This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/Ry4GJllYI5DHvB5rPooA3w1oNc0.roa File: Ry4GJllYI5DHvB5rPooA3w1oNc0.roa (raw, json) Hash identifier: PYYgRq8HSZWN2KMVkiANk0IFKEKURPi6wZnpn5G5E7U= Subject key identifier: 47:2E:06:26:59:58:23:90:C7:BC:1E:6B:3E:8A:00:DF:0D:68:35:CD Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e Certificate serial: 019B7F845AD7AB09C20A0E796506A404E4E8 Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/Ry4GJllYI5DHvB5rPooA3w1oNc0.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49702 IP address blocks: 185.109.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5a:d7:ab:09:c2:0a:0e:79:65:06:a4:04:e4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=472e062659582390c7bc1e6b3e8a00df0d6835cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:f8:22:7e:17:cc:5b:e8:25:ce:b1:f3:39: f2:f3:15:77:ea:49:c4:87:bb:c4:c8:b0:ee:85:93: ac:26:19:75:d0:6e:c1:38:ed:88:a1:89:c4:67:2e: 48:10:56:39:20:d4:59:76:a7:80:a6:d1:b9:e0:16: 4b:73:ec:34:a9:07:3e:2b:be:94:90:7a:d5:09:f6: f9:27:17:29:1f:3b:ee:60:7c:45:ed:e9:2b:8f:ae: 6d:3f:97:e6:24:80:fb:b9:b8:d3:04:f1:72:b4:0e: dc:58:d6:8b:98:f6:a5:f6:31:68:c4:6a:11:08:cb: 3f:08:44:59:79:0f:95:65:05:a1:dd:8f:a4:87:75: 1a:92:72:04:d7:3b:e1:f2:b1:4a:02:97:56:19:cb: 17:b8:33:0c:ab:8d:2a:2a:5c:92:6d:e7:eb:93:14: 56:0a:83:13:d1:db:8e:59:7b:3e:c5:a7:f0:90:ec: e5:e6:a5:31:26:95:29:91:ca:4d:eb:e8:4d:86:a2: ca:94:f7:e9:80:e6:fa:6c:7c:4c:72:2d:2e:4b:9f: c3:b8:a9:53:7b:9e:55:66:db:67:7b:1a:02:e3:c6: ec:d0:5b:70:0d:75:da:70:bb:1c:7c:eb:73:da:13: da:53:c7:f8:96:15:84:7b:a8:85:a9:ca:f9:62:1f: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2E:06:26:59:58:23:90:C7:BC:1E:6B:3E:8A:00:DF:0D:68:35:CD X509v3 Authority Key Identifier: keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/Ry4GJllYI5DHvB5rPooA3w1oNc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.112.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:99:a4:66:a2:6d:78:67:9b:2a:e3:31:ee:ea:de:fe:90:38: d8:6c:27:13:cc:15:26:50:ca:77:6c:d8:43:6c:01:89:23:23: e6:73:26:67:37:93:01:8c:2b:b4:38:d5:3d:fd:b4:5e:40:9c: fd:11:94:75:2b:9c:fa:5f:cc:85:35:86:5e:74:48:eb:ef:3b: cd:3e:2c:c0:57:17:57:ed:d3:39:37:fc:1d:28:65:83:e1:2c: 77:d9:c4:42:4c:33:67:9b:50:eb:b2:13:25:e4:18:81:11:49: 4f:bf:db:15:dc:95:eb:d3:ed:95:2d:8e:1d:89:47:36:20:c5: 98:7b:47:a2:58:3c:c6:02:f9:d0:e9:1d:ec:71:b6:a9:25:59: 90:a4:fe:d8:1c:da:57:3e:c8:e6:e8:78:49:cb:fc:0d:3e:5c: d1:84:e8:f7:56:a7:e7:4c:3e:e4:1d:13:a2:8e:59:8e:1e:57: 61:ce:e1:50:9a:5d:b6:cb:ea:37:c5:99:8d:91:ae:b2:ee:d0: 21:8a:0a:3f:65:44:be:d2:5f:d4:f7:67:17:a0:9a:d9:c9:11: 19:37:7a:93:5e:10:86:c7:35:e4:49:6d:e1:b4:16:27:7a:9c: dd:2b:c6:ec:14:af:32:73:0b:33:2b:29:5d:0d:da:f7:07:19: 8d:af:b6:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFrXqwnCCg55ZQakBOToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzc1YjQzYWU4YTUzZDQ4Yzg4ODY3MWU2N2ZjMTdiZjI3 ZjJiN2UwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzJlMDYyNjU5NTgyMzkwYzdiYzFlNmIzZThhMDBkZjBkNjgzNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zz4In4XzFvoJc6x8zny8xV36knE h7vEyLDuhZOsJhl10G7BOO2IoYnEZy5IEFY5INRZdqeAptG54BZLc+w0qQc+K76U kHrVCfb5JxcpHzvuYHxF7ekrj65tP5fmJID7ubjTBPFytA7cWNaLmPal9jFoxGoR CMs/CERZeQ+VZQWh3Y+kh3UaknIE1zvh8rFKApdWGcsXuDMMq40qKlySbefrkxRW CoMT0duOWXs+xafwkOzl5qUxJpUpkcpN6+hNhqLKlPfpgOb6bHxMci0uS5/DuKlT e55VZttnexoC48bs0FtwDXXacLscfOtz2hPaU8f4lhWEe6iFqcr5Yh8FUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEcuBiZZWCOQx7weaz6KAN8NaDXNMB8GA1UdIwQY MBaAFIM3W0OuilPUjIiGceZ/wXvyfyt+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYt NzJjNGM0YjgwNGE3LzEvUnk0R0psbFlJNURIdkI1clBvb0EzdzFvTmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYtNzJjNGM0YjgwNGE3 LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW1wMA0G CSqGSIb3DQEBCwUAA4IBAQAPmaRmom14Z5sq4zHu6t7+kDjYbCcTzBUmUMp3bNhD bAGJIyPmcyZnN5MBjCu0ONU9/bReQJz9EZR1K5z6X8yFNYZedEjr7zvNPizAVxdX 7dM5N/wdKGWD4Sx32cRCTDNnm1DrshMl5BiBEUlPv9sV3JXr0+2VLY4diUc2IMWY e0eiWDzGAvnQ6R3scbapJVmQpP7YHNpXPsjm6HhJy/wNPlzRhOj3VqfnTD7kHROi jlmOHldhzuFQml22y+o3xZmNka6y7tAhigo/ZUS+0l/U92cXoJrZyREZN3qTXhCG xzXkSW3htBYnepzdK8bsFK8ycwszKyldDdr3BxmNr7b9 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:25 2026 by rpki-client