This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/ymXWMAWfB9q7ESOg8w23w3_30kY.roa File: ymXWMAWfB9q7ESOg8w23w3_30kY.roa (raw, json) Hash identifier: yQfR3w+BgKhB1YbUyT8a2WBXc4jJ8HHQXvRgfhx3Gm4= Subject key identifier: CA:65:D6:30:05:9F:07:DA:BB:11:23:A0:F3:0D:B7:C3:7F:F7:D2:46 Certificate issuer: /CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b Certificate serial: 019B7B36A2545DB94D79D2084454D9031A7C Authority key identifier: FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/ymXWMAWfB9q7ESOg8w23w3_30kY.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206782 IP address blocks: 185.176.148.0/22 maxlen: 22 185.176.151.0/24 maxlen: 24 2a0a:1980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a2:54:5d:b9:4d:79:d2:08:44:54:d9:03:1a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca65d630059f07dabb1123a0f30db7c37ff7d246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:dc:89:65:c5:66:0b:78:33:ca:4c:0d:d7: e6:b3:f4:ee:ae:0d:ab:ab:25:da:fe:94:9b:04:63: 5e:0f:9c:bf:da:90:7a:cf:6d:c7:c6:07:2a:15:a8: cc:83:ec:c8:03:d5:1b:1a:c2:35:1b:c0:40:69:70: 2d:d9:ae:6a:12:d7:9d:5d:63:22:50:f4:38:28:df: ac:f8:6c:41:c1:f7:26:87:57:c1:1a:fd:65:48:e7: 93:2b:36:9a:fc:b2:fe:c3:ab:84:8b:06:2f:7a:f6: 0c:97:d2:1e:51:30:b2:d8:43:6b:b0:27:a9:3b:c3: 34:51:19:b1:1e:d0:dd:d7:71:ad:f0:30:5c:9a:40: d6:3b:cd:77:ff:96:c2:f0:63:b3:de:bc:09:54:82: d7:06:54:b9:7d:6f:8e:41:1d:d1:ea:9a:9b:86:25: 5f:3c:71:32:05:b9:d4:38:af:e6:ee:9d:63:36:80: 6f:7d:86:73:8c:5b:77:9c:ba:87:e4:08:7f:3a:e0: 02:ba:a8:e5:6a:7e:83:ba:d8:03:8d:07:5b:cc:9d: bd:68:04:92:c0:5a:7d:8d:33:97:74:e8:fe:43:57: 8f:db:2b:99:bc:c7:c2:de:bc:fb:00:12:84:b8:ca: 4d:bd:8f:4f:da:5c:dc:1c:74:d2:1e:a4:0c:51:57: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:65:D6:30:05:9F:07:DA:BB:11:23:A0:F3:0D:B7:C3:7F:F7:D2:46 X509v3 Authority Key Identifier: keyid:FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/ymXWMAWfB9q7ESOg8w23w3_30kY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.148.0/22 IPv6: 2a0a:1980::/29 Signature Algorithm: sha256WithRSAEncryption 37:cc:2e:dd:f7:7f:de:49:c2:ba:1a:87:ac:f1:49:18:03:03: 78:6b:bb:47:1b:1c:78:10:f6:2e:0f:26:33:b6:53:a0:03:ff: a1:bf:f4:5c:e9:45:59:32:96:2f:df:b3:d2:8d:2f:e7:fd:13: cc:1d:fb:1a:cf:03:c3:4f:e8:86:04:12:07:fb:4a:d2:a8:3e: 65:fc:1d:15:09:70:38:62:2d:61:9a:68:bd:5b:8f:91:69:5d: ba:89:0d:08:7f:70:8f:1a:d5:ae:f9:06:04:57:91:48:73:1e: 2b:ed:ef:e1:12:19:f6:ef:58:5c:51:ce:78:5f:09:f0:c1:ce: d8:08:6e:67:14:4c:69:39:8e:c4:57:7c:05:81:9e:53:a6:be: a3:18:ef:eb:9a:1a:31:5f:9c:e3:d8:01:cc:f0:2f:20:2b:bf: cd:1a:56:d1:d9:32:b5:16:a0:ac:f1:a6:fe:aa:01:ab:65:86: 8e:de:fe:dc:fa:f8:e7:e6:64:7a:20:b4:9c:bb:e4:f2:49:bb: 37:5f:45:04:2e:f4:1e:2c:2b:88:80:1f:98:2a:c7:cb:30:41: 09:24:2b:9d:85:ca:b3:f2:b0:f6:c3:a4:b4:1a:fb:48:e8:3a: 79:ce:67:97:06:69:f9:af:d3:32:29:a9:62:2e:90:2a:6f:da: dd:04:bb:f6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NqJUXblNedIIRFTZAxp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZGU4Y2EzZTJjZTUyYmJjY2U1M2M0YTI5MjZkM2M5YzQx MGMwNGIwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTY1ZDYzMDA1OWYwN2RhYmIxMTIzYTBmMzBkYjdjMzdmZjdkMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkTciWXFZgt4M8pMDdfms/Turg2r qyXa/pSbBGNeD5y/2pB6z23HxgcqFajMg+zIA9UbGsI1G8BAaXAt2a5qEtedXWMi UPQ4KN+s+GxBwfcmh1fBGv1lSOeTKzaa/LL+w6uEiwYvevYMl9IeUTCy2ENrsCep O8M0URmxHtDd13Gt8DBcmkDWO813/5bC8GOz3rwJVILXBlS5fW+OQR3R6pqbhiVf PHEyBbnUOK/m7p1jNoBvfYZzjFt3nLqH5Ah/OuACuqjlan6DutgDjQdbzJ29aASS wFp9jTOXdOj+Q1eP2yuZvMfC3rz7ABKEuMpNvY9P2lzcHHTSHqQMUVeXMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMpl1jAFnwfauxEjoPMNt8N/99JGMB8GA1UdIwQY MBaAFPzejKPizlK7zOU8Sikm08nEEMBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYt MDAwOTIyYTVjZjE5LzEveW1YV01BV2ZCOXE3RVNPZzh3MjN3M18zMGtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYtMDAwOTIyYTVjZjE5 LzEvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubCUMA0E AgACMAcDBQMqChmAMA0GCSqGSIb3DQEBCwUAA4IBAQA3zC7d93/eScK6Goes8UkY AwN4a7tHGxx4EPYuDyYztlOgA/+hv/Rc6UVZMpYv37PSjS/n/RPMHfsazwPDT+iG BBIH+0rSqD5l/B0VCXA4Yi1hmmi9W4+RaV26iQ0If3CPGtWu+QYEV5FIcx4r7e/h Ehn271hcUc54Xwnwwc7YCG5nFExpOY7EV3wFgZ5Tpr6jGO/rmhoxX5zj2AHM8C8g K7/NGlbR2TK1FqCs8ab+qgGrZYaO3v7c+vjn5mR6ILScu+TySbs3X0UELvQeLCuI gB+YKsfLMEEJJCudhcqz8rD2w6S0GvtI6Dp5zmeXBmn5r9MyKaliLpAqb9rdBLv2 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:32 2026 by rpki-client