This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/y3i9erHl01StrQ6wDpbiKBC5MQ8.roa File: y3i9erHl01StrQ6wDpbiKBC5MQ8.roa (raw, json) Hash identifier: p0+Ouy1SANu5/0CL0K0oPfTsL6DIMJN51ZvsF+pG52E= Subject key identifier: CB:78:BD:7A:B1:E5:D3:54:AD:AD:0E:B0:0E:96:E2:28:10:B9:31:0F Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C132C622FDDD78516E085EC21E54A9F Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/y3i9erHl01StrQ6wDpbiKBC5MQ8.roa Signing time: Fri 02 Jan 2026 00:19:49 +0000 ROA not before: Fri 02 Jan 2026 00:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202813 IP address blocks: 185.242.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2c:62:2f:dd:d7:85:16:e0:85:ec:21:e5:4a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb78bd7ab1e5d354adad0eb00e96e22810b9310f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2f:2e:2b:0c:4d:01:55:7f:b1:05:40:22:ed: 74:6e:60:03:65:f6:87:d1:08:a3:27:e2:e5:dc:47: 36:dd:c8:2d:3f:f8:6f:89:57:30:88:2f:22:ac:9f: 23:9a:b1:46:2e:a5:74:08:57:f8:be:df:83:ea:48: 17:58:3e:f7:7c:4b:8c:c6:de:35:72:30:29:3f:ba: d3:e7:aa:52:c2:dd:7b:c6:7e:f9:27:61:86:2c:69: 16:6d:b3:bf:6e:11:e7:9a:26:72:8a:40:18:0a:5a: 3f:94:4b:7d:55:43:7f:c3:48:b1:70:11:67:ba:65: 11:98:46:a4:86:b3:95:e8:a1:ad:3f:59:73:fd:91: 57:36:3a:8c:2e:cd:87:83:1f:be:1d:94:83:9a:55: 67:66:d6:5f:5f:40:c2:0d:ca:b9:d3:43:5b:3c:cf: a7:02:fc:f9:93:cd:35:cf:1d:c4:bf:2f:cf:fa:49: ec:9d:27:89:11:45:44:51:4e:67:df:5c:97:25:bd: 07:f5:88:35:62:01:94:85:00:4b:09:b6:c2:ac:f0: 22:a4:0f:4b:7f:39:3c:15:f2:8a:36:8e:1d:ff:50: bd:c3:82:9b:b5:a9:68:fd:19:72:0d:b5:9c:71:40: 03:f9:a0:64:57:9b:91:d5:3e:b8:1f:44:1a:ff:73: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:78:BD:7A:B1:E5:D3:54:AD:AD:0E:B0:0E:96:E2:28:10:B9:31:0F X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/y3i9erHl01StrQ6wDpbiKBC5MQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.172.0/24 Signature Algorithm: sha256WithRSAEncryption 09:be:76:c0:fb:cd:5e:6d:d8:96:66:2b:62:a3:01:cd:71:3d: 54:a9:15:c9:08:5e:a6:11:d5:f9:d8:d6:65:96:f0:6e:90:e9: a3:db:5e:b4:d4:d7:bb:1f:92:60:fa:2f:37:f3:f6:b4:82:05: 1c:83:e2:a4:be:66:05:a5:f4:c3:d5:17:bc:3b:e7:89:ca:07: cb:cb:56:56:d9:a4:83:b3:d2:fa:60:dd:69:fd:f6:e1:e9:56: a0:72:a0:96:f4:a5:8e:c8:9e:15:ae:41:88:ce:82:8d:43:eb: 04:08:29:78:f3:ab:10:77:38:05:4d:e1:f6:7f:f3:44:e2:61: 37:a8:19:46:26:23:99:3d:16:0b:09:59:6c:88:cc:bd:b5:97: 4e:c2:0a:4c:f3:78:07:b1:5b:1b:7b:76:af:ec:a4:7b:82:b5: e8:d5:57:64:5b:5e:05:95:16:83:cc:9a:ac:0f:2b:e3:39:67: 20:fe:0b:f6:26:d8:64:ed:b1:72:34:c7:d5:77:43:2c:01:bb: 82:9f:20:88:c8:01:4e:50:db:5d:9f:b6:fa:1f:dc:f5:fb:c2: cf:e8:c9:a3:e3:b7:8c:51:7e:1c:e4:c2:0a:be:26:e0:60:dc: 74:2b:ef:88:9b:0f:63:06:21:df:ed:d1:c3:8e:e5:fb:2e:47: 7e:13:4f:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EyxiL93XhRbghewh5UqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjc4YmQ3YWIxZTVkMzU0YWRhZDBlYjAwZTk2ZTIyODEwYjkzMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S8uKwxNAVV/sQVAIu10bmADZfaH 0QijJ+Ll3Ec23cgtP/hviVcwiC8irJ8jmrFGLqV0CFf4vt+D6kgXWD73fEuMxt41 cjApP7rT56pSwt17xn75J2GGLGkWbbO/bhHnmiZyikAYClo/lEt9VUN/w0ixcBFn umURmEakhrOV6KGtP1lz/ZFXNjqMLs2Hgx++HZSDmlVnZtZfX0DCDcq500NbPM+n Avz5k801zx3Evy/P+knsnSeJEUVEUU5n31yXJb0H9Yg1YgGUhQBLCbbCrPAipA9L fzk8FfKKNo4d/1C9w4Kbtalo/RlyDbWccUAD+aBkV5uR1T64H0Qa/3MBLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMt4vXqx5dNUra0OsA6W4igQuTEPMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEveTNpOWVySGwwMVN0clE2d0RwYmlLQkM1TVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufKsMA0G CSqGSIb3DQEBCwUAA4IBAQAJvnbA+81ebdiWZitiowHNcT1UqRXJCF6mEdX52NZl lvBukOmj21601Ne7H5Jg+i838/a0ggUcg+KkvmYFpfTD1Re8O+eJygfLy1ZW2aSD s9L6YN1p/fbh6VagcqCW9KWOyJ4VrkGIzoKNQ+sECCl486sQdzgFTeH2f/NE4mE3 qBlGJiOZPRYLCVlsiMy9tZdOwgpM83gHsVsbe3av7KR7grXo1VdkW14FlRaDzJqs DyvjOWcg/gv2Jthk7bFyNMfVd0MsAbuCnyCIyAFOUNtdn7b6H9z1+8LP6Mmj47eM UX4c5MIKvibgYNx0K++Imw9jBiHf7dHDjuX7Lkd+E08k -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:24 2026 by rpki-client