This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/dY56PZ-dRsvnKDvXo4McbQsvHAI.roa File: dY56PZ-dRsvnKDvXo4McbQsvHAI.roa (raw, json) Hash identifier: SOOatDV7hO/TWrylYWvtGzZm2zHDrCdXyxdW1RoCrrQ= Subject key identifier: 75:8E:7A:3D:9F:9D:46:CB:E7:28:3B:D7:A3:83:1C:6D:0B:2F:1C:02 Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9 Certificate serial: 019B78A33BB0EC9AD5D457CAA083F1BA91B5 Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/dY56PZ-dRsvnKDvXo4McbQsvHAI.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205728 IP address blocks: 185.208.132.0/22 maxlen: 24 2a0b:37c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:b0:ec:9a:d5:d4:57:ca:a0:83:f1:ba:91:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=758e7a3d9f9d46cbe7283bd7a3831c6d0b2f1c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:25:9b:d1:3a:09:b9:0f:ac:36:37:56:50: 59:ff:d9:5c:4c:1a:e7:4b:d4:7c:86:30:a3:13:ee: 09:60:d0:ab:dc:92:9f:c3:2f:83:53:c2:0d:2e:c0: 67:3d:b3:bc:66:d9:15:ef:b3:c7:f7:84:7f:73:25: c4:ef:7e:e8:21:d3:a1:4b:f8:aa:39:03:a0:ef:2b: 83:bd:7e:95:69:90:a6:27:ff:b0:7f:41:97:9e:e9: b9:67:21:bf:21:6f:77:0b:8b:89:26:e8:f8:e7:14: d5:30:71:6d:e4:ef:54:74:8b:c2:7d:cd:67:6c:e1: 6d:bd:0b:bd:df:27:e8:e0:22:79:fb:4b:3d:e5:64: 2b:8c:cf:67:03:88:f0:16:d0:d1:65:59:00:4a:67: b7:71:49:f1:ae:0d:3a:01:5d:14:01:61:8f:cc:9c: 81:42:63:51:17:ed:4e:53:f1:da:c8:51:a8:b5:56: 84:2c:37:c9:03:bb:cc:44:cd:58:4f:47:c3:6f:a1: 4f:f9:28:af:09:13:5c:7d:f0:38:b5:5f:13:1b:dd: 62:63:ed:44:ad:1f:d9:a8:3f:f6:88:5c:f0:3a:70: b3:f4:01:e8:34:d8:47:1a:9f:20:b2:04:27:7c:43: 48:99:58:cb:46:eb:34:28:ec:3e:65:59:67:be:fe: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8E:7A:3D:9F:9D:46:CB:E7:28:3B:D7:A3:83:1C:6D:0B:2F:1C:02 X509v3 Authority Key Identifier: keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/dY56PZ-dRsvnKDvXo4McbQsvHAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.132.0/22 IPv6: 2a0b:37c0::/29 Signature Algorithm: sha256WithRSAEncryption 74:a7:27:85:3c:c2:b8:98:92:ca:2b:0d:f9:21:ea:5e:cd:74: 51:c6:b1:a1:81:23:02:87:01:fc:56:53:eb:de:ce:2c:37:b3: 9a:48:5d:e2:68:36:be:d8:0d:b2:c0:40:94:03:c5:48:d4:8c: 58:29:d3:41:c5:dd:7f:58:eb:58:b5:8f:20:c7:61:2b:f6:b7: e3:73:d1:1b:17:92:5d:23:46:95:f1:8b:cb:0a:46:3b:10:9a: e6:bc:07:06:61:c6:80:80:72:36:97:f8:a5:df:db:f9:f0:9a: ac:ac:29:82:43:3c:5b:50:ef:d8:a8:08:6e:50:02:98:59:25: bd:7a:2b:27:0e:61:d1:eb:23:c9:df:5f:4d:cf:f2:d9:ae:ef: 76:57:b7:5b:09:b7:5e:93:eb:d0:da:0c:50:d8:de:0b:87:25: 5a:46:00:f2:7c:23:b1:5a:44:30:a1:7f:8a:52:5a:1e:cc:da: 0e:2b:4b:8c:dd:0f:5b:13:c6:78:22:82:0f:6f:d1:be:b3:1d: 8e:32:f2:0e:5a:93:41:4c:50:5f:53:66:aa:94:3b:7f:04:34: 66:1f:f4:d0:d9:b4:08:49:6e:ff:63:bc:bb:c7:32:a9:93:dd: c7:65:9e:17:0f:15:a3:22:8a:c7:f3:ec:db:a8:68:2f:ef:5d: e2:0b:4a:c1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ozuw7JrV1FfKoIPxupG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzVmMTg5NmU5YTQ0MzU3YzlkNzhhY2YzN2Q0OGY0Nzgw NTIwZDkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NThlN2EzZDlmOWQ0NmNiZTcyODNiZDdhMzgzMWM2ZDBiMmYxYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1glm9E6CbkPrDY3VlBZ/9lcTBrn S9R8hjCjE+4JYNCr3JKfwy+DU8INLsBnPbO8ZtkV77PH94R/cyXE737oIdOhS/iq OQOg7yuDvX6VaZCmJ/+wf0GXnum5ZyG/IW93C4uJJuj45xTVMHFt5O9UdIvCfc1n bOFtvQu93yfo4CJ5+0s95WQrjM9nA4jwFtDRZVkASme3cUnxrg06AV0UAWGPzJyB QmNRF+1OU/HayFGotVaELDfJA7vMRM1YT0fDb6FP+SivCRNcffA4tV8TG91iY+1E rR/ZqD/2iFzwOnCz9AHoNNhHGp8gsgQnfENImVjLRus0KOw+ZVlnvv4doQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHWOej2fnUbL5yg716ODHG0LLxwCMB8GA1UdIwQY MBaAFH7F8YlumkQ1fJ14rPN9SPR4BSDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNYeGlXNmFSRFY4blhpczgzMUk5SGdGSU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNTdjOGItOGYyNy00N2RkLTk5NWUt YjQzNmQ3NmRhZDY1LzEvZFk1NlBaLWRSc3ZuS0R2WG80TWNiUXN2SEFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xNTdjOGItOGYyNy00N2RkLTk5NWUtYjQzNmQ3NmRhZDY1 LzEvZnNYeGlXNmFSRFY4blhpczgzMUk5SGdGSU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudCEMA0E AgACMAcDBQMqCzfAMA0GCSqGSIb3DQEBCwUAA4IBAQB0pyeFPMK4mJLKKw35Iepe zXRRxrGhgSMChwH8VlPr3s4sN7OaSF3iaDa+2A2ywECUA8VI1IxYKdNBxd1/WOtY tY8gx2Er9rfjc9EbF5JdI0aV8YvLCkY7EJrmvAcGYcaAgHI2l/il39v58JqsrCmC QzxbUO/YqAhuUAKYWSW9eisnDmHR6yPJ319Nz/LZru92V7dbCbdek+vQ2gxQ2N4L hyVaRgDyfCOxWkQwoX+KUloezNoOK0uM3Q9bE8Z4IoIPb9G+sx2OMvIOWpNBTFBf U2aqlDt/BDRmH/TQ2bQISW7/Y7y7xzKpk93HZZ4XDxWjIorH8+zbqGgv713iC0rB -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:48 2026 by rpki-client