This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa File: nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa (raw, json) Hash identifier: E+DEgJCHAZ1XErRECJ9yeRTJenD3kJR7V8Lsa73CEVk= Subject key identifier: 9F:22:5D:3F:2E:41:B3:1A:EF:F5:19:1E:18:3B:3A:86:1D:77:78:4C Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573 Certificate serial: 019B7C124C8DFB62120B827C6876DC647007 Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa Signing time: Fri 02 Jan 2026 00:18:52 +0000 ROA not before: Fri 02 Jan 2026 00:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.141.193.0/24 maxlen: 24 2a04:ac0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4c:8d:fb:62:12:0b:82:7c:68:76:dc:64:70:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573 Validity Not Before: Jan 2 00:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f225d3f2e41b31aeff5191e183b3a861d77784c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:7f:33:02:b9:05:03:6e:3c:7c:80:31:72: 75:da:51:cd:02:64:80:c1:03:dc:c4:5c:1f:61:9f: 73:73:d7:a2:b7:ea:e2:95:8a:b9:3d:45:84:d4:64: 32:05:74:d5:74:b3:eb:14:ca:99:69:55:f4:ab:1d: 41:00:b9:d7:98:06:bb:68:52:0f:b1:93:c5:54:52: 27:d8:c8:1a:0a:c1:1c:48:b2:2f:66:2e:68:12:31: 2f:82:0f:61:a2:a7:b8:8a:9a:a7:af:b6:d8:30:02: ed:53:0e:23:2a:8f:c2:a5:2a:b6:f3:7d:da:f3:04: be:3a:fd:7a:12:30:c7:d7:09:32:c4:08:b9:ec:cb: fc:c8:ac:30:ac:46:dd:d4:a5:a2:f6:f8:61:56:d8: 79:b5:8c:63:95:78:a8:a6:94:a2:20:79:6f:00:95: e0:88:23:77:e3:0e:5d:3c:bb:8d:ef:5c:57:f3:3b: 91:04:16:53:94:64:e3:d9:ef:fb:46:e5:30:bf:f4: e2:e2:74:44:34:51:26:cc:e3:e7:53:8b:f0:42:de: ca:a0:9b:a9:8e:74:f0:97:6d:4e:5b:b8:0d:e9:6e: e7:42:f4:50:23:4c:3e:ea:87:3a:1f:d0:42:e6:57: e3:00:61:d9:15:15:78:4c:38:60:a0:ef:2e:03:9f: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:22:5D:3F:2E:41:B3:1A:EF:F5:19:1E:18:3B:3A:86:1D:77:78:4C X509v3 Authority Key Identifier: keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.193.0/24 IPv6: 2a04:ac0:2::/48 Signature Algorithm: sha256WithRSAEncryption 01:77:01:60:68:c7:70:6a:33:46:53:cc:59:83:b5:e5:96:80: 0e:90:8a:de:b8:84:1b:57:16:60:de:59:9c:f2:f3:06:84:f4: 00:23:05:86:a8:bf:65:ef:6b:32:4c:ba:76:92:e4:d6:56:43: 62:67:9a:1b:22:11:9f:cd:01:8d:30:04:8c:88:6f:e8:55:53: 68:2f:b3:7b:2d:8c:a8:74:5d:e7:34:3e:a9:8d:09:39:e4:4d: 15:e2:e5:23:50:5d:fa:72:cd:71:80:15:91:83:5d:53:52:b2: eb:f2:be:7d:26:d7:39:75:1f:bc:17:48:c0:aa:b2:f2:d1:66: 3a:2a:0e:90:dd:c8:83:5d:13:76:a7:f9:66:20:f4:29:67:dd: 56:f9:08:35:37:95:4a:f5:b6:54:66:2a:46:d4:ae:94:db:cb: ab:b1:92:38:56:b9:38:34:88:ff:23:66:3d:25:c6:76:de:b8: 94:b7:96:c6:d1:b4:c0:0a:26:cd:b8:f2:58:73:4b:56:db:03: 4f:67:10:2e:1b:76:82:ac:c7:c1:5c:12:dc:62:37:0f:53:f5: f9:f7:0d:d9:a8:aa:c6:eb:31:36:40:62:ee:19:f2:c7:29:77: ac:ce:12:42:18:84:ac:a3:3f:07:bd:dd:55:21:eb:e7:86:4e: 8c:bf:a9:66 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EkyN+2ISC4J8aHbcZHAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2 Zjg1NzMwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjIyNWQzZjJlNDFiMzFhZWZmNTE5MWUxODNiM2E4NjFkNzc3ODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdd/MwK5BQNuPHyAMXJ12lHNAmSA wQPcxFwfYZ9zc9eit+rilYq5PUWE1GQyBXTVdLPrFMqZaVX0qx1BALnXmAa7aFIP sZPFVFIn2MgaCsEcSLIvZi5oEjEvgg9hoqe4ipqnr7bYMALtUw4jKo/CpSq2833a 8wS+Ov16EjDH1wkyxAi57Mv8yKwwrEbd1KWi9vhhVth5tYxjlXioppSiIHlvAJXg iCN34w5dPLuN71xX8zuRBBZTlGTj2e/7RuUwv/Ti4nRENFEmzOPnU4vwQt7KoJup jnTwl21OW7gN6W7nQvRQI0w+6oc6H9BC5lfjAGHZFRV4TDhgoO8uA595DwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ8iXT8uQbMa7/UZHhg7OoYdd3hMMB8GA1UdIwQY MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt YmYzNGQwMWY4YjBhLzEvbnlKZFB5NUJzeHJ2OVJrZUdEczZoaDEzZUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuY3BMA8E AgACMAkDBwAqBArAAAIwDQYJKoZIhvcNAQELBQADggEBAAF3AWBox3BqM0ZTzFmD teWWgA6Qit64hBtXFmDeWZzy8waE9AAjBYaov2XvazJMunaS5NZWQ2JnmhsiEZ/N AY0wBIyIb+hVU2gvs3stjKh0Xec0PqmNCTnkTRXi5SNQXfpyzXGAFZGDXVNSsuvy vn0m1zl1H7wXSMCqsvLRZjoqDpDdyINdE3an+WYg9Cln3Vb5CDU3lUr1tlRmKkbU rpTby6uxkjhWuTg0iP8jZj0lxnbeuJS3lsbRtMAKJs248lhzS1bbA09nEC4bdoKs x8FcEtxiNw9T9fn3DdmoqsbrMTZAYu4Z8scpd6zOEkIYhKyjPwe93VUh6+eGToy/ qWY= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:39 2026 by rpki-client