This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/zYkjl96qhuSKPjhR9FJ_SMLo0wo.roa File: zYkjl96qhuSKPjhR9FJ_SMLo0wo.roa (raw, json) Hash identifier: 6MFml2JMis3B7T1zy1tlmB3r3uzT/y8AN0S/oyRhlxc= Subject key identifier: CD:89:23:97:DE:AA:86:E4:8A:3E:38:51:F4:52:7F:48:C2:E8:D3:0A Certificate issuer: /CN=22e28e550314138f9d83a28b2d666e9b8744b510 Certificate serial: 019B7758DE4EED0199551643703942995EF4 Authority key identifier: 22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/zYkjl96qhuSKPjhR9FJ_SMLo0wo.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60884 IP address blocks: 185.24.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:de:4e:ed:01:99:55:16:43:70:39:42:99:5e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22e28e550314138f9d83a28b2d666e9b8744b510 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd892397deaa86e48a3e3851f4527f48c2e8d30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:91:ee:62:f5:82:a6:02:33:33:c2:08:56:39: 20:fe:e4:18:2c:68:37:3f:60:40:86:50:8f:f8:e0: 22:5c:ae:54:1d:97:27:a5:39:30:0b:8c:6e:4a:6f: 12:e8:4f:62:76:2d:f7:97:93:04:81:9c:22:1c:06: fd:3d:4a:e5:4c:d4:55:66:b4:29:0d:c4:c6:0b:8b: 2c:3e:8e:63:80:6b:cf:da:d8:20:9c:19:48:4f:1d: 44:73:d1:f1:c7:8a:1a:6b:1f:d3:12:93:0b:ce:6b: 0a:2b:aa:a9:c3:f2:9a:f3:03:be:53:88:6b:10:ab: 99:64:47:f9:af:2b:61:fc:f9:c2:7b:f9:23:0e:ec: dc:63:3a:a7:a8:d5:02:c4:b1:08:3a:c9:11:77:b8: 8e:c9:24:7a:16:1b:c4:b4:0c:c2:ff:29:23:a3:16: a0:24:03:6d:f2:c1:8c:d4:5b:d4:90:cb:03:db:f2: fc:0a:d4:fa:8e:fb:c1:f0:3b:2e:b7:72:78:71:b6: 9f:e2:9c:3f:79:65:b1:8a:62:f8:0f:a6:38:64:54: 44:ce:77:38:9d:a8:b6:fe:37:29:9b:1d:a8:4f:16: c1:5f:d0:90:15:cc:7e:78:59:be:77:e7:2f:6e:9e: d0:33:cd:8f:a0:c9:5b:9d:c5:82:e0:38:be:c8:e5: 80:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:89:23:97:DE:AA:86:E4:8A:3E:38:51:F4:52:7F:48:C2:E8:D3:0A X509v3 Authority Key Identifier: keyid:22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/zYkjl96qhuSKPjhR9FJ_SMLo0wo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.24.0/22 Signature Algorithm: sha256WithRSAEncryption a6:dc:17:65:22:98:70:7a:f6:82:e8:2d:97:df:68:ea:42:f7: 4f:2e:3e:8e:00:9a:88:90:b3:a9:69:fc:aa:fd:19:f6:3e:c0: 24:74:af:8f:da:03:68:90:01:be:72:a7:d8:57:2c:f5:20:39: c9:d9:23:7d:39:14:12:30:c3:73:9a:ba:10:fe:5b:27:a7:81: 2b:22:97:74:ab:d3:ab:88:0d:1d:20:e9:db:eb:15:e5:ff:c3: 6f:1d:8d:ea:26:f3:eb:8e:62:27:eb:f7:bc:2c:50:4b:b2:16: 0e:76:a4:86:9b:13:84:33:55:2a:6b:4f:ca:37:2e:6a:e1:3a: 5a:76:4a:fb:e3:d5:b4:64:1e:1d:5b:dc:88:7b:09:ba:c0:3b: 58:22:cd:84:0f:85:76:4f:f1:e7:ae:6e:37:33:8c:7b:02:41: bd:13:2b:19:1e:0b:95:a1:e9:2f:12:fc:7e:69:5a:12:41:ed: 05:3d:03:d2:23:54:fd:c3:75:09:e2:2e:31:e3:a2:3a:1e:7f: e9:42:11:1c:39:96:6b:58:96:ea:4a:29:18:d5:70:52:53:4b: f5:6f:a8:27:8e:a3:9c:2d:70:77:07:75:3e:f8:c2:17:df:cf: d2:63:78:5d:6d:b4:e3:74:65:96:89:ba:6b:ca:de:4d:a8:ed: 10:69:c2:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WN5O7QGZVRZDcDlCmV70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZTI4ZTU1MDMxNDEzOGY5ZDgzYTI4YjJkNjY2ZTliODc0 NGI1MTAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDg5MjM5N2RlYWE4NmU0OGEzZTM4NTFmNDUyN2Y0OGMyZThkMzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpHuYvWCpgIzM8IIVjkg/uQYLGg3 P2BAhlCP+OAiXK5UHZcnpTkwC4xuSm8S6E9idi33l5MEgZwiHAb9PUrlTNRVZrQp DcTGC4ssPo5jgGvP2tggnBlITx1Ec9Hxx4oaax/TEpMLzmsKK6qpw/Ka8wO+U4hr EKuZZEf5ryth/PnCe/kjDuzcYzqnqNUCxLEIOskRd7iOySR6FhvEtAzC/ykjoxag JANt8sGM1FvUkMsD2/L8CtT6jvvB8Dsut3J4cbaf4pw/eWWximL4D6Y4ZFREznc4 nai2/jcpmx2oTxbBX9CQFcx+eFm+d+cvbp7QM82PoMlbncWC4Di+yOWA1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2JI5feqobkij44UfRSf0jC6NMKMB8GA1UdIwQY MBaAFCLijlUDFBOPnYOiiy1mbpuHRLUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXVLT1ZRTVVFNC1kZzZLTExXWnVtNGRFdFJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zMzZhNmYtMmI4OS00YjMyLTg5ZjYt NGQyMDljMzI4OGFiLzEvellramw5NnFodVNLUGpoUjlGSl9TTUxvMHdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zMzZhNmYtMmI4OS00YjMyLTg5ZjYtNGQyMDljMzI4OGFi LzEvSXVLT1ZRTVVFNC1kZzZLTExXWnVtNGRFdFJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRgYMA0G CSqGSIb3DQEBCwUAA4IBAQCm3BdlIphwevaC6C2X32jqQvdPLj6OAJqIkLOpafyq /Rn2PsAkdK+P2gNokAG+cqfYVyz1IDnJ2SN9ORQSMMNzmroQ/lsnp4ErIpd0q9Or iA0dIOnb6xXl/8NvHY3qJvPrjmIn6/e8LFBLshYOdqSGmxOEM1Uqa0/KNy5q4Tpa dkr749W0ZB4dW9yIewm6wDtYIs2ED4V2T/Hnrm43M4x7AkG9EysZHguVoekvEvx+ aVoSQe0FPQPSI1T9w3UJ4i4x46I6Hn/pQhEcOZZrWJbqSikY1XBSU0v1b6gnjqOc LXB3B3U++MIX38/SY3hdbbTjdGWWibpryt5NqO0QacKP -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:37 2026 by rpki-client