This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa File: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (raw, json) Hash identifier: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo= Subject key identifier: BA:CC:85:E9:CA:A9:89:36:77:E8:78:BE:CD:45:77:88:16:8B:EA:62 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019B7FF2132261BD7535466634DC7A485A97 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa Signing time: Fri 02 Jan 2026 18:22:09 +0000 ROA not before: Fri 02 Jan 2026 18:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.192.216.0/24 maxlen: 24 185.192.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:13:22:61:bd:75:35:46:66:34:dc:7a:48:5a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bacc85e9caa9893677e878becd457788168bea62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:3f:35:f6:ef:fb:d2:4f:bb:52:52:cf:83: 7c:a5:48:ca:6d:ae:b8:cd:68:e4:6d:1d:58:58:c3: ac:87:7e:53:b8:7f:af:5c:0c:ca:91:4e:d8:32:f7: ee:c4:d7:0d:b2:d3:e2:65:53:30:0d:6d:bd:bf:4a: f8:a0:2f:ad:06:35:be:d4:a1:0f:52:f2:a4:5e:24: 59:38:d5:06:96:fe:6f:06:a4:74:52:ae:98:e4:dd: 00:42:20:99:fe:c4:63:01:61:21:6a:9d:60:20:89: 90:6f:ff:60:55:43:70:56:65:56:ba:6f:4e:37:9c: 73:7a:e0:61:68:3b:11:46:61:33:f6:a3:54:63:46: ea:db:1f:4e:87:05:ed:3b:61:aa:c9:ef:cb:fd:68: 15:ec:4f:c1:00:d9:9d:2d:83:e1:c6:5e:36:6f:cc: 6d:7f:72:de:20:a0:ce:76:60:0e:b6:c5:9b:49:d0: 5e:7f:3c:7d:c1:4f:8b:53:f1:8e:47:b8:b2:df:68: 31:1c:d0:82:ca:e5:b2:98:ab:a1:08:39:41:e5:ae: 77:8f:04:8c:b6:2e:b3:4f:21:fc:32:70:8c:ee:14: 34:d8:98:c4:4b:3c:4b:6a:30:9b:98:e0:09:3e:e2: 6d:8e:26:16:1a:5e:8d:ce:1f:5f:ec:0c:30:a5:81: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CC:85:E9:CA:A9:89:36:77:E8:78:BE:CD:45:77:88:16:8B:EA:62 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.216.0/23 Signature Algorithm: sha256WithRSAEncryption 09:c2:7e:dc:e0:bb:f8:e2:a3:0c:d2:2c:5f:37:a9:24:00:c0: c0:f6:51:ff:f9:96:88:cc:c8:5f:15:50:5a:9e:aa:26:07:73: 6c:69:cf:66:d5:83:13:d1:92:60:c3:1f:84:28:eb:18:9f:ba: 40:80:79:a7:b2:d3:0e:b6:01:77:5f:d4:02:22:12:20:1a:29: be:9a:9b:dc:56:95:25:82:01:29:cd:05:4a:2d:29:04:7f:2f: 20:6d:5c:51:4c:b7:05:b2:99:bf:c7:d1:95:67:69:0b:06:00: 1b:36:2b:7b:f7:b8:99:93:3f:4e:67:3b:74:b7:24:34:c7:d1: 4e:0f:2a:56:02:6f:1e:97:1d:e4:37:ca:14:bb:35:76:b0:3c: 78:ab:ac:14:7e:ad:3f:df:7e:4d:88:75:b7:cf:66:cb:1a:75: dc:ac:37:4a:3c:6c:c1:ac:65:9f:0d:22:16:65:d0:33:ec:7d: 46:80:d3:69:59:a4:8c:7b:de:77:0a:fe:72:c6:e5:ed:b4:57: 85:83:a5:fd:fa:9e:dc:5a:0e:6a:e7:04:70:13:b6:eb:45:51: 59:c3:92:95:86:0d:9b:54:cc:a5:c5:5c:20:05:90:20:67:01: 51:b9:1a:a3:47:5a:30:bd:0a:cf:0d:99:b1:a0:dc:72:9b:65: 5b:b8:58:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hMiYb11NUZmNNx6SFqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWNjODVlOWNhYTk4OTM2NzdlODc4YmVjZDQ1Nzc4ODE2OGJlYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/s/Nfbv+9JPu1JSz4N8pUjKba64 zWjkbR1YWMOsh35TuH+vXAzKkU7YMvfuxNcNstPiZVMwDW29v0r4oC+tBjW+1KEP UvKkXiRZONUGlv5vBqR0Uq6Y5N0AQiCZ/sRjAWEhap1gIImQb/9gVUNwVmVWum9O N5xzeuBhaDsRRmEz9qNUY0bq2x9OhwXtO2Gqye/L/WgV7E/BANmdLYPhxl42b8xt f3LeIKDOdmAOtsWbSdBefzx9wU+LU/GOR7iy32gxHNCCyuWymKuhCDlB5a53jwSM ti6zTyH8MnCM7hQ02JjESzxLajCbmOAJPuJtjiYWGl6Nzh9f7AwwpYHb7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLrMhenKqYk2d+h4vs1Fd4gWi+piMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvdXN5RjZjcXBpVFozNkhpLXpVVjNpQmFMNm1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucDYMA0G CSqGSIb3DQEBCwUAA4IBAQAJwn7c4Lv44qMM0ixfN6kkAMDA9lH/+ZaIzMhfFVBa nqomB3Nsac9m1YMT0ZJgwx+EKOsYn7pAgHmnstMOtgF3X9QCIhIgGim+mpvcVpUl ggEpzQVKLSkEfy8gbVxRTLcFspm/x9GVZ2kLBgAbNit797iZkz9OZzt0tyQ0x9FO DypWAm8elx3kN8oUuzV2sDx4q6wUfq0/335NiHW3z2bLGnXcrDdKPGzBrGWfDSIW ZdAz7H1GgNNpWaSMe953Cv5yxuXttFeFg6X9+p7cWg5q5wRwE7brRVFZw5KVhg2b VMylxVwgBZAgZwFRuRqjR1owvQrPDZmxoNxym2VbuFiE -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:13 2026 by rpki-client