This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa File: Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa (raw, json) Hash identifier: v4qO0jj2DVZ9xq0w+y70kJel8FoTbySNEx7XDJ9VH/Q= Subject key identifier: 63:E9:ED:BA:F4:53:69:F4:F5:78:E6:65:99:F1:AC:68:F3:C4:B6:31 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B77C70E64BD64EFE2B6AAD709D00E59B3 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212781 IP address blocks: 185.107.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0e:64:bd:64:ef:e2:b6:aa:d7:09:d0:0e:59:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63e9edbaf45369f4f578e66599f1ac68f3c4b631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:71:78:63:0b:c8:87:f9:97:fe:23:64:23:6c: b4:26:4b:9d:eb:26:1b:94:73:bb:a2:e5:07:11:3c: 04:c2:4c:02:52:c0:66:be:c1:8d:55:a2:44:b1:a4: 66:9e:62:5b:2b:a1:dd:42:cf:ce:37:2b:1f:61:87: 0a:54:fb:66:b1:0c:3a:6b:0b:9c:64:d6:6f:b1:10: 27:cf:06:6a:eb:68:f1:e4:b6:50:e3:c9:17:55:af: 18:84:60:5e:3a:b8:26:54:2a:21:f9:1c:d9:a8:e4: 05:71:ca:0c:96:49:de:e6:77:7a:d1:3c:44:a2:01: 10:ee:c4:1a:f0:19:9b:40:6d:b0:f6:6d:f4:84:31: ae:44:fe:53:b8:63:6f:ef:37:bb:d3:c0:78:ee:8c: 2f:d3:a8:4d:bd:ca:be:85:6a:f7:b8:2b:06:d3:2a: 36:e9:45:00:2f:e1:fe:1a:e2:28:c9:5e:01:68:31: 2c:a4:98:bd:d4:79:ae:8a:fd:2e:b9:9f:c1:78:b5: 5c:7f:51:25:48:9a:4b:73:0d:be:d9:a9:4b:07:ee: 1c:2a:4f:d5:8d:d7:e6:52:44:1d:33:3e:02:ae:6b: 24:2b:28:7a:fa:3d:f7:44:74:b4:c8:ad:92:e5:8a: 36:7f:bb:01:a6:b1:69:f0:aa:f6:30:cf:20:67:82: b8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:ED:BA:F4:53:69:F4:F5:78:E6:65:99:F1:AC:68:F3:C4:B6:31 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.64.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:ef:64:5f:7b:35:96:43:0c:7d:8e:6b:3c:66:4e:f4:7b:aa: 87:16:79:4d:9a:29:52:95:77:a7:b5:c9:d5:60:cd:eb:55:8d: a6:c6:33:bb:d6:bb:7a:a4:9c:cf:3f:58:7e:c3:00:e4:b9:b7: 43:0f:1e:c5:f5:e4:44:4c:f2:fc:39:96:33:ba:22:0c:2d:ab: e5:48:dd:be:12:ca:7b:16:0a:87:4c:2f:4b:cc:61:55:5d:ff: 87:73:19:28:86:10:a3:90:f9:48:9c:8d:71:22:e7:fb:61:62: 47:73:fe:01:00:02:be:7a:88:50:78:06:d8:af:28:e3:91:53: 7e:57:80:6c:ab:40:f9:88:eb:86:e6:7b:b2:ac:a4:bc:49:3b: f3:39:67:f1:08:a2:47:88:3b:12:dd:40:a6:eb:54:60:c4:6a: 2d:65:43:7b:5e:e1:f5:f3:a9:bc:b4:67:80:fc:37:5b:0f:ba: 4b:17:db:5f:7a:2c:19:b3:c7:74:d1:be:98:8e:45:5d:bf:36: a7:53:c5:4f:1f:37:32:3e:e6:62:4c:d8:ad:be:e2:ed:1a:45: f7:c8:31:2a:23:88:56:35:04:8a:41:0f:f4:ea:df:47:2d:4d: 3c:b1:9c:5f:ee:ee:6b:39:c9:2b:2b:aa:5f:2b:cc:86:b2:9e: dd:ca:12:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xw5kvWTv4raq1wnQDlmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2U5ZWRiYWY0NTM2OWY0ZjU3OGU2NjU5OWYxYWM2OGYzYzRiNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXF4YwvIh/mX/iNkI2y0Jkud6yYb lHO7ouUHETwEwkwCUsBmvsGNVaJEsaRmnmJbK6HdQs/ONysfYYcKVPtmsQw6awuc ZNZvsRAnzwZq62jx5LZQ48kXVa8YhGBeOrgmVCoh+RzZqOQFccoMlkne5nd60TxE ogEQ7sQa8BmbQG2w9m30hDGuRP5TuGNv7ze708B47owv06hNvcq+hWr3uCsG0yo2 6UUAL+H+GuIoyV4BaDEspJi91Hmuiv0uuZ/BeLVcf1ElSJpLcw2+2alLB+4cKk/V jdfmUkQdMz4CrmskKyh6+j33RHS0yK2S5Yo2f7sBprFp8Kr2MM8gZ4K4AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPp7br0U2n09XjmZZnxrGjzxLYxMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvWS1udHV2UlRhZlQxZU9abG1mR3NhUFBFdGpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWtAMA0G CSqGSIb3DQEBCwUAA4IBAQAr72RfezWWQwx9jms8Zk70e6qHFnlNmilSlXentcnV YM3rVY2mxjO71rt6pJzPP1h+wwDkubdDDx7F9eRETPL8OZYzuiIMLavlSN2+Esp7 FgqHTC9LzGFVXf+HcxkohhCjkPlInI1xIuf7YWJHc/4BAAK+eohQeAbYryjjkVN+ V4Bsq0D5iOuG5nuyrKS8STvzOWfxCKJHiDsS3UCm61RgxGotZUN7XuH186m8tGeA /DdbD7pLF9tfeiwZs8d00b6YjkVdvzanU8VPHzcyPuZiTNitvuLtGkX3yDEqI4hW NQSKQQ/06t9HLU08sZxf7u5rOckrK6pfK8yGsp7dyhK7 -----END CERTIFICATE-----Generated at Sat Feb 7 04:04:28 2026 by rpki-client