This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/2Y6quasBBtqiTIKmeRTvIxGNZBg.roa File: 2Y6quasBBtqiTIKmeRTvIxGNZBg.roa (raw, json) Hash identifier: mqAgZqV030TmfwPKsg0X5x+gSYsK7poBlKoJUyvGnoE= Subject key identifier: D9:8E:AA:B9:AB:01:06:DA:A2:4C:82:A6:79:14:EF:23:11:8D:64:18 Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664 Certificate serial: 019B7DCB5E6C34C46EA7D21B45BDCCFE7331 Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/2Y6quasBBtqiTIKmeRTvIxGNZBg.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206922 IP address blocks: 185.67.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5e:6c:34:c4:6e:a7:d2:1b:45:bd:cc:fe:73:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d98eaab9ab0106daa24c82a67914ef23118d6418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:87:77:52:e6:02:0a:a3:7c:fc:f0:42:1f: 09:d9:ef:96:83:77:e6:9c:66:0c:75:2a:1a:41:d5: 1a:c3:d0:0e:64:a7:ac:14:39:2c:2f:84:fe:92:6e: 4e:ce:e5:e9:f7:32:55:21:11:5c:c4:3a:c7:bf:ee: d3:a7:a1:12:ae:38:19:c1:15:c6:6a:51:ca:89:d8: 6d:42:aa:25:fb:41:1b:b6:84:98:50:2e:14:b1:fb: b0:b8:ac:fb:f9:92:7a:ea:e8:73:dd:66:0d:f0:20: 0a:67:ea:af:e6:dd:8e:a9:6a:46:5c:8b:1f:b1:1f: 92:77:64:dd:f6:d1:9f:35:ef:fb:30:54:3b:c4:92: 3d:34:d9:a8:a9:45:f4:e3:1d:b7:ea:5f:da:09:84: 45:54:9c:13:c9:c8:4a:e8:bc:b3:67:fa:7c:fa:a9: 89:63:5f:ed:ec:f5:14:6d:50:61:2f:b1:de:e4:a7: 98:7f:50:7a:19:56:3d:88:37:c7:e8:69:b1:f1:86: 9c:5a:b1:63:16:92:bc:35:69:76:e9:bf:52:7b:c2: 85:4b:1e:40:51:0e:86:34:92:62:35:13:8e:3a:18: bb:0d:81:92:13:09:d7:a3:a2:65:77:37:2f:b8:4d: 34:a4:9a:07:9e:11:2b:02:24:e3:9a:ad:32:65:d2: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8E:AA:B9:AB:01:06:DA:A2:4C:82:A6:79:14:EF:23:11:8D:64:18 X509v3 Authority Key Identifier: keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/2Y6quasBBtqiTIKmeRTvIxGNZBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.163.0/24 Signature Algorithm: sha256WithRSAEncryption 42:ef:d1:30:54:1f:2b:4c:00:e0:6d:03:b6:5f:7e:f7:56:27: 5f:0c:9b:cf:06:22:db:99:7a:02:4e:e1:0d:ce:de:11:46:5c: e2:a4:39:91:a3:95:30:f0:cf:53:66:db:43:c2:cc:b1:64:af: 0f:de:9c:71:db:e0:a5:39:d2:f9:40:e2:c6:a3:45:75:56:ef: b9:88:75:d6:7a:b4:dc:98:d3:8b:ea:9b:8c:5b:2b:7c:6e:38: c9:88:d9:77:b2:79:25:51:07:22:88:7f:ca:3a:55:3c:5a:09: a9:e6:1c:b5:a8:6b:7f:ba:7d:d9:2e:bf:06:75:aa:b8:62:db: 82:f0:0b:6f:c6:ea:54:7a:7a:a3:7c:63:a7:90:71:23:26:37: b4:74:ba:4e:c6:ba:f2:54:fb:54:f6:58:8e:3b:45:e2:6c:ec: bf:0a:f9:fe:37:40:25:6b:41:4c:4d:3a:0c:2f:c0:5f:35:e6: 7a:59:aa:73:0b:a3:7b:80:f1:d2:33:fe:09:9a:d6:20:7f:0c: c4:09:ce:7f:a2:3c:91:6a:2f:2f:25:a1:1d:18:85:20:82:5f: f6:3a:f4:3e:6a:d3:f1:a8:5c:ab:ce:86:4c:11:51:d3:40:9d: d2:9d:02:87:ac:08:37:99:c3:4e:60:7b:0a:cb:17:31:d5:08: 5e:da:69:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y15sNMRup9IbRb3M/nMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTBhZjQ1YWI0ZTU3NDU2ZjVhMGE0MGRmYTg0ZjhkODA2 MTA2NjQwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOThlYWFiOWFiMDEwNmRhYTI0YzgyYTY3OTE0ZWYyMzExOGQ2NDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzauHd1LmAgqjfPzwQh8J2e+Wg3fm nGYMdSoaQdUaw9AOZKesFDksL4T+km5OzuXp9zJVIRFcxDrHv+7Tp6ESrjgZwRXG alHKidhtQqol+0EbtoSYUC4UsfuwuKz7+ZJ66uhz3WYN8CAKZ+qv5t2OqWpGXIsf sR+Sd2Td9tGfNe/7MFQ7xJI9NNmoqUX04x236l/aCYRFVJwTychK6LyzZ/p8+qmJ Y1/t7PUUbVBhL7He5KeYf1B6GVY9iDfH6Gmx8YacWrFjFpK8NWl26b9Se8KFSx5A UQ6GNJJiNROOOhi7DYGSEwnXo6JldzcvuE00pJoHnhErAiTjmq0yZdIKnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmOqrmrAQbaokyCpnkU7yMRjWQYMB8GA1UdIwQY MBaAFHvgr0WrTldFb1oKQN+oT42AYQZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQt NGMzYmU5YTI4ZDkzLzEvMlk2cXVhc0JCdHFpVElLbWVSVHZJeEdOWkJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQtNGMzYmU5YTI4ZDkz LzEvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUOjMA0G CSqGSIb3DQEBCwUAA4IBAQBC79EwVB8rTADgbQO2X373VidfDJvPBiLbmXoCTuEN zt4RRlzipDmRo5Uw8M9TZttDwsyxZK8P3pxx2+ClOdL5QOLGo0V1Vu+5iHXWerTc mNOL6puMWyt8bjjJiNl3snklUQciiH/KOlU8Wgmp5hy1qGt/un3ZLr8Gdaq4YtuC 8AtvxupUenqjfGOnkHEjJje0dLpOxrryVPtU9liOO0XibOy/Cvn+N0Ala0FMTToM L8BfNeZ6WapzC6N7gPHSM/4JmtYgfwzECc5/ojyRai8vJaEdGIUggl/2OvQ+atPx qFyrzoZMEVHTQJ3SnQKHrAg3mcNOYHsKyxcx1Qhe2mkl -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:40 2026 by rpki-client