This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa File: yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa (raw, json) Hash identifier: vVw831MJdUfsxmZh+1qgUhTFi4CaWz4Dq9upza4tl1o= Subject key identifier: C8:74:23:23:EF:F1:FF:E3:69:FD:26:55:F3:21:DF:A4:E8:B2:BE:5A Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019B7AC94FA46F64E343A2398B5F9C993108 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211181 IP address blocks: 185.113.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4f:a4:6f:64:e3:43:a2:39:8b:5f:9c:99:31:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8742323eff1ffe369fd2655f321dfa4e8b2be5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:68:51:87:ef:ee:c8:ce:ee:4a:71:5f:7d: 61:7f:dd:86:35:f0:aa:32:15:47:ac:dc:b8:8b:77: bb:c7:ef:d8:b6:49:0c:4b:f2:0c:5d:85:be:81:ca: 6f:45:c4:c3:1e:d7:53:0e:e3:ee:af:dc:72:a6:5e: a2:f5:1e:9b:d1:ae:10:15:c5:8b:d7:15:e5:2d:43: d5:42:29:c4:ee:12:3a:c1:b5:f0:1a:46:76:b9:2b: 22:02:f6:38:72:05:fa:64:d4:fb:f0:77:8d:39:75: 55:f6:c4:cc:c6:80:6a:44:82:d7:00:dd:60:e6:c1: 95:76:9a:aa:15:d2:2e:36:3e:f8:0e:39:5f:0f:64: 95:e0:e2:df:02:ca:aa:33:97:4a:3e:8a:d5:4b:4b: 7b:fa:36:99:ed:9e:ad:16:e7:fe:fd:b6:cd:04:e8: a7:d6:3f:26:08:18:c1:18:14:a6:30:11:88:4d:d0: b3:40:73:b5:17:ac:f7:b6:36:42:58:64:26:dd:c3: 0b:d1:f8:88:2b:8a:7d:0e:a5:e4:43:ba:93:4b:f6: 30:56:6d:59:f7:c0:05:f8:96:cf:6a:76:e6:5a:e6: 82:fb:5c:d6:75:ac:d1:cc:e7:34:44:9a:98:61:90: ae:9a:b1:48:0b:89:1e:c4:a6:7b:7e:7b:22:a7:d2: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:74:23:23:EF:F1:FF:E3:69:FD:26:55:F3:21:DF:A4:E8:B2:BE:5A X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.107.0/24 Signature Algorithm: sha256WithRSAEncryption 49:a5:c4:44:5a:50:92:59:e3:3a:01:c1:42:12:e0:bb:16:59: c4:bd:26:81:51:ae:79:ea:ae:0e:dc:2a:a9:57:cd:10:fb:6f: 35:2f:6a:f5:c1:78:3b:d0:0c:4f:30:49:2f:bf:e5:0a:38:54: de:c2:0d:7d:41:af:66:74:7b:c2:1d:cc:03:fb:02:62:f8:57: a0:8c:7a:96:f5:35:e4:c8:87:4a:fa:86:c2:9a:73:44:16:26: 44:c5:dc:e6:f5:46:9a:13:3e:8a:22:f4:4d:91:2e:f3:f6:37: b7:39:44:6d:00:43:0f:df:5e:ec:d2:ac:e1:7d:cb:e3:b6:ba: b7:6d:39:20:31:88:e6:12:28:f4:c1:5a:74:75:98:e3:6d:d9: 12:fb:85:73:c8:b9:15:5f:7e:a1:03:bc:b6:1b:94:b4:29:b7: a9:a6:12:df:d1:96:1f:5e:e8:60:f8:7a:d9:40:ee:12:bf:b1: 1c:56:15:64:f1:04:5c:b8:2f:c9:d8:88:2c:cc:2d:cd:1a:78: ed:e7:f3:e4:49:be:7e:8d:ae:61:d4:50:3b:ca:75:c1:92:5b: a5:3e:3b:02:03:35:ac:1a:be:45:3f:f4:7f:84:e4:e4:22:13: ed:00:27:61:a0:bf:a9:f0:2a:05:af:b7:61:54:b2:14:07:d4: 20:be:d9:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yU+kb2TjQ6I5i1+cmTEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODc0MjMyM2VmZjFmZmUzNjlmZDI2NTVmMzIxZGZhNGU4YjJiZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyhoUYfv7sjO7kpxX31hf92GNfCq MhVHrNy4i3e7x+/YtkkMS/IMXYW+gcpvRcTDHtdTDuPur9xypl6i9R6b0a4QFcWL 1xXlLUPVQinE7hI6wbXwGkZ2uSsiAvY4cgX6ZNT78HeNOXVV9sTMxoBqRILXAN1g 5sGVdpqqFdIuNj74DjlfD2SV4OLfAsqqM5dKPorVS0t7+jaZ7Z6tFuf+/bbNBOin 1j8mCBjBGBSmMBGITdCzQHO1F6z3tjZCWGQm3cML0fiIK4p9DqXkQ7qTS/YwVm1Z 98AF+JbPanbmWuaC+1zWdazRzOc0RJqYYZCumrFIC4kexKZ7fnsip9Ja1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMh0IyPv8f/jaf0mVfMh36Tosr5aMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEveUhRakktX3hfLU5wX1NaVjh5SGZwT2l5dmxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXFrMA0G CSqGSIb3DQEBCwUAA4IBAQBJpcREWlCSWeM6AcFCEuC7FlnEvSaBUa556q4O3Cqp V80Q+281L2r1wXg70AxPMEkvv+UKOFTewg19Qa9mdHvCHcwD+wJi+FegjHqW9TXk yIdK+obCmnNEFiZExdzm9UaaEz6KIvRNkS7z9je3OURtAEMP317s0qzhfcvjtrq3 bTkgMYjmEij0wVp0dZjjbdkS+4VzyLkVX36hA7y2G5S0KbepphLf0ZYfXuhg+HrZ QO4Sv7EcVhVk8QRcuC/J2IgszC3NGnjt5/PkSb5+ja5h1FA7ynXBklulPjsCAzWs Gr5FP/R/hOTkIhPtACdhoL+p8CoFr7dhVLIUB9Qgvtns -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:50 2026 by rpki-client