This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/Y4yIp4TOXR8P9we0PVCp5mPF1Wg.roa File: Y4yIp4TOXR8P9we0PVCp5mPF1Wg.roa (raw, json) Hash identifier: OC/VjislJpL/akKc6zsS3UsisTDD8FgDqZwMfSBlbaM= Subject key identifier: 63:8C:88:A7:84:CE:5D:1F:0F:F7:07:B4:3D:50:A9:E6:63:C5:D5:68 Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2 Certificate serial: 019B7F1521E6DF665BC5A1E9A1702641902A Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/Y4yIp4TOXR8P9we0PVCp5mPF1Wg.roa Signing time: Fri 02 Jan 2026 14:20:49 +0000 ROA not before: Fri 02 Jan 2026 14:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205321 IP address blocks: 185.217.248.0/22 maxlen: 24 2a0c:af00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:21:e6:df:66:5b:c5:a1:e9:a1:70:26:41:90:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2 Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=638c88a784ce5d1f0ff707b43d50a9e663c5d568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:6b:0b:b7:05:90:91:d5:82:da:eb:ba:7e: 8c:f9:92:8b:8d:01:80:2a:1e:35:97:b3:b0:1d:b2: 32:7d:56:4a:e2:50:4f:b0:f1:66:c7:6c:27:dc:86: 36:a7:45:56:e5:34:72:bd:05:95:8d:a8:3a:6f:66: dd:c3:c5:a5:af:fc:a1:0b:07:ce:a8:2e:13:21:89: ce:c9:96:dc:df:6c:fc:2f:19:b5:bb:3e:10:33:3a: a5:79:cd:65:4a:f5:f5:b3:d3:6d:b6:5e:5f:a5:ae: bc:bd:10:6a:92:1e:4d:b8:fd:c0:fe:e6:fa:8b:49: dd:cb:97:32:5e:ac:b9:26:c6:f2:52:0a:2d:e0:15: 42:22:91:30:b6:59:1f:7c:8f:c9:d9:e3:33:0a:bd: 23:62:61:26:f7:22:e8:00:96:6a:ce:5b:ca:bc:5c: 62:09:cd:f5:92:35:ef:33:77:4f:0f:28:40:bb:01: a1:75:f6:bb:33:4d:b0:8a:8f:13:7e:84:69:43:89: 6b:d0:58:a1:31:cd:08:76:9c:0b:b6:29:c2:6d:f4: 43:80:85:a0:2c:25:02:c3:b3:99:be:4f:29:92:f7: 0e:1e:88:8c:dd:1b:a1:13:22:f3:31:0f:13:3d:33: 13:e1:94:cc:97:44:b6:2f:3b:78:e8:b4:94:79:26: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8C:88:A7:84:CE:5D:1F:0F:F7:07:B4:3D:50:A9:E6:63:C5:D5:68 X509v3 Authority Key Identifier: keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/Y4yIp4TOXR8P9we0PVCp5mPF1Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.248.0/22 IPv6: 2a0c:af00::/29 Signature Algorithm: sha256WithRSAEncryption 45:4b:c8:f3:93:21:7f:06:62:b2:7b:49:97:4c:1b:b9:02:ba: de:bb:39:d8:af:e6:4c:ac:19:e5:f1:7f:88:0e:d5:3a:08:c2: 0a:0f:a1:ad:5b:c6:0a:d6:94:f8:f7:cb:b9:5c:eb:2b:33:42: 1f:a0:dd:5d:d0:79:91:2c:7c:b7:74:c2:fd:a3:4c:5b:8a:22: a0:c4:f2:7b:86:fa:c4:4b:0b:3d:bc:db:9d:d8:0d:82:98:6b: e4:3d:d0:e9:83:46:07:08:28:30:65:1b:a6:4a:e5:0a:e2:ed: 2f:10:76:8e:31:1a:29:9e:ec:45:39:9a:3f:ce:fc:b0:1c:91: f1:dc:10:63:ec:1a:59:b0:1d:19:13:6f:e3:42:b4:71:a7:9e: be:b7:01:2d:08:1e:d6:0b:36:7f:ec:a1:57:22:76:2c:0d:8f: b2:64:f0:07:19:7d:1f:da:8d:6e:fb:4c:2d:83:d5:9f:18:a8: 2e:19:2f:28:34:8b:b0:7b:31:5c:06:18:15:9d:11:07:d2:c2: 6e:d7:ea:e7:e2:02:96:1a:aa:6d:3f:47:94:fb:01:47:80:ae: 67:b3:65:b0:87:21:49:4c:66:24:af:1d:0a:55:29:34:93:49: 6b:95:e7:8b:9a:63:ac:bc:20:11:5d:10:f9:70:29:a4:0a:b5: 72:cc:0f:c7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FSHm32ZbxaHpoXAmQZAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmQ4NmMwMjhiZmMzOGU4NzU0NTVjZjgyNjg5YTM2MjY1 MzAyYzIwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzhjODhhNzg0Y2U1ZDFmMGZmNzA3YjQzZDUwYTllNjYzYzVkNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp9rC7cFkJHVgtrrun6M+ZKLjQGA Kh41l7OwHbIyfVZK4lBPsPFmx2wn3IY2p0VW5TRyvQWVjag6b2bdw8Wlr/yhCwfO qC4TIYnOyZbc32z8Lxm1uz4QMzqlec1lSvX1s9Nttl5fpa68vRBqkh5NuP3A/ub6 i0ndy5cyXqy5JsbyUgot4BVCIpEwtlkffI/J2eMzCr0jYmEm9yLoAJZqzlvKvFxi Cc31kjXvM3dPDyhAuwGhdfa7M02wio8TfoRpQ4lr0FihMc0IdpwLtinCbfRDgIWg LCUCw7OZvk8pkvcOHoiM3RuhEyLzMQ8TPTMT4ZTMl0S2Lzt46LSUeSaXAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGOMiKeEzl0fD/cHtD1QqeZjxdVoMB8GA1UdIwQY MBaAFJ0thsAov8OOh1RVz4JomjYmUwLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEt NDRjM2I3NWQzZjMzLzEvWTR5SXA0VE9YUjhQOXdlMFBWQ3A1bVBGMVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEtNDRjM2I3NWQzZjMz LzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudn4MA0E AgACMAcDBQMqDK8AMA0GCSqGSIb3DQEBCwUAA4IBAQBFS8jzkyF/BmKye0mXTBu5 ArreuznYr+ZMrBnl8X+IDtU6CMIKD6GtW8YK1pT498u5XOsrM0IfoN1d0HmRLHy3 dML9o0xbiiKgxPJ7hvrESws9vNud2A2CmGvkPdDpg0YHCCgwZRumSuUK4u0vEHaO MRopnuxFOZo/zvywHJHx3BBj7BpZsB0ZE2/jQrRxp56+twEtCB7WCzZ/7KFXInYs DY+yZPAHGX0f2o1u+0wtg9WfGKguGS8oNIuwezFcBhgVnREH0sJu1+rn4gKWGqpt P0eU+wFHgK5ns2WwhyFJTGYkrx0KVSk0k0lrleeLmmOsvCARXRD5cCmkCrVyzA/H -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:47 2026 by rpki-client