This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/YGnN82E7AnH_j4eaF9W1W1WjZSo.roa File: YGnN82E7AnH_j4eaF9W1W1WjZSo.roa (raw, json) Hash identifier: SoIylCg6a/wt1TKL6JVP1AZFMMupreSe0oa44in2zMs= Subject key identifier: 60:69:CD:F3:61:3B:02:71:FF:8F:87:9A:17:D5:B5:5B:55:A3:65:2A Certificate issuer: /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848 Certificate serial: 019B7758CB0F042A850D67A143EA5977717F Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/YGnN82E7AnH_j4eaF9W1W1WjZSo.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214905 IP address blocks: 185.54.2.0/24 maxlen: 24 185.54.3.0/24 maxlen: 24 185.222.40.0/24 maxlen: 24 200.225.56.0/24 maxlen: 24 200.225.57.0/24 maxlen: 24 213.254.176.0/23 maxlen: 23 2a14:4ac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cb:0f:04:2a:85:0d:67:a1:43:ea:59:77:71:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6069cdf3613b0271ff8f879a17d5b55b55a3652a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:f9:ae:8f:e9:79:44:db:44:d1:18:b1:0e: a9:6a:06:67:9a:21:b7:cd:14:e6:00:02:5f:66:77: 95:91:3b:05:a2:26:9f:f4:12:6d:d8:71:07:51:db: 8c:50:32:af:16:c2:6d:16:06:5f:9a:79:e8:52:bc: b5:68:51:1f:5a:88:7b:07:44:f8:b8:f6:ac:56:a2: c5:06:9c:ef:9b:ba:6d:6e:4a:a3:fa:8e:8d:3c:6d: 0b:aa:78:2e:82:8f:8c:53:b1:ed:f2:aa:e9:2c:e8: ef:c4:c0:a0:d3:fc:c6:45:16:44:22:d9:83:1d:41: a3:4b:a7:89:08:23:66:d8:4d:ed:37:9c:ef:86:7e: 81:fa:2d:90:13:96:f5:4c:85:1d:e3:10:f3:74:1e: 2c:ea:21:2a:d2:0c:cd:b6:5d:bd:8a:0e:c6:90:a4: e7:55:05:b0:b3:50:bd:0d:a5:d8:63:cc:54:95:b0: 77:5d:a3:f9:ca:b3:a2:c3:67:f1:91:91:09:b6:e6: f5:be:77:16:da:ca:cf:11:c7:1d:68:86:01:52:3e: 93:e9:d2:4e:09:84:c8:6e:77:28:4a:58:5d:f4:98: 1f:a5:cd:e2:a2:d1:a4:af:ce:7e:0b:bc:8f:e6:38: a5:bd:9d:6a:a7:6d:ee:00:c4:6a:bb:17:34:bf:cf: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:69:CD:F3:61:3B:02:71:FF:8F:87:9A:17:D5:B5:5B:55:A3:65:2A X509v3 Authority Key Identifier: keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/YGnN82E7AnH_j4eaF9W1W1WjZSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.2.0/23 185.222.40.0/24 200.225.56.0/23 213.254.176.0/23 IPv6: 2a14:4ac0::/29 Signature Algorithm: sha256WithRSAEncryption 99:b5:ed:a0:80:04:8d:80:01:10:6e:f7:dd:11:35:fe:38:dc: f2:73:5b:77:c5:40:a3:77:80:dc:21:d5:82:f3:4b:95:fd:b0: 09:3b:33:ab:5a:0c:af:3a:38:61:ca:16:ef:21:4b:3a:fe:1b: