This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ny6omo0gwp5M7JfZKEPQqOdxzTU.roa File: ny6omo0gwp5M7JfZKEPQqOdxzTU.roa (raw, json) Hash identifier: TaurlI0u70TdGPgu9IUE+BmF5ZDt44OAzCvlEBWDv0g= Subject key identifier: 9F:2E:A8:9A:8D:20:C2:9E:4C:EC:97:D9:28:43:D0:A8:E7:71:CD:35 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019BB6E05B4EEDF5E2361336881C472C87A8 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ny6omo0gwp5M7JfZKEPQqOdxzTU.roa Signing time: Tue 13 Jan 2026 10:21:55 +0000 ROA not before: Tue 13 Jan 2026 10:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 185.220.248.0/24 maxlen: 24 185.225.1.0/24 maxlen: 24 194.5.64.0/24 maxlen: 24 194.124.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:e0:5b:4e:ed:f5:e2:36:13:36:88:1c:47:2c:87:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 13 10:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f2ea89a8d20c29e4cec97d92843d0a8e771cd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:54:b8:4b:e5:5c:c5:67:51:66:65:f2:22: cf:8c:0f:da:05:37:56:6b:44:3d:db:db:9c:4f:d4: 77:98:f7:ab:d7:36:3a:62:e4:bb:69:96:d4:a4:4e: 0a:9f:e8:30:2a:10:61:86:e4:7f:a1:5d:e9:7c:d3: 08:a9:cc:85:0b:1e:01:55:80:36:01:dc:d4:19:47: af:fd:06:98:31:e8:29:8e:ac:7c:9a:72:f5:3c:34: 1a:a9:a1:a1:2d:d6:f2:a1:b0:49:99:b1:69:de:41: 00:41:29:66:61:24:6d:f5:dd:33:5c:91:de:60:b4: f1:a4:f5:ad:3a:f4:7b:94:a4:5f:f8:72:17:1a:cf: 31:25:e0:be:38:a6:ca:e3:a7:54:b9:aa:1c:19:2f: 6f:55:46:3e:9e:34:9c:1a:66:fc:98:a6:a4:05:82: 85:13:d9:09:8c:78:78:f8:ef:97:ea:a7:bc:8f:91: cd:ff:39:f5:3c:94:be:97:33:ff:67:da:98:ae:37: b7:cf:b3:b9:74:47:cd:0f:f9:15:d1:ef:f2:66:8d: 02:de:e1:04:20:c1:b4:d6:0c:14:55:1e:54:73:f8: a4:c8:16:ee:b3:db:80:cb:b3:d9:b3:fb:ec:ad:2a: 3b:ee:e9:26:d4:a0:88:bd:2d:a0:5c:a3:f7:4c:d1: e4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2E:A8:9A:8D:20:C2:9E:4C:EC:97:D9:28:43:D0:A8:E7:71:CD:35 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ny6omo0gwp5M7JfZKEPQqOdxzTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.248.0/24 185.225.1.0/24 194.5.64.0/24 194.124.69.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:a1:eb:9a:c5:45:0d:b1:7c:af:00:10:2e:60:57:94:5d:0b: fd:bb:d8:50:b0:be:86:81:d5:69:2b:8c:e9:56:8e:a3:87:bc: b4:a1:da:33:6d:28:9b:17:37:1a:09:b9:8d:90:65:a3:dc:7d: 1c:2c:88:36:2e:07:4f:bb:84:42:a3:92:71:5a:4e:30:1d:a4: b1:e6:87:61:e1:7f:f3:d0:8e:f4:dd:73:93:76:4f:bc:d9:64: 0d:d9:ac:29:f4:b4:89:62:39:2e:14:49:39:a9:a7:2e:e0:a6: 81:18:40:76:f0:1b:cd:3a:52:b4:99:ee:ec:23:02:e1:27:04: d4:32:9f:1c:64:3b:20:7b:15:c9:25:e0:a1:e6:4e:e7:6a:16: 78:77:53:ba:38:38:4a:fd:82:e8:7e:ba:1b:29:c4:c7:7f:7e: 33:8c:98:28:d2:d5:d9:33:35:47:f4:95:86:60:63:e2:bd:26: c7:91:34:b7:fd:8d:35:45:48:93:73:b3:12:95:b3:52:22:aa: a7:dc:05:95:71:9f:18:fd:ed:8b:95:7d:c6:33:5c:a6:2e:1f: 04:ff:78:cb:85:04:37:ac:8f:1a:62:0c:ad:5a:8a:e2:ba:55: 96:d7:eb:be:57:12:82:d1:6b:e0:07:3b:4b:06:6b:f3:66:a7: f8:f9:05:7a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZu24FtO7fXiNhM2iBxHLIeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTEzMTAyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjJlYTg5YThkMjBjMjllNGNlYzk3ZDkyODQzZDBhOGU3NzFjZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaxUuEvlXMVnUWZl8iLPjA/aBTdW a0Q929ucT9R3mPer1zY6YuS7aZbUpE4Kn+gwKhBhhuR/oV3pfNMIqcyFCx4BVYA2 AdzUGUev/QaYMegpjqx8mnL1PDQaqaGhLdbyobBJmbFp3kEAQSlmYSRt9d0zXJHe YLTxpPWtOvR7lKRf+HIXGs8xJeC+OKbK46dUuaocGS9vVUY+njScGmb8mKakBYKF E9kJjHh4+O+X6qe8j5HN/zn1PJS+lzP/Z9qYrje3z7O5dEfND/kV0e/yZo0C3uEE IMG01gwUVR5Uc/ikyBbus9uAy7PZs/vsrSo77ukm1KCIvS2gXKP3TNHkKQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ8uqJqNIMKeTOyX2ShD0Kjncc01MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvbnk2b21vMGd3cDVNN0pmWktFUFFxT2R4elRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAudz4AwQA ueEBAwQAwgVAAwQAwnxFMA0GCSqGSIb3DQEBCwUAA4IBAQB8oeuaxUUNsXyvABAu YFeUXQv9u9hQsL6GgdVpK4zpVo6jh7y0odozbSibFzcaCbmNkGWj3H0cLIg2LgdP u4RCo5JxWk4wHaSx5odh4X/z0I703XOTdk+82WQN2awp9LSJYjkuFEk5qacu4KaB GEB28BvNOlK0me7sIwLhJwTUMp8cZDsgexXJJeCh5k7nahZ4d1O6ODhK/YLofrob KcTHf34zjJgo0tXZMzVH9JWGYGPivSbHkTS3/Y01RUiTc7MSlbNSIqqn3AWVcZ8Y /e2LlX3GM1ymLh8E/3jLhQQ3rI8aYgytWoriulWW1+u+VxKC0WvgBztLBmvzZqf4 +QV6 -----END CERTIFICATE-----Generated at Tue Jan 13 14:37:32 2026 by rpki-client