This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/Y6fe3CdonyzdE2-RERGO1YBIZAM.roa File: Y6fe3CdonyzdE2-RERGO1YBIZAM.roa (raw, json) Hash identifier: 6EsQe2HhEwnxGCKyAU4cRVhcGOhEfVyiH50MYbWVP/4= Subject key identifier: 63:A7:DE:DC:27:68:9F:2C:DD:13:6F:91:11:11:8E:D5:80:48:64:03 Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Certificate serial: 019B76EB3CF40A505CC860A895BC403D4D57 Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/Y6fe3CdonyzdE2-RERGO1YBIZAM.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 185.238.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3c:f4:0a:50:5c:c8:60:a8:95:bc:40:3d:4d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63a7dedc27689f2cdd136f9111118ed580486403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:c0:e8:39:13:52:89:39:aa:02:b6:80:19: e8:73:2b:6b:9f:6f:36:8f:9b:f3:06:30:6a:25:7d: f2:77:02:ed:9c:b5:66:46:c5:98:ed:ed:94:f8:89: 12:1f:e4:74:10:ac:15:07:7a:6d:53:94:47:2d:2c: 68:f5:89:aa:28:0e:c3:72:bc:1b:37:f8:02:d2:80: 83:42:99:d5:18:e5:c9:0a:ec:80:13:6a:25:20:a6: f4:a6:2e:a3:da:2c:f2:fb:be:ca:71:43:95:33:9a: 32:50:fa:28:ec:0e:ff:e6:e0:c6:6f:2e:d5:79:e4: 59:3d:5d:bb:35:6c:ea:37:43:d2:e4:d5:24:e1:07: 83:4d:a7:50:22:19:56:73:ea:c9:74:e0:64:fc:fb: 9d:44:c3:b3:52:ad:88:5f:c6:65:b5:d6:da:25:e8: e2:b7:63:68:25:f9:71:af:d8:f8:a7:6c:43:e8:79: d2:75:15:1b:c0:77:0d:4d:e1:e2:2d:1f:83:62:95: 6b:2d:4e:a3:67:fc:98:31:1e:ea:a8:3f:3f:6e:64: 34:9c:c8:63:be:58:c5:ac:eb:fd:22:53:dc:95:4f: 6d:05:52:00:6f:4e:f7:a2:c7:3f:6e:9f:4e:b3:1d: fa:ae:95:df:a5:6d:91:51:60:17:a7:86:99:bc:18: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A7:DE:DC:27:68:9F:2C:DD:13:6F:91:11:11:8E:D5:80:48:64:03 X509v3 Authority Key Identifier: keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/Y6fe3CdonyzdE2-RERGO1YBIZAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.40.0/22 Signature Algorithm: sha256WithRSAEncryption 47:1f:d7:7a:af:4e:db:b8:b8:cc:47:0a:5a:0d:6f:ea:56:a9: f8:3d:e3:d1:51:65:60:49:58:39:ec:72:55:e1:61:28:3b:ca: 93:54:26:4c:a9:46:39:8c:bd:01:5a:7a:ab:91:c9:e5:78:a2: 5b:d2:8f:6c:8f:49:8e:e0:ec:ad:a6:bb:80:42:5e:6a:0f:cd: d9:f8:97:67:46:77:b9:5d:0c:35:97:a3:20:61:c1:54:e7:6d: 72:45:3e:f0:ee:fa:36:c3:d4:96:b0:3f:80:80:bd:57:b5:cb: 7b:e9:f9:40:53:d4:d2:8b:20:56:33:12:34:c8:75:3b:af:b0: 44:a7:60:9c:70:2b:34:e0:5f:44:6b:ab:3f:08:a0:11:be:48: cb:7b:1c:8e:92:ba:5e:c8:ab:18:f8:8f:9c:1f:51:08:63:0b: f2:27:77:50:b7:1c:90:d2:3b:11:ce:80:80:a5:d1:df:23:e6: 45:66:9a:f7:1b:5e:a2:78:30:e0:b9:84:c1:c1:83:fa:00:28: 1f:91:51:94:66:e9:e7:15:ab:ce:c8:83:0a:1f:cf:17:9a:08: 3d:6b:62:2b:9d:06:09:fd:75:e5:7b:b5:da:50:6b:4c:ba:59: 23:e1:93:99:bd:02:85:85:97:71:c4:0c:62:0e:50:67:99:16: 42:d5:f2:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zz0ClBcyGColbxAPU1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3 Yzc4MzMwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2E3ZGVkYzI3Njg5ZjJjZGQxMzZmOTExMTExOGVkNTgwNDg2NDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqvA6DkTUok5qgK2gBnocytrn282 j5vzBjBqJX3ydwLtnLVmRsWY7e2U+IkSH+R0EKwVB3ptU5RHLSxo9YmqKA7Dcrwb N/gC0oCDQpnVGOXJCuyAE2olIKb0pi6j2izy+77KcUOVM5oyUPoo7A7/5uDGby7V eeRZPV27NWzqN0PS5NUk4QeDTadQIhlWc+rJdOBk/PudRMOzUq2IX8ZltdbaJeji t2NoJflxr9j4p2xD6HnSdRUbwHcNTeHiLR+DYpVrLU6jZ/yYMR7qqD8/bmQ0nMhj vljFrOv9IlPclU9tBVIAb073osc/bp9Osx36rpXfpW2RUWAXp4aZvBgvAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGOn3twnaJ8s3RNvkRERjtWASGQDMB8GA1UdIwQY MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt MzJlZmY5NWIzOWRjLzEvWTZmZTNDZG9ueXpkRTItUkVSR08xWUJJWkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue4oMA0G CSqGSIb3DQEBCwUAA4IBAQBHH9d6r07buLjMRwpaDW/qVqn4PePRUWVgSVg57HJV 4WEoO8qTVCZMqUY5jL0BWnqrkcnleKJb0o9sj0mO4OytpruAQl5qD83Z+JdnRne5 XQw1l6MgYcFU521yRT7w7vo2w9SWsD+AgL1Xtct76flAU9TSiyBWMxI0yHU7r7BE p2CccCs04F9Ea6s/CKARvkjLexyOkrpeyKsY+I+cH1EIYwvyJ3dQtxyQ0jsRzoCA pdHfI+ZFZpr3G16ieDDguYTBwYP6ACgfkVGUZunnFavOyIMKH88Xmgg9a2IrnQYJ /XXle7XaUGtMulkj4ZOZvQKFhZdxxAxiDlBnmRZC1fKA -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:27 2026 by rpki-client