This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/JyAGENEBYI2RUrGflH3181W7wwE.roa File: JyAGENEBYI2RUrGflH3181W7wwE.roa (raw, json) Hash identifier: HdxEi3V75II9paWrrSvMYM0URyA0KzY9zHOSzqzIBUI= Subject key identifier: 27:20:06:10:D1:01:60:8D:91:52:B1:9F:94:7D:F5:F3:55:BB:C3:01 Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28 Certificate serial: 019BC61EB27094C52EB80D6402341E1A7FEB Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/JyAGENEBYI2RUrGflH3181W7wwE.roa Signing time: Fri 16 Jan 2026 09:24:19 +0000 ROA not before: Fri 16 Jan 2026 09:24:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215322 IP address blocks: 185.17.25.0/24 maxlen: 24 2a01:a501::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:1e:b2:70:94:c5:2e:b8:0d:64:02:34:1e:1a:7f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28 Validity Not Before: Jan 16 09:24:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27200610d101608d9152b19f947df5f355bbc301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:d2:3e:40:08:3b:3a:d0:a1:bc:57:77:91: cb:a3:2f:39:cf:8f:9f:50:7f:18:44:e1:2b:0b:91: 52:0e:18:f6:11:2c:08:ca:63:d4:2c:d3:f7:e9:e5: b8:e4:ef:a6:79:93:4f:11:c4:8e:89:db:02:e1:bd: 02:1e:0a:02:47:7b:b9:0a:c2:b9:d9:c2:87:40:3d: c4:ca:04:32:12:c9:fe:63:d8:dd:0f:64:b1:94:ae: ed:c3:44:9b:a8:ab:b9:5a:32:a7:88:c0:24:57:3e: 88:61:56:ff:26:6a:cc:be:41:df:ab:34:8c:03:c4: cd:a2:e7:64:5f:b5:ea:35:b6:c3:ba:c7:1c:1f:6b: 76:8c:2b:e4:68:29:0e:36:d5:41:fe:1e:b5:f2:08: 0d:fd:3f:44:7d:56:1f:c4:06:72:4a:51:a9:43:78: 47:6d:bd:e0:97:ca:28:06:7d:88:07:d0:35:cf:eb: da:95:a0:39:03:09:a7:4b:de:d1:88:a4:c5:f8:b3: c1:2b:b9:b0:1d:c2:7c:6c:1b:88:f9:e6:cd:da:7a: 65:b2:0d:d5:cc:8b:c5:f9:fc:df:52:7f:93:34:af: 40:30:fd:29:a3:3f:5d:6c:30:63:a3:3d:a0:b5:7e: b4:61:f0:34:88:c3:09:6b:ee:5b:a9:d4:53:c3:c6: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:20:06:10:D1:01:60:8D:91:52:B1:9F:94:7D:F5:F3:55:BB:C3:01 X509v3 Authority Key Identifier: keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/JyAGENEBYI2RUrGflH3181W7wwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.25.0/24 IPv6: 2a01:a501::/32 Signature Algorithm: sha256WithRSAEncryption 39:6c:d8:2e:5c:d7:ec:58:bf:28:81:5f:d0:5a:e1:cb:84:a8: bb:b3:41:72:56:b0:42:b2:89:51:8e:69:3f:0c:41:a6:ca:f3: 98:e2:ab:f6:f1:01:41:86:69:65:fc:87:bd:1d:2e:b9:44:f4: 75:d2:e3:7d:9b:fd:d9:0a:c6:5c:2b:b8:54:51:c6:bd:41:89: 14:f5:d1:78:6b:1b:ce:d2:12:0a:97:fa:3d:cf:95:fa:de:28: fc:48:c4:f6:32:53:72:7f:be:a9:4d:fc:e1:02:14:d9:76:9f: bc:1d:27:ad:8c:89:2d:bb:dc:8e:68:48:a3:e1:67:cb:0d:90: 0b:89:39:2c:6b:b4:0d:64:b5:38:2c:e6:2f:19:2f:47:44:5c: 85:f0:01:8f:a0:de:62:2f:c9:de:a0:13:4c:01:7f:48:9a:12: 2f:57:95:40:5b:69:c3:18:12:02:d5:7c:e8:5f:86:75:3e:ed: 33:92:fa:b9:67:ab:0b:55:d3:5c:87:f0:3a:20:58:63:ca:d7: b7:79:ac:f5:ce:ab:1c:7f:f3:80:3f:50:9e:54:90:ba:06:78: fa:48:59:a0:cd:71:29:6b:60:b2:a3:8d:08:10:6f:55:a6:4d: d1:23:92:d5:be:88:be:27:b4:62:10:39:bd:60:bf:7b:73:3e: 0d:b7:ff:1e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvGHrJwlMUuuA1kAjQeGn/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YmZkYmI2YTRiMTY2MzM2OWRhNDA3ZGI5N2IwMjFmNzMy ODRhMjgwHhcNMjYwMTE2MDkyNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzIwMDYxMGQxMDE2MDhkOTE1MmIxOWY5NDdkZjVmMzU1YmJjMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5/SPkAIOzrQobxXd5HLoy85z4+f UH8YROErC5FSDhj2ESwIymPULNP36eW45O+meZNPEcSOidsC4b0CHgoCR3u5CsK5 2cKHQD3EygQyEsn+Y9jdD2SxlK7tw0SbqKu5WjKniMAkVz6IYVb/JmrMvkHfqzSM A8TNoudkX7XqNbbDusccH2t2jCvkaCkONtVB/h618ggN/T9EfVYfxAZySlGpQ3hH bb3gl8ooBn2IB9A1z+valaA5AwmnS97RiKTF+LPBK7mwHcJ8bBuI+ebN2nplsg3V zIvF+fzfUn+TNK9AMP0poz9dbDBjoz2gtX60YfA0iMMJa+5bqdRTw8bozwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCcgBhDRAWCNkVKxn5R99fNVu8MBMB8GA1UdIwQY MBaAFAW/27aksWYzadpAfbl7Ah9zKEooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMt MDYwZGFjZmViZTBmLzEvSnlBR0VORUJZSTJSVXJHZmxIMzE4MVc3d3dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMtMDYwZGFjZmViZTBm LzEvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuREZMA0E AgACMAcDBQAqAaUBMA0GCSqGSIb3DQEBCwUAA4IBAQA5bNguXNfsWL8ogV/QWuHL hKi7s0FyVrBCsolRjmk/DEGmyvOY4qv28QFBhmll/Ie9HS65RPR10uN9m/3ZCsZc K7hUUca9QYkU9dF4axvO0hIKl/o9z5X63ij8SMT2MlNyf76pTfzhAhTZdp+8HSet jIktu9yOaEij4WfLDZALiTksa7QNZLU4LOYvGS9HRFyF8AGPoN5iL8neoBNMAX9I mhIvV5VAW2nDGBIC1XzoX4Z1Pu0zkvq5Z6sLVdNch/A6IFhjyte3eaz1zqscf/OA P1CeVJC6Bnj6SFmgzXEpa2Cyo40IEG9Vpk3RI5LVvoi+J7RiEDm9YL97cz4Nt/8e -----END CERTIFICATE-----Generated at Sat Jan 24 21:11:52 2026 by rpki-client