This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/lyRXIvB-zm4H5fi5XUDSXwMzWYk.roa File: lyRXIvB-zm4H5fi5XUDSXwMzWYk.roa (raw, json) Hash identifier: PP50Q9MOjUz3zniPrlR3x+kz4+woEcIafSr6taXbTAk= Subject key identifier: 97:24:57:22:F0:7E:CE:6E:07:E5:F8:B9:5D:40:D2:5F:03:33:59:89 Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Certificate serial: 019B7AC8A45F452B297EAAC610D458E1D8F2 Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/lyRXIvB-zm4H5fi5XUDSXwMzWYk.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 185.161.149.0/24 maxlen: 24 185.238.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a4:5f:45:2b:29:7e:aa:c6:10:d4:58:e1:d8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97245722f07ece6e07e5f8b95d40d25f03335989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:a5:48:7c:a5:a3:35:73:f3:8b:3e:b9:de: af:11:88:80:99:8a:3e:89:77:3c:5c:9d:9c:e4:5b: 90:df:47:ff:76:65:17:f3:87:1c:e7:62:12:8d:f8: 43:d9:85:c2:06:ea:35:ef:6a:9f:96:40:48:1a:19: df:44:59:4a:d4:d9:b3:b3:ed:ba:99:f8:dc:83:ff: 54:61:c3:f6:20:4d:c0:f5:30:72:27:9f:10:28:c8: 8b:4e:9c:cf:27:b7:61:ff:0f:46:ad:4c:d0:74:16: 4c:c8:3c:9f:19:a3:f8:35:68:15:ad:4a:0e:7b:38: 67:f2:dc:59:b2:c6:eb:43:0e:df:4d:cb:24:1f:ee: a3:db:1d:1b:6b:33:44:55:47:4d:4d:9e:35:38:e8: 9c:fc:c1:e2:07:f3:56:18:05:13:91:40:a8:b0:66: 8f:7d:5c:f9:d1:23:91:aa:96:a1:ee:fc:fe:95:eb: 4f:9b:ce:24:30:ee:41:9f:b9:50:20:69:96:aa:d7: d1:1e:16:97:8b:09:3e:2b:7e:eb:76:05:af:6c:17: 65:45:28:be:35:7b:95:f4:bd:8e:ee:01:98:36:ac: 72:f5:72:99:e2:f1:46:c0:87:1a:75:a7:33:d1:b5: ad:7e:87:10:14:b1:f6:d4:53:7e:6d:97:1d:aa:33: ce:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:24:57:22:F0:7E:CE:6E:07:E5:F8:B9:5D:40:D2:5F:03:33:59:89 X509v3 Authority Key Identifier: keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/lyRXIvB-zm4H5fi5XUDSXwMzWYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.149.0/24 185.238.178.0/24 Signature Algorithm: sha256WithRSAEncryption 60:58:82:88:fc:0e:48:ca:09:e3:ad:bb:12:d1:34:89:86:61: ed:8e:8b:2e:6d:d5:c9:ba:ea:4c:33:9b:52:4c:5e:41:ab:46: 34:42:92:c5:ce:8f:f9:84:a2:f4:78:8f:03:f4:0d:99:8e:7b: cb:2d:29:d4:75:7c:f7:a1:6c:9d:be:57:e9:7e:91:90:3a:5a: 03:bf:c8:b7:11:96:31:58:a4:ed:ed:af:0d:55:ac:00:de:83: 9d:8b:7c:aa:48:45:1b:ec:2a:16:7c:74:94:d9:47:c2:23:bc: b6:d7:4f:ea:31:1d:47:49:cd:61:8d:2a:53:8b:9f:64:7b:e3: 6d:b0:76:40:9d:ab:95:de:64:ce:1e:1f:c8:e3:27:38:3f:0f: 03:5c:69:c7:3e:b7:64:20:dd:db:63:c5:01:15:9c:49:ae:82: 78:6d:69:4f:07:14:fd:31:28:40:00:77:2d:e6:54:c6:30:52: 5d:1c:47:c8:91:62:e6:e2:18:64:8b:c1:8e:28:bc:c6:f0:90: 37:b1:5b:4f:dd:72:64:81:41:3c:db:74:4f:40:15:08:08:1c: 87:f6:7e:74:52:36:01:05:b4:e5:ea:94:cc:20:63:23:50:5c: 38:a7:fa:95:a2:47:d0:33:61:b4:37:73:92:63:84:1c:ec:04: b2:73:99:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yKRfRSspfqrGENRY4djyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWVjMjhlODQxZjI5ZjM4MGE3Y2UyY2I1Y2Q1NjczNzAw ODIxZmQwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzI0NTcyMmYwN2VjZTZlMDdlNWY4Yjk1ZDQwZDI1ZjAzMzM1OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSilSHylozVz84s+ud6vEYiAmYo+ iXc8XJ2c5FuQ30f/dmUX84cc52ISjfhD2YXCBuo172qflkBIGhnfRFlK1Nmzs+26 mfjcg/9UYcP2IE3A9TByJ58QKMiLTpzPJ7dh/w9GrUzQdBZMyDyfGaP4NWgVrUoO ezhn8txZssbrQw7fTcskH+6j2x0bazNEVUdNTZ41OOic/MHiB/NWGAUTkUCosGaP fVz50SORqpah7vz+letPm84kMO5Bn7lQIGmWqtfRHhaXiwk+K37rdgWvbBdlRSi+ NXuV9L2O7gGYNqxy9XKZ4vFGwIcadacz0bWtfocQFLH21FN+bZcdqjPOAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJckVyLwfs5uB+X4uV1A0l8DM1mJMB8GA1UdIwQY MBaAFDpewo6EHynzgKfOLLXNVnNwCCH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMt ODM1NTk5MjYwZmY2LzEvbHlSWEl2Qi16bTRINWZpNVhVRFNYd016V1lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMtODM1NTk5MjYwZmY2 LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaGVAwQA ue6yMA0GCSqGSIb3DQEBCwUAA4IBAQBgWIKI/A5IygnjrbsS0TSJhmHtjosubdXJ uupMM5tSTF5Bq0Y0QpLFzo/5hKL0eI8D9A2ZjnvLLSnUdXz3oWydvlfpfpGQOloD v8i3EZYxWKTt7a8NVawA3oOdi3yqSEUb7CoWfHSU2UfCI7y210/qMR1HSc1hjSpT i59ke+NtsHZAnauV3mTOHh/I4yc4Pw8DXGnHPrdkIN3bY8UBFZxJroJ4bWlPBxT9 MShAAHct5lTGMFJdHEfIkWLm4hhki8GOKLzG8JA3sVtP3XJkgUE823RPQBUICByH 9n50UjYBBbTl6pTMIGMjUFw4p/qVokfQM2G0N3OSY4Qc7ASyc5mq -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:49 2026 by rpki-client