This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/y7eyZqNEkZQkPingFqUdgXmucwc.roa File: y7eyZqNEkZQkPingFqUdgXmucwc.roa (raw, json) Hash identifier: f2+YM/xZdW946QzAFcbV9ZF0dOKQRzmJA4JL++o4rTE= Subject key identifier: CB:B7:B2:66:A3:44:91:94:24:3E:29:E0:16:A5:1D:81:79:AE:73:07 Certificate issuer: /CN=e8318216f03110192d9f6f62ffee190ebbd5c41b Certificate serial: 019B7DCACB2DAFB21A46718CA3B5B974DAEF Authority key identifier: E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/y7eyZqNEkZQkPingFqUdgXmucwc.roa Signing time: Fri 02 Jan 2026 08:20:00 +0000 ROA not before: Fri 02 Jan 2026 08:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208820 IP address blocks: 185.243.156.0/22 maxlen: 22 185.243.156.0/24 maxlen: 24 185.243.157.0/24 maxlen: 24 185.243.158.0/24 maxlen: 24 185.243.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:cb:2d:af:b2:1a:46:71:8c:a3:b5:b9:74:da:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8318216f03110192d9f6f62ffee190ebbd5c41b Validity Not Before: Jan 2 08:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbb7b266a3449194243e29e016a51d8179ae7307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ea:c7:1a:0f:c2:fa:61:6b:af:77:5b:0a:d4: 36:05:ec:63:69:ab:e2:40:bd:e2:12:e1:8c:65:38: 99:6e:4b:cb:80:3d:b5:1e:85:21:d9:93:22:54:f9: 09:b8:9c:b0:62:28:7a:c0:fe:8d:bb:2c:11:f3:a7: 51:c8:40:36:f7:4c:7f:a0:7b:b5:89:7c:da:b2:35: ef:63:07:99:bd:a1:01:5c:6d:c9:c3:f8:d1:60:66: 03:56:68:1d:be:fb:4f:51:bd:94:69:30:53:16:fb: f0:13:3e:e4:14:f8:d7:5d:5b:9f:5d:b4:42:53:da: 3e:40:a9:5e:08:72:96:45:01:ef:01:e8:aa:8f:e9: f8:b1:49:d0:2d:2a:f4:15:5f:ca:a1:18:11:33:a3: 60:81:e0:17:50:f3:58:40:61:25:a4:70:1d:9b:32: ba:3d:ac:c3:00:7c:75:00:9e:b9:23:d9:a5:19:49: 7b:97:e0:03:2f:6c:25:f4:54:a6:72:6a:eb:53:df: 24:1e:87:79:8f:86:26:2d:67:ca:b2:2e:fd:06:58: 94:7d:4f:1b:d0:f4:b6:0a:1a:6d:b0:41:f3:d9:3a: 2a:f3:61:56:4b:0a:86:86:7f:1e:b4:b8:cc:4c:35: 7f:d0:20:62:61:24:fb:a2:c0:99:85:eb:99:8a:bb: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B7:B2:66:A3:44:91:94:24:3E:29:E0:16:A5:1D:81:79:AE:73:07 X509v3 Authority Key Identifier: keyid:E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/y7eyZqNEkZQkPingFqUdgXmucwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.156.0/22 Signature Algorithm: sha256WithRSAEncryption 95:a4:00:58:99:4c:ee:6e:39:f2:94:e8:fe:64:d4:a0:e6:ed: 76:68:90:a3:dc:78:b8:d5:02:86:06:52:2e:44:90:79:46:66: 73:e4:99:fd:11:48:c5:8c:7f:69:93:26:d9:c7:38:b1:87:4e: e5:72:a9:4e:d1:3c:c5:76:64:4b:4d:1a:ed:09:c7:95:45:b2: 56:4e:15:30:fa:a6:a3:cf:19:65:9e:cc:38:96:ea:e1:59:03: 82:c7:98:70:67:b2:9f:86:fd:f8:5b:8f:43:f0:73:16:4a:56: e5:da:2d:df:40:9c:d4:9c:83:37:4c:9a:25:c6:ab:10:37:d9: 51:a4:9b:9a:a5:10:23:0b:d4:7c:79:2a:d0:ab:c8:f9:91:74: 7c:e3:0e:46:d9:9a:c4:cc:42:a6:54:f1:67:74:9a:05:b9:ce: ba:34:97:90:3a:f7:38:d7:17:36:1f:9f:4c:20:f9:2b:a7:17: 86:eb:31:83:a8:73:61:e9:9e:ce:2e:4c:8a:1c:23:aa:9a:cb: 9a:a2:87:0b:f5:1c:b0:1c:2b:3c:29:75:40:ac:5c:10:95:2b: 65:9f:76:ae:83:48:dd:00:c4:d8:b6:e7:1a:01:ce:dc:9e:42: 1d:0b:c2:42:70:08:13:82:79:ec:e7:e3:09:e8:db:40:4c:40: 60:28:6c:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysstr7IaRnGMo7W5dNrvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzE4MjE2ZjAzMTEwMTkyZDlmNmY2MmZmZWUxOTBlYmJk NWM0MWIwHhcNMjYwMTAyMDgyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmI3YjI2NmEzNDQ5MTk0MjQzZTI5ZTAxNmE1MWQ4MTc5YWU3MzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoerHGg/C+mFrr3dbCtQ2Bexjaavi QL3iEuGMZTiZbkvLgD21HoUh2ZMiVPkJuJywYih6wP6NuywR86dRyEA290x/oHu1 iXzasjXvYweZvaEBXG3Jw/jRYGYDVmgdvvtPUb2UaTBTFvvwEz7kFPjXXVufXbRC U9o+QKleCHKWRQHvAeiqj+n4sUnQLSr0FV/KoRgRM6NggeAXUPNYQGElpHAdmzK6 PazDAHx1AJ65I9mlGUl7l+ADL2wl9FSmcmrrU98kHod5j4YmLWfKsi79BliUfU8b 0PS2ChptsEHz2Toq82FWSwqGhn8etLjMTDV/0CBiYST7osCZheuZirt/lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMu3smajRJGUJD4p4BalHYF5rnMHMB8GA1UdIwQY MBaAFOgxghbwMRAZLZ9vYv/uGQ671cQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkRHQ0Z2QXhFQmt0bjI5aV8tNFpEcnZWeEJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84MTZjZjktZTZhMC00M2YxLThhM2Qt NWM3YzNhZDc0YTMyLzEveTdleVpxTkVrWlFrUGluZ0ZxVWRnWG11Y3djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84MTZjZjktZTZhMC00M2YxLThhM2QtNWM3YzNhZDc0YTMy LzEvNkRHQ0Z2QXhFQmt0bjI5aV8tNFpEcnZWeEJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufOcMA0G CSqGSIb3DQEBCwUAA4IBAQCVpABYmUzubjnylOj+ZNSg5u12aJCj3Hi41QKGBlIu RJB5RmZz5Jn9EUjFjH9pkybZxzixh07lcqlO0TzFdmRLTRrtCceVRbJWThUw+qaj zxllnsw4lurhWQOCx5hwZ7Kfhv34W49D8HMWSlbl2i3fQJzUnIM3TJolxqsQN9lR pJuapRAjC9R8eSrQq8j5kXR84w5G2ZrEzEKmVPFndJoFuc66NJeQOvc41xc2H59M IPkrpxeG6zGDqHNh6Z7OLkyKHCOqmsuaoocL9RywHCs8KXVArFwQlStln3aug0jd AMTYtucaAc7cnkIdC8JCcAgTgnns5+MJ6NtATEBgKGwL -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:00 2026 by rpki-client