This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/rBfN5hySaU80pvKscbKLqXudBew.roa File: rBfN5hySaU80pvKscbKLqXudBew.roa (raw, json) Hash identifier: +ftjLdDbJ5p8switUZfvGRrNauB6kY6yhwTaJeXxA/U= Subject key identifier: AC:17:CD:E6:1C:92:69:4F:34:A6:F2:AC:71:B2:8B:A9:7B:9D:05:EC Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Certificate serial: 019B7F8325A09973F3400ED7D251259F8538 Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/rBfN5hySaU80pvKscbKLqXudBew.roa Signing time: Fri 02 Jan 2026 16:20:59 +0000 ROA not before: Fri 02 Jan 2026 16:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205570 IP address blocks: 185.213.170.0/24 maxlen: 24 2a0b:8b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:25:a0:99:73:f3:40:0e:d7:d2:51:25:9f:85:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Validity Not Before: Jan 2 16:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac17cde61c92694f34a6f2ac71b28ba97b9d05ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:62:6a:d3:db:42:fe:e8:b8:16:77:17:70: b5:a2:d4:2e:a1:8f:6a:62:8e:92:dd:6e:21:63:8c: 80:a3:c1:b5:42:9c:c9:ab:3f:6b:17:e2:f4:ce:37: 00:33:ad:d2:a7:0f:f0:19:cb:64:69:a6:d7:d3:94: 4d:29:00:6b:18:db:46:4f:6b:46:44:04:bc:de:5c: 48:42:f1:59:a7:3e:d9:1b:61:13:86:f8:07:20:f3: ec:b4:3c:11:2d:20:1b:01:51:15:7a:59:67:1a:d4: 78:da:35:0c:fa:5e:4c:30:05:a7:17:9e:a1:c6:60: 8f:91:8e:68:f3:5a:bf:d9:5e:32:f5:c6:9c:82:8b: c1:7d:67:6a:99:5f:58:8e:82:89:45:1c:cd:84:90: f2:f3:e1:81:a7:e2:c5:9e:a9:09:82:87:69:d1:48: 45:62:c9:b6:79:95:eb:df:28:aa:c1:16:e9:e1:88: 37:df:97:59:b1:e9:2a:01:60:34:67:0b:f1:de:07: 92:ef:8d:e8:45:56:15:43:97:22:9c:40:1e:76:20: d5:7d:37:bd:be:05:14:81:1a:27:3d:d9:10:8d:1a: 3e:86:2f:9d:b2:88:2b:8b:41:be:c4:ff:f1:00:78: da:13:9b:6c:09:e5:0f:bc:59:a3:51:17:c9:e3:a9: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:17:CD:E6:1C:92:69:4F:34:A6:F2:AC:71:B2:8B:A9:7B:9D:05:EC X509v3 Authority Key Identifier: keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/rBfN5hySaU80pvKscbKLqXudBew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.170.0/24 IPv6: 2a0b:8b40::/29 Signature Algorithm: sha256WithRSAEncryption a3:52:42:43:98:2c:d2:2e:1c:96:98:8e:00:9e:49:0f:8c:f1: f4:5b:3f:e1:51:90:06:ad:1a:08:e8:c1:da:3b:c3:c6:3f:af: 46:b2:f3:a5:f3:34:bf:f1:83:90:d1:a0:01:72:29:89:eb:ca: e6:19:9c:2f:69:ab:d1:a3:6b:74:63:45:ef:ac:52:f4:fe:d2: 99:f8:7e:11:90:50:61:12:d2:4e:5e:0a:4e:dd:6c:71:8a:f6: b0:9d:e2:60:f2:05:8b:b6:da:29:58:e2:69:82:ee:c1:ca:cc: f0:81:df:8b:ba:b4:26:6d:81:b9:16:6c:77:71:d2:0a:75:7c: eb:7a:56:ed:36:d8:d5:e5:f4:26:0e:89:99:f9:83:5a:47:5f: af:35:6b:19:63:3d:94:8c:bc:54:45:06:f8:ef:ca:9a:16:7f: 21:54:5b:fc:14:03:ac:6d:ef:36:c1:a5:30:4c:8f:6f:c9:a2: e4:04:aa:cf:2a:be:cb:75:c5:95:e0:8e:e7:f0:f3:e3:df:88: 83:be:8c:4f:7e:9c:56:93:56:1b:40:44:e9:7f:70:63:1e:55: 2f:89:e6:4e:71:d1:73:a8:ec:62:24:72:4c:0c:1c:6c:c9:4c: ea:94:af:fd:93:81:30:ce:a9:55:3d:77:57:d1:f3:88:22:f1: 2b:05:20:b3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gyWgmXPzQA7X0lEln4U4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy MzZjY2IwHhcNMjYwMTAyMTYyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzE3Y2RlNjFjOTI2OTRmMzRhNmYyYWM3MWIyOGJhOTdiOWQwNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOdiatPbQv7ouBZ3F3C1otQuoY9q Yo6S3W4hY4yAo8G1QpzJqz9rF+L0zjcAM63Spw/wGctkaabX05RNKQBrGNtGT2tG RAS83lxIQvFZpz7ZG2EThvgHIPPstDwRLSAbAVEVellnGtR42jUM+l5MMAWnF56h xmCPkY5o81q/2V4y9cacgovBfWdqmV9YjoKJRRzNhJDy8+GBp+LFnqkJgodp0UhF Ysm2eZXr3yiqwRbp4Yg335dZsekqAWA0Zwvx3geS743oRVYVQ5cinEAediDVfTe9 vgUUgRonPdkQjRo+hi+dsogri0G+xP/xAHjaE5tsCeUPvFmjURfJ46kEeQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKwXzeYckmlPNKbyrHGyi6l7nQXsMB8GA1UdIwQY MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt YTEwMjhlZGE2MzgzLzEvckJmTjVoeVNhVTgwcHZLc2NiS0xxWHVkQmV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudWqMA0E AgACMAcDBQMqC4tAMA0GCSqGSIb3DQEBCwUAA4IBAQCjUkJDmCzSLhyWmI4AnkkP jPH0Wz/hUZAGrRoI6MHaO8PGP69GsvOl8zS/8YOQ0aABcimJ68rmGZwvaavRo2t0 Y0XvrFL0/tKZ+H4RkFBhEtJOXgpO3WxxivawneJg8gWLttopWOJpgu7Byszwgd+L urQmbYG5Fmx3cdIKdXzrelbtNtjV5fQmDomZ+YNaR1+vNWsZYz2UjLxURQb478qa Fn8hVFv8FAOsbe82waUwTI9vyaLkBKrPKr7LdcWV4I7n8PPj34iDvoxPfpxWk1Yb QETpf3BjHlUvieZOcdFzqOxiJHJMDBxsyUzqlK/9k4EwzqlVPXdX0fOIIvErBSCz -----END CERTIFICATE-----Generated at Thu Jan 22 01:24:15 2026 by rpki-client