This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/1rycSUcTdaDk5pB1L_oKODCIzyk.roa File: 1rycSUcTdaDk5pB1L_oKODCIzyk.roa (raw, json) Hash identifier: lY+q81hPBQAO0hJH6+2LuVbPAelcZFxt/Ngf0xBiC5g= Subject key identifier: D6:BC:9C:49:47:13:75:A0:E4:E6:90:75:2F:FA:0A:38:30:88:CF:29 Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa Certificate serial: 019B797E90987FCDECD354BF81FBB58D9C1F Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/1rycSUcTdaDk5pB1L_oKODCIzyk.roa Signing time: Thu 01 Jan 2026 12:18:16 +0000 ROA not before: Thu 01 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205002 IP address blocks: 185.233.20.0/22 maxlen: 32 2a0c:cf00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:90:98:7f:cd:ec:d3:54:bf:81:fb:b5:8d:9c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa Validity Not Before: Jan 1 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6bc9c49471375a0e4e690752ffa0a383088cf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:48:55:7e:b6:1a:6c:49:94:a4:28:97:84: e1:55:43:a7:71:0e:5d:8f:ac:61:8f:a9:97:27:79: bd:16:b9:54:b3:53:d3:ba:c3:77:01:aa:cc:46:67: be:bd:21:18:20:88:73:0f:1a:ff:b8:20:7b:b7:ea: 92:71:b2:df:fa:8a:cc:ae:c3:7d:5e:6e:77:44:6f: fb:99:99:2d:39:72:53:57:8a:af:8e:13:ac:b2:b1: 5c:ee:2f:a8:ec:c9:ec:c0:97:1a:6a:8d:44:ef:24: f3:85:0c:01:8f:4f:31:29:aa:3c:05:86:9b:03:14: 6a:78:7b:0e:33:75:95:1c:8a:a2:6c:41:67:7b:c4: 3c:a5:e0:15:f5:cb:b7:d7:e2:17:dc:ad:63:24:31: a2:51:5a:3d:50:85:7b:35:15:7e:39:3d:ae:19:44: 73:23:3e:21:e3:f1:31:c8:8e:12:fe:e7:57:e8:b4: c9:4d:d6:83:6c:d0:94:47:71:f0:a6:12:d2:84:9c: 46:26:ec:71:59:bd:1a:52:74:13:3a:3f:af:a5:c4: 53:4e:a8:38:72:31:f5:9f:c3:ae:8c:fb:1f:af:e3: 88:20:bb:02:36:6a:ad:87:f9:db:ba:55:99:99:67: 98:9d:51:1d:34:3a:2c:e7:80:50:25:94:bd:dc:f4: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BC:9C:49:47:13:75:A0:E4:E6:90:75:2F:FA:0A:38:30:88:CF:29 X509v3 Authority Key Identifier: keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/1rycSUcTdaDk5pB1L_oKODCIzyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.20.0/22 IPv6: 2a0c:cf00::/29 Signature Algorithm: sha256WithRSAEncryption 83:04:82:52:f5:9d:af:05:8c:77:74:f4:88:49:3d:40:1e:c1: eb:f2:8b:18:c1:e5:ff:8c:f2:30:46:99:58:a3:f4:65:c4:1b: d9:65:70:d7:2a:ac:43:2e:71:cd:04:64:0d:8a:38:9f:64:70: 71:22:ff:6c:dc:ca:7a:18:fb:15:cf:a8:38:50:20:76:d3:34: ff:29:4d:50:bb:35:fd:28:5c:4e:6a:1e:96:96:85:cb:f4:c2: 6f:0d:81:cd:e9:c4:70:17:fb:09:7d:58:88:aa:f7:29:aa:68: d9:e7:44:bb:33:bf:7a:30:92:36:00:b1:c1:70:6c:b2:8a:2e: da:78:35:dd:94:a1:e1:38:e1:36:5b:a4:1a:cb:04:3f:bc:31: 6a:68:d8:a9:b2:29:79:9c:76:db:6c:01:c0:ce:78:55:27:32: f4:14:0c:06:a1:4f:a1:7e:ed:a5:c8:96:77:d3:cf:ae:ab:e8: ff:44:ae:ea:d2:d2:c9:cf:5c:59:3f:aa:91:ab:3b:8f:1c:95: ae:e7:38:6d:1f:25:d8:6e:7d:e8:39:04:cc:a8:84:8e:fe:7a: 7d:81:58:3b:03:6b:d0:21:ab:c6:66:fd:6e:b0:c3:c8:8c:03: 71:c8:14:01:19:65:c2:ef:cb:86:28:22:3f:53:c0:44:23:56: a4:f5:6c:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fpCYf83s01S/gfu1jZwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGEwZGQyZjk2NGU4NjBmNmJhNGMxNzYxMTJhNWQ3MTJi YTkzYWEwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmJjOWM0OTQ3MTM3NWEwZTRlNjkwNzUyZmZhMGEzODMwODhjZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTRIVX62GmxJlKQol4ThVUOncQ5d j6xhj6mXJ3m9FrlUs1PTusN3AarMRme+vSEYIIhzDxr/uCB7t+qScbLf+orMrsN9 Xm53RG/7mZktOXJTV4qvjhOssrFc7i+o7MnswJcaao1E7yTzhQwBj08xKao8BYab AxRqeHsOM3WVHIqibEFne8Q8peAV9cu31+IX3K1jJDGiUVo9UIV7NRV+OT2uGURz Iz4h4/ExyI4S/udX6LTJTdaDbNCUR3HwphLShJxGJuxxWb0aUnQTOj+vpcRTTqg4 cjH1n8OujPsfr+OIILsCNmqth/nbulWZmWeYnVEdNDos54BQJZS93PRroQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNa8nElHE3Wg5OaQdS/6CjgwiM8pMB8GA1UdIwQY MBaAFF8KDdL5ZOhg9rpMF2ESpdcSupOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mZTNiNTYtOTRjYS00Mjk1LWIwY2Mt MTBiZWQyN2Q3NjZlLzEvMXJ5Y1NVY1RkYURrNXBCMUxfb0tPRENJenlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mZTNiNTYtOTRjYS00Mjk1LWIwY2MtMTBiZWQyN2Q3NjZl LzEvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuekUMA0E AgACMAcDBQMqDM8AMA0GCSqGSIb3DQEBCwUAA4IBAQCDBIJS9Z2vBYx3dPSIST1A HsHr8osYweX/jPIwRplYo/RlxBvZZXDXKqxDLnHNBGQNijifZHBxIv9s3Mp6GPsV z6g4UCB20zT/KU1QuzX9KFxOah6WloXL9MJvDYHN6cRwF/sJfViIqvcpqmjZ50S7 M796MJI2ALHBcGyyii7aeDXdlKHhOOE2W6QaywQ/vDFqaNipsil5nHbbbAHAznhV JzL0FAwGoU+hfu2lyJZ308+uq+j/RK7q0tLJz1xZP6qRqzuPHJWu5zhtHyXYbn3o OQTMqISO/np9gVg7A2vQIavGZv1usMPIjANxyBQBGWXC78uGKCI/U8BEI1ak9Wyx -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:35 2026 by rpki-client