This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-JFyZ2DwKH3gKxE0s_evc4xC68g.roa File: 1-JFyZ2DwKH3gKxE0s_evc4xC68g.roa (raw, json) Hash identifier: T5m2MdGWQVlhL4k8ff1fNCbFRH/mZvZOdJaE3QnUEts= Subject key identifier: F8:91:72:67:60:F0:28:7D:E0:2B:11:34:B3:F7:AF:73:8C:42:EB:C8 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1379E2731389F6F30DCC44ABBFC3B3 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-JFyZ2DwKH3gKxE0s_evc4xC68g.roa Signing time: Fri 02 Jan 2026 00:20:09 +0000 ROA not before: Fri 02 Jan 2026 00:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63127 IP address blocks: 185.218.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:79:e2:73:13:89:f6:f3:0d:cc:44:ab:bf:c3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f891726760f0287de02b1134b3f7af738c42ebc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:0d:1a:ec:ca:7e:95:46:e7:56:10:bf:52: 24:e4:31:81:ce:d9:2f:27:09:9c:12:5a:96:3d:09: 4d:15:0b:0b:c8:64:02:92:e4:b3:0d:7d:35:1f:16: ff:b4:d4:81:49:cd:96:0a:4e:18:a7:76:0e:ad:73: ba:9e:3e:ca:7d:39:f0:48:dd:94:ff:6a:c2:87:61: e9:ac:32:4f:0f:69:e2:0f:1b:1f:4c:2d:a7:eb:94: b6:f6:4e:de:7c:1b:7c:89:c3:65:43:10:a9:99:c9: 6d:6f:e8:d6:45:25:9b:98:1e:f6:8d:ef:95:26:15: f3:cb:a3:fa:53:da:5c:a6:28:c8:37:74:f2:9a:60: a0:4d:9a:ab:5b:6c:74:35:e6:a0:0b:ef:e7:f1:16: 15:ac:0e:b8:7c:c7:95:f7:76:13:fa:8e:ad:9a:1f: 3d:a4:fe:46:e0:66:e3:8d:84:2f:fd:25:83:b5:b7: bc:f0:cc:f7:d0:b5:c2:bd:04:05:2d:77:4c:5f:a9: df:30:4f:40:a4:f7:dc:33:ad:24:4b:9a:0a:6c:fd: b5:99:e4:e9:ca:46:9d:6b:31:b5:a1:cf:ed:08:6d: ec:2c:d6:03:33:9e:62:f0:f3:49:59:11:aa:e5:57: 27:68:b3:4c:7a:e8:84:ef:d7:de:f3:65:0e:86:be: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:91:72:67:60:F0:28:7D:E0:2B:11:34:B3:F7:AF:73:8C:42:EB:C8 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-JFyZ2DwKH3gKxE0s_evc4xC68g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.23.0/24 Signature Algorithm: sha256WithRSAEncryption 45:35:34:94:b2:fc:eb:06:b3:33:eb:f8:1f:74:e0:71:63:e8: 67:22:83:29:a8:5e:3f:47:e9:c6:a2:f2:68:6e:a7:cd:69:d4: ba:92:49:66:48:d2:c0:4a:8b:cd:01:b2:36:40:ed:52:bd:05: 4d:cf:64:b6:25:76:44:0b:9f:87:92:15:5d:37:9c:d4:db:46: 5c:3e:2a:85:51:48:cc:e9:01:47:27:28:03:41:16:6b:58:7b: 51:b7:1e:80:f9:7a:9c:07:07:87:ea:02:11:81:08:62:a9:bf: 3b:eb:b7:66:71:0f:54:d9:c7:6f:fb:c5:80:c6:9e:35:a6:98: 09:ad:91:94:85:be:f7:75:1d:c9:3f:e4:75:42:4f:18:f6:a5: 6a:51:5d:33:37:0e:a2:da:e3:ef:1c:bc:09:2e:84:70:35:e1: 64:07:81:ba:77:17:de:c3:b6:c2:e5:14:c8:11:d2:f1:9b:45: a5:87:ab:8a:0f:df:1e:11:b3:ad:ca:b8:75:76:6f:49:f9:17: 36:58:a4:a6:cd:19:ef:69:72:0b:ec:ef:db:c1:bd:4f:41:af: e1:3e:0d:ee:c0:23:8d:71:5d:ec:d1:79:df:91:77:f2:bf:54: 6c:1b:1c:a3:9c:b1:95:98:d6:26:96:7f:8d:22:af:62:2d:eb: 00:03:9c:f9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8E3nicxOJ9vMNzESrv8OzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODkxNzI2NzYwZjAyODdkZTAyYjExMzRiM2Y3YWY3MzhjNDJlYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9sNGuzKfpVG51YQv1Ik5DGBztkv JwmcElqWPQlNFQsLyGQCkuSzDX01Hxb/tNSBSc2WCk4Yp3YOrXO6nj7KfTnwSN2U /2rCh2HprDJPD2niDxsfTC2n65S29k7efBt8icNlQxCpmcltb+jWRSWbmB72je+V JhXzy6P6U9pcpijIN3TymmCgTZqrW2x0NeagC+/n8RYVrA64fMeV93YT+o6tmh89 pP5G4GbjjYQv/SWDtbe88Mz30LXCvQQFLXdMX6nfME9ApPfcM60kS5oKbP21meTp ykadazG1oc/tCG3sLNYDM55i8PNJWRGq5VcnaLNMeuiE79fe82UOhr5Y9QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPiRcmdg8Ch94CsRNLP3r3OMQuvIMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvMS1KRnlaMkR3S0gzZ0t4RTBzX2V2YzR4QzY4Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFi Yy8xL1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnaFzAN BgkqhkiG9w0BAQsFAAOCAQEARTU0lLL86wazM+v4H3TgcWPoZyKDKaheP0fpxqLy aG6nzWnUupJJZkjSwEqLzQGyNkDtUr0FTc9ktiV2RAufh5IVXTec1NtGXD4qhVFI zOkBRycoA0EWa1h7UbcegPl6nAcHh+oCEYEIYqm/O+u3ZnEPVNnHb/vFgMaeNaaY Ca2RlIW+93UdyT/kdUJPGPalalFdMzcOotrj7xy8CS6EcDXhZAeBuncX3sO2wuUU yBHS8ZtFpYerig/fHhGzrcq4dXZvSfkXNlikps0Z72lyC+zv28G9T0Gv4T4N7sAj jXFd7NF535F38r9UbBsco5yxlZjWJpZ/jSKvYi3rAAOc+Q== -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:21 2026 by rpki-client