This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/YZsSqZ83PZHqITH4YFpFHp-CbNM.roa File: YZsSqZ83PZHqITH4YFpFHp-CbNM.roa (raw, json) Hash identifier: QbeDQPWAdsSWd1GvVVV8Ck8/JfIxsYeUNlUaYQgvu98= Subject key identifier: 61:9B:12:A9:9F:37:3D:91:EA:21:31:F8:60:5A:45:1E:9F:82:6C:D3 Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6 Certificate serial: 019B775964E7D0AD2870C4DEF59F50A8BBD6 Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/YZsSqZ83PZHqITH4YFpFHp-CbNM.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205251 IP address blocks: 185.149.180.0/24 maxlen: 24 185.149.181.0/24 maxlen: 24 185.149.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:64:e7:d0:ad:28:70:c4:de:f5:9f:50:a8:bb:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=619b12a99f373d91ea2131f8605a451e9f826cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:fe:63:5a:1a:f6:b2:45:08:92:25:7c:1b: 73:00:84:e7:5f:75:13:d0:85:39:9d:a7:71:eb:99: 4d:e5:2d:5f:7e:29:7c:b8:4a:e6:ce:24:c0:03:c2: 88:46:33:ad:19:7e:6d:85:a9:5a:db:33:ea:b2:f6: 0d:ef:43:dc:d4:8e:47:f7:e3:c4:93:12:56:f4:81: db:22:ae:8a:d5:43:ff:fe:a0:2a:dc:f6:3a:cb:0c: 52:0b:44:f7:67:a3:8c:93:5d:3f:8d:84:e2:72:74: f9:18:8a:13:0f:b0:c1:3e:43:04:9a:87:ea:76:42: 9f:06:f1:3b:99:d5:26:82:bc:38:09:63:d0:3e:08: 5f:7f:a7:94:f6:de:19:a7:df:80:c6:a6:82:5c:22: 82:31:c2:6d:a4:e9:24:03:f4:5b:64:f6:94:1e:6f: 71:de:ca:26:ef:f4:af:2e:90:7c:a6:ac:5c:79:14: 5a:d0:7d:52:a6:bf:8b:ee:37:51:3e:84:90:0d:bb: 14:c2:d2:a0:52:ed:86:a8:10:75:12:51:91:6c:e2: 06:df:b0:48:19:ba:6c:7c:a8:52:94:0e:37:bf:dc: 19:b4:6e:46:f4:21:94:f1:28:f4:eb:97:44:ef:f7: 6e:57:8a:c6:a0:41:88:15:db:ae:21:ad:2e:3e:b9: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9B:12:A9:9F:37:3D:91:EA:21:31:F8:60:5A:45:1E:9F:82:6C:D3 X509v3 Authority Key Identifier: keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/YZsSqZ83PZHqITH4YFpFHp-CbNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.180.0-185.149.182.255 Signature Algorithm: sha256WithRSAEncryption 43:29:aa:a4:f5:74:37:af:45:fc:7b:d9:8a:0e:8f:b4:10:75: a2:f7:2b:4b:65:c1:83:12:39:e2:db:75:8d:ec:7e:61:4f:6b: 41:9f:c3:ba:fa:aa:3d:7f:71:c6:17:41:3c:3a:39:02:c6:7c: 68:56:40:59:28:33:0e:81:1f:e4:46:7c:70:9d:e8:9e:c9:ef: c1:a6:9a:e8:c3:c5:ab:a1:58:bb:d9:90:92:92:7c:0a:39:1d: 17:88:74:a1:b8:1a:0a:e3:89:37:77:a4:39:d7:dd:4f:db:85: 49:78:72:26:b6:c0:6b:b4:55:41:e4:43:46:d2:f3:26:92:11: b2:15:9e:44:55:54:a5:e7:15:e5:c6:56:62:ab:2c:62:b7:cf: 95:4a:96:63:9b:cd:84:4e:81:ee:8f:a6:28:5f:4f:c5:b3:32: 49:48:c8:60:41:80:d4:60:aa:be:88:07:62:01:76:42:58:e6: 6e:01:b0:c3:65:f0:1d:81:50:d9:1d:29:60:41:e6:73:58:14: a1:72:e2:16:d6:b6:93:b3:cd:09:03:bb:b1:ac:89:7e:29:1e: 54:68:f5:ed:85:44:07:73:bc:0a:ff:87:30:c4:52:45:76:e0: 76:4e:e8:6f:9e:2b:2b:5a:5d:7e:38:6b:f2:82:2c:96:fd:e3: 98:ad:3a:f8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WWTn0K0ocMTe9Z9QqLvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNjgxYzI1NmQ2NzI5ODFjYjM5Y2UyNWNhNzhjZjIxNWNm NGVhYTYwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTliMTJhOTlmMzczZDkxZWEyMTMxZjg2MDVhNDUxZTlmODI2Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOP+Y1oa9rJFCJIlfBtzAITnX3UT 0IU5nadx65lN5S1ffil8uErmziTAA8KIRjOtGX5thala2zPqsvYN70Pc1I5H9+PE kxJW9IHbIq6K1UP//qAq3PY6ywxSC0T3Z6OMk10/jYTicnT5GIoTD7DBPkMEmofq dkKfBvE7mdUmgrw4CWPQPghff6eU9t4Zp9+AxqaCXCKCMcJtpOkkA/RbZPaUHm9x 3som7/SvLpB8pqxceRRa0H1Spr+L7jdRPoSQDbsUwtKgUu2GqBB1ElGRbOIG37BI GbpsfKhSlA43v9wZtG5G9CGU8Sj065dE7/duV4rGoEGIFduuIa0uPrnuBwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGGbEqmfNz2R6iEx+GBaRR6fgmzTMB8GA1UdIwQY MBaAFG5oHCVtZymByznOJcp4zyFc9OqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTkt MzdhNTBjZGZhZTA3LzEvWVpzU3FaODNQWkhxSVRINFlGcEZIcC1DYk5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTktMzdhNTBjZGZhZTA3 LzEvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5lbQD BAC5lbYwDQYJKoZIhvcNAQELBQADggEBAEMpqqT1dDevRfx72YoOj7QQdaL3K0tl wYMSOeLbdY3sfmFPa0Gfw7r6qj1/ccYXQTw6OQLGfGhWQFkoMw6BH+RGfHCd6J7J 78GmmujDxauhWLvZkJKSfAo5HReIdKG4GgrjiTd3pDnX3U/bhUl4cia2wGu0VUHk Q0bS8yaSEbIVnkRVVKXnFeXGVmKrLGK3z5VKlmObzYROge6PpihfT8WzMklIyGBB gNRgqr6IB2IBdkJY5m4BsMNl8B2BUNkdKWBB5nNYFKFy4hbWtpOzzQkDu7GsiX4p HlRo9e2FRAdzvAr/hzDEUkV24HZO6G+eKytaXX44a/KCLJb945itOvg= -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:20 2026 by rpki-client