This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/RutY2PEzNNQaSoLjnZ05mYIop5Q.roa File: RutY2PEzNNQaSoLjnZ05mYIop5Q.roa (raw, json) Hash identifier: XzQEjLEwEdF5fa58iJ8ASdj8lsvXpmYLt3uKDH2dqwk= Subject key identifier: 46:EB:58:D8:F1:33:34:D4:1A:4A:82:E3:9D:9D:39:99:82:28:A7:94 Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88 Certificate serial: 019B7F14C243635C700E7748D6B107086721 Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/RutY2PEzNNQaSoLjnZ05mYIop5Q.roa Signing time: Fri 02 Jan 2026 14:20:25 +0000 ROA not before: Fri 02 Jan 2026 14:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206377 IP address blocks: 185.35.84.0/22 maxlen: 22 2a00:f280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c2:43:63:5c:70:0e:77:48:d6:b1:07:08:67:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88 Validity Not Before: Jan 2 14:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46eb58d8f13334d41a4a82e39d9d39998228a794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:83:7e:1a:a4:a1:93:e2:c5:b8:4e:29:1e: 9b:31:86:57:58:bf:ef:ae:06:c3:36:68:89:3b:05: 86:68:55:c6:65:59:6b:d2:39:4d:96:f7:80:ee:04: cd:e5:d4:27:40:1d:80:7c:5e:48:d8:d5:26:ff:50: 26:ed:f9:3b:8f:3e:1c:76:31:26:3f:d6:4f:55:9b: c0:f2:10:b6:3d:89:60:78:16:65:72:ab:ba:51:4b: 4a:83:d0:4b:26:1b:3f:91:a1:e4:21:de:af:dc:44: 9e:be:91:c2:4f:9a:1a:73:32:3c:bc:8e:42:b8:e1: 6f:5a:36:80:0b:17:07:ec:15:97:83:a8:a8:8a:f0: 68:3f:31:48:da:6f:f7:e3:a3:8a:2f:0e:0a:ba:c8: c9:16:41:d9:74:cf:df:c0:82:36:ed:a3:09:e1:59: ea:09:e4:e7:60:86:71:3a:03:84:83:23:8b:7b:a7: 3c:f6:87:c9:88:6e:70:cd:07:7d:8f:c7:3f:33:4e: 0e:62:d5:55:ef:0f:bd:71:38:74:01:ff:ac:1e:aa: f2:86:0c:6d:2a:ae:97:a2:3a:1f:b4:b6:29:8d:41: 62:8c:2f:85:b1:be:7b:ba:4f:38:96:88:fa:67:64: b2:f8:9c:51:c7:1d:4b:74:60:10:87:02:96:0c:13: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EB:58:D8:F1:33:34:D4:1A:4A:82:E3:9D:9D:39:99:82:28:A7:94 X509v3 Authority Key Identifier: keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/RutY2PEzNNQaSoLjnZ05mYIop5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.35.84.0/22 IPv6: 2a00:f280::/32 Signature Algorithm: sha256WithRSAEncryption c7:43:ca:74:7f:a0:ef:02:06:ce:bd:ba:0e:4f:ad:d8:92:33: 90:21:1f:92:97:6c:c0:83:00:ee:4a:63:79:f1:ca:6d:a8:99: 2d:37:e0:fa:e8:50:aa:24:7d:0a:0f:04:b7:e8:95:55:96:36: 06:5f:c5:76:b1:d1:25:af:29:0a:cf:0b:37:a6:74:75:88:a6: ca:af:76:37:52:0f:33:0f:8a:00:bf:96:94:13:3a:41:0c:47: 16:fe:37:b5:32:e4:f1:47:c1:f3:35:7d:fe:8b:76:c1:49:3a: 7a:91:6c:d6:1a:14:f5:11:4d:8d:32:a4:15:bc:95:ff:3e:39: 1e:8f:9e:91:7b:b4:ba:49:37:7e:2d:dc:72:e1:7f:6f:4e:26: 56:30:d3:94:cc:1f:56:b0:25:cd:ef:6d:0b:91:06:dc:03:10: 39:46:02:a9:6c:f3:32:85:d9:2d:62:01:c1:95:78:84:97:65: 71:0e:56:8e:49:3b:67:bf:d3:bb:7f:d1:52:91:87:a2:c2:ac: b7:a9:2e:a9:23:9f:86:8c:1f:01:0a:30:de:2d:27:9d:6f:38: 14:27:69:f7:a6:bc:54:69:2f:1c:ee:ce:07:bc:dd:48:10:70: 41:5b:54:0a:f6:66:9f:33:1e:02:07:0f:62:ab:38:39:d2:e0: 4e:b7:3d:07 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FMJDY1xwDndI1rEHCGchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NWJjZTE2M2NiNTAyYTY1N2YyNzJmNzlmZDNlNDg3ZmJi ZDRiODgwHhcNMjYwMTAyMTQyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmViNThkOGYxMzMzNGQ0MWE0YTgyZTM5ZDlkMzk5OTgyMjhhNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocmDfhqkoZPixbhOKR6bMYZXWL/v rgbDNmiJOwWGaFXGZVlr0jlNlveA7gTN5dQnQB2AfF5I2NUm/1Am7fk7jz4cdjEm P9ZPVZvA8hC2PYlgeBZlcqu6UUtKg9BLJhs/kaHkId6v3ESevpHCT5oaczI8vI5C uOFvWjaACxcH7BWXg6ioivBoPzFI2m/346OKLw4KusjJFkHZdM/fwII27aMJ4Vnq CeTnYIZxOgOEgyOLe6c89ofJiG5wzQd9j8c/M04OYtVV7w+9cTh0Af+sHqryhgxt Kq6XojoftLYpjUFijC+Fsb57uk84loj6Z2Sy+JxRxx1LdGAQhwKWDBNQxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEbrWNjxMzTUGkqC452dOZmCKKeUMB8GA1UdIwQY MBaAFOdbzhY8tQKmV/Jy95/T5If7vUuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgt NGI4NTc4NzE1MTU0LzEvUnV0WTJQRXpOTlFhU29Mam5aMDVtWUlvcDVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgtNGI4NTc4NzE1MTU0 LzEvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSNUMA0E AgACMAcDBQAqAPKAMA0GCSqGSIb3DQEBCwUAA4IBAQDHQ8p0f6DvAgbOvboOT63Y kjOQIR+Sl2zAgwDuSmN58cptqJktN+D66FCqJH0KDwS36JVVljYGX8V2sdElrykK zws3pnR1iKbKr3Y3Ug8zD4oAv5aUEzpBDEcW/je1MuTxR8HzNX3+i3bBSTp6kWzW GhT1EU2NMqQVvJX/Pjkej56Re7S6STd+Ldxy4X9vTiZWMNOUzB9WsCXN720LkQbc AxA5RgKpbPMyhdktYgHBlXiEl2VxDlaOSTtnv9O7f9FSkYeiwqy3qS6pI5+GjB8B CjDeLSedbzgUJ2n3prxUaS8c7s4HvN1IEHBBW1QK9mafMx4CBw9iqzg50uBOtz0H -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:20 2026 by rpki-client