This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/yRDMJGx-2GOrcEH30wFFKGZCdPA.roa File: yRDMJGx-2GOrcEH30wFFKGZCdPA.roa (raw, json) Hash identifier: Tdm1FI7VRfmVUcdj4wIjT6OXG1i4pNvLZPk/s1uHJi8= Subject key identifier: C9:10:CC:24:6C:7E:D8:63:AB:70:41:F7:D3:01:45:28:66:42:74:F0 Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412 Certificate serial: 019B7F15E53FB51C30D5DDDD7F3119C33F6E Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/yRDMJGx-2GOrcEH30wFFKGZCdPA.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204818 IP address blocks: 46.16.205.0/24 maxlen: 24 46.16.206.0/24 maxlen: 24 46.16.207.0/24 maxlen: 24 185.148.76.0/24 maxlen: 24 185.148.77.0/24 maxlen: 24 185.148.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e5:3f:b5:1c:30:d5:dd:dd:7f:31:19:c3:3f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c910cc246c7ed863ab7041f7d3014528664274f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:a6:ab:33:2b:6f:90:ae:0d:1a:e9:de:07: 5d:c4:d1:31:2c:09:c4:d0:99:63:74:53:52:dd:42: 4c:71:9f:01:d5:a6:47:e8:bd:5a:e3:c9:61:89:92: 00:bd:24:6a:03:a7:87:92:b0:4e:6b:f0:e2:a9:ee: 11:40:72:9e:5c:fa:fd:48:b8:21:b3:9a:51:46:e1: 26:5f:36:40:88:9a:5d:9b:b6:70:6d:dd:2b:12:bb: 04:39:9f:eb:f2:86:25:37:4a:b5:94:6c:18:77:49: ef:d3:53:82:1a:67:7f:ff:40:78:be:69:3a:57:1b: b9:64:15:dd:02:a4:79:71:e2:42:b1:eb:94:6c:c8: 08:d9:1a:4d:ed:a5:79:4a:9b:8a:8e:4c:96:08:71: a4:3d:4a:5d:97:c6:d5:39:c0:8a:99:3b:a6:a2:48: 45:ed:a1:b4:46:bb:95:40:fa:4b:ee:ae:35:1a:6d: b1:9f:36:98:43:b9:25:8d:6f:1a:37:02:8e:a8:29: 2b:99:9d:cb:76:c2:78:18:bf:1a:a1:b5:47:40:7f: 04:01:bf:9f:82:cd:44:26:85:3f:3a:d8:e4:57:08: d6:ea:6f:df:d4:71:a4:9c:c3:f0:b3:bd:3a:34:5b: cb:b1:31:81:58:c9:0e:3a:81:23:3d:09:e5:c8:52: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:10:CC:24:6C:7E:D8:63:AB:70:41:F7:D3:01:45:28:66:42:74:F0 X509v3 Authority Key Identifier: keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/yRDMJGx-2GOrcEH30wFFKGZCdPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.205.0-46.16.207.255 185.148.76.0/23 185.148.79.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:a7:91:39:21:51:0d:88:e9:0e:c2:a1:94:d7:51:af:c7:d9: 3e:71:7e:aa:45:f0:f7:f8:be:b7:d5:ee:3b:ce:2f:9a:1a:08: 5d:c9:f1:41:a9:01:03:53:c0:f1:db:cf:ec:eb:48:c0:d9:e4: b4:73:14:c6:00:1d:ba:85:da:56:c8:4e:73:5d:9d:e5:ab:d1: ac:24:7b:c5:1e:14:c6:f0:4c:02:9e:19:de:bf:8e:a1:4a:4f: 9e:c2:5e:86:d8:7f:e5:a2:d0:66:1a:ee:52:af:26:ee:ff:a4: 03:7e:ce:8d:6a:7f:ab:99:eb:17:be:61:27:d7:e8:df:2a:9d: e5:b8:cc:43:fb:22:27:cf:32:82:13:04:e0:5b:73:c4:b2:11: 4c:01:c4:7d:51:81:19:97:a6:d8:c4:c7:d7:06:56:ec:d6:2e: 2a:3c:f4:c1:b0:de:f0:42:91:38:28:1a:d0:3a:25:5a:3c:68: e2:e4:e4:38:23:c6:b6:e2:cb:a6:0b:a2:e2:31:46:00:50:a4: 26:b5:4f:f1:20:66:ef:86:6b:53:fa:b9:45:4a:41:24:2a:bb: dd:37:49:07:46:da:45:72:1b:da:3c:10:67:7b:f8:57:9d:3c: 7e:a5:44:60:c0:99:3c:a9:f7:da:79:a9:19:66:04:00:fd:c1: 54:fc:b2:03 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FeU/tRww1d3dfzEZwz9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYTNkYTZkMGZhZmQyN2QwMWI3NDcwM2JiMzlkOGMxMTVl ODY0MTIwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTEwY2MyNDZjN2VkODYzYWI3MDQxZjdkMzAxNDUyODY2NDI3NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7OmqzMrb5CuDRrp3gddxNExLAnE 0JljdFNS3UJMcZ8B1aZH6L1a48lhiZIAvSRqA6eHkrBOa/Diqe4RQHKeXPr9SLgh s5pRRuEmXzZAiJpdm7Zwbd0rErsEOZ/r8oYlN0q1lGwYd0nv01OCGmd//0B4vmk6 Vxu5ZBXdAqR5ceJCseuUbMgI2RpN7aV5SpuKjkyWCHGkPUpdl8bVOcCKmTumokhF 7aG0RruVQPpL7q41Gm2xnzaYQ7kljW8aNwKOqCkrmZ3LdsJ4GL8aobVHQH8EAb+f gs1EJoU/OtjkVwjW6m/f1HGknMPws706NFvLsTGBWMkOOoEjPQnlyFLnpwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMkQzCRsfthjq3BB99MBRShmQnTwMB8GA1UdIwQY MBaAFDGj2m0Pr9J9AbdHA7s52MEV6GQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYt NmNkNGM5ODBhNTIzLzEveVJETUpHeC0yR09yY0VIMzB3RkZLR1pDZFBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYtNmNkNGM5ODBhNTIz LzEvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAuEM0D BAQuEMADBAG5lEwDBAC5lE8wDQYJKoZIhvcNAQELBQADggEBAC6nkTkhUQ2I6Q7C oZTXUa/H2T5xfqpF8Pf4vrfV7jvOL5oaCF3J8UGpAQNTwPHbz+zrSMDZ5LRzFMYA HbqF2lbITnNdneWr0awke8UeFMbwTAKeGd6/jqFKT57CXobYf+Wi0GYa7lKvJu7/ pAN+zo1qf6uZ6xe+YSfX6N8qneW4zEP7IifPMoITBOBbc8SyEUwBxH1RgRmXptjE x9cGVuzWLio89MGw3vBCkTgoGtA6JVo8aOLk5Dgjxrbiy6YLouIxRgBQpCa1T/Eg Zu+Ga1P6uUVKQSQqu903SQdG2kVyG9o8EGd7+FedPH6lRGDAmTyp99p5qRlmBAD9 wVT8sgM= -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:24 2026 by rpki-client