This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa File: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (raw, json) Hash identifier: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I= Subject key identifier: C1:89:CD:C1:17:F4:2F:CF:BB:CC:09:50:F5:E3:2C:12:7A:5A:B6:A5 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B7DCA46AE40973344296B2FCB94324301 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa Signing time: Fri 02 Jan 2026 08:19:26 +0000 ROA not before: Fri 02 Jan 2026 08:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211701 IP address blocks: 185.131.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:46:ae:40:97:33:44:29:6b:2f:cb:94:32:43:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c189cdc117f42fcfbbcc0950f5e32c127a5ab6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:9c:f8:fe:67:cf:17:30:5f:9a:f6:0f:d0: 14:ed:02:ae:2b:03:7f:ce:8e:5c:7a:c0:35:8a:0e: c1:dc:5d:35:43:b1:3c:4a:d7:e7:f1:ec:03:f5:ec: 20:17:53:03:82:29:45:9b:eb:06:79:e4:a2:4d:e5: 60:9d:96:5e:46:2b:d5:33:da:f8:e5:08:e8:d6:e3: 8b:17:41:77:c9:4a:cf:dc:94:72:6d:36:cd:a5:8c: 5f:08:fb:4a:e8:01:59:28:fd:c0:e3:f7:1b:45:9f: df:c1:15:be:fc:db:c9:77:f3:03:d7:5c:6e:79:5c: 14:a9:7b:cf:ec:e1:0c:33:77:8b:c1:ea:95:0b:0e: 64:94:af:e1:17:b7:20:a5:f1:86:b7:99:a5:62:f8: a4:9d:4e:3d:03:6a:42:43:cb:b4:ab:06:98:7c:0c: c9:15:d2:a1:eb:a5:82:0c:2c:16:94:18:65:3d:fa: 2d:13:a8:e5:95:64:17:ae:b1:ec:3d:8e:67:85:11: 48:c1:61:c3:09:94:2d:e7:26:4c:7f:f8:0f:53:fc: 18:cf:fb:01:9b:08:ec:a7:5b:c1:bf:b6:c5:57:c9: 71:94:69:e9:c6:1e:d4:06:64:6c:5d:c5:37:96:2a: 89:00:b0:9d:08:e0:17:81:c0:09:5f:39:b2:31:a3: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:89:CD:C1:17:F4:2F:CF:BB:CC:09:50:F5:E3:2C:12:7A:5A:B6:A5 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.223.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:7c:c9:a6:67:1c:ef:63:cc:2d:e0:ea:1d:97:9c:1e:72:b8: 84:11:d2:d0:95:bd:a9:82:11:9a:4a:e7:c0:51:f8:ea:b6:ce: 17:aa:7e:5f:5d:b5:ff:cc:21:71:0d:f5:11:de:c8:da:2f:eb: 6d:6e:58:59:64:97:31:8e:9b:a3:71:b7:26:23:1e:34:0f:0a: d7:d1:f4:5c:3a:35:b6:db:3b:d6:ee:a3:07:0d:22:e2:84:b7: 7e:75:9c:b1:cf:5b:71:89:67:57:cb:03:7e:f6:73:00:e3:10: bb:72:fa:a3:09:b9:05:e6:6b:d1:b4:95:20:8c:ce:1c:71:87: 9d:31:88:19:73:6a:99:5c:0a:5d:1f:5c:3c:e2:6f:f4:89:0e: ac:40:95:68:b5:c8:a4:34:3e:83:8e:ab:89:eb:ec:51:92:6e: e6:1a:36:6a:52:b1:05:57:59:f9:01:d3:d0:74:84:8f:9a:d5: 46:3b:a2:1f:65:91:eb:9f:23:02:38:42:8b:d6:e8:10:ac:ed: 56:e4:e4:71:97:1c:20:c9:05:fd:d4:af:f8:91:84:90:41:95: 96:7b:25:af:1a:02:73:ce:13:8d:fa:8c:2c:d5:fb:29:ad:e2: 69:db:dc:d0:a6:c0:ad:b2:cc:3e:a7:99:20:46:4d:89:df:c0: 38:6d:d4:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykauQJczRClrL8uUMkMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTg5Y2RjMTE3ZjQyZmNmYmJjYzA5NTBmNWUzMmMxMjdhNWFiNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVec+P5nzxcwX5r2D9AU7QKuKwN/ zo5cesA1ig7B3F01Q7E8Stfn8ewD9ewgF1MDgilFm+sGeeSiTeVgnZZeRivVM9r4 5Qjo1uOLF0F3yUrP3JRybTbNpYxfCPtK6AFZKP3A4/cbRZ/fwRW+/NvJd/MD11xu eVwUqXvP7OEMM3eLweqVCw5klK/hF7cgpfGGt5mlYviknU49A2pCQ8u0qwaYfAzJ FdKh66WCDCwWlBhlPfotE6jllWQXrrHsPY5nhRFIwWHDCZQt5yZMf/gPU/wYz/sB mwjsp1vBv7bFV8lxlGnpxh7UBmRsXcU3liqJALCdCOAXgcAJXzmyMaPgtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMGJzcEX9C/Pu8wJUPXjLBJ6WralMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvd1luTndSZjBMOC03ekFsUTllTXNFbnBhdHFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYPfMA0G CSqGSIb3DQEBCwUAA4IBAQBtfMmmZxzvY8wt4Oodl5wecriEEdLQlb2pghGaSufA Ufjqts4Xqn5fXbX/zCFxDfUR3sjaL+ttblhZZJcxjpujcbcmIx40DwrX0fRcOjW2 2zvW7qMHDSLihLd+dZyxz1txiWdXywN+9nMA4xC7cvqjCbkF5mvRtJUgjM4ccYed MYgZc2qZXApdH1w84m/0iQ6sQJVotcikND6DjquJ6+xRkm7mGjZqUrEFV1n5AdPQ dISPmtVGO6IfZZHrnyMCOEKL1ugQrO1W5ORxlxwgyQX91K/4kYSQQZWWeyWvGgJz zhON+ows1fspreJp29zQpsCtssw+p5kgRk2J38A4bdT3 -----END CERTIFICATE-----Generated at Mon Jan 26 14:12:46 2026 by rpki-client