fc:82:e5:be:af:7d:e2:f1:a6:35:44:27:e9:4f:66:bf:a5:d0: 8c:42:11:89:eb:fa:c7:f4:76:13:88:67:30:8a:4a:ef:23:78: ab:d9:8d:9f:20:ef:7e:5d:9b:05:c3:97:ed:66:a1:89:57:68: 43:62:ee:fd:a7:73:9d:c9:5a:81:9c:09:fe:53:98:38:25:a8: 7d:49:dc:48:1a:bc:1a:bc:a8:65:80:9b:cb:ec:d4:04:ae:94: ac:09:3f:17:bc:ee:d8:bf:91:0f:e9:ed:06:37:a1:e2:9b:63: b9:9f:48:a2:f3:96:0f:bc:9b:15:28:8c:13:36:8c:80:73:a0: 32:06:8d:27:24:f0:22:f7:fb:ef:55:3e:28:72:98:8f:45:a3: 7b:99:a1:4a:0a:4c:cc:f6:17:bd:79:d2:05:94:37:48:c6:97: c0:00:b7:3e:27:f7:0b:f9:a8:89:79:f9:2c:9e:a0:26:41:39: 0b:39:56:67:19:8c:b5:79:7e:dc:8f:25:05:36:0f:48:2c:0c: 8c:33:3c:3b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3WMsPBCqFDWehQ+pZd3F/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDZlYmVhNmU2ZWE5ZTYwMDZhODEzNDRkMTE2M2ZiZWM0 ZmE4NDgwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDY5Y2RmMzYxM2IwMjcxZmY4Zjg3OWExN2Q1YjU1YjU1YTM2NTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTb5ro/peUTbRNEYsQ6pagZnmiG3 zRTmAAJfZneVkTsFoiaf9BJt2HEHUduMUDKvFsJtFgZfmnnoUry1aFEfWoh7B0T4 uPasVqLFBpzvm7ptbkqj+o6NPG0Lqngugo+MU7Ht8qrpLOjvxMCg0/zGRRZEItmD HUGjS6eJCCNm2E3tN5zvhn6B+i2QE5b1TIUd4xDzdB4s6iEq0gzNtl29ig7GkKTn VQWws1C9DaXYY8xUlbB3XaP5yrOiw2fxkZEJtub1vncW2srPEccdaIYBUj6T6dJO CYTIbncoSlhd9Jgfpc3iotGkr85+C7yP5jilvZ1qp23uAMRquxc0v88B4wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFGBpzfNhOwJx/4+HmhfVtVtVo2UqMB8GA1UdIwQY MBaAFEbW6+pubqnmAGqBNE0RY/vsT6hIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRicjZtNXVxZVlBYW9FMFRSRmotLXhQcUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xNTU0MWQtYTdiYS00NzEwLWE1Y2Yt OTY1Y2MyMDhlZTQwLzEvWUduTjgyRTdBbkhfajRlYUY5VzFXMVdqWlNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xNTU0MWQtYTdiYS00NzEwLWE1Y2YtOTY1Y2MyMDhlZTQw LzEvUnRicjZtNXVxZVlBYW9FMFRSRmotLXhQcUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBuTYCAwQA ud4oAwQByOE4AwQB1f6wMA0EAgACMAcDBQMqFErAMA0GCSqGSIb3DQEBCwUAA4IB AQCZte2ggASNgAEQbvfdETX+ONzyc1t3xUCjd4DcIdWC80uV/bAJOzOrWgyvOjhh yhbvIUs6/hv8guW+r33i8aY1RCfpT2a/pdCMQhGJ6/rH9HYTiGcwikrvI3ir2Y2f IO9+XZsFw5ftZqGJV2hDYu79p3OdyVqBnAn+U5g4Jah9SdxIGrwavKhlgJvL7NQE rpSsCT8XvO7Yv5EP6e0GN6Him2O5n0ii85YPvJsVKIwTNoyAc6AyBo0nJPAi9/vv VT4ocpiPRaN7maFKCkzM9he9edIFlDdIxpfAALc+J/cL+aiJefksnqAmQTkLOVZn GYy1eX7cjyUFNg9ILAyMMzw7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:34 2026 by rpki-client