This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rmh2Lktby-Qygq4U73exTcnG6sk.roa File: Rmh2Lktby-Qygq4U73exTcnG6sk.roa (raw, json) Hash identifier: VVXY8mpYfOxiC1Ej9qfVXz/GJqbfYhrGv7H/vaqyHyg= Subject key identifier: 46:68:76:2E:4B:5B:CB:E4:32:82:AE:14:EF:77:B1:4D:C9:C6:EA:C9 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C137CB938BD52985DEBAA1A69CD7FD6 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rmh2Lktby-Qygq4U73exTcnG6sk.roa Signing time: Fri 02 Jan 2026 00:20:10 +0000 ROA not before: Fri 02 Jan 2026 00:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138195 IP address blocks: 185.214.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:7c:b9:38:bd:52:98:5d:eb:aa:1a:69:cd:7f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4668762e4b5bcbe43282ae14ef77b14dc9c6eac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:06:ff:e0:80:71:5e:f4:9d:ba:38:ff:8b: 2b:d8:51:0b:01:19:6a:50:4b:58:d6:06:fe:ef:26: ab:b7:06:97:88:aa:78:c1:cc:a1:38:fa:72:1b:e0: 31:8b:24:30:68:7f:84:fe:24:a7:ee:e5:49:57:d1: 43:2f:57:eb:14:1f:a6:d2:bf:4f:58:4d:29:a6:f8: 06:74:02:81:f9:2c:b0:c5:d8:59:33:8c:03:a0:d9: 9e:a7:d4:2c:16:d0:2e:a8:0e:f1:5b:0a:d1:9f:27: 1f:85:32:14:cb:f0:74:ef:02:e7:70:03:68:7b:7c: 7f:33:43:80:d2:e4:ab:62:39:e7:4b:71:86:72:95: 50:8b:ad:77:e2:cb:07:d7:9a:f2:7c:f0:c7:1e:07: 4e:a4:c3:b6:80:45:ac:db:27:ae:41:17:13:fe:fa: 63:1f:b0:ac:e4:54:30:fa:b1:35:f8:de:ba:18:73: 2e:67:80:72:63:2f:2a:b0:f6:71:3c:d6:83:ab:87: 2c:ea:77:32:3d:e3:44:99:69:aa:1a:6f:4c:39:08: aa:a1:69:30:24:23:80:c0:1d:9b:a8:71:39:40:8b: 23:bd:cd:7d:95:73:9b:06:44:16:ff:d5:e9:f5:0e: 13:48:5d:66:ad:d8:ec:24:3d:e7:82:d0:23:0e:51: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:68:76:2E:4B:5B:CB:E4:32:82:AE:14:EF:77:B1:4D:C9:C6:EA:C9 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rmh2Lktby-Qygq4U73exTcnG6sk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.103.0/24 Signature Algorithm: sha256WithRSAEncryption 38:43:98:4c:89:fa:9d:58:7b:8a:30:b5:53:e3:c8:03:65:b9: 57:7e:6b:58:7b:95:53:80:e9:0b:85:d4:37:df:cf:38:7c:05: bc:e9:f6:1c:0d:13:27:29:81:ba:f8:77:4c:61:82:88:5c:d1: 7b:63:cc:bf:16:c7:ac:6a:69:c8:07:c6:e0:6e:3b:30:c6:d5: cf:0e:f0:2e:fa:6a:cc:65:60:40:4b:ba:64:f5:8a:b2:21:5e: 6b:58:85:59:aa:dd:ef:6c:bf:5c:96:4f:33:3c:0f:c9:87:67: 6f:b0:ac:c1:36:12:03:91:e7:48:6f:c9:f1:a2:48:07:61:ac: bc:03:85:b8:b7:ee:85:28:d5:00:e7:96:8d:9e:19:7d:fd:11: 56:7f:6a:94:c6:11:c6:d1:54:2a:23:9f:92:de:53:83:74:ee: 85:1d:33:3b:66:35:01:e2:72:7b:87:63:bf:0d:25:85:2e:18: 4c:81:32:9d:f7:7c:f6:fe:2d:0d:ce:d4:99:fd:2d:e0:a8:c4: f1:c6:18:66:4c:0d:69:9c:ed:df:54:e2:7f:6c:66:d4:14:a7: 10:9d:e3:54:2f:a6:b3:38:a1:b0:cb:64:4a:2e:23:22:1b:5f: 72:a7:b0:36:f6:b9:bb:36:23:7e:9d:d0:42:15:71:bb:5f:23: 97:36:04:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E3y5OL1SmF3rqhppzX/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjY4NzYyZTRiNWJjYmU0MzI4MmFlMTRlZjc3YjE0ZGM5YzZlYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUcG/+CAcV70nbo4/4sr2FELARlq UEtY1gb+7yartwaXiKp4wcyhOPpyG+AxiyQwaH+E/iSn7uVJV9FDL1frFB+m0r9P WE0ppvgGdAKB+SywxdhZM4wDoNmep9QsFtAuqA7xWwrRnycfhTIUy/B07wLncANo e3x/M0OA0uSrYjnnS3GGcpVQi6134ssH15ryfPDHHgdOpMO2gEWs2yeuQRcT/vpj H7Cs5FQw+rE1+N66GHMuZ4ByYy8qsPZxPNaDq4cs6ncyPeNEmWmqGm9MOQiqoWkw JCOAwB2bqHE5QIsjvc19lXObBkQW/9Xp9Q4TSF1mrdjsJD3ngtAjDlEEMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZodi5LW8vkMoKuFO93sU3JxurJMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvUm1oMkxrdGJ5LVF5Z3E0VTczZXhUY25HNnNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZnMA0G CSqGSIb3DQEBCwUAA4IBAQA4Q5hMifqdWHuKMLVT48gDZblXfmtYe5VTgOkLhdQ3 3884fAW86fYcDRMnKYG6+HdMYYKIXNF7Y8y/FsesamnIB8bgbjswxtXPDvAu+mrM ZWBAS7pk9YqyIV5rWIVZqt3vbL9clk8zPA/Jh2dvsKzBNhIDkedIb8nxokgHYay8 A4W4t+6FKNUA55aNnhl9/RFWf2qUxhHG0VQqI5+S3lODdO6FHTM7ZjUB4nJ7h2O/ DSWFLhhMgTKd93z2/i0NztSZ/S3gqMTxxhhmTA1pnO3fVOJ/bGbUFKcQneNUL6az OKGwy2RKLiMiG19yp7A29rm7NiN+ndBCFXG7XyOXNgQU -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:16 2026 by rpki-client