This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/y4ozBsAhD0SXzDXTnSLIwi05yzY.roa File: y4ozBsAhD0SXzDXTnSLIwi05yzY.roa (raw, json) Hash identifier: UpquKmMoHnebuH46QTJH9ZI2B7xELceGE768LObgLRg= Subject key identifier: CB:8A:33:06:C0:21:0F:44:97:CC:35:D3:9D:22:C8:C2:2D:39:CB:36 Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b Certificate serial: 019B7DCAF0E20924578FED5F4977E5EFEF14 Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/y4ozBsAhD0SXzDXTnSLIwi05yzY.roa Signing time: Fri 02 Jan 2026 08:20:10 +0000 ROA not before: Fri 02 Jan 2026 08:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50794 IP address blocks: 37.0.24.0/21 maxlen: 21 178.21.240.0/21 maxlen: 21 2a04:7e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 20:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f0:e2:09:24:57:8f:ed:5f:49:77:e5:ef:ef:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b Validity Not Before: Jan 2 08:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb8a3306c0210f4497cc35d39d22c8c22d39cb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:65:5e:a2:3f:6f:25:ad:24:d5:f4:ce:2d: 6d:72:88:74:bb:b0:06:0b:be:1e:1d:13:b3:6b:6c: 54:3e:da:d3:b3:57:86:9e:90:73:de:04:4f:a8:a4: eb:ed:4f:f9:ba:34:3a:cc:e3:15:08:bf:6b:dc:a6: a9:ad:aa:72:e5:05:2b:6b:32:d9:a8:e0:ef:44:af: 3d:c4:27:f5:ab:4e:0a:3f:79:14:2a:04:77:0d:cd: b7:c2:14:20:b6:3b:b0:df:72:99:fb:18:0c:83:f3: 6f:73:57:37:a5:d2:38:b9:75:b9:23:66:65:f2:f5: c7:72:7f:09:e9:4c:ab:cb:4a:bb:9a:16:a6:f8:2e: 47:24:ba:99:41:60:6d:4b:f6:37:a0:3c:94:ed:b1: 0c:31:a3:f6:f8:a1:a3:df:d1:35:38:40:cb:74:7f: a7:dd:69:3a:ef:1d:bb:ec:e5:3a:22:ea:96:0e:7b: ea:c6:28:f3:cd:1c:e2:b3:73:69:b0:ff:13:68:3a: 94:23:4f:b5:27:30:9d:2f:30:59:f1:75:ce:57:5e: ad:9e:a7:a5:54:c7:3c:cd:81:9b:ee:40:2b:8f:4c: 96:1e:1d:cb:3c:87:ee:d0:af:c1:88:8e:1f:68:f0: af:41:42:a4:05:c5:7d:74:5a:9c:c3:a1:f3:09:24: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8A:33:06:C0:21:0F:44:97:CC:35:D3:9D:22:C8:C2:2D:39:CB:36 X509v3 Authority Key Identifier: keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/y4ozBsAhD0SXzDXTnSLIwi05yzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.24.0/21 178.21.240.0/21 IPv6: 2a04:7e80::/29 Signature Algorithm: sha256WithRSAEncryption 6f:f1:c1:a0:6d:05:6c:17:b9:c9:d9:57:8a:1d:16:3e:42:94: 0d:c6:fd:78:8d:71:0b:a1:ca:a0:d8:38:ea:c5:09:51:47:28: 70:b3:78:c0:73:ab:c6:7f:82:52:cd:15:87:68:8e:4e:03:4b: f1:78:76:b7:43:26:1a:37:13:9a:76:92:e6:f3:4b:2b:f4:df: 7c:95:ac:7a:80:69:3d:2a:b9:50:5c:54:e7:57:27:77:01:15: dc:91:cb:4c:9b:c2:18:7a:24:cf:0a:55:96:f7:1f:31:d6:b3: df:e1:03:b6:48:7f:13:8f:1f:11:d6:29:35:57:41:9a:40:4d: 24:16:fb:6e:26:02:4b:be:b4:96:5d:5d:6b:e6:cc:76:ad:7a: cc:f2:86:4f:10:cd:2f:a1:8d:c4:6b:8b:f0:21:26:4a:51:98: 07:ef:7f:4c:8a:2b:c8:fe:44:a3:b6:8c:80:89:20:e9:8e:03: a2:8d:c2:1f:e4:2a:f1:c2:cf:7d:41:e2:fe:66:fd:0a:2e:54: 8c:cc:6b:5e:fc:64:22:c4:6e:3c:82:77:80:1d:09:f9:38:1c: 45:0e:dd:bd:40:0a:6c:e7:4e:58:ca:0b:ff:48:8c:72:97:00: 5e:00:af:0d:5c:54:b7:1a:c6:52:13:ad:e6:8c:90:5e:45:f9: 6a:be:b5:dc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yvDiCSRXj+1fSXfl7+8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OGFkNTQ2ZjFhMGVmOGNmNzVjOTJhNzQ4YmQ1Yzg2MzYy ZTIwOWIwHhcNMjYwMTAyMDgyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjhhMzMwNmMwMjEwZjQ0OTdjYzM1ZDM5ZDIyYzhjMjJkMzljYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpplXqI/byWtJNX0zi1tcoh0u7AG C74eHROza2xUPtrTs1eGnpBz3gRPqKTr7U/5ujQ6zOMVCL9r3Kaprapy5QUrazLZ qODvRK89xCf1q04KP3kUKgR3Dc23whQgtjuw33KZ+xgMg/Nvc1c3pdI4uXW5I2Zl 8vXHcn8J6Uyry0q7mham+C5HJLqZQWBtS/Y3oDyU7bEMMaP2+KGj39E1OEDLdH+n 3Wk67x277OU6IuqWDnvqxijzzRzis3NpsP8TaDqUI0+1JzCdLzBZ8XXOV16tnqel VMc8zYGb7kArj0yWHh3LPIfu0K/BiI4faPCvQUKkBcV9dFqcw6HzCSRdtwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMuKMwbAIQ9El8w1050iyMItOcs2MB8GA1UdIwQY MBaAFKiK1UbxoO+M91ySp0i9XIY2LiCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEt MThlYjc3OWE2NDk3LzEveTRvekJzQWhEMFNYekRYVG5TTEl3aTA1eXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEtMThlYjc3OWE2NDk3 LzEvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJQAYAwQD shXwMA0EAgACMAcDBQMqBH6AMA0GCSqGSIb3DQEBCwUAA4IBAQBv8cGgbQVsF7nJ 2VeKHRY+QpQNxv14jXELocqg2DjqxQlRRyhws3jAc6vGf4JSzRWHaI5OA0vxeHa3 QyYaNxOadpLm80sr9N98lax6gGk9KrlQXFTnVyd3ARXckctMm8IYeiTPClWW9x8x 1rPf4QO2SH8Tjx8R1ik1V0GaQE0kFvtuJgJLvrSWXV1r5sx2rXrM8oZPEM0voY3E a4vwISZKUZgH739MiivI/kSjtoyAiSDpjgOijcIf5Crxws99QeL+Zv0KLlSMzGte /GQixG48gneAHQn5OBxFDt29QAps505Yygv/SIxylwBeAK8NXFS3GsZSE63mjJBe RflqvrXc -----END CERTIFICATE-----Generated at Tue Feb 3 02:09:04 2026 by rpki-client