This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/M-YtErUxsBexOppW_oy6TWvdZT0.roa File: M-YtErUxsBexOppW_oy6TWvdZT0.roa (raw, json) Hash identifier: TZXW/GBDFQYE5cnY/AzLaMpfHnhV7VNLTQcf/qj2o7Y= Subject key identifier: 33:E6:2D:12:B5:31:B0:17:B1:3A:9A:56:FE:8C:BA:4D:6B:DD:65:3D Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22 Certificate serial: 019B797EA8A4DBEC655258F890CA23EEFAC0 Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/M-YtErUxsBexOppW_oy6TWvdZT0.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206036 IP address blocks: 185.202.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a8:a4:db:ec:65:52:58:f8:90:ca:23:ee:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22 Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33e62d12b531b017b13a9a56fe8cba4d6bdd653d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:41:59:e5:85:0d:15:3b:9b:ba:5b:93:05:b4: de:c4:53:c2:61:9e:00:4f:4f:e0:03:2a:59:66:fa: 6f:ca:7f:e7:1b:f8:93:19:ee:e7:77:a4:d5:eb:03: ca:dc:7b:67:a9:45:8e:54:f5:f8:35:1c:6a:fd:fe: 78:2e:51:23:ff:02:c4:07:d7:23:32:eb:7d:48:45: 3f:34:ca:e0:ef:00:a6:c5:de:16:5a:97:71:ae:fc: 6a:76:e5:59:72:31:54:24:f5:e5:8e:3d:ce:65:15: 57:27:3d:7f:54:47:7e:04:44:1c:fb:d9:7f:4a:89: d9:7f:e1:44:22:1d:8b:9a:a4:9a:52:61:ad:96:b1: d9:c0:01:1b:4c:f2:8d:84:8a:17:38:1b:f1:6b:68: 94:83:20:3e:6d:c5:a2:0c:76:20:d0:15:0a:8d:51: a7:97:22:5f:b4:9f:06:f4:b9:b6:d3:7c:1c:7a:89: 5b:8e:90:fb:4e:cf:f7:8d:f0:49:5c:92:25:ba:16: e5:d3:b1:48:9b:30:f9:48:4b:84:fc:3d:48:0f:c5: cb:42:2b:0b:1a:c4:0c:30:cd:04:ee:ad:78:14:b3: 77:2d:d9:ea:80:bf:1c:b1:83:de:48:04:88:dc:c3: 50:37:78:fd:cb:0e:bf:25:58:64:0e:93:74:0d:bc: a6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E6:2D:12:B5:31:B0:17:B1:3A:9A:56:FE:8C:BA:4D:6B:DD:65:3D X509v3 Authority Key Identifier: keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/M-YtErUxsBexOppW_oy6TWvdZT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.232.0/22 Signature Algorithm: sha256WithRSAEncryption 98:f2:72:33:c7:95:40:3e:da:f6:9f:9a:85:b8:36:41:cc:84: e9:14:54:d5:2d:53:bd:bc:7a:6d:c9:7e:52:7e:2d:39:a0:b4: 87:33:fe:5a:b0:2d:05:bc:ac:d0:38:ed:7a:b3:c8:62:f8:c6: 94:69:54:47:f4:85:bd:c3:94:64:0b:d4:78:95:3c:60:23:b9: 7f:40:a1:bb:e4:b8:48:6a:35:9e:59:05:b1:7f:f3:58:80:ca: 31:ae:e1:61:c4:e3:9a:de:39:5a:79:d4:ef:fb:e9:96:39:60: 06:83:86:0a:b7:71:55:e2:fa:d1:21:90:df:52:d5:39:1a:92: 1c:51:0e:b6:87:1b:47:67:4d:49:b6:63:78:c2:7d:14:57:a3: 88:74:52:4a:0d:a7:24:ae:b4:c7:ae:d5:0b:a9:14:19:b9:08: ed:1e:c5:46:b5:c9:12:51:d1:d5:2d:20:54:6a:ca:5c:10:0f: 2f:70:8b:d9:b0:e4:13:36:92:b4:b4:cf:18:4f:af:15:a7:60: 23:2b:e1:68:b0:42:7b:5c:22:6b:90:36:7d:52:1c:ad:f1:fa: ba:2f:47:c1:64:44:a8:f3:4a:f2:7b:97:a8:17:85:1b:8e:46: 04:0c:5c:36:a8:20:78:95:b3:c8:86:3b:57:c2:dd:40:63:01: d5:39:1b:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqik2+xlUlj4kMoj7vrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTc4ZmFmNjQwMWUyZjM3MTZlMzE3NjQ1NjlkZjczMWRm NThmMjIwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2U2MmQxMmI1MzFiMDE3YjEzYTlhNTZmZThjYmE0ZDZiZGQ2NTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0FZ5YUNFTubuluTBbTexFPCYZ4A T0/gAypZZvpvyn/nG/iTGe7nd6TV6wPK3HtnqUWOVPX4NRxq/f54LlEj/wLEB9cj Mut9SEU/NMrg7wCmxd4WWpdxrvxqduVZcjFUJPXljj3OZRVXJz1/VEd+BEQc+9l/ SonZf+FEIh2LmqSaUmGtlrHZwAEbTPKNhIoXOBvxa2iUgyA+bcWiDHYg0BUKjVGn lyJftJ8G9Lm203wceolbjpD7Ts/3jfBJXJIluhbl07FImzD5SEuE/D1ID8XLQisL GsQMMM0E7q14FLN3LdnqgL8csYPeSASI3MNQN3j9yw6/JVhkDpN0DbymgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPmLRK1MbAXsTqaVv6Muk1r3WU9MB8GA1UdIwQY MBaAFH8Xj69kAeLzcW4xdkVp33Md9Y8iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYjc5NjgtY2E0ZC00NWY0LWI2NzEt MmU3Zjc4NDg5Y2QzLzEvTS1ZdEVyVXhzQmV4T3BwV19veTZUV3ZkWlQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xYjc5NjgtY2E0ZC00NWY0LWI2NzEtMmU3Zjc4NDg5Y2Qz LzEvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucroMA0G CSqGSIb3DQEBCwUAA4IBAQCY8nIzx5VAPtr2n5qFuDZBzITpFFTVLVO9vHptyX5S fi05oLSHM/5asC0FvKzQOO16s8hi+MaUaVRH9IW9w5RkC9R4lTxgI7l/QKG75LhI ajWeWQWxf/NYgMoxruFhxOOa3jlaedTv++mWOWAGg4YKt3FV4vrRIZDfUtU5GpIc UQ62hxtHZ01JtmN4wn0UV6OIdFJKDackrrTHrtULqRQZuQjtHsVGtckSUdHVLSBU aspcEA8vcIvZsOQTNpK0tM8YT68Vp2AjK+FosEJ7XCJrkDZ9Uhyt8fq6L0fBZESo 80rye5eoF4UbjkYEDFw2qCB4lbPIhjtXwt1AYwHVORvc -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:53 2026 by rpki-client