This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa File: nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa (raw, json) Hash identifier: YIoLB/kdYI0wpUMtQO8K9AaO+DoKlWfs1MurD/HYA/k= Subject key identifier: 9E:4C:BA:55:8F:24:40:AA:92:CB:F2:68:FE:BC:B5:60:1F:BA:5D:79 Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019B7F15EB7AA8CAC44C997AD92CC139B9D6 Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216389 IP address blocks: 185.73.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:eb:7a:a8:ca:c4:4c:99:7a:d9:2c:c1:39:b9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e4cba558f2440aa92cbf268febcb5601fba5d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:ac:46:34:f3:90:56:11:39:b9:f3:88:2b: 5f:c2:6d:a0:e4:cd:d8:66:56:a9:df:d5:d1:26:75: 53:56:30:01:c0:4d:dd:0e:d8:0f:55:a8:86:e6:48: ee:d8:88:09:95:26:64:3e:54:d4:54:b9:5e:1f:8d: 1e:64:48:72:36:f9:bf:a7:8e:e7:aa:58:db:f4:e1: 27:14:77:0d:f3:41:3a:69:e0:68:91:09:81:d8:68: c1:e9:14:5b:6f:37:d8:9e:33:e6:65:c0:d4:37:41: 1d:b9:e6:b5:2c:79:f9:b9:dd:9a:ce:97:03:be:91: 34:68:93:7d:f0:f9:0f:e1:f8:3d:58:6b:b2:2a:8f: 1e:48:70:93:04:0f:6b:86:9c:35:af:3a:4b:f3:68: 2f:57:d2:91:5e:b3:92:59:ba:87:4d:c3:d6:a3:8d: 51:e2:82:ec:a0:aa:27:6f:81:94:f3:a1:2f:2a:01: 52:9e:15:eb:8b:42:af:ea:fd:03:04:5d:0f:e3:5f: 0f:85:e6:65:7a:13:8a:3f:fe:7a:3a:a0:4b:58:cd: 6a:7c:c5:a7:c9:5a:50:a7:96:b4:ce:1a:a1:e1:8a: 28:f3:32:6b:2e:d5:37:7a:d0:dc:4e:0f:9e:a1:69: 64:c1:c5:d0:1d:74:70:3f:99:7f:60:5f:d7:84:7e: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:BA:55:8F:24:40:AA:92:CB:F2:68:FE:BC:B5:60:1F:BA:5D:79 X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.128.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:82:4b:e0:2a:cb:75:0b:7a:97:5c:df:74:c0:5c:4f:a3:9f: 67:9b:f1:17:34:f2:08:ba:06:ac:bb:6e:74:db:1f:e6:a5:1a: 70:ea:a2:56:8c:c1:42:df:fa:8e:2a:72:c0:ce:45:77:dc:dd: 1b:ac:eb:ce:b2:d0:68:07:54:3d:86:04:b7:97:ef:f7:fe:a8: eb:3c:13:4c:8d:60:66:38:f6:d5:24:b1:73:a4:5d:52:c7:c3: 42:27:da:d1:8c:ce:52:fe:69:38:3a:ce:4a:9a:3c:51:f7:03: 53:e0:1e:dd:03:d0:8a:d0:26:c6:57:f7:0f:1f:fd:cc:49:57: 23:e4:3a:0f:b5:7c:83:40:1a:79:d0:36:eb:1e:b2:8c:2c:10: 49:f0:f2:c4:32:b1:c1:fa:cb:55:0c:b2:75:2e:e3:9a:d8:98: 94:96:1c:f5:77:cb:43:fd:00:1d:1e:ba:35:bf:c0:58:e8:e3: 50:77:81:dd:e3:1f:ec:62:3b:0b:5d:25:41:25:34:de:a0:5c: d4:7b:5c:b3:88:8a:d6:57:02:a1:55:56:d0:3e:4e:a8:c3:db: d4:b6:9f:9d:ac:76:45:43:a7:1e:36:b7:b2:45:8c:13:cb:23: ab:28:70:3c:e3:33:a9:fb:1a:32:23:c0:39:4f:7d:df:46:6d: 5e:b9:2a:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fet6qMrETJl62SzBObnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTRjYmE1NThmMjQ0MGFhOTJjYmYyNjhmZWJjYjU2MDFmYmE1ZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMisRjTzkFYRObnziCtfwm2g5M3Y Zlap39XRJnVTVjABwE3dDtgPVaiG5kju2IgJlSZkPlTUVLleH40eZEhyNvm/p47n qljb9OEnFHcN80E6aeBokQmB2GjB6RRbbzfYnjPmZcDUN0Eduea1LHn5ud2azpcD vpE0aJN98PkP4fg9WGuyKo8eSHCTBA9rhpw1rzpL82gvV9KRXrOSWbqHTcPWo41R 4oLsoKonb4GU86EvKgFSnhXri0Kv6v0DBF0P418PheZlehOKP/56OqBLWM1qfMWn yVpQp5a0zhqh4Yoo8zJrLtU3etDcTg+eoWlkwcXQHXRwP5l/YF/XhH7ydQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5MulWPJECqksvyaP68tWAful15MB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEvbmt5NlZZOGtRS3FTeV9Kb19yeTFZQi02WFhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUmAMA0G CSqGSIb3DQEBCwUAA4IBAQAsgkvgKst1C3qXXN90wFxPo59nm/EXNPIIugasu250 2x/mpRpw6qJWjMFC3/qOKnLAzkV33N0brOvOstBoB1Q9hgS3l+/3/qjrPBNMjWBm OPbVJLFzpF1Sx8NCJ9rRjM5S/mk4Os5KmjxR9wNT4B7dA9CK0CbGV/cPH/3MSVcj 5DoPtXyDQBp50DbrHrKMLBBJ8PLEMrHB+stVDLJ1LuOa2JiUlhz1d8tD/QAdHro1 v8BY6ONQd4Hd4x/sYjsLXSVBJTTeoFzUe1yziIrWVwKhVVbQPk6ow9vUtp+drHZF Q6ceNreyRYwTyyOrKHA84zOp+xoyI8A5T33fRm1euSpl -----END CERTIFICATE-----Generated at Mon Jan 26 19:55:51 2026 by rpki-client