This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa File: Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa (raw, json) Hash identifier: VttLajARZj1VpP60iZ08cMDJLdMSXXWBBP02KPI/yEo= Subject key identifier: 62:3F:30:8C:56:69:80:50:7B:37:C4:15:BE:BF:3F:11:9B:47:9B:BE Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8 Certificate serial: 019B7CEE4717CF322332EFCE6ACEE0E3FC1B Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa Signing time: Fri 02 Jan 2026 04:19:09 +0000 ROA not before: Fri 02 Jan 2026 04:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42487 IP address blocks: 185.173.200.0/22 maxlen: 22 2a0e:e080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:47:17:cf:32:23:32:ef:ce:6a:ce:e0:e3:fc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8 Validity Not Before: Jan 2 04:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=623f308c566980507b37c415bebf3f119b479bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:de:0d:4a:9a:b6:ba:8c:93:58:0a:8a:df:84: 5b:35:14:84:76:a0:50:53:b4:0f:3b:9f:6b:5c:91: 4b:6d:39:a1:80:5c:8a:4e:10:eb:4c:c2:dd:a6:2e: e6:cf:e5:64:df:8a:f1:13:87:eb:a5:f6:86:26:88: 4d:85:9c:a1:3e:b2:a8:af:92:41:a0:d4:1f:74:78: 7b:5c:67:7a:3e:d2:3c:9c:30:6f:e4:a7:55:eb:18: a2:36:d0:4e:76:91:16:58:b2:a6:90:8e:d6:7a:10: f0:9e:42:23:1a:9d:49:d5:a0:3a:31:d6:03:37:e1: 31:60:cf:19:dd:2e:31:40:e9:02:cb:75:79:e6:3c: 75:e8:02:55:d2:7e:52:62:81:2d:f7:e9:48:51:ac: 3d:15:2c:59:fc:86:7a:8a:35:09:cf:8c:03:aa:ab: 1a:c5:6a:bb:33:65:f8:a1:21:f1:5d:39:8e:36:3d: 6b:77:69:4b:f6:bf:6e:9d:82:47:88:31:47:98:54: 13:1c:fc:e2:95:ec:5e:5b:49:9b:59:34:ea:44:e6: 3e:74:23:31:a5:c7:23:94:6a:b5:d6:14:7c:cf:0f: 04:68:27:3b:bf:a5:99:1e:36:a0:9d:db:f8:ab:79: 10:cb:5d:1e:5a:26:d2:44:32:bc:5e:ab:48:a6:11: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3F:30:8C:56:69:80:50:7B:37:C4:15:BE:BF:3F:11:9B:47:9B:BE X509v3 Authority Key Identifier: keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.200.0/22 IPv6: 2a0e:e080::/32 Signature Algorithm: sha256WithRSAEncryption 91:8f:dc:bc:31:1a:ee:fb:05:61:d2:23:19:1b:c5:b3:47:5e: 06:23:6d:ee:76:39:77:e3:55:0b:d0:1a:09:d2:eb:8a:7a:c1: ad:fc:be:5c:f8:73:df:e7:92:0e:fc:92:2c:71:ab:bb:e3:d4: 80:28:9d:6e:b9:2f:bf:f2:2a:36:2f:35:69:df:2f:38:14:4e: f4:f5:4e:b6:90:2c:43:b5:a7:e5:af:12:8e:84:0a:09:e9:47: 6c:44:5a:56:fc:91:cd:fd:63:a1:f8:4a:0d:78:5d:99:0a:93: dc:67:a7:34:89:a7:b5:84:51:69:0c:35:68:87:c3:57:7f:7c: 43:44:a5:b5:15:e7:8d:61:f9:07:ff:48:27:42:06:dd:90:df: d2:a2:af:03:ec:0f:1a:71:92:5f:62:4b:dc:d8:5d:c2:bd:ab: 18:6e:d8:1c:4a:af:c4:94:e1:c5:15:29:f6:73:a8:20:86:78: 3e:2a:54:6a:38:24:ba:20:e1:bf:84:05:47:0b:49:ec:4b:72: 94:3c:06:16:26:d8:a4:49:15:0d:60:35:c8:70:76:e4:c4:67: 79:07:d6:bb:e5:9a:25:cd:fc:e4:84:65:69:e8:c9:11:44:cb: bb:36:cf:ba:7a:fe:27:a4:d1:5a:89:e4:7e:cc:e5:a8:ff:2e: ef:f6:5b:29 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87kcXzzIjMu/Oas7g4/wbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx N2FjZTgwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjNmMzA4YzU2Njk4MDUwN2IzN2M0MTViZWJmM2YxMTliNDc5YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA294NSpq2uoyTWAqK34RbNRSEdqBQ U7QPO59rXJFLbTmhgFyKThDrTMLdpi7mz+Vk34rxE4frpfaGJohNhZyhPrKor5JB oNQfdHh7XGd6PtI8nDBv5KdV6xiiNtBOdpEWWLKmkI7WehDwnkIjGp1J1aA6MdYD N+ExYM8Z3S4xQOkCy3V55jx16AJV0n5SYoEt9+lIUaw9FSxZ/IZ6ijUJz4wDqqsa xWq7M2X4oSHxXTmONj1rd2lL9r9unYJHiDFHmFQTHPzilexeW0mbWTTqROY+dCMx pccjlGq11hR8zw8EaCc7v6WZHjagndv4q3kQy10eWibSRDK8XqtIphGq9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGI/MIxWaYBQezfEFb6/PxGbR5u+MB8GA1UdIwQY MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt MWQ5Yzg2NDE2ZTliLzEvWWo4d2pGWnBnRkI3TjhRVnZyOF9FWnRIbTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua3IMA0E AgACMAcDBQAqDuCAMA0GCSqGSIb3DQEBCwUAA4IBAQCRj9y8MRru+wVh0iMZG8Wz R14GI23udjl341UL0BoJ0uuKesGt/L5c+HPf55IO/JIscau749SAKJ1uuS+/8io2 LzVp3y84FE709U62kCxDtaflrxKOhAoJ6UdsRFpW/JHN/WOh+EoNeF2ZCpPcZ6c0 iae1hFFpDDVoh8NXf3xDRKW1FeeNYfkH/0gnQgbdkN/Soq8D7A8acZJfYkvc2F3C vasYbtgcSq/ElOHFFSn2c6gghng+KlRqOCS6IOG/hAVHC0nsS3KUPAYWJtikSRUN YDXIcHbkxGd5B9a75ZolzfzkhGVp6MkRRMu7Ns+6ev4npNFaieR+zOWo/y7v9lsp -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:04 2026 by rpki-client