This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/yZwyp6pL6dNlodNGDiCb82xzbNo.roa File: yZwyp6pL6dNlodNGDiCb82xzbNo.roa (raw, json) Hash identifier: LBR3tLVZPF+ibt91CHtQViRrck7hdn7NxiOMDBIBNf0= Subject key identifier: C9:9C:32:A7:AA:4B:E9:D3:65:A1:D3:46:0E:20:9B:F3:6C:73:6C:DA Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3 Certificate serial: 019B7E380A56D9175965B8C7F298C3A81BB1 Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/yZwyp6pL6dNlodNGDiCb82xzbNo.roa Signing time: Fri 02 Jan 2026 10:19:20 +0000 ROA not before: Fri 02 Jan 2026 10:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199367 IP address blocks: 185.19.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0a:56:d9:17:59:65:b8:c7:f2:98:c3:a8:1b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3 Validity Not Before: Jan 2 10:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c99c32a7aa4be9d365a1d3460e209bf36c736cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:7d:fe:63:fa:77:4e:30:ad:d6:a1:83:04: fe:84:9c:72:60:79:67:78:14:7c:01:f9:b0:d1:98: c7:35:be:d0:d7:0e:cd:3e:bb:c8:8c:a5:0a:5a:37: 29:de:69:e1:58:58:a2:fa:80:00:f5:5e:f3:2e:ae: 0b:d1:80:0a:f7:88:71:d2:f5:4d:51:16:c1:88:92: 3d:29:6c:15:03:1e:cf:4d:76:74:55:b9:c6:04:cb: 65:fe:79:9f:e4:cd:12:0b:a2:a2:7d:ba:df:04:8d: c0:3c:f0:8f:d5:3e:ac:65:8b:2f:6d:d4:7e:a1:e3: 19:87:3e:63:01:4b:f2:a3:2c:56:c2:53:9c:bd:71: ce:3b:3c:e1:39:61:7c:ba:95:ec:be:a5:f0:ea:4a: da:0d:df:45:22:38:ab:53:62:0e:ff:30:32:4e:ee: 5e:20:c0:75:4c:87:a7:76:6d:1a:7e:e2:31:db:2e: 82:9b:d8:70:f6:b4:55:9d:b2:d6:ce:33:db:02:fe: 6d:c1:86:98:5e:09:4c:a8:9d:4f:32:3c:33:cb:ee: 0a:4b:e2:6e:45:70:01:33:39:40:6f:d2:ed:71:f9: 90:e5:73:dd:fc:de:63:da:1c:08:58:ad:ab:63:69: af:5f:de:c0:00:16:84:c0:64:ad:9e:c3:f4:53:0b: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9C:32:A7:AA:4B:E9:D3:65:A1:D3:46:0E:20:9B:F3:6C:73:6C:DA X509v3 Authority Key Identifier: keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/yZwyp6pL6dNlodNGDiCb82xzbNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.144.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:21:ef:b3:ae:3b:74:d0:a7:43:5f:90:0a:8d:fa:00:f4:1f: 13:6c:19:f2:d3:63:45:1f:59:93:f1:85:f0:9a:77:fb:95:2a: 83:4d:a4:fe:9e:49:11:ea:91:fb:90:e8:d2:3d:55:37:58:da: 2f:c6:d3:73:a1:e5:ff:16:39:19:33:d5:07:7e:ce:30:c5:b1: ce:09:78:5f:42:5c:3f:0e:c8:a9:b1:33:42:93:eb:96:10:22: 6b:99:a5:5c:68:26:d8:72:a8:d9:25:c5:b1:5f:ab:2c:db:3d: 36:e8:31:11:2b:1e:aa:d5:91:fe:1a:80:51:11:fa:b8:d1:a7: d4:f8:91:cc:e2:c2:91:6b:7a:fa:01:34:2a:2d:93:c7:f8:a3: b3:5e:bb:74:91:26:72:87:5f:1f:7d:ea:24:d7:05:d5:1d:9c: 62:eb:57:ac:98:25:ca:b4:e6:e0:e8:8b:2c:1b:a3:a3:f6:13: 6b:b3:e2:6c:28:1f:f2:e4:19:09:27:e6:3b:02:bb:b5:b2:c9: 13:8e:c7:32:2a:98:de:3d:cc:d0:3f:6b:5d:a5:8e:c0:7f:43: e5:75:3a:6e:42:ed:96:75:44:20:e7:10:44:82:95:d4:b3:d6: 85:74:b3:e8:a2:a5:c6:4a:bd:43:a9:a8:95:da:76:c9:35:6f: 57:7d:45:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OApW2RdZZbjH8pjDqBuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzVmNTI2ZDdkMDkwOWU3ZjRhN2RmMmM1Y2FkNzJkMmFm NmIyYzMwHhcNMjYwMTAyMTAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTljMzJhN2FhNGJlOWQzNjVhMWQzNDYwZTIwOWJmMzZjNzM2Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn759/mP6d04wrdahgwT+hJxyYHln eBR8Afmw0ZjHNb7Q1w7NPrvIjKUKWjcp3mnhWFii+oAA9V7zLq4L0YAK94hx0vVN URbBiJI9KWwVAx7PTXZ0VbnGBMtl/nmf5M0SC6KifbrfBI3APPCP1T6sZYsvbdR+ oeMZhz5jAUvyoyxWwlOcvXHOOzzhOWF8upXsvqXw6kraDd9FIjirU2IO/zAyTu5e IMB1TIendm0afuIx2y6Cm9hw9rRVnbLWzjPbAv5twYaYXglMqJ1PMjwzy+4KS+Ju RXABMzlAb9LtcfmQ5XPd/N5j2hwIWK2rY2mvX97AABaEwGStnsP0UwurxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmcMqeqS+nTZaHTRg4gm/Nsc2zaMB8GA1UdIwQY MBaAFLQ19SbX0JCef0p98sXK1y0q9rLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEt MzJmNTlmYTViMzExLzEveVp3eXA2cEw2ZE5sb2ROR0RpQ2I4Mnh6Yk5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEtMzJmNTlmYTViMzEx LzEvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuROQMA0G CSqGSIb3DQEBCwUAA4IBAQAaIe+zrjt00KdDX5AKjfoA9B8TbBny02NFH1mT8YXw mnf7lSqDTaT+nkkR6pH7kOjSPVU3WNovxtNzoeX/FjkZM9UHfs4wxbHOCXhfQlw/ DsipsTNCk+uWECJrmaVcaCbYcqjZJcWxX6ss2z026DERKx6q1ZH+GoBREfq40afU +JHM4sKRa3r6ATQqLZPH+KOzXrt0kSZyh18ffeok1wXVHZxi61esmCXKtObg6Iss G6Oj9hNrs+JsKB/y5BkJJ+Y7Aru1sskTjscyKpjePczQP2tdpY7Af0PldTpuQu2W dUQg5xBEgpXUs9aFdLPooqXGSr1DqaiV2nbJNW9XfUUK -----END CERTIFICATE-----Generated at Tue Feb 10 01:03:10 2026 by rpki-client