgxg1aaFvFAqIEL+rTxmcLzMo/7NAlLbSj9q3w WM5lL8rBLgCysDk6Sbc/lPP9dmWsj7Wy5P6XG7/SiG4dV0SwumdNHIcaxwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFImMK6dMPmDJptIm8a4fOlw337V5MB8GA1UdIwQY MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt OWY1YmY3MzY3MjBlLzEvaVl3cnAwdy1ZTW1tMGlieHJoODZYRGZmdFhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQG0MA8E AgACMAkDBwAgAQf4AP0wDQYJKoZIhvcNAQELBQADggEBALxLWg2FfimqluPweWJY 1AvO35BX8k1vp9ndHQPDX8tXQZLL75ZStO9x7MwziPY6jHrkoQqlf2yuM86bM1le cZ/djIoNKgd05dQ2Uj64hCJLWlyYcuMDTZdZqq4UfnEhGUKCV7Xl7iX841CUuulz cc7iUoihrlNf4OfS5eF7LUJadMf4G+XYIfB5eT6PgorIGcpNqv7QuaeQ015txX4P 3O8/zsYMo66/8hstf3Sk8VykszdYSOiPRq5PPCb7hiScjHy33+ExFxyPKuxHiD4I KLNrTyZ7dCgGUnb4eheisBFgobE31HQ3+/zlaJwaxUAbQ/hZoGOvPMGCGyCe1DhT yE4= -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:45 2026 by rpki-client