This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa File: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (raw, json) Hash identifier: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU= Subject key identifier: C8:81:4B:97:83:15:18:5F:66:8E:92:8D:1C:2C:DE:40:6B:03:D9:0A Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05 Certificate serial: 019B7C134CEF15ADFFE76D2101C0AAB69188 Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.137.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4c:ef:15:ad:ff:e7:6d:21:01:c0:aa:b6:91:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8814b978315185f668e928d1c2cde406b03d90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:da:43:46:db:6a:cc:78:1c:1e:f5:0c:18: 25:c5:db:fc:95:84:0f:0d:e2:1d:d6:c3:cd:2b:fd: 76:73:64:dd:5b:16:3b:1a:7e:66:63:de:d1:91:33: 2f:9c:bd:6d:3f:42:c8:0f:19:41:f2:8d:1d:1e:c7: d6:69:bf:1d:df:af:f3:fc:53:ab:8d:c4:6e:84:9a: 0f:fb:e0:49:67:01:66:1f:57:14:ba:ec:63:cd:ea: 61:7a:ad:7c:68:f5:d6:07:9b:cf:d9:38:cd:8f:4e: 5f:3d:eb:e3:06:64:47:38:69:3d:47:eb:10:5c:11: 36:c8:88:75:4b:b9:de:82:f8:a5:d7:41:b9:2b:0b: ab:c9:17:13:c0:cf:42:72:15:da:54:44:eb:83:c0: 73:45:a9:d0:85:4c:7e:16:04:a2:dc:cf:60:e9:b9: da:72:14:ca:23:c0:28:ff:c7:6d:01:6d:69:c9:a2: fd:b8:4a:25:eb:a0:be:56:d4:66:3a:8e:8e:38:85: 7d:ce:57:5b:4d:fe:69:48:c5:2a:75:1f:fe:d8:06: e1:6c:a1:e2:87:fb:3c:3b:6b:43:9e:c6:cc:bd:56: 84:d7:d8:16:d6:7a:64:aa:ba:73:96:52:48:10:38: eb:c2:f8:4c:f3:48:54:72:93:7f:ef:17:da:1d:c2: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:81:4B:97:83:15:18:5F:66:8E:92:8D:1C:2C:DE:40:6B:03:D9:0A X509v3 Authority Key Identifier: keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.166.0/24 Signature Algorithm: sha256WithRSAEncryption 89:02:eb:4b:41:14:04:86:8e:9f:43:aa:fb:4d:c2:6e:9b:4c: 4d:24:db:56:28:ab:b7:89:cb:bc:92:6f:7c:da:9a:de:b6:38: c4:9f:7d:55:2c:ea:fb:78:da:a1:53:88:74:c9:d4:75:fb:f0: 38:ae:df:47:f1:55:fe:53:df:04:4b:62:fe:9e:7c:27:08:95: c2:75:40:d4:3a:c1:9e:b0:71:24:e3:6f:f5:1d:43:cd:7a:7e: c1:a6:fa:b0:fe:95:2c:0e:e6:6a:d0:c0:ef:a1:e3:97:72:25: 3c:d6:28:27:c6:1d:1a:db:b7:73:04:f3:eb:cc:c5:f7:6a:87: b2:fd:d3:e9:a3:b7:06:dd:45:08:2c:a2:d0:e7:97:61:9f:9c: fb:16:8e:41:b7:e6:3a:70:39:2b:1a:20:bd:f0:6a:92:37:a5: 30:ed:43:0d:49:f4:da:04:81:10:e6:61:4f:73:35:b4:da:67: 33:3f:f5:86:3e:56:4e:df:8f:0b:a7:0c:11:a5:e7:8d:90:55: 58:11:8f:03:c1:4f:03:43:9f:90:17:53:01:f7:1b:cc:9d:d4: 53:52:9d:ff:82:08:0d:12:a7:b3:d4:53:49:81:78:af:7c:a5: 1d:d1:a2:a4:ac:55:7c:5d:80:4c:c8:6c:18:72:3a:d1:93:bc: e7:e9:0a:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0zvFa3/520hAcCqtpGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MWUyNTU0ZTUyMDM3NzgxZDEwN2M4ZjgzMTljOTNlNTk5 ODZmMDUwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODgxNGI5NzgzMTUxODVmNjY4ZTkyOGQxYzJjZGU0MDZiMDNkOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiDaQ0bbasx4HB71DBglxdv8lYQP DeId1sPNK/12c2TdWxY7Gn5mY97RkTMvnL1tP0LIDxlB8o0dHsfWab8d36/z/FOr jcRuhJoP++BJZwFmH1cUuuxjzepheq18aPXWB5vP2TjNj05fPevjBmRHOGk9R+sQ XBE2yIh1S7negvil10G5KwuryRcTwM9CchXaVETrg8BzRanQhUx+FgSi3M9g6bna chTKI8Ao/8dtAW1pyaL9uEol66C+VtRmOo6OOIV9zldbTf5pSMUqdR/+2AbhbKHi h/s8O2tDnsbMvVaE19gW1npkqrpzllJIEDjrwvhM80hUcpN/7xfaHcLQcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMiBS5eDFRhfZo6SjRws3kBrA9kKMB8GA1UdIwQY MBaAFAYeJVTlIDd4HRB8j4MZyT5ZmG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2Ut MjliMDM4MDg0YWE2LzEveUlGTGw0TVZHRjltanBLTkhDemVRR3NEMlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2UtMjliMDM4MDg0YWE2 LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYmmMA0G CSqGSIb3DQEBCwUAA4IBAQCJAutLQRQEho6fQ6r7TcJum0xNJNtWKKu3icu8km98 2pretjjEn31VLOr7eNqhU4h0ydR1+/A4rt9H8VX+U98ES2L+nnwnCJXCdUDUOsGe sHEk42/1HUPNen7Bpvqw/pUsDuZq0MDvoeOXciU81ignxh0a27dzBPPrzMX3aoey /dPpo7cG3UUILKLQ55dhn5z7Fo5Bt+Y6cDkrGiC98GqSN6Uw7UMNSfTaBIEQ5mFP czW02mczP/WGPlZO348LpwwRpeeNkFVYEY8DwU8DQ5+QF1MB9xvMndRTUp3/gggN Eqez1FNJgXivfKUd0aKkrFV8XYBMyGwYcjrRk7zn6Qof -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:22 2026 by rpki-client