This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/RymG3dgu32q1w2cKh-aQrObAOFY.roa File: RymG3dgu32q1w2cKh-aQrObAOFY.roa (raw, json) Hash identifier: vKDtrprX/YjsvTEOZs6TJziAhjR0Xm4oYJTGdbuLsSY= Subject key identifier: 47:29:86:DD:D8:2E:DF:6A:B5:C3:67:0A:87:E6:90:AC:E6:C0:38:56 Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a Certificate serial: 019B76EB163B92C17468476B62F037C55D1E Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/RymG3dgu32q1w2cKh-aQrObAOFY.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.97.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:16:3b:92:c1:74:68:47:6b:62:f0:37:c5:5d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=472986ddd82edf6ab5c3670a87e690ace6c03856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:f4:f8:a5:2c:2b:c8:56:d4:4d:1b:f1:bd: 45:7b:0b:10:48:7d:b0:a5:51:08:91:b1:f9:25:24: 33:57:4a:6a:16:37:19:1b:12:d4:66:fa:8a:fc:70: 8b:ce:d9:ab:d0:ba:9a:e1:cd:d8:3f:45:d2:70:42: fe:04:d5:4d:69:81:85:e0:44:33:95:24:78:15:b7: e5:6e:2b:02:99:d9:89:ea:47:91:78:56:ac:04:bd: c4:14:dc:f6:22:e2:90:f2:cb:13:e2:77:04:15:41: 2a:e5:5e:5e:77:16:51:e4:e8:74:0e:72:00:27:76: 78:ac:23:1a:5e:91:ca:41:68:08:7c:fc:0f:02:15: f4:57:4f:b5:d9:10:be:6c:54:1b:6b:b2:82:a4:2f: d0:99:04:25:bb:0c:e1:fb:f8:ec:65:57:ff:9d:ce: a3:a7:e3:a1:60:37:7e:ef:b8:49:83:61:10:88:ac: e3:eb:3b:c8:29:de:f8:36:a5:03:63:8a:bb:91:5a: 13:63:92:22:c7:b0:3c:9b:33:8a:01:f6:f2:70:c6: 03:2c:b2:95:f7:d2:97:52:f3:8d:d6:5b:bd:a5:f8: e2:6a:52:8f:74:55:31:7d:82:b4:57:3d:4c:02:06: 9c:1e:28:20:54:2c:85:b8:c0:eb:7f:14:40:b7:38: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:29:86:DD:D8:2E:DF:6A:B5:C3:67:0A:87:E6:90:AC:E6:C0:38:56 X509v3 Authority Key Identifier: keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/RymG3dgu32q1w2cKh-aQrObAOFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.10.0/24 Signature Algorithm: sha256WithRSAEncryption 31:98:e9:29:d3:27:1a:ac:08:36:83:18:40:75:f6:9b:49:09: 73:87:38:ab:99:ab:38:04:46:92:fb:27:91:f5:56:4c:f0:8d: af:22:d0:da:cd:ca:f9:71:5c:73:27:07:a4:2d:1f:7c:b0:03: d0:6c:84:ea:c4:6d:25:4f:aa:79:6d:40:b5:58:0f:bb:78:a0: 6c:42:64:32:e3:31:71:e4:0a:a5:dd:68:cb:10:82:d9:b1:1c: 1e:d5:d7:e5:4c:42:d6:8e:a0:16:df:ef:9f:aa:76:c7:d3:7e: 17:43:3d:de:83:2f:f6:aa:6c:e9:49:00:45:48:c4:3a:9c:76: d8:b4:fb:b4:10:87:29:5b:44:3b:94:82:a0:a6:b5:2f:aa:4a: 83:44:6d:ae:64:8c:85:d2:5f:0a:af:59:0f:64:88:9e:99:8d: 53:de:a0:e2:da:93:25:5a:dc:41:fa:df:e2:80:1e:2b:e4:93: d8:c2:f1:66:72:d5:14:f7:3a:24:4d:51:8f:13:87:67:7c:cf: 48:ce:dc:fa:68:52:13:8d:3b:b4:76:c5:b4:37:0c:2a:89:56: a4:86:b4:2d:20:87:1d:20:b3:a9:53:38:cb:50:fb:89:62:3c: 84:39:28:d9:02:7d:b6:d6:de:bf:28:0c:1e:cc:38:6b:88:a9: bf:95:75:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xY7ksF0aEdrYvA3xV0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDM3NGQ3MWJjNTdkYjk2ZGMzOTNlOTFmZWJiOWU5ZDU5 ZmVmOWEwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzI5ODZkZGQ4MmVkZjZhYjVjMzY3MGE4N2U2OTBhY2U2YzAzODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWn0+KUsK8hW1E0b8b1FewsQSH2w pVEIkbH5JSQzV0pqFjcZGxLUZvqK/HCLztmr0Lqa4c3YP0XScEL+BNVNaYGF4EQz lSR4FbflbisCmdmJ6keReFasBL3EFNz2IuKQ8ssT4ncEFUEq5V5edxZR5Oh0DnIA J3Z4rCMaXpHKQWgIfPwPAhX0V0+12RC+bFQba7KCpC/QmQQluwzh+/jsZVf/nc6j p+OhYDd+77hJg2EQiKzj6zvIKd74NqUDY4q7kVoTY5Iix7A8mzOKAfbycMYDLLKV 99KXUvON1lu9pfjialKPdFUxfYK0Vz1MAgacHiggVCyFuMDrfxRAtzg+BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEcpht3YLt9qtcNnCofmkKzmwDhWMB8GA1UdIwQY MBaAFJ4DdNcbxX25bcOT6R/ruenVn++aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2Et ODE3ZDg0ZTUzZDUzLzEvUnltRzNkZ3UzMnExdzJjS2gtYVFyT2JBT0ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2EtODE3ZDg0ZTUzZDUz LzEvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWEKMA0G CSqGSIb3DQEBCwUAA4IBAQAxmOkp0ycarAg2gxhAdfabSQlzhzirmas4BEaS+yeR 9VZM8I2vItDazcr5cVxzJwekLR98sAPQbITqxG0lT6p5bUC1WA+7eKBsQmQy4zFx 5Aql3WjLEILZsRwe1dflTELWjqAW3++fqnbH034XQz3egy/2qmzpSQBFSMQ6nHbY tPu0EIcpW0Q7lIKgprUvqkqDRG2uZIyF0l8Kr1kPZIiemY1T3qDi2pMlWtxB+t/i gB4r5JPYwvFmctUU9zokTVGPE4dnfM9Iztz6aFITjTu0dsW0NwwqiVakhrQtIIcd ILOpUzjLUPuJYjyEOSjZAn221t6/KAwezDhriKm/lXUe -----END CERTIFICATE-----Generated at Sat Jan 3 01:35:51 2026 by rpki-client