This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/ym4tOdn059VH80jyrnfLu7BgCXc.roa File: ym4tOdn059VH80jyrnfLu7BgCXc.roa (raw, json) Hash identifier: Xoz30lYXVZFLAI30hxcE2+5oHIs5K4qTtgQjmduZalA= Subject key identifier: CA:6E:2D:39:D9:F4:E7:D5:47:F3:48:F2:AE:77:CB:BB:B0:60:09:77 Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17 Certificate serial: 019B7DCA5A54E20036A115E220E1163599D0 Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/ym4tOdn059VH80jyrnfLu7BgCXc.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41956 IP address blocks: 185.254.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5a:54:e2:00:36:a1:15:e2:20:e1:16:35:99:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca6e2d39d9f4e7d547f348f2ae77cbbbb0600977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:8f:bf:ec:5b:bb:c4:d6:52:17:2a:b7:da: ac:8d:84:bd:62:bd:6e:7e:e8:d4:34:b4:08:64:2f: 89:8f:76:7b:d2:37:d9:50:32:c6:20:52:9b:0c:50: 04:04:10:6f:da:4d:a5:72:41:43:bf:df:2d:40:70: ea:f6:34:a6:90:db:e2:0a:45:a7:99:f5:da:3e:94: a7:63:7b:0d:75:0b:04:ac:a0:0c:83:27:12:3c:b5: 43:cf:1b:a5:4c:6e:9c:d6:70:74:a1:c9:43:0f:20: eb:c5:d6:8b:67:24:5e:9b:a1:80:ab:4e:25:72:7b: d6:02:a5:52:74:8b:28:04:fa:58:e6:2e:5b:55:b7: 8a:dd:8f:a9:2c:8a:8f:49:e9:75:97:83:76:1b:b5: 66:65:71:08:3c:74:3f:54:e5:19:37:3d:b4:05:af: 10:46:f4:6a:a7:46:5e:88:3c:6b:01:bf:83:d5:c2: 87:2e:9c:d4:a9:89:df:4d:cd:f1:ca:af:65:bc:bf: 64:3f:62:b1:8b:d4:c9:1c:a5:80:1d:53:df:18:71: 86:da:97:01:6a:7e:67:b1:b5:73:c7:7f:1c:57:b2: 4a:7a:61:7e:87:ea:00:bd:2a:6c:45:64:d9:56:2a: e9:18:d9:2b:b3:2d:dd:0b:49:8f:20:58:ad:c7:8d: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6E:2D:39:D9:F4:E7:D5:47:F3:48:F2:AE:77:CB:BB:B0:60:09:77 X509v3 Authority Key Identifier: keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/ym4tOdn059VH80jyrnfLu7BgCXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.35.0/24 Signature Algorithm: sha256WithRSAEncryption a1:22:ca:a9:7d:e3:e4:10:a6:60:c0:f4:e8:ab:10:85:82:5f: c0:73:cf:fe:54:e7:0a:26:58:ea:23:06:ae:44:eb:9f:ed:38: c8:2b:e5:90:6f:1b:8c:81:91:b9:88:d7:1c:e0:d0:43:93:3b: 77:7c:9d:7c:6c:14:bd:1f:70:ff:a5:9c:08:95:b2:fe:8a:81: 52:71:37:69:f3:39:84:90:27:ba:04:b4:6b:1c:95:48:c8:68: 01:2b:c1:85:7c:eb:28:d7:f3:2e:f1:66:e1:d5:d3:a8:aa:81: 14:e4:12:64:a3:c6:cd:06:6d:b8:3c:4b:9b:25:92:12:06:22: fa:36:14:e1:a5:3f:ce:bc:2b:53:e5:26:da:83:80:97:a8:e7: 97:05:8f:aa:2e:b1:cd:be:fe:4e:c9:3d:4b:cf:c8:37:d0:ad: 71:c5:2b:99:79:e1:e7:b3:47:b7:84:4d:45:c8:b1:22:5b:cf: 4a:99:4a:43:19:57:14:9a:29:ae:e4:47:5b:6a:01:2c:64:41: 93:0b:76:29:d4:c4:23:09:68:38:c3:81:e5:16:9b:26:84:ad: c1:66:3d:7e:85:09:37:06:28:6a:d2:64:f1:69:d0:03:e9:a9: 45:c9:12:ca:c7:f7:95:aa:57:d0:5c:01:1d:f1:a3:2c:c4:9a: 2f:22:02:11 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9ylpU4gA2oRXiIOEWNZnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjI5Nzc1MjgzNzMzYTQ1YzQ1NGI4ZDdiZTVhNjZkZjBk YjFhMTcwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTZlMmQzOWQ5ZjRlN2Q1NDdmMzQ4ZjJhZTc3Y2JiYmIwNjAwOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUePv+xbu8TWUhcqt9qsjYS9Yr1u fujUNLQIZC+Jj3Z70jfZUDLGIFKbDFAEBBBv2k2lckFDv98tQHDq9jSmkNviCkWn mfXaPpSnY3sNdQsErKAMgycSPLVDzxulTG6c1nB0oclDDyDrxdaLZyRem6GAq04l cnvWAqVSdIsoBPpY5i5bVbeK3Y+pLIqPSel1l4N2G7VmZXEIPHQ/VOUZNz20Ba8Q RvRqp0ZeiDxrAb+D1cKHLpzUqYnfTc3xyq9lvL9kP2Kxi9TJHKWAHVPfGHGG2pcB an5nsbVzx38cV7JKemF+h+oAvSpsRWTZVirpGNkrsy3dC0mPIFitx43RXwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMpuLTnZ9OfVR/NI8q53y7uwYAl3MB8GA1UdIwQY MBaAFPlil3UoNzOkXEVLjXvlpm3w2xoXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XS1hkU2czTTZSY1JVdU5lLVdtYmZEYkdoYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWJmY2U2LTI4NTctNDA0Yi05Yjc0 LWIzMjRlMDI1YjkyOS8xL3ltNHRPZG4wNTlWSDgwanlybmZMdTdCZ0NYYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2QvZWJmY2U2LTI4NTctNDA0Yi05Yjc0LWIzMjRlMDI1Yjky OS8xLzEtV0tYZFNnM002UmNSVXVOZS1XbWJmRGJHaGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5/iMw DQYJKoZIhvcNAQELBQADggEBAKEiyql94+QQpmDA9OirEIWCX8Bzz/5U5womWOoj Bq5E65/tOMgr5ZBvG4yBkbmI1xzg0EOTO3d8nXxsFL0fcP+lnAiVsv6KgVJxN2nz OYSQJ7oEtGsclUjIaAErwYV86yjX8y7xZuHV06iqgRTkEmSjxs0Gbbg8S5slkhIG Ivo2FOGlP868K1PlJtqDgJeo55cFj6ousc2+/k7JPUvPyDfQrXHFK5l54eezR7eE TUXIsSJbz0qZSkMZVxSaKa7kR1tqASxkQZMLdinUxCMJaDjDgeUWmyaErcFmPX6F CTcGKGrSZPFp0APpqUXJEsrH95WqV9BcAR3xoyzEmi8iAhE= -----END CERTIFICATE-----Generated at Wed Jan 21 19:33:09 2026 by rpki-client