This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/0sTykt04zhafsgKWmG0fpAc6Xi4.roa File: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (raw, json) Hash identifier: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8= Subject key identifier: D2:C4:F2:92:DD:38:CE:16:9F:B2:02:96:98:6D:1F:A4:07:3A:5E:2E Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019B7B367BC543E3827B21CE2C5839CEAB27 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/0sTykt04zhafsgKWmG0fpAc6Xi4.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 185.253.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7b:c5:43:e3:82:7b:21:ce:2c:58:39:ce:ab:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2c4f292dd38ce169fb20296986d1fa4073a5e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:1f:35:c0:73:ee:d0:c2:73:73:52:48:85: 79:c4:d8:a2:e2:1a:80:1f:bd:a5:85:9d:d7:97:f4: b7:23:bd:9c:1c:a9:d2:9b:2b:9a:14:3a:81:ec:e4: 39:57:d9:ba:1f:fd:3e:48:f9:0f:a2:b1:76:37:10: 0c:c1:8d:33:71:36:42:0f:f3:ec:fd:e6:5d:16:ef: 25:a9:ff:46:b4:63:45:10:6d:57:96:34:4d:44:72: 59:79:d3:9b:4d:9d:dd:8a:b7:37:02:57:6c:a8:6f: d3:b2:d0:9a:fa:ad:6f:f4:11:23:f0:09:d8:1f:49: 3c:4b:c1:a7:3f:58:fc:3e:70:e0:a5:61:5c:de:c5: b7:e6:d2:37:ab:ff:99:32:a2:f0:69:a4:14:cd:49: dc:0a:21:68:5f:af:3a:22:03:2e:7c:6d:5c:e9:28: 05:a2:eb:e3:f9:e7:e0:2e:a3:34:c6:36:87:b0:05: 28:67:47:da:ce:b5:9f:15:52:5e:52:ff:e1:87:71: 54:d4:1a:8f:d1:72:8c:3b:e9:1e:c7:20:3b:98:1f: 21:af:02:4c:d6:f7:f0:55:a5:49:8f:54:57:5d:c3: 46:9c:fd:29:fa:ce:a0:09:0f:99:b0:5b:62:00:9d: 3c:bc:00:3e:95:34:59:c2:e4:71:ab:98:46:ad:f2: e0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C4:F2:92:DD:38:CE:16:9F:B2:02:96:98:6D:1F:A4:07:3A:5E:2E X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/0sTykt04zhafsgKWmG0fpAc6Xi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.1.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:6f:76:6d:95:7d:a4:24:4f:79:31:6e:b8:ad:68:49:cd:44: 31:56:ff:30:0a:e1:b0:d3:29:a3:86:03:99:bf:4c:af:28:ac: c6:1b:63:64:3d:f1:ee:3e:c1:0b:a7:b6:0e:39:08:5e:26:8b: bb:d9:a8:2c:5e:98:97:56:73:ad:4d:68:2e:47:5b:17:5e:13: 6f:ac:32:a9:13:58:65:4e:62:85:8f:8c:61:29:11:9a:4a:33: 14:c6:d1:60:0e:57:90:cd:d2:a8:68:cf:c0:cd:e3:11:5a:e2: 09:25:46:79:2e:f2:0a:fd:83:dc:1c:fe:52:83:5e:73:94:5b: b4:52:bc:55:f7:cb:6b:7e:01:ab:38:15:70:55:8c:72:84:0b: 6e:46:23:21:00:47:a1:eb:b2:29:43:64:d9:92:55:71:9c:14: 88:c7:fb:18:ac:56:7a:01:b9:b8:4d:7a:a7:44:3a:8a:9d:f0: 78:77:b8:0a:fd:3f:b6:ae:a8:9f:2a:2a:62:6f:89:6e:f4:f5: 80:b8:8a:f5:51:73:ef:89:94:33:e5:87:95:64:b6:66:6b:e1: a4:0a:b9:8b:47:da:d0:40:74:8b:4e:65:c0:55:1d:bc:39:d9: c6:53:29:6b:64:63:aa:3c:bb:ab:12:fb:0f:48:39:ae:92:18: ec:8e:34:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnvFQ+OCeyHOLFg5zqsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmM0ZjI5MmRkMzhjZTE2OWZiMjAyOTY5ODZkMWZhNDA3M2E1ZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1kfNcBz7tDCc3NSSIV5xNii4hqA H72lhZ3Xl/S3I72cHKnSmyuaFDqB7OQ5V9m6H/0+SPkPorF2NxAMwY0zcTZCD/Ps /eZdFu8lqf9GtGNFEG1XljRNRHJZedObTZ3dirc3AldsqG/TstCa+q1v9BEj8AnY H0k8S8GnP1j8PnDgpWFc3sW35tI3q/+ZMqLwaaQUzUncCiFoX686IgMufG1c6SgF ouvj+efgLqM0xjaHsAUoZ0fazrWfFVJeUv/hh3FU1BqP0XKMO+kexyA7mB8hrwJM 1vfwVaVJj1RXXcNGnP0p+s6gCQ+ZsFtiAJ08vAA+lTRZwuRxq5hGrfLgJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLE8pLdOM4Wn7IClphtH6QHOl4uMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvMHNUeWt0MDR6aGFmc2dLV21HMGZwQWM2WGk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf0BMA0G CSqGSIb3DQEBCwUAA4IBAQArb3ZtlX2kJE95MW64rWhJzUQxVv8wCuGw0ymjhgOZ v0yvKKzGG2NkPfHuPsELp7YOOQheJou72agsXpiXVnOtTWguR1sXXhNvrDKpE1hl TmKFj4xhKRGaSjMUxtFgDleQzdKoaM/AzeMRWuIJJUZ5LvIK/YPcHP5Sg15zlFu0 UrxV98trfgGrOBVwVYxyhAtuRiMhAEeh67IpQ2TZklVxnBSIx/sYrFZ6Abm4TXqn RDqKnfB4d7gK/T+2rqifKipib4lu9PWAuIr1UXPviZQz5YeVZLZma+GkCrmLR9rQ QHSLTmXAVR28OdnGUylrZGOqPLurEvsPSDmukhjsjjRY -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:25 2026 by rpki-client