This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/hy7V_eg1KosUr6B48auj7x_GyG0.roa File: hy7V_eg1KosUr6B48auj7x_GyG0.roa (raw, json) Hash identifier: esE+dAQn3fgKAAwpaNKRZUcrbj7NuDcvWUlHXEbNi8Y= Subject key identifier: 87:2E:D5:FD:E8:35:2A:8B:14:AF:A0:78:F1:AB:A3:EF:1F:C6:C8:6D Certificate issuer: /CN=4822520de61437a6ce65c6e34627470703e65ed1 Certificate serial: 019BFA8C7F2A9C37C61605E0CF05FA65B1BB Authority key identifier: 48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/hy7V_eg1KosUr6B48auj7x_GyG0.roa Signing time: Mon 26 Jan 2026 13:44:30 +0000 ROA not before: Mon 26 Jan 2026 13:44:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 185.139.78.0/24 maxlen: 24 185.139.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:8c:7f:2a:9c:37:c6:16:05:e0:cf:05:fa:65:b1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4822520de61437a6ce65c6e34627470703e65ed1 Validity Not Before: Jan 26 13:44:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=872ed5fde8352a8b14afa078f1aba3ef1fc6c86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:75:cd:3d:09:8c:d6:d7:93:8e:0f:2e:38: 3e:7b:5d:81:3b:f0:fc:f0:63:66:e5:dc:cb:84:f3: b1:72:dd:b3:0e:59:8a:e6:dc:09:5c:43:3d:7e:92: 7f:a6:6c:1f:b1:6a:f2:11:4d:7d:7f:b1:f4:25:9b: e9:00:e0:f4:cb:3b:9b:19:49:e2:6e:b0:b2:a5:72: 5d:1a:cf:3d:f1:39:e9:72:2d:cb:48:46:91:6d:c4: 16:f6:1d:79:2d:21:87:41:c5:56:88:51:41:18:61: 40:00:87:ed:6d:b6:f4:7d:70:5a:fc:db:f8:b8:2f: ab:be:a5:62:63:48:c8:ad:7d:f2:04:35:8a:55:9e: f6:1d:01:10:a2:8f:4b:7e:ee:6e:bf:d4:e0:dc:ad: 4a:05:a4:3a:77:f8:f0:e4:74:ba:1f:97:de:c2:66: 5a:48:b8:01:5e:e0:8b:6e:d9:63:6b:a2:c1:ca:02: 84:5d:6d:31:ba:e1:9b:68:42:fb:1a:d1:b0:02:0b: 2f:dc:78:0d:a4:38:91:2f:fc:9b:ce:34:b3:d8:d4: 09:cc:32:4d:3f:2c:65:71:29:59:c3:65:dd:4d:eb: 75:a1:23:c4:e0:89:53:d1:be:fb:e7:94:4b:d7:5f: b7:83:bb:f0:6d:89:6c:42:b2:0c:81:25:bb:9d:9a: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2E:D5:FD:E8:35:2A:8B:14:AF:A0:78:F1:AB:A3:EF:1F:C6:C8:6D X509v3 Authority Key Identifier: keyid:48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/hy7V_eg1KosUr6B48auj7x_GyG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.78.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:6d:4b:d5:03:19:c4:46:3c:6f:b9:51:bd:53:74:54:fa:d7: dc:c8:80:3d:04:82:37:50:40:cd:6c:06:81:d0:bb:d5:a2:c0: bd:c6:fd:f3:59:c1:a4:5e:d2:06:48:c7:14:cf:cf:aa:10:4b: fc:c1:3a:39:c2:7f:cc:90:52:e2:73:fd:dd:07:2b:7e:77:8b: 21:c2:21:15:b7:5c:b3:18:0c:15:73:a3:dc:6a:98:0f:49:12: b5:4a:7c:3c:d8:34:9e:6c:55:a2:16:7d:db:1c:f6:d1:a2:20: 25:e7:15:42:27:7d:f5:dc:bf:c9:6b:24:d0:f4:0b:40:d5:d2: 9d:0f:cf:a4:de:08:9a:75:56:bd:a6:8f:7b:16:70:e1:a9:4e: 4d:85:52:61:86:41:c4:50:e1:0a:15:b0:3a:77:81:f0:91:68: 0f:81:a9:f2:9d:d8:12:bf:f1:73:a0:2b:6a:37:e9:17:95:ff: 2d:b3:80:8f:6e:b4:54:f1:30:7e:3c:4f:f4:99:1f:88:12:ed: c9:a4:a8:b2:f0:43:1f:ba:e7:c6:aa:4a:e3:95:92:2d:e6:52: c5:e6:c8:94:f3:82:a5:5a:55:f1:0f:79:3b:fe:de:d4:23:f1: a6:11:c5:09:18:5d:45:71:bc:f0:ae:2e:38:c5:7a:62:6f:b0: ed:24:3c:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6jH8qnDfGFgXgzwX6ZbG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MjI1MjBkZTYxNDM3YTZjZTY1YzZlMzQ2Mjc0NzA3MDNl NjVlZDEwHhcNMjYwMTI2MTM0NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzJlZDVmZGU4MzUyYThiMTRhZmEwNzhmMWFiYTNlZjFmYzZjODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf51zT0JjNbXk44PLjg+e12BO/D8 8GNm5dzLhPOxct2zDlmK5twJXEM9fpJ/pmwfsWryEU19f7H0JZvpAOD0yzubGUni brCypXJdGs898Tnpci3LSEaRbcQW9h15LSGHQcVWiFFBGGFAAIftbbb0fXBa/Nv4 uC+rvqViY0jIrX3yBDWKVZ72HQEQoo9Lfu5uv9Tg3K1KBaQ6d/jw5HS6H5fewmZa SLgBXuCLbtlja6LBygKEXW0xuuGbaEL7GtGwAgsv3HgNpDiRL/ybzjSz2NQJzDJN PyxlcSlZw2XdTet1oSPE4IlT0b7755RL11+3g7vwbYlsQrIMgSW7nZpRywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIcu1f3oNSqLFK+gePGro+8fxshtMB8GA1UdIwQY MBaAFEgiUg3mFDemzmXG40YnRwcD5l7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0NKU0RlWVVONmJPWmNialJpZEhCd1BtWHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jODZjYzMtMzQ3OC00NDA3LTg0OTEt N2RjODczZjUyODViLzEvaHk3Vl9lZzFLb3NVcjZCNDhhdWo3eF9HeUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9jODZjYzMtMzQ3OC00NDA3LTg0OTEtN2RjODczZjUyODVi LzEvU0NKU0RlWVVONmJPWmNialJpZEhCd1BtWHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYtOMA0G CSqGSIb3DQEBCwUAA4IBAQBbbUvVAxnERjxvuVG9U3RU+tfcyIA9BII3UEDNbAaB 0LvVosC9xv3zWcGkXtIGSMcUz8+qEEv8wTo5wn/MkFLic/3dByt+d4shwiEVt1yz GAwVc6PcapgPSRK1Snw82DSebFWiFn3bHPbRoiAl5xVCJ3313L/JayTQ9AtA1dKd D8+k3giadVa9po97FnDhqU5NhVJhhkHEUOEKFbA6d4HwkWgPganyndgSv/FzoCtq N+kXlf8ts4CPbrRU8TB+PE/0mR+IEu3JpKiy8EMfuufGqkrjlZIt5lLF5siU84Kl WlXxD3k7/t7UI/GmEcUJGF1Fcbzwri44xXpib7DtJDxW -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:31 2026 by rpki-client