This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa File: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (raw, json) Hash identifier: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q= Subject key identifier: 46:16:0F:94:1E:64:A8:85:FE:76:65:74:64:56:E4:3B:81:7D:15:00 Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8 Certificate serial: 019B775936C8098680F234CF805B567A4E30 Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.114.0/24 maxlen: 24 2001:7f8:c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:36:c8:09:86:80:f2:34:cf:80:5b:56:7a:4e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46160f941e64a885fe7665746456e43b817d1500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:b8:c8:fe:a6:b0:09:6d:5d:ef:a9:6a:bb: 88:59:ab:61:40:c5:9f:9a:8d:f0:ea:7e:d8:b3:e0: 97:f7:70:17:46:bb:83:08:e8:75:15:43:a7:05:74: e4:a9:66:fc:40:b8:a6:fd:e5:2f:69:b0:82:7a:c1: 0b:1e:7d:ab:1c:78:ef:a8:44:b9:c4:b9:9e:9d:b8: 73:67:63:0c:2f:fb:b0:61:9d:48:ea:81:92:cc:c5: 2b:75:ad:7e:37:8a:7c:bf:80:f9:8a:8e:a1:4c:59: 5e:ad:69:b4:02:a6:33:2e:07:9a:c4:c2:3e:a2:3f: 90:a2:16:31:1f:51:ce:15:5c:85:c0:9b:74:9f:70: 70:ce:be:da:dc:39:ee:f6:00:c5:6a:aa:e1:a0:16: 85:31:08:bb:81:4d:29:2a:f1:12:4d:ad:45:aa:46: 98:91:5d:81:b9:3b:a4:a6:e3:d1:4d:7d:3f:4d:96: 33:0b:b6:f8:25:27:d8:e9:25:f3:d9:e9:6e:82:55: 9c:3d:2f:49:d1:63:e4:8d:d4:5b:85:0d:c9:47:f6: a0:1f:3e:c7:32:8f:05:90:87:fc:52:d1:8e:dc:c5: 0e:6b:6b:07:54:ae:dd:c4:81:36:bc:a0:6f:a8:28: 89:93:58:66:c2:08:91:6e:65:2a:d7:0f:75:42:63: 74:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:16:0F:94:1E:64:A8:85:FE:76:65:74:64:56:E4:3B:81:7D:15:00 X509v3 Authority Key Identifier: keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.114.0/24 IPv6: 2001:7f8:c5::/48 Signature Algorithm: sha256WithRSAEncryption c6:f7:37:f0:19:f4:60:4b:c8:78:f7:62:54:91:83:a8:a7:e1: b8:82:bf:f7:04:d9:ef:3e:58:5b:97:1d:67:32:44:82:af:0b: 6a:a7:d9:8c:c4:06:26:38:26:8e:53:ad:1c:0e:11:1d:32:c8: 1c:3e:e5:77:b0:3d:81:2f:4b:0a:2b:90:0a:47:d6:94:00:0b: ac:80:14:c1:a1:0b:ba:13:ea:74:78:89:40:59:cf:c1:68:98: 38:8e:88:ba:83:58:bd:1f:24:93:8f:3d:d0:0e:18:37:79:51: fc:1e:43:bb:bf:07:01:f2:7c:83:15:3e:f9:c8:1c:46:63:01: 87:8a:6c:3b:c6:4d:95:c3:f5:0c:8b:5d:ae:28:6c:ec:ba:94: 26:de:2b:6d:0e:98:5a:d1:a6:1b:f3:29:84:78:8d:53:68:69: fc:0e:2f:48:c9:91:ce:32:c7:08:64:86:bf:31:99:31:ec:47: be:2e:b5:dc:86:f2:ec:7e:96:e0:13:5a:42:cc:c6:3d:67:7a: 91:41:5a:00:7f:39:ff:4d:d7:a0:2b:a6:88:ff:6d:de:f5:b6: 51:c8:fb:ea:20:66:5b:1a:ab:85:c4:f2:06:89:67:6e:cd:ab: 56:ac:c6:e7:c6:32:e2:0c:1b:7f:05:f1:bf:10:f6:04:47:50: af:60:55:31 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WTbICYaA8jTPgFtWek4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YjlmYzUwNGE0ZDIxNzhhZTRmNzNjODc3YzVmOTA3YmI0 NzZiZjgwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjE2MGY5NDFlNjRhODg1ZmU3NjY1NzQ2NDU2ZTQzYjgxN2QxNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD24yP6msAltXe+paruIWathQMWf mo3w6n7Ys+CX93AXRruDCOh1FUOnBXTkqWb8QLim/eUvabCCesELHn2rHHjvqES5 xLmenbhzZ2MML/uwYZ1I6oGSzMUrda1+N4p8v4D5io6hTFlerWm0AqYzLgeaxMI+ oj+QohYxH1HOFVyFwJt0n3Bwzr7a3Dnu9gDFaqrhoBaFMQi7gU0pKvESTa1FqkaY kV2BuTukpuPRTX0/TZYzC7b4JSfY6SXz2eluglWcPS9J0WPkjdRbhQ3JR/agHz7H Mo8FkIf8UtGO3MUOa2sHVK7dxIE2vKBvqCiJk1hmwgiRbmUq1w91QmN0FQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEYWD5QeZKiF/nZldGRW5DuBfRUAMB8GA1UdIwQY MBaAFLe5/FBKTSF4rk9zyHfF+Qe7R2v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDduOFVFcE5JWGl1VDNQSWQ4WDVCN3RIYV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zMjE4ODktYWJjNi00M2E4LWIyOGEt YmIyOTA2M2Y0ODgxLzEvUmhZUGxCNWtxSVgtZG1WMFpGYmtPNEY5RlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zMjE4ODktYWJjNi00M2E4LWIyOGEtYmIyOTA2M2Y0ODgx LzEvdDduOFVFcE5JWGl1VDNQSWQ4WDVCN3RIYV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQFyMA8E AgACMAkDBwAgAQf4AMUwDQYJKoZIhvcNAQELBQADggEBAMb3N/AZ9GBLyHj3YlSR g6in4biCv/cE2e8+WFuXHWcyRIKvC2qn2YzEBiY4Jo5TrRwOER0yyBw+5XewPYEv SworkApH1pQAC6yAFMGhC7oT6nR4iUBZz8FomDiOiLqDWL0fJJOPPdAOGDd5Ufwe Q7u/BwHyfIMVPvnIHEZjAYeKbDvGTZXD9QyLXa4obOy6lCbeK20OmFrRphvzKYR4 jVNoafwOL0jJkc4yxwhkhr8xmTHsR74utdyG8ux+luATWkLMxj1nepFBWgB/Of9N 16Arpoj/bd71tlHI++ogZlsaq4XE8gaJZ27Nq1asxufGMuIMG38F8b8Q9gRHUK9g VTE= -----END CERTIFICATE-----Generated at Fri Jan 9 00:57:57 2026 by rpki-client