This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/A12a7z7NDXNCp-e93FQ8khRnSTQ.roa File: A12a7z7NDXNCp-e93FQ8khRnSTQ.roa (raw, json) Hash identifier: yEmzI8DlZEPwrpJxmc41QxZNYwhgIbKyi4rcXGtNbT0= Subject key identifier: 03:5D:9A:EF:3E:CD:0D:73:42:A7:E7:BD:DC:54:3C:92:14:67:49:34 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1367055FD79562574FB83C5D50D357 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/A12a7z7NDXNCp-e93FQ8khRnSTQ.roa Signing time: Fri 02 Jan 2026 00:20:04 +0000 ROA not before: Fri 02 Jan 2026 00:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 185.199.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:67:05:5f:d7:95:62:57:4f:b8:3c:5d:50:d3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=035d9aef3ecd0d7342a7e7bddc543c9214674934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:b2:d2:bb:0e:7e:55:89:b0:68:f6:af:04: d4:b9:e7:d2:39:14:89:cb:f6:a5:81:e9:e0:10:4e: b5:cb:37:79:09:5a:43:2e:08:c8:ce:6d:23:cc:4a: 7a:fe:4a:45:84:eb:4a:aa:0a:31:80:3d:04:28:92: cf:e9:a9:c3:f7:f4:72:de:a9:80:27:13:25:26:e7: ea:93:be:94:a8:64:ff:71:37:60:11:a7:ae:cf:f9: 05:ab:4c:0b:ea:8d:8a:70:14:ff:34:cc:40:d7:1e: 30:15:4a:c1:a5:f3:25:94:74:31:23:bb:f0:cc:99: 69:f1:de:d5:87:b0:82:2c:f0:3f:50:e0:ca:f4:8b: e0:29:1b:3c:96:3c:12:6e:90:5d:dd:2c:1a:e3:de: fc:51:50:cd:7d:65:1c:e2:d6:c7:6b:01:da:26:49: 6b:e5:bd:48:c0:0b:f4:2f:7b:a2:d1:16:c2:46:76: 19:8a:99:10:f0:bd:90:23:27:f9:86:ba:72:e8:7f: a6:bd:ce:9b:f0:78:63:1a:35:b8:b7:a4:0c:34:b9: cb:03:a9:ed:dd:b0:dc:ec:61:f2:4b:ff:cf:46:66: 15:18:cb:a0:87:71:07:26:c7:6b:cc:60:44:6e:b7: 00:bf:47:d2:fd:b4:11:c1:15:a6:a7:24:9f:8c:a6: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5D:9A:EF:3E:CD:0D:73:42:A7:E7:BD:DC:54:3C:92:14:67:49:34 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/A12a7z7NDXNCp-e93FQ8khRnSTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.159.0/24 Signature Algorithm: sha256WithRSAEncryption 48:19:b0:91:a8:2f:5c:e5:2a:71:e7:e3:39:af:4e:e9:45:10: 03:c2:92:da:c3:71:65:e0:91:04:bf:d8:ec:ce:ce:c8:c2:07: ed:bc:34:25:0b:2d:64:48:9a:e6:c2:85:d6:f8:d6:ba:fc:10: 68:4b:52:4c:82:9f:c5:cb:2d:0e:a9:44:a7:92:97:a1:e0:b5: 15:4c:79:2e:77:e7:91:31:29:65:8c:b9:db:eb:1d:75:ed:ef: b7:3f:4f:19:8a:d7:b8:08:43:d0:27:50:0d:69:92:fd:58:c6: 83:63:9f:fe:a2:3c:94:4a:4f:b7:7f:39:a4:d7:4d:20:61:2b: 12:9d:28:33:66:df:9f:f3:01:d8:da:1a:bf:ab:95:74:88:d0: 50:8f:e9:f0:bf:34:b9:a8:27:62:f4:5c:5c:29:fa:51:08:9e: b8:f8:1a:8d:99:2e:41:7d:c3:cd:de:8c:cc:36:f5:55:ea:2d: 8e:45:0a:dd:7b:19:2b:13:fb:2f:67:f4:c0:de:33:93:33:e7: e0:26:3c:19:18:ca:17:f8:b9:7b:cb:b9:e5:51:a9:83:61:e4: c7:c6:16:84:46:1f:f4:0e:c6:40:bc:42:a1:94:16:22:21:5a: d1:aa:76:e2:39:85:8a:39:32:d6:e5:62:9a:a8:d8:45:98:95: 6c:fa:ab:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2cFX9eVYldPuDxdUNNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzVkOWFlZjNlY2QwZDczNDJhN2U3YmRkYzU0M2M5MjE0Njc0OTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulqy0rsOflWJsGj2rwTUuefSORSJ y/algengEE61yzd5CVpDLgjIzm0jzEp6/kpFhOtKqgoxgD0EKJLP6anD9/Ry3qmA JxMlJufqk76UqGT/cTdgEaeuz/kFq0wL6o2KcBT/NMxA1x4wFUrBpfMllHQxI7vw zJlp8d7Vh7CCLPA/UODK9IvgKRs8ljwSbpBd3Swa4978UVDNfWUc4tbHawHaJklr 5b1IwAv0L3ui0RbCRnYZipkQ8L2QIyf5hrpy6H+mvc6b8HhjGjW4t6QMNLnLA6nt 3bDc7GHyS//PRmYVGMugh3EHJsdrzGBEbrcAv0fS/bQRwRWmpySfjKaIdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANdmu8+zQ1zQqfnvdxUPJIUZ0k0MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvQTEyYTd6N05EWE5DcC1lOTNGUThraFJuU1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucefMA0G CSqGSIb3DQEBCwUAA4IBAQBIGbCRqC9c5Spx5+M5r07pRRADwpLaw3Fl4JEEv9js zs7IwgftvDQlCy1kSJrmwoXW+Na6/BBoS1JMgp/Fyy0OqUSnkpeh4LUVTHkud+eR MSlljLnb6x117e+3P08Zite4CEPQJ1ANaZL9WMaDY5/+ojyUSk+3fzmk100gYSsS nSgzZt+f8wHY2hq/q5V0iNBQj+nwvzS5qCdi9FxcKfpRCJ64+BqNmS5BfcPN3ozM NvVV6i2ORQrdexkrE/svZ/TA3jOTM+fgJjwZGMoX+Ll7y7nlUamDYeTHxhaERh/0 DsZAvEKhlBYiIVrRqnbiOYWKOTLW5WKaqNhFmJVs+qu/ -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:28 2026 by rpki-client