This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rHY11WNcjbmp-pTFPRxHtEPUKTY.roa File: rHY11WNcjbmp-pTFPRxHtEPUKTY.roa (raw, json) Hash identifier: uGOLq6q2V+EsCHaq6PNtlcxHKuuyYWgxxY8MpGrRwtc= Subject key identifier: AC:76:35:D5:63:5C:8D:B9:A9:FA:94:C5:3D:1C:47:B4:43:D4:29:36 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C139503D5C5D484020FE362C9542182 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rHY11WNcjbmp-pTFPRxHtEPUKTY.roa Signing time: Fri 02 Jan 2026 00:20:16 +0000 ROA not before: Fri 02 Jan 2026 00:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211798 IP address blocks: 194.41.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:95:03:d5:c5:d4:84:02:0f:e3:62:c9:54:21:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac7635d5635c8db9a9fa94c53d1c47b443d42936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:b9:e4:9b:4d:57:7d:0d:15:06:59:24:e2: b8:87:17:51:b7:c5:47:26:09:6e:d0:d2:e1:34:b1: 82:c7:87:83:db:64:37:30:57:02:08:26:6e:7e:96: 78:35:b6:be:f4:14:85:7d:00:93:ef:16:18:df:4e: 53:b3:1e:e1:6f:79:54:80:d4:e8:fe:6c:ab:5d:c2: 4a:99:9a:cc:ae:88:fa:56:d9:e1:34:66:3a:c4:3b: 49:1d:87:fd:fa:f8:9c:8b:aa:ab:69:22:04:60:eb: 71:5b:8d:53:b4:2d:a5:d4:93:a1:3b:19:67:cf:37: 6d:86:a1:b6:cf:20:b8:fa:bc:fa:9e:80:21:30:50: 79:01:fe:f8:84:36:eb:15:a5:11:18:48:01:52:60: fd:a5:cc:2d:8d:f8:73:9a:b2:fe:47:84:f6:da:b4: 08:25:55:8b:f5:2e:58:9c:28:ab:f3:b7:dc:71:41: f4:5c:e6:70:71:d5:6c:90:e0:a1:cd:dc:78:eb:53: 6b:af:14:74:b6:0d:40:6f:90:ef:d5:5e:d8:5b:0d: 1d:88:9d:6f:cb:38:f7:9f:e9:db:55:9a:ba:da:d2: 0f:4d:d4:ac:d6:f3:fb:76:59:c9:2c:84:45:09:37: 39:52:db:7c:c2:36:cf:0b:47:d0:03:f9:97:19:20: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:76:35:D5:63:5C:8D:B9:A9:FA:94:C5:3