This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/byJHUY62jiQ45Jg9pnQmaTCCcH8.roa File: byJHUY62jiQ45Jg9pnQmaTCCcH8.roa (raw, json) Hash identifier: g0pmFzL3GekyB19YwL5Rh+w+hxPmOOppc1GkLlhtwdo= Subject key identifier: 6F:22:47:51:8E:B6:8E:24:38:E4:98:3D:A6:74:26:69:30:82:70:7F Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C137F82FC8D6BAB8A168AB70A6FB9D3 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/byJHUY62jiQ45Jg9pnQmaTCCcH8.roa Signing time: Fri 02 Jan 2026 00:20:11 +0000 ROA not before: Fri 02 Jan 2026 00:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197795 IP address blocks: 185.230.52.0/24 maxlen: 24 185.230.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:7f:82:fc:8d:6b:ab:8a:16:8a:b7:0a:6f:b9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f2247518eb68e2438e4983da67426693082707f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:3f:76:a4:36:55:2a:8c:12:06:e5:96:26: 9e:c1:c7:a2:25:22:6a:a6:ed:78:b7:e5:5b:68:43: 3a:0f:e9:7c:86:d4:3e:63:5f:a3:a5:2c:d5:ea:96: 43:58:c4:b8:92:91:cc:c9:48:b9:fe:4a:b0:31:3b: 39:44:9c:1b:64:9e:7d:6a:d7:d1:c9:0a:3f:19:9b: c6:fc:eb:04:8e:4d:b9:47:7f:9c:98:2a:aa:32:c3: 6a:14:f6:42:ba:29:83:bc:61:dd:38:42:3d:4b:13: 3f:4a:cc:2a:80:8a:1d:8b:16:fd:1f:88:df:fd:28: 3a:15:fb:5d:e3:f7:19:d1:32:e3:42:db:aa:cc:16: d7:0d:4a:a6:29:44:c6:f6:ae:aa:53:1b:35:64:81: 57:29:51:89:72:3f:da:a2:74:8a:51:a6:cf:84:7d: 59:fb:8a:45:51:b6:87:be:26:e8:54:07:1e:3f:10: 40:5c:02:74:2f:97:85:a2:e6:b6:05:03:96:11:94: e1:1d:0a:21:58:52:9e:45:c5:80:e3:c2:53:67:2b: 98:3d:27:14:a5:33:65:00:d9:8b:23:2c:49:f5:b6: 81:68:1f:b2:63:a1:ac:06:e7:60:f7:fb:10:39:59: 5d:44:9a:c1:c3:7a:1b:36:ca:11:c6:7e:56:7a:11: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:22:47:51:8E:B6:8E:24:38:E4:98:3D:A6:74:26:69:30:82:70:7F X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/byJHUY62jiQ45Jg9pnQmaTCCcH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.52.0/24 185.230.55.0/24 Signature Algorithm: sha256WithRSAEncryption 80:3e:88:4c:d9:0c:d8:46:e5:25:64:aa:03:3b:82:60:81:e9: a8:5f:54:2b:16:45:f1:9e:46:bb:ee:a7:3a:76:84:0e:45:b4: af:7f:20:62:cb:f9:66:e3:95:28:6c:3e:ff:c8:7b:57:88:74: 39:d4:40:3d:cb:b4:69:0f:4f:f2:04:26:0e:0c:26:5c:c0:64: 9d:5f:ec:ba:75:e9:69:8d:d1:05:3b:a1:7c:e0:3a:93:57:b3: 58:04:2b:be:ee:fc:c4:a1:7d:62:2c:5d:a3:a9:e7:ed:2d:ca: f2:0c:c2:c3:f9:78:4d:26:f4:b1:86:6d:8f:3c:54:0c:cd:e2: f7:4b:28:21:24:bd:9b:7e:08:59:3b:12:e1:81:fc:70:76:9f: c4:9e:be:35:0b:d9:7d:a4:54:cf:76:e0:36:6e:dd:a9:e6:2b: 47:27:9b:5e:f2:1f:e2:1c:72:5d:c0:09:c4:05:58:bb:7f:b6: 01:54:6a:04:77:4d:c1:03:97:92:7e:77:8f:cc:82:15:19:3c: 39:0e:86:11:fd:b0:0a:ee:38:fe:18:88:05:db:b3:ac:ba:44: 48:9e:98:3a:9d:08:d8:48:0d:0f:67:70:23:19:c3:72:66:84: 49:bd:2d:d7:5a:41:7e:ae:ef:94:8e:08:d8:3a:fa:43:10:b5: 99:61:64:a9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E3+C/I1rq4oWircKb7nTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjIyNDc1MThlYjY4ZTI0MzhlNDk4M2RhNjc0MjY2OTMwODI3MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R8/dqQ2VSqMEgblliaewceiJSJq pu14t+VbaEM6D+l8htQ+Y1+jpSzV6pZDWMS4kpHMyUi5/kqwMTs5RJwbZJ59atfR yQo/GZvG/OsEjk25R3+cmCqqMsNqFPZCuimDvGHdOEI9SxM/SswqgIodixb9H4jf /Sg6Fftd4/cZ0TLjQtuqzBbXDUqmKUTG9q6qUxs1ZIFXKVGJcj/aonSKUabPhH1Z +4pFUbaHviboVAcePxBAXAJ0L5eFoua2BQOWEZThHQohWFKeRcWA48JTZyuYPScU pTNlANmLIyxJ9baBaB+yY6GsBudg9/sQOVldRJrBw3obNsoRxn5WehHc5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG8iR1GOto4kOOSYPaZ0JmkwgnB/MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvYnlKSFVZNjJqaVE0NUpnOXBuUW1hVENDY0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueY0AwQA ueY3MA0GCSqGSIb3DQEBCwUAA4IBAQCAPohM2QzYRuUlZKoDO4JggemoX1QrFkXx nka77qc6doQORbSvfyBiy/lm45UobD7/yHtXiHQ51EA9y7RpD0/yBCYODCZcwGSd X+y6delpjdEFO6F84DqTV7NYBCu+7vzEoX1iLF2jqeftLcryDMLD+XhNJvSxhm2P PFQMzeL3SyghJL2bfghZOxLhgfxwdp/Enr41C9l9pFTPduA2bt2p5itHJ5te8h/i HHJdwAnEBVi7f7YBVGoEd03BA5eSfnePzIIVGTw5DoYR/bAK7jj+GIgF27OsukRI npg6nQjYSA0PZ3AjGcNyZoRJvS3XWkF+ru+UjgjYOvpDELWZYWSp -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:19 2026 by rpki-client