This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/yHUYSIyfWKRysijOAfP1jTV_GQU.roa File: yHUYSIyfWKRysijOAfP1jTV_GQU.roa (raw, json) Hash identifier: v5aHjqlckDiplRobT+81sNkFSXpShwzznCtDci1fpdw= Subject key identifier: C8:75:18:48:8C:9F:58:A4:72:B2:28:CE:01:F3:F5:8D:35:7F:19:05 Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 019B9D32DAD402F8C1A28C5F1F6C1B25DBCE Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/yHUYSIyfWKRysijOAfP1jTV_GQU.roa Signing time: Thu 08 Jan 2026 10:41:54 +0000 ROA not before: Thu 08 Jan 2026 10:41:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 185.155.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:32:da:d4:02:f8:c1:a2:8c:5f:1f:6c:1b:25:db:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Jan 8 10:41:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c87518488c9f58a472b228ce01f3f58d357f1905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:65:6d:90:49:88:66:b7:c4:62:cc:d2:3f:26: 0d:70:ff:77:30:43:b6:dd:14:5f:d8:df:24:7d:39: 7f:00:c3:f2:5c:f2:85:65:27:ce:a7:8d:b4:ba:22: 70:71:34:a0:17:da:c7:2a:45:21:3c:d1:82:91:1c: 47:26:99:77:1c:21:52:4b:2c:07:df:e8:1b:d5:23: 10:82:67:54:0e:2e:54:da:d7:09:c4:03:fe:ec:d1: 5e:db:17:b0:13:1f:72:be:ec:a9:ee:e8:b7:b9:36: 90:ac:67:3c:fa:f7:90:ae:44:65:ed:9a:74:46:e6: 73:93:cd:d4:b1:c9:c7:a7:6d:94:9e:25:69:b2:0b: 5b:87:c2:7d:06:cd:8d:18:98:49:e0:35:c6:9d:70: 16:3f:b7:ae:6d:a8:36:60:6a:9f:e6:cb:22:7c:ac: ec:dc:7a:72:eb:15:df:1a:4b:3d:64:1a:f1:3c:ba: e8:41:b4:15:f0:f2:8f:07:e0:88:d3:80:1d:7c:78: 0c:60:38:12:69:fc:f0:9a:8a:b8:4c:e4:dc:64:e7: aa:05:bc:ea:7d:9e:78:84:94:5d:dd:34:23:1c:bc: 95:09:82:06:e6:e8:a1:2c:e9:58:08:04:44:d2:9a: db:97:8f:ff:2e:8f:2c:be:92:55:24:54:fa:f7:ee: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:75:18:48:8C:9F:58:A4:72:B2:28:CE:01:F3:F5:8D:35:7F:19:05 X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/yHUYSIyfWKRysijOAfP1jTV_GQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.53.0/24 Signature Algorithm: sha256WithRSAEncryption 45:92:13:5d:46:43:b4:4d:98:6e:31:b9:42:00:ac:ee:79:20: 69:17:4a:87:df:20:b0:59:d0:83:ff:e4:3b:79:11:01:85:6a: ec:37:c8:56:1b:d3:dc:0e:d0:ae:e6:51:6d:0b:f0:99:2d:4e: 6f:5c:f9:6d:4c:01:5e:22:fc:4c:96:a7:4c:55:8a:ed:98:b1: 96:ae:54:67:ad:08:5d:f8:fb:7c:b1:43:5c:67:5a:88:ff:79: 80:7c:c6:16:89:62:ce:47:04:39:86:d2:c8:f3:69:c4:c2:67: 89:db:9d:f1:35:fa:ea:1c:2e:31:81:80:4c:61:cd:91:48:ef: 40:10:f2:6d:b7:4d:02:06:ad:9c:35:5f:78:2f:42:25:7d:38: aa:79:74:8d:23:b4:94:8c:e0:2e:37:35:f0:96:b1:52:78:9f: 28:80:cd:36:6b:0b:d6:84:6c:19:f6:71:a4:c2:e3:1f:13:87: d1:cb:b8:79:a9:2d:db:48:34:cd:67:cd:09:b4:2e:ab:3d:d1: ab:08:32:68:e2:31:81:8e:9f:b1:de:85:24:fe:c3:89:40:cb: 7e:7a:89:1f:2b:77:26:3b:57:74:fa:f2:95:23:e0:5e:cf:a1: e7:1e:61:32:37:14:23:44:8e:a8:0c:36:43:09:43:2a:bf:b7: 16:ca:09:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZudMtrUAvjBooxfH2wbJdvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjYwMTA4MTA0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODc1MTg0ODhjOWY1OGE0NzJiMjI4Y2UwMWYzZjU4ZDM1N2YxOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGVtkEmIZrfEYszSPyYNcP93MEO2 3RRf2N8kfTl/AMPyXPKFZSfOp420uiJwcTSgF9rHKkUhPNGCkRxHJpl3HCFSSywH 3+gb1SMQgmdUDi5U2tcJxAP+7NFe2xewEx9yvuyp7ui3uTaQrGc8+veQrkRl7Zp0 RuZzk83UscnHp22UniVpsgtbh8J9Bs2NGJhJ4DXGnXAWP7eubag2YGqf5ssifKzs 3Hpy6xXfGks9ZBrxPLroQbQV8PKPB+CI04AdfHgMYDgSafzwmoq4TOTcZOeqBbzq fZ54hJRd3TQjHLyVCYIG5uihLOlYCARE0prbl4//Lo8svpJVJFT69+5cxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMh1GEiMn1ikcrIozgHz9Y01fxkFMB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEveUhVWVNJeWZXS1J5c2lqT0FmUDFqVFZfR1FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZs1MA0G CSqGSIb3DQEBCwUAA4IBAQBFkhNdRkO0TZhuMblCAKzueSBpF0qH3yCwWdCD/+Q7 eREBhWrsN8hWG9PcDtCu5lFtC/CZLU5vXPltTAFeIvxMlqdMVYrtmLGWrlRnrQhd +Pt8sUNcZ1qI/3mAfMYWiWLORwQ5htLI82nEwmeJ253xNfrqHC4xgYBMYc2RSO9A EPJtt00CBq2cNV94L0IlfTiqeXSNI7SUjOAuNzXwlrFSeJ8ogM02awvWhGwZ9nGk wuMfE4fRy7h5qS3bSDTNZ80JtC6rPdGrCDJo4jGBjp+x3oUk/sOJQMt+eokfK3cm O1d0+vKVI+Bez6HnHmEyNxQjRI6oDDZDCUMqv7cWygnN -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:32 2026 by rpki-client