This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa File: Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa (raw, json) Hash identifier: YS0zGHaZp4/cwuLZ66DL6UHXKwRlU7yjEXPrJXt2e7g= Subject key identifier: 63:74:4B:89:F1:DE:63:8F:EC:6B:75:48:3D:8C:06:2B:3A:5C:5B:88 Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89 Certificate serial: 019B7DCA61ECD57288AA5E1879AA252214DE Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa Signing time: Fri 02 Jan 2026 08:19:33 +0000 ROA not before: Fri 02 Jan 2026 08:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201265 IP address blocks: 185.32.160.0/22 maxlen: 24 185.32.161.0/24 maxlen: 24 185.32.162.0/23 maxlen: 23 2a00:a5a1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:61:ec:d5:72:88:aa:5e:18:79:aa:25:22:14:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63744b89f1de638fec6b75483d8c062b3a5c5b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:b0:a0:c2:0c:4e:18:4a:17:b3:e9:b3:f4: c7:e5:2e:bb:f4:1c:cc:76:6a:0f:82:7a:6d:60:23: 60:20:f3:40:e6:18:fe:39:62:10:eb:e3:17:d1:17: 03:69:d5:4f:b9:64:c6:52:bb:59:4c:2c:40:73:cd: 20:32:1c:cb:4a:ab:af:12:2f:85:2e:22:78:e5:9f: f0:f2:8b:42:5b:ee:d9:62:4f:06:8f:a7:a4:de:1e: a4:d1:d9:59:cb:0d:9c:4b:a4:6b:cc:03:fe:49:df: 64:6f:40:55:ad:ca:4f:bf:42:73:98:c0:1c:f7:74: c5:fd:01:85:49:1b:3a:0d:b0:93:a2:3c:29:4c:e6: fa:95:b6:07:5f:e6:9d:19:82:51:ce:68:70:88:ab: 36:b7:19:32:7b:7d:a9:fc:38:73:4a:f3:c5:13:be: cd:29:0f:dc:5b:7e:dd:42:ed:e1:8d:12:ce:10:00: ce:71:0e:7b:7c:c8:21:52:16:84:fe:f4:05:07:0a: e3:ad:e9:9c:53:ce:7c:7e:9f:aa:3e:e7:4d:19:4f: 95:cb:d5:6e:50:44:c5:bf:c3:a0:5d:36:f2:00:3d: 1b:63:53:58:d9:d6:23:be:bf:2e:e0:35:14:22:67: 24:db:a9:45:2c:3d:38:44:fd:27:80:48:09:f2:fa: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:74:4B:89:F1:DE:63:8F:EC:6B:75:48:3D:8C:06:2B:3A:5C:5B:88 X509v3 Authority Key Identifier: keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.160.0/22 IPv6: 2a00:a5a1::/32 Signature Algorithm: sha256WithRSAEncryption 46:fa:fb:af:8f:a2:4f:0f:3c:f1:6c:14:98:5c:77:5c:a3:36: 98:9a:b9:8c:eb:e3:27:54:12:bd:b0:7e:36:64:5a:87:b0:56: 4f:05:d8:16:ca:50:52:f6:d3:cc:45:6e:b6:63:22:bf:c0:c9: 95:30:af:ba:45:f9:42:9b:fd:5e:b5:6a:7d:d2:95:08:ae:60: d2:5e:d2:f6:18:25:75:0a:2c:51:fb:80:ce:90:57:06:a8:2a: 15:1a:96:92:77:36:f1:e3:f2:50:76:3f:74:ca:17:83:6b:5a: 76:f1:63:9a:cf:6e:8a:3f:ff:be:85:f9:b0:bc:2f:d1:bc:a1: 9f:b5:a1:47:b7:95:b4:f6:74:8d:3f:92:bc:c1:3b:6e:00:50: 0a:1e:3c:33:11:7b:a4:f3:12:b6:db:22:75:00:25:c3:19:ab: f4:17:f2:6e:76:78:60:79:df:80:08:bf:74:85:14:c8:81:76: bc:fa:a6:7f:c4:87:c9:ae:03:61:dd:98:d0:a5:bd:fb:7c:21: 2d:93:1b:c0:08:2f:68:f8:51:ed:6b:fa:c1:3c:95:4c:bc:d7: d7:3b:4b:fb:e8:a4:bd:07:71:06:60:29:2f:e5:fa:7f:b8:55: a0:4f:07:78:bf:ef:af:a9:ad:91:9b:35:ab:0f:66:ea:9c:ff: 2f:df:e5:4c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ymHs1XKIql4YeaolIhTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYWY4MDBjZTk1YmZiYjFmNDczYjBiNWY5ZjdiOTMxNzU5 MzBlODkwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzc0NGI4OWYxZGU2MzhmZWM2Yjc1NDgzZDhjMDYyYjNhNWM1Yjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6KwoMIMThhKF7Pps/TH5S679BzM dmoPgnptYCNgIPNA5hj+OWIQ6+MX0RcDadVPuWTGUrtZTCxAc80gMhzLSquvEi+F LiJ45Z/w8otCW+7ZYk8Gj6ek3h6k0dlZyw2cS6RrzAP+Sd9kb0BVrcpPv0JzmMAc 93TF/QGFSRs6DbCTojwpTOb6lbYHX+adGYJRzmhwiKs2txkye32p/DhzSvPFE77N KQ/cW37dQu3hjRLOEADOcQ57fMghUhaE/vQFBwrjremcU858fp+qPudNGU+Vy9Vu UETFv8OgXTbyAD0bY1NY2dYjvr8u4DUUImck26lFLD04RP0ngEgJ8vrfMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGN0S4nx3mOP7Gt1SD2MBis6XFuIMB8GA1UdIwQY MBaAFBCvgAzpW/ux9HOwtfn3uTF1kw6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt MTE5OTQyZjNkN2E3LzEvWTNSTGlmSGVZNF9zYTNWSVBZd0dLenBjVzRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3 LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSCgMA0E AgACMAcDBQAqAKWhMA0GCSqGSIb3DQEBCwUAA4IBAQBG+vuvj6JPDzzxbBSYXHdc ozaYmrmM6+MnVBK9sH42ZFqHsFZPBdgWylBS9tPMRW62YyK/wMmVMK+6RflCm/1e tWp90pUIrmDSXtL2GCV1CixR+4DOkFcGqCoVGpaSdzbx4/JQdj90yheDa1p28WOa z26KP/++hfmwvC/RvKGftaFHt5W09nSNP5K8wTtuAFAKHjwzEXuk8xK22yJ1ACXD Gav0F/Judnhged+ACL90hRTIgXa8+qZ/xIfJrgNh3ZjQpb37fCEtkxvACC9o+FHt a/rBPJVMvNfXO0v76KS9B3EGYCkv5fp/uFWgTwd4v++vqa2RmzWrD2bqnP8v3+VM -----END CERTIFICATE-----Generated at Tue Jan 27 05:32:41 2026 by rpki-client