This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/YCngamdKmrL7RtnLOsCOvdmjrwU.roa File: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (raw, json) Hash identifier: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0= Subject key identifier: 60:29:E0:6A:67:4A:9A:B2:FB:46:D9:CB:3A:C0:8E:BD:D9:A3:AF:05 Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c Certificate serial: 019B7DCB348962CEB54F64486E451E75AE7A Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/YCngamdKmrL7RtnLOsCOvdmjrwU.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 185.55.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:34:89:62:ce:b5:4f:64:48:6e:45:1e:75:ae:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6029e06a674a9ab2fb46d9cb3ac08ebdd9a3af05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:c3:17:56:da:6a:56:c0:2e:60:19:38:5c: 07:b4:62:97:68:f5:3a:1a:e9:17:72:32:a1:2a:b1: dc:ff:55:32:f6:06:3c:e4:7d:34:87:ba:aa:e3:ce: c7:42:0a:b5:63:ba:58:e9:b1:f6:40:e0:5f:a2:e7: c6:d5:47:31:2a:c5:ad:c1:99:8b:fa:56:2a:ce:90: 6a:5c:1c:0b:00:45:b8:70:ea:b3:7e:5e:47:f0:40: 1c:31:b7:de:67:1b:b8:99:94:56:0a:6f:e0:5e:6a: e6:4d:91:b6:d4:cd:51:74:9f:44:f2:da:4f:35:40: 48:76:a6:fe:d7:e8:dc:49:b1:44:1e:a7:d8:6a:04: 01:be:0e:d9:6e:82:45:86:d4:a1:b3:f3:ae:8e:11: 8b:d7:fb:38:1a:69:e1:e7:88:3a:f7:1a:6f:05:e5: c2:47:bb:9b:f1:f6:68:10:99:e9:63:b0:a7:64:b0: af:6c:3f:37:df:dd:08:5b:92:5a:42:8d:34:fc:c7: 52:c4:1d:5b:ba:84:49:49:c2:53:47:4f:03:7a:3f: d3:52:70:de:d5:9c:f5:7a:7a:93:ff:f7:a2:73:11: 66:5a:c0:a1:e5:06:ea:ab:61:98:b1:96:b7:39:fa: cc:c3:b4:11:b4:1d:48:83:d3:63:5c:cd:66:4f:10: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:29:E0:6A:67:4A:9A:B2:FB:46:D9:CB:3A:C0:8E:BD:D9:A3:AF:05 X509v3 Authority Key Identifier: keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/YCngamdKmrL7RtnLOsCOvdmjrwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.132.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:ce:4e:6a:23:7a:5a:1a:0c:57:95:25:79:c9:fe:09:29:b1: cf:95:c0:0b:49:39:dc:51:af:b7:3a:60:d1:af:f5:3c:5a:7f: c4:e3:e3:f8:f4:a1:c1:d0:34:8b:25:02:97:63:54:ab:bf:8a: a6:c6:02:b1:9d:62:25:9f:68:8a:fd:c1:0d:b8:b6:23:9c:88: 4c:cc:7b:97:07:99:c0:7c:12:be:33:33:75:07:85:64:6c:64: 67:dd:34:b9:07:2b:d7:89:e1:73:8e:2e:13:23:9a:4f:ca:2e: be:8b:6e:26:77:88:c1:43:f4:09:fd:0e:b6:ec:a0:e0:00:b2: 9d:b0:f3:86:c8:5a:39:bf:37:ef:c6:5d:ef:06:6a:b7:c7:18: 28:14:33:62:c5:dd:0e:e7:9a:eb:03:68:f6:61:7c:3f:63:e3: e2:b0:b1:c1:c4:8f:49:1e:4f:24:c5:64:00:d2:d6:da:50:dd: b3:41:2f:1e:c3:76:37:c7:24:cd:07:32:b6:0a:ca:97:94:0d: df:e4:c4:fc:34:17:97:cc:67:cd:f8:56:86:0a:4f:7d:00:4d: 3f:d6:62:7e:2c:b0:05:2f:80:87:c3:3e:a1:f4:37:0b:62:49: 9e:54:a2:6a:30:91:a2:af:1c:38:91:80:fd:03:45:c6:0e:b9: 18:81:76:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzSJYs61T2RIbkUeda56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOGIxMDcxMTMxNzYzYWFkYWIxZjI5NGUzN2NkNTBhZGFj MDkzOWMwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDI5ZTA2YTY3NGE5YWIyZmI0NmQ5Y2IzYWMwOGViZGQ5YTNhZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsTDF1baalbALmAZOFwHtGKXaPU6 GukXcjKhKrHc/1Uy9gY85H00h7qq487HQgq1Y7pY6bH2QOBfoufG1UcxKsWtwZmL +lYqzpBqXBwLAEW4cOqzfl5H8EAcMbfeZxu4mZRWCm/gXmrmTZG21M1RdJ9E8tpP NUBIdqb+1+jcSbFEHqfYagQBvg7ZboJFhtShs/OujhGL1/s4Gmnh54g69xpvBeXC R7ub8fZoEJnpY7CnZLCvbD83390IW5JaQo00/MdSxB1buoRJScJTR08Dej/TUnDe 1Zz1enqT//eicxFmWsCh5Qbqq2GYsZa3OfrMw7QRtB1Ig9NjXM1mTxCsbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGAp4GpnSpqy+0bZyzrAjr3Zo68FMB8GA1UdIwQY MBaAFI6LEHETF2Oq2rHylON81QrawJOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAt MWM5NGNiN2RmZWIzLzEvWUNuZ2FtZEttckw3UnRuTE9zQ092ZG1qcndVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAtMWM5NGNiN2RmZWIz LzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTeEMA0G CSqGSIb3DQEBCwUAA4IBAQAOzk5qI3paGgxXlSV5yf4JKbHPlcALSTncUa+3OmDR r/U8Wn/E4+P49KHB0DSLJQKXY1Srv4qmxgKxnWIln2iK/cENuLYjnIhMzHuXB5nA fBK+MzN1B4VkbGRn3TS5ByvXieFzji4TI5pPyi6+i24md4jBQ/QJ/Q627KDgALKd sPOGyFo5vzfvxl3vBmq3xxgoFDNixd0O55rrA2j2YXw/Y+PisLHBxI9JHk8kxWQA 0tbaUN2zQS8ew3Y3xyTNBzK2CsqXlA3f5MT8NBeXzGfN+FaGCk99AE0/1mJ+LLAF L4CHwz6h9DcLYkmeVKJqMJGirxw4kYD9A0XGDrkYgXaR -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:40 2026 by rpki-client