This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa File: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (raw, json) Hash identifier: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU= Subject key identifier: 89:82:83:42:8A:87:4C:48:09:50:29:2B:1A:14:0E:53:93:6A:88:56 Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019B7D5C643AF5134CB710F5C690444F5481 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa Signing time: Fri 02 Jan 2026 06:19:25 +0000 ROA not before: Fri 02 Jan 2026 06:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215341 IP address blocks: 185.87.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:64:3a:f5:13:4c:b7:10:f5:c6:90:44:4f:54:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=898283428a874c480950292b1a140e53936a8856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:f1:47:5f:40:27:80:59:e0:1e:1d:db:62: e4:f6:5c:9d:ae:95:57:c0:da:45:94:45:3a:d0:55: f4:4c:fb:17:f8:ea:8a:d1:f4:15:cc:4e:c2:a0:2f: e5:ce:ee:00:7b:87:9e:5b:2f:38:a3:6a:46:b9:b6: 3e:f9:aa:e9:9e:01:3f:2d:d8:f2:45:8e:e1:e0:35: d0:a0:33:ca:e5:83:08:3b:35:35:ec:c7:87:b8:f3: 39:49:72:a1:c8:9d:6c:31:31:0f:7a:6a:89:32:13: 5b:b0:08:2d:c3:49:57:1f:92:eb:9e:4c:1e:71:ee: 04:a7:b5:ff:06:7f:2b:ea:a5:3a:b2:05:bb:61:48: 90:a0:b8:5e:e3:00:ab:67:59:98:2e:cb:8a:c3:b4: 58:da:ec:f2:65:ad:ab:c5:e7:26:8e:3f:b3:f3:45: ff:50:a6:42:18:d5:60:4f:1d:f0:0a:1c:84:c6:10: 47:40:48:4c:54:6d:d9:53:ed:50:8d:1a:31:4a:94: b2:7b:f1:ca:4e:e9:80:b7:10:39:fe:de:e4:34:e8: 19:ba:20:aa:45:80:07:5f:5f:22:76:9e:4a:0c:56: c5:c5:b3:a4:4c:1c:40:b8:9a:00:88:36:fe:2e:50: bd:57:6c:88:48:ab:97:a0:f6:b6:03:21:e6:a3:1b: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:82:83:42:8A:87:4C:48:09:50:29:2B:1A:14:0E:53:93:6A:88:56 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.21.0/24 Signature Algorithm: sha256WithRSAEncryption ce:18:fd:18:ce:21:71:4a:c2:10:7e:30:28:aa:c7:d4:30:c5: 51:99:4f:b8:09:ad:98:fb:86:c3:7e:4d:72:8b:29:b1:b9:c9: 9f:80:02:16:2a:08:be:83:f8:6c:23:5d:f2:bc:61:fd:4c:0a: df:a4:87:37:fc:b9:19:19:47:3e:fa:d4:d9:c9:c0:e9:56:56: b6:79:7b:1e:8d:ba:c6:24:1a:bc:1f:de:77:45:0e:c7:ec:3f: e4:7c:2a:0e:69:7e:2e:62:43:5a:d2:6f:f5:b2:91:3d:47:61: 5b:0a:be:97:e6:1d:2e:0e:1b:76:1d:fa:00:45:66:04:87:bf: 9e:e8:a6:2c:25:15:de:95:1e:34:79:9f:49:6d:b7:ee:9e:18: 02:f9:8e:2d:01:2f:42:64:14:18:ae:e4:5d:b1:dd:c4:19:ba: 69:50:44:62:57:74:97:da:79:36:38:57:8e:4d:ea:3e:86:a9: 26:a9:e4:c7:0a:b1:19:89:0e:4b:7a:60:2d:44:c8:24:63:29: a3:31:91:9c:b8:8d:1a:1d:c4:0a:5e:c2:7e:12:27:b9:5e:99: a3:ef:91:29:f0:ce:ca:f3:6e:2f:81:60:6e:e4:87:71:e4:12: 55:21:df:87:ba:6d:4a:04:48:41:e6:e2:c6:d6:5a:cf:e0:64: af:6b:75:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XGQ69RNMtxD1xpBET1SBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTgyODM0MjhhODc0YzQ4MDk1MDI5MmIxYTE0MGU1MzkzNmE4ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY7xR19AJ4BZ4B4d22Lk9lydrpVX wNpFlEU60FX0TPsX+OqK0fQVzE7CoC/lzu4Ae4eeWy84o2pGubY++arpngE/Ldjy RY7h4DXQoDPK5YMIOzU17MeHuPM5SXKhyJ1sMTEPemqJMhNbsAgtw0lXH5Lrnkwe ce4Ep7X/Bn8r6qU6sgW7YUiQoLhe4wCrZ1mYLsuKw7RY2uzyZa2rxecmjj+z80X/ UKZCGNVgTx3wChyExhBHQEhMVG3ZU+1QjRoxSpSye/HKTumAtxA5/t7kNOgZuiCq RYAHX18idp5KDFbFxbOkTBxAuJoAiDb+LlC9V2yISKuXoPa2AyHmoxt9hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFImCg0KKh0xICVApKxoUDlOTaohWMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvaVlLRFFvcUhURWdKVUNrckdoUU9VNU5xaUZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVcVMA0G CSqGSIb3DQEBCwUAA4IBAQDOGP0YziFxSsIQfjAoqsfUMMVRmU+4Ca2Y+4bDfk1y iymxucmfgAIWKgi+g/hsI13yvGH9TArfpIc3/LkZGUc++tTZycDpVla2eXsejbrG JBq8H953RQ7H7D/kfCoOaX4uYkNa0m/1spE9R2FbCr6X5h0uDht2HfoARWYEh7+e 6KYsJRXelR40eZ9JbbfunhgC+Y4tAS9CZBQYruRdsd3EGbppUERiV3SX2nk2OFeO Teo+hqkmqeTHCrEZiQ5LemAtRMgkYymjMZGcuI0aHcQKXsJ+Eie5Xpmj75Ep8M7K 824vgWBu5Idx5BJVId+Hum1KBEhB5uLG1lrP4GSva3WB -----END CERTIFICATE-----Generated at Wed Jan 21 14:42:33 2026 by rpki-client