This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/yQugqDhsoFCyt4EOU-Yd8LiriqA.roa File: yQugqDhsoFCyt4EOU-Yd8LiriqA.roa (raw, json) Hash identifier: RbGDZvWEo1F7e5KTPgIMqC+hpQ10KuDrmfUdpa03+bk= Subject key identifier: C9:0B:A0:A8:38:6C:A0:50:B2:B7:81:0E:53:E6:1D:F0:B8:AB:8A:A0 Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188 Certificate serial: 019B78349184A1EE14602C5A0CAAC0B06AC7 Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/yQugqDhsoFCyt4EOU-Yd8LiriqA.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214662 IP address blocks: 185.228.98.0/23 maxlen: 23 185.228.98.0/24 maxlen: 24 185.228.99.0/24 maxlen: 24 2a0b:dcc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:91:84:a1:ee:14:60:2c:5a:0c:aa:c0:b0:6a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188 Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c90ba0a8386ca050b2b7810e53e61df0b8ab8aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:ee:fb:66:d3:e8:4e:57:f8:1a:61:d8:33: d9:9f:ee:61:17:92:e5:fa:c2:eb:9b:f8:ab:67:25: 58:98:f1:6d:f5:f3:af:4d:aa:6a:35:d6:8c:79:87: d9:8c:6e:0d:1a:53:a4:21:bc:c5:1e:18:85:6a:c3: e9:f8:3a:12:f4:d3:1a:ac:8a:2e:ea:b1:f2:34:e9: 7f:c7:85:0c:63:42:42:8e:da:55:89:5d:31:39:0b: f5:52:3c:06:d0:4a:47:1b:a6:35:75:b4:75:a8:6e: ec:2b:88:9d:eb:3b:00:ab:2e:0b:ed:ab:9b:a3:f4: e0:a6:74:13:fd:5b:50:84:34:e9:f0:f0:cb:8e:0d: 6c:23:88:23:6b:ad:86:f0:ee:65:3b:d5:a5:d5:8a: af:12:f3:31:9d:5b:1d:88:a1:19:71:b4:fb:5b:3a: 9c:91:89:71:e4:1f:aa:c9:f7:76:d3:22:a4:84:43: 0b:93:ed:5a:e1:3b:df:02:60:d9:e4:35:b3:9e:cd: a2:72:b5:10:4c:6d:d9:5c:b5:be:c6:b4:04:85:39: 9e:6f:aa:d6:cb:fa:0e:e1:df:43:6d:f7:01:3a:c9: c1:5a:53:f8:55:ff:aa:aa:10:39:2e:e6:08:33:26: 4a:f4:eb:65:eb:7b:20:7e:5f:7b:f7:4b:3d:05:03: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0B:A0:A8:38:6C:A0:50:B2:B7:81:0E:53:E6:1D:F0:B8:AB:8A:A0 X509v3 Authority Key Identifier: keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/yQugqDhsoFCyt4EOU-Yd8LiriqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.98.0/23 IPv6: 2a0b:dcc7::/32 Signature Algorithm: sha256WithRSAEncryption 18:8f:d5:69:6a:2d:2f:5f:23:3f:1e:72:3e:c0:4b:61:b6:b3: 56:7f:37:7e:a0:ce:2b:4a:76:61:cc:ed:f4:3a:a8:67:98:84: 00:81:42:d0:3c:26:fd:5b:dd:17:02:2e:76:48:6e:28:6d:de: fe:1e:21:1a:c2:0f:9a:43:24:5a:70:9b:8c:4a:fe:86:69:a8: 57:ae:22:b9:5f:75:cb:7e:03:e2:86:fd:66:c8:77:24:cf:2a: 7b:c0:82:0f:72:2d:8a:76:96:86:d4:3d:5a:f9:a8:74:cd:92: 01:a6:f3:e4:dd:f8:65:5d:fe:bd:7c:5c:51:71:e6:e7:11:9f: 4d:39:14:f9:d1:08:6a:f5:a3:74:88:0d:1f:f7:c9:a1:33:30: 62:11:4f:2e:27:7a:ef:5d:dd:df:13:59:b9:b3:96:ad:8d:05: 52:b4:e2:4b:97:21:13:4a:79:70:bd:24:1b:0e:3c:dc:fc:07: da:3f:9c:60:f0:01:fa:35:13:e4:b6:cc:f5:91:31:4a:6d:46: 10:37:e8:8c:dd:13:07:fe:34:62:73:97:a8:a2:5b:01:22:22: eb:4a:71:22:6b:7a:f0:74:3c:4b:d3:e4:78:56:cd:53:38:f8: 0f:dd:1a:dc:0a:70:b2:50:de:eb:2e:78:67:61:12:bc:c5:3b: b9:96:c6:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NJGEoe4UYCxaDKrAsGrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxOGRkNmMwNjE4YmJmZWZmMWE4NGM5NGZkNjQxODllMTg0 NWIxODgwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTBiYTBhODM4NmNhMDUwYjJiNzgxMGU1M2U2MWRmMGI4YWI4YWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlDu+2bT6E5X+Bph2DPZn+5hF5Ll +sLrm/irZyVYmPFt9fOvTapqNdaMeYfZjG4NGlOkIbzFHhiFasPp+DoS9NMarIou 6rHyNOl/x4UMY0JCjtpViV0xOQv1UjwG0EpHG6Y1dbR1qG7sK4id6zsAqy4L7aub o/TgpnQT/VtQhDTp8PDLjg1sI4gja62G8O5lO9Wl1YqvEvMxnVsdiKEZcbT7Wzqc kYlx5B+qyfd20yKkhEMLk+1a4TvfAmDZ5DWzns2icrUQTG3ZXLW+xrQEhTmeb6rW y/oO4d9DbfcBOsnBWlP4Vf+qqhA5LuYIMyZK9Otl63sgfl9790s9BQNOvwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMkLoKg4bKBQsreBDlPmHfC4q4qgMB8GA1UdIwQY MBaAFCGN1sBhi7/v8ahMlP1kGJ4YRbGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEt OWJiNmJiMjgxZWE3LzEveVF1Z3FEaHNvRkN5dDRFT1UtWWQ4TGlyaXFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEtOWJiNmJiMjgxZWE3 LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBueRiMA0E AgACMAcDBQAqC9zHMA0GCSqGSIb3DQEBCwUAA4IBAQAYj9Vpai0vXyM/HnI+wEth trNWfzd+oM4rSnZhzO30OqhnmIQAgULQPCb9W90XAi52SG4obd7+HiEawg+aQyRa cJuMSv6GaahXriK5X3XLfgPihv1myHckzyp7wIIPci2KdpaG1D1a+ah0zZIBpvPk 3fhlXf69fFxRcebnEZ9NORT50Qhq9aN0iA0f98mhMzBiEU8uJ3rvXd3fE1m5s5at jQVStOJLlyETSnlwvSQbDjzc/AfaP5xg8AH6NRPktsz1kTFKbUYQN+iM3RMH/jRi c5eoolsBIiLrSnEia3rwdDxL0+R4Vs1TOPgP3RrcCnCyUN7rLnhnYRK8xTu5lsYZ -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:40 2026 by rpki-client