This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/820vIRF1IvHmMeX3TIHoslLaymk.roa File: 820vIRF1IvHmMeX3TIHoslLaymk.roa (raw, json) Hash identifier: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA= Subject key identifier: F3:6D:2F:21:11:75:22:F1:E6:31:E5:F7:4C:81:E8:B2:52:DA:CA:69 Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd Certificate serial: 019B7E372C670C50D1B26979521FE35765FE Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/820vIRF1IvHmMeX3TIHoslLaymk.roa Signing time: Fri 02 Jan 2026 10:18:23 +0000 ROA not before: Fri 02 Jan 2026 10:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 185.171.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:2c:67:0c:50:d1:b2:69:79:52:1f:e3:57:65:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd Validity Not Before: Jan 2 10:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f36d2f21117522f1e631e5f74c81e8b252daca69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:01:ba:69:db:e4:f7:21:98:9e:b8:ca:f2: 1a:0c:fd:c9:14:3b:cd:95:e4:e5:6c:5c:f0:9d:6d: 5c:07:d7:11:87:f3:66:be:4a:d4:69:19:df:1c:08: f7:b6:75:77:87:4a:0d:59:ac:b0:4c:21:f9:a5:47: 9c:53:03:a3:ab:63:74:6e:f5:0c:ab:2a:b9:66:7c: 25:b4:ac:57:43:40:84:ba:39:f8:4f:4f:e7:8a:d7: 17:d8:c4:bb:d3:df:88:b6:db:78:0c:e4:e4:75:b1: 9b:44:c3:d9:4a:b1:91:5f:72:99:17:df:96:74:95: c4:39:0e:f7:a9:19:ee:f0:91:8e:5c:2b:2f:7f:c9: 11:a0:c9:b1:a1:df:eb:cc:5a:ec:d3:74:1c:9b:96: 50:53:64:52:95:c0:4d:6a:c5:57:74:11:f5:14:ca: f4:3a:bf:cf:b7:c7:3d:f4:c8:bf:2c:7f:61:fe:b8: ea:0e:29:90:63:bd:08:1c:3d:48:cf:35:44:7c:9a: 63:12:c5:47:fa:6a:1e:b0:90:22:15:70:48:9a:86: ae:e3:c8:b4:52:da:17:91:49:8e:ef:84:14:20:23: ca:73:aa:44:16:3d:44:21:2b:04:c0:88:ec:45:c9: a7:a0:70:27:c3:62:b3:9d:fa:74:1e:af:2e:d5:71: 2e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6D:2F:21:11:75:22:F1:E6:31:E5:F7:4C:81:E8:B2:52:DA:CA:69 X509v3 Authority Key Identifier: keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/820vIRF1IvHmMeX3TIHoslLaymk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.248.0/22 Signature Algorithm: sha256WithRSAEncryption 74:af:42:90:96:8a:68:b7:93:5c:19:6e:45:e9:29:11:a1:48: 4a:ab:4e:e3:58:3c:2b:6a:fb:49:c1:41:b1:3b:38:73:b2:b7: 99:59:6d:76:ba:50:24:9e:7b:6f:2a:39:97:74:46:dd:a3:bd: ca:2c:b4:82:ac:b7:78:d5:a6:b3:37:58:55:2d:ea:8c:9a:52: ab:e7:6a:9a:c1:b2:f3:ef:ad:d6:63:c3:16:9f:92:e5:dd:ac: e9:47:e0:2e:65:e1:59:09:5c:52:3f:95:af:85:c0:cd:53:be: 70:20:f0:29:b7:e1:24:f7:4c:7a:74:5c:d2:54:33:30:00:ec: bc:cf:96:27:d7:8a:c6:13:75:48:60:90:da:59:4e:25:14:6f: e7:a0:c0:e2:28:fd:1b:c1:b1:5d:8c:d4:03:6b:0d:e5:ad:6f: 54:4a:52:3f:2f:36:71:07:86:fe:5b:17:bf:ee:c0:d1:40:14: ad:c7:72:32:a0:be:0b:ac:cf:5c:3e:2f:67:b8:65:60:16:3c: 46:fb:08:e4:e2:d0:6f:18:24:58:ab:97:73:a5:a9:72:4f:7f: fa:5b:a9:97:d1:9c:6c:44:67:0f:e2:4b:61:70:49:e8:d8:71: a9:b1:5b:d8:8c:95:58:c1:f6:f7:45:cd:ab:64:00:96:0c:5b: bd:7a:af:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+NyxnDFDRsml5Uh/jV2X+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGZlYWVjYTIyZDJkMjYxOGI0MzNjZjAwYWIxNDRiZDhi ODBkYmQwHhcNMjYwMTAyMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzZkMmYyMTExNzUyMmYxZTYzMWU1Zjc0YzgxZThiMjUyZGFjYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwykBumnb5PchmJ64yvIaDP3JFDvN leTlbFzwnW1cB9cRh/NmvkrUaRnfHAj3tnV3h0oNWaywTCH5pUecUwOjq2N0bvUM qyq5ZnwltKxXQ0CEujn4T0/nitcX2MS709+Ittt4DOTkdbGbRMPZSrGRX3KZF9+W dJXEOQ73qRnu8JGOXCsvf8kRoMmxod/rzFrs03Qcm5ZQU2RSlcBNasVXdBH1FMr0 Or/Pt8c99Mi/LH9h/rjqDimQY70IHD1IzzVEfJpjEsVH+moesJAiFXBImoau48i0 UtoXkUmO74QUICPKc6pEFj1EISsEwIjsRcmnoHAnw2Kznfp0Hq8u1XEuGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNtLyERdSLx5jHl90yB6LJS2sppMB8GA1UdIwQY MBaAFMnf6uyiLS0mGLQzzwCrFEvYuA29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMt YmMzNjJkMzc2OGJkLzEvODIwdklSRjFJdkhtTWVYM1RJSG9zbExheW1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMtYmMzNjJkMzc2OGJk LzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuav4MA0G CSqGSIb3DQEBCwUAA4IBAQB0r0KQlopot5NcGW5F6SkRoUhKq07jWDwravtJwUGx OzhzsreZWW12ulAknntvKjmXdEbdo73KLLSCrLd41aazN1hVLeqMmlKr52qawbLz 763WY8MWn5Ll3azpR+AuZeFZCVxSP5WvhcDNU75wIPApt+Ek90x6dFzSVDMwAOy8 z5Yn14rGE3VIYJDaWU4lFG/noMDiKP0bwbFdjNQDaw3lrW9USlI/LzZxB4b+Wxe/ 7sDRQBStx3IyoL4LrM9cPi9nuGVgFjxG+wjk4tBvGCRYq5dzpalyT3/6W6mX0Zxs RGcP4kthcEno2HGpsVvYjJVYwfb3Rc2rZACWDFu9eq8c -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:41 2026 by rpki-client