This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/yLkWfOZ9pwRHBarKKNZ4fHLFIcc.roa File: yLkWfOZ9pwRHBarKKNZ4fHLFIcc.roa (raw, json) Hash identifier: svQPIicQF6L4iRCTdIy2JhuS8+4OxhvfXxWW++0FFdM= Subject key identifier: C8:B9:16:7C:E6:7D:A7:04:47:05:AA:CA:28:D6:78:7C:72:C5:21:C7 Certificate issuer: /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e Certificate serial: 019B77C759D0E80C72A38BA5F1DFC1B9C1F5 Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/yLkWfOZ9pwRHBarKKNZ4fHLFIcc.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206936 IP address blocks: 185.160.240.0/22 maxlen: 22 185.160.240.0/23 maxlen: 23 185.160.243.0/24 maxlen: 24 2a0a:8500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:59:d0:e8:0c:72:a3:8b:a5:f1:df:c1:b9:c1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8b9167ce67da7044705aaca28d6787c72c521c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:9d:54:d9:85:0b:62:50:7c:7c:cb:5c:72: 0e:b1:f7:64:2c:4c:5b:90:6f:61:cf:c2:9b:3f:42: bb:b1:c0:66:9e:5b:61:ac:95:be:f6:01:a8:e8:08: 59:92:de:48:ce:76:42:c8:1e:b2:a3:91:27:12:fd: 83:89:73:25:bf:4d:68:c4:a2:63:ca:8b:c4:65:b0: 82:b6:87:9d:e7:52:9c:d3:e0:98:d4:26:2c:da:3b: 98:d7:1c:6c:c2:b2:f3:f1:05:40:e1:36:cb:d6:46: 35:c8:2f:18:44:50:80:5f:94:c7:23:9c:b1:fe:1d: 39:95:e7:3a:16:ed:c1:6e:a6:7e:b9:80:95:60:95: cc:ef:e4:0c:69:78:61:1a:7d:81:31:66:81:1f:91: da:9a:13:f8:bf:cc:6b:c2:4f:34:02:06:53:1d:0b: c4:c0:19:cc:e5:92:37:c2:d7:23:a0:d4:12:0d:0f: 7f:68:22:ef:c9:f2:da:98:05:be:1f:bb:64:22:d1: 3e:3d:e0:70:ea:03:e1:0b:7e:20:a7:60:98:b0:c0: 84:ac:c9:90:75:a8:d3:0e:35:f4:f3:c3:cc:a7:fc: 0f:db:82:77:2a:8d:c5:e5:91:4b:3a:86:2d:87:c1: 6e:fe:d3:6b:b2:22:3f:e3:82:33:a3:dd:ff:a7:af: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B9:16:7C:E6:7D:A7:04:47:05:AA:CA:28:D6:78:7C:72:C5:21:C7 X509v3 Authority Key Identifier: keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/yLkWfOZ9pwRHBarKKNZ4fHLFIcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.240.0/22 IPv6: 2a0a:8500::/29 Signature Algorithm: sha256WithRSAEncryption 03:27:5c:42:1c:10:5f:7d:af:29:32:50:ec:50:a5:69:02:d1: 8d:aa:34:1f:b1:e9:fd:25:31:71:5a:5c:b3:78:4c:7b:08:dc: 23:0e:20:fd:28:04:ef:b7:10:c3:12:5f:96:bb:e6:dc:5e:1b: eb:20:94:5a:80:52:49:a1:05:3e:88:f5:37:1b:db:0e:16:5f: bb:c6:fe:47:9a:28:db:65:5d:fb:23:c2:13:b3:45:03:73:68: bb:f6:e0:1b:0d:b0:bb:97:59:c8:0f:91:1d:c1:9c:8c:d3:f7: e4:f2:9c:cc:28:82:cc:17:eb:e8:8a:91:c8:58:db:61:02:33: c4:0a:fb:1f:9c:1c:28:27:eb:b5:a2:c5:be:c0:dc:9d:b0:47: ff:1b:6f:a4:32:4a:8c:70:14:4b:6a:d5:f3:f1:a9:af:f1:66: 11:30:9d:a6:99:af:e9:f9:3c:5e:8a:96:83:7e:70:d9:ec:a8: 83:af:a0:8d:ab:f0:5b:49:0e:b2:23:26:ec:c5:36:00:1c:2f: 91:62:16:87:36:20:f1:e6:45:8c:c0:69:8d:11:58:96:48:fd: 99:a8:b4:85:6a:56:0b:44:1b:b1:67:74:39:d2:d3:93:dd:94: 6f:12:1f:5b:68:8e:d5:9b:ca:f7:e5:12:14:4e:13:62:3b:5f: 01:8d:ef:9e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x1nQ6Axyo4ul8d/BucH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZGRjYmM4ZjYxYjI2MGZkM2YzZTc4YjZiODY4NzdjYjk1 ZmQ4M2UwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGI5MTY3Y2U2N2RhNzA0NDcwNWFhY2EyOGQ2Nzg3YzcyYzUyMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOKdVNmFC2JQfHzLXHIOsfdkLExb kG9hz8KbP0K7scBmnlthrJW+9gGo6AhZkt5IznZCyB6yo5EnEv2DiXMlv01oxKJj yovEZbCCtoed51Kc0+CY1CYs2juY1xxswrLz8QVA4TbL1kY1yC8YRFCAX5THI5yx /h05lec6Fu3BbqZ+uYCVYJXM7+QMaXhhGn2BMWaBH5HamhP4v8xrwk80AgZTHQvE wBnM5ZI3wtcjoNQSDQ9/aCLvyfLamAW+H7tkItE+PeBw6gPhC34gp2CYsMCErMmQ dajTDjX088PMp/wP24J3Ko3F5ZFLOoYth8Fu/tNrsiI/44Izo93/p6+HxQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMi5FnzmfacERwWqyijWeHxyxSHHMB8GA1UdIwQY MBaAFDTdy8j2GyYP0/Pni2uGh3y5X9g+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk4zTHlQWWJKZ19UOC1lTGE0YUhmTGxmMkQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82NTA4YTEtNDQxMi00MGM3LThhNzIt NTJjZDZlODlhYThkLzEveUxrV2ZPWjlwd1JIQmFyS0tOWjRmSExGSWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82NTA4YTEtNDQxMi00MGM3LThhNzItNTJjZDZlODlhYThk LzEvTk4zTHlQWWJKZ19UOC1lTGE0YUhmTGxmMkQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaDwMA0E AgACMAcDBQMqCoUAMA0GCSqGSIb3DQEBCwUAA4IBAQADJ1xCHBBffa8pMlDsUKVp AtGNqjQfsen9JTFxWlyzeEx7CNwjDiD9KATvtxDDEl+Wu+bcXhvrIJRagFJJoQU+ iPU3G9sOFl+7xv5HmijbZV37I8ITs0UDc2i79uAbDbC7l1nID5EdwZyM0/fk8pzM KILMF+voipHIWNthAjPECvsfnBwoJ+u1osW+wNydsEf/G2+kMkqMcBRLatXz8amv 8WYRMJ2mma/p+TxeipaDfnDZ7KiDr6CNq/BbSQ6yIybsxTYAHC+RYhaHNiDx5kWM wGmNEViWSP2ZqLSFalYLRBuxZ3Q50tOT3ZRvEh9baI7Vm8r35RIUThNiO18Bje+e -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:14 2026 by rpki-client