This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/yPiPPvTDhwZpfZZqyiCNog-UC6w.roa File: yPiPPvTDhwZpfZZqyiCNog-UC6w.roa (raw, json) Hash identifier: Aauh6Z50oyHUjqzWWaic2UPSoEOLcQVj5iORzcl99Gk= Subject key identifier: C8:F8:8F:3E:F4:C3:87:06:69:7D:96:6A:CA:20:8D:A2:0F:94:0B:AC Certificate issuer: /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14 Certificate serial: 019B7C12E19C3E5E7EC9C36C222041CB9760 Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/yPiPPvTDhwZpfZZqyiCNog-UC6w.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201533 IP address blocks: 185.71.232.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e1:9c:3e:5e:7e:c9:c3:6c:22:20:41:cb:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8f88f3ef4c38706697d966aca208da20f940bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ce:4b:b1:cb:6d:11:23:13:01:36:a0:33:dc: ae:63:64:f2:58:e6:cc:5a:68:15:22:8a:b0:55:8b: e3:37:e4:7f:b3:c6:e4:6d:8c:a6:b7:f8:b8:3a:e6: 75:1a:4c:f1:94:1b:c1:9a:24:5c:82:aa:f5:30:8c: d4:92:94:df:9c:78:0a:08:a4:ca:57:31:1c:e0:ca: bc:ab:71:08:79:3b:ff:8c:2f:f1:b7:79:c8:df:6c: 59:69:16:c2:38:1d:c3:7d:6c:cf:b1:47:bd:a0:9f: 53:ed:eb:a4:0a:d9:e8:dd:17:e5:42:b5:93:84:6c: 07:b8:ee:41:bd:65:80:b8:ca:75:62:76:68:3a:a9: d2:07:13:71:83:fb:56:11:e0:08:73:de:7b:2d:b2: 09:9c:6f:cd:f2:e8:1b:c7:90:27:0a:50:29:48:1d: 1b:ca:a1:5d:e8:f6:1c:e8:40:c3:80:d7:8c:be:71: 1e:cf:3e:9e:ba:a1:4e:d9:ab:59:97:59:73:08:17: 8f:86:03:bc:1a:86:c9:38:ea:4c:04:78:d1:dd:cf: 45:79:b1:88:b7:41:61:c7:00:d1:3f:5a:8a:ca:eb: 0a:2f:14:38:09:8e:74:5c:38:13:99:ad:22:cb:6b: c4:d3:be:2e:39:45:99:a8:9a:1d:b9:e2:91:e9:bf: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F8:8F:3E:F4:C3:87:06:69:7D:96:6A:CA:20:8D:A2:0F:94:0B:AC X509v3 Authority Key Identifier: keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/yPiPPvTDhwZpfZZqyiCNog-UC6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.232.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:98:e6:e5:c9:a6:27:9d:a3:7a:bb:ab:29:32:7f:1e:63:90: b1:a0:83:b5:00:80:f9:af:2f:26:f4:e2:54:c5:31:44:d2:a8: 94:c7:b5:8f:a7:fb:29:78:7a:ce:5a:4f:e4:a0:dd:39:b4:ee: 8e:81:79:8e:ac:5e:61:3c:b0:65:5e:5c:f7:e1:9d:97:93:b3: 0e:65:00:95:ed:89:74:3d:05:9e:22:ea:5d:75:61:fc:5c:46: fc:80:a9:2f:96:df:0d:e7:34:ac:77:57:9c:d6:1d:e0:36:b1: de:df:00:ec:b5:60:11:02:ab:d3:2b:60:56:03:55:50:cf:19: 89:f4:04:1c:9e:0d:93:43:c4:38:5c:4f:3a:62:e4:da:21:cd: 30:a7:14:bb:a3:dc:d5:bd:d6:db:d0:a1:81:05:60:18:de:3b: 10:0b:57:89:da:60:dc:1b:58:06:96:e1:f4:02:01:d6:a8:46: f7:03:61:47:d2:6d:7a:14:6d:8d:54:23:96:ab:ea:18:af:04: 4c:44:46:c1:2f:94:e5:7e:00:15:ba:cf:6d:34:41:37:af:14: a3:b5:fd:61:17:6f:16:16:b9:25:74:d1:40:6c:21:bd:85:26: d6:87:5f:c2:fd:fd:ba:22:bf:e2:7c:ee:53:9d:fe:82:1f:5c: ee:af:97:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuGcPl5+ycNsIiBBy5dgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2IzZmIzYmVhOGNjOGUzNmUzZGE3ZDljNDcwNDliZmM2 ZmZiMTQwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGY4OGYzZWY0YzM4NzA2Njk3ZDk2NmFjYTIwOGRhMjBmOTQwYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c5LscttESMTATagM9yuY2TyWObM WmgVIoqwVYvjN+R/s8bkbYymt/i4OuZ1GkzxlBvBmiRcgqr1MIzUkpTfnHgKCKTK VzEc4Mq8q3EIeTv/jC/xt3nI32xZaRbCOB3DfWzPsUe9oJ9T7eukCtno3RflQrWT hGwHuO5BvWWAuMp1YnZoOqnSBxNxg/tWEeAIc957LbIJnG/N8ugbx5AnClApSB0b yqFd6PYc6EDDgNeMvnEezz6euqFO2atZl1lzCBePhgO8GobJOOpMBHjR3c9FebGI t0FhxwDRP1qKyusKLxQ4CY50XDgTma0iy2vE074uOUWZqJodueKR6b8jXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMj4jz70w4cGaX2WasogjaIPlAusMB8GA1UdIwQY MBaAFG7LP7O+qMyONuPafZxHBJv8b/sUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUt YTM3MGY0YmEyZDJiLzEveVBpUFB2VERod1pwZlpacXlpQ05vZy1VQzZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUtYTM3MGY0YmEyZDJi LzEvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUfoMA0G CSqGSIb3DQEBCwUAA4IBAQBemOblyaYnnaN6u6spMn8eY5CxoIO1AID5ry8m9OJU xTFE0qiUx7WPp/speHrOWk/koN05tO6OgXmOrF5hPLBlXlz34Z2Xk7MOZQCV7Yl0 PQWeIupddWH8XEb8gKkvlt8N5zSsd1ec1h3gNrHe3wDstWARAqvTK2BWA1VQzxmJ 9AQcng2TQ8Q4XE86YuTaIc0wpxS7o9zVvdbb0KGBBWAY3jsQC1eJ2mDcG1gGluH0 AgHWqEb3A2FH0m16FG2NVCOWq+oYrwRMREbBL5TlfgAVus9tNEE3rxSjtf1hF28W FrkldNFAbCG9hSbWh1/C/f26Ir/ifO5Tnf6CH1zur5cf -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:01 2026 by rpki-client