This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/YHvvyK4ZKR8SZ6aC_FLps6Aqe0s.roa File: YHvvyK4ZKR8SZ6aC_FLps6Aqe0s.roa (raw, json) Hash identifier: gm42s7vK+4MOMqCS31qZX96qjCMC7m5X5ZwK72bSkdc= Subject key identifier: 60:7B:EF:C8:AE:19:29:1F:12:67:A6:82:FC:52:E9:B3:A0:2A:7B:4B Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Certificate serial: 019B797E79822C2B11009742F809005CD95D Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/YHvvyK4ZKR8SZ6aC_FLps6Aqe0s.roa Signing time: Thu 01 Jan 2026 12:18:10 +0000 ROA not before: Thu 01 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203132 IP address blocks: 185.142.184.0/24 maxlen: 24 185.142.185.0/24 maxlen: 24 185.142.186.0/24 maxlen: 24 2a07:2f00:1337::/48 maxlen: 48 2a07:2f00:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:79:82:2c:2b:11:00:97:42:f8:09:00:5c:d9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34 Validity Not Before: Jan 1 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=607befc8ae19291f1267a682fc52e9b3a02a7b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:40:72:90:cd:35:b3:21:79:c4:f3:19:58:44: 0b:96:de:7b:c9:ab:86:2c:50:96:28:83:49:47:6c: 03:08:3b:2b:f6:d6:db:7e:13:5b:3c:11:69:40:4c: fb:cf:4f:72:10:2a:08:1d:2d:44:a9:b5:65:62:dc: 9c:99:ab:19:be:e1:d1:2d:22:a1:19:37:ef:f9:b7: a9:db:6a:ef:14:ee:fa:95:e9:c1:e5:69:d3:c3:d6: 75:9b:95:18:f5:a4:e7:af:9a:47:7f:9b:2e:ff:fc: ce:b5:83:01:99:ce:87:8f:fa:a5:73:9b:1c:3b:60: aa:8a:a8:92:f5:2a:e9:68:b9:78:19:ba:63:53:f3: 69:37:11:57:96:a7:e8:1f:1b:f6:3b:13:64:ec:14: 6b:a3:f5:d3:b4:ac:42:c9:ad:7c:27:15:16:f2:60: ed:1e:10:57:20:f6:3e:f5:ce:52:64:25:c2:bd:3c: f1:52:98:3f:42:f2:93:b8:f3:26:34:e2:e9:e2:56: 56:8a:fe:0e:b8:da:0b:0b:53:c2:f0:92:32:84:80: 69:91:9f:00:b4:c3:aa:8c:d3:c1:fe:84:5a:d7:26: 06:d7:31:3a:24:38:e7:ea:53:9e:80:46:90:df:d3: 4d:d8:d4:ba:c6:22:d2:17:f7:de:1d:de:dc:e8:c0: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7B:EF:C8:AE:19:29:1F:12:67:A6:82:FC:52:E9:B3:A0:2A:7B:4B X509v3 Authority Key Identifier: keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/YHvvyK4ZKR8SZ6aC_FLps6Aqe0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.184.0-185.142.186.255 IPv6: 2a07:2f00:1337::/48 2a07:2f00:dead::/48 Signature Algorithm: sha256WithRSAEncryption 56:55:a5:46:11:30:60:9c:27:7f:e5:38:8b:7b:f3:23:33:01: 61:d6:4f:c9:8c:3f:67:c2:91:48:5e:62:21:35:95:f7:32:2a: 96:2d:74:2c:3f:56:f3:1c:23:9e:75:2c:fe:f8:91:85:08:bc: e8:38:c3:20:29:cf:fe:72:6d:49:0a:d9:13:f6:01:40:96:5b: 5a:3e:07:54:90:02:e9:f9:f7:df:11:65:87:b5:49:07:c9:60: fd:b2:03:2c:68:60:ff:3c:3a:0d:8d:68:10:a3:04:e2:cd:eb: cc:54:50:8b:17:1c:39:05:4d:7b:f0:66:08:68:8c:ac:b7:6c: d9:b8:3f:d7:be:42:5e:59:8f:c1:46:92:68:bb:a5:5a:07:18: 61:b0:e6:e6:cc:66:b4:90:91:19:dd:12:fe:52:37:d0:c3:c5: 84:a7:de:27:ad:68:ff:ca:cc:28:70:ea:60:4d:6a:c5:2c:b1: 20:78:a8:ac:f9:a6:6e:a5:4f:70:37:2b:c6:c0:d7:04:50:3a: d7:66:5f:ab:6e:37:dd:0a:32:fd:0f:cc:f9:dc:4c:fd:ce:91: 81:1e:d9:bc:f4:c8:9a:ef:02:72:19:2d:70:9e:1c:78:cf:89: 83:84:25:77:12:9e:b2:77:12:e6:f2:45:27:3a:ec:73:a0:75: 90:41:de:bc -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt5fnmCLCsRAJdC+AkAXNldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDkzZDYwYjUwNDI3ZGQ0MzE2ZWQ5NTA1YWQwOTllYjVh YzJlMzQwHhcNMjYwMTAxMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDdiZWZjOGFlMTkyOTFmMTI2N2E2ODJmYzUyZTliM2EwMmE3YjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80BykM01syF5xPMZWEQLlt57yauG LFCWKINJR2wDCDsr9tbbfhNbPBFpQEz7z09yECoIHS1EqbVlYtycmasZvuHRLSKh GTfv+bep22rvFO76lenB5WnTw9Z1m5UY9aTnr5pHf5su//zOtYMBmc6Hj/qlc5sc O2CqiqiS9SrpaLl4GbpjU/NpNxFXlqfoHxv2OxNk7BRro/XTtKxCya18JxUW8mDt HhBXIPY+9c5SZCXCvTzxUpg/QvKTuPMmNOLp4lZWiv4OuNoLC1PC8JIyhIBpkZ8A tMOqjNPB/oRa1yYG1zE6JDjn6lOegEaQ39NN2NS6xiLSF/feHd7c6MDgFQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFGB778iuGSkfEmemgvxS6bOgKntLMB8GA1UdIwQY MBaAFHJJPWC1BCfdQxbtlQWtCZ61rC40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQt YzY3MzBjOGU0NmFhLzEvWUh2dnlLNFpLUjhTWjZhQ19GTHBzNkFxZTBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83MWEzNDktYmFmNC00N2IzLWE5ZWQtYzY3MzBjOGU0NmFh LzEvY2trOVlMVUVKOTFERnUyVkJhMEpucldzTGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAUBAIAATAOMAwDBAO5jrgD BAC5jrowGAQCAAIwEgMHACoHLwATNwMHACoHLwDerTANBgkqhkiG9w0BAQsFAAOC AQEAVlWlRhEwYJwnf+U4i3vzIzMBYdZPyYw/Z8KRSF5iITWV9zIqli10LD9W8xwj nnUs/viRhQi86DjDICnP/nJtSQrZE/YBQJZbWj4HVJAC6fn33xFlh7VJB8lg/bID LGhg/zw6DY1oEKME4s3rzFRQixccOQVNe/BmCGiMrLds2bg/175CXlmPwUaSaLul WgcYYbDm5sxmtJCRGd0S/lI30MPFhKfeJ61o/8rMKHDqYE1qxSyxIHiorPmmbqVP cDcrxsDXBFA612Zfq2433Qoy/Q/M+dxM/c6RgR7ZvPTImu8CchktcJ4ceM+Jg4Ql dxKesncS5vJFJzrsc6B1kEHevA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:30:04 2026 by rpki-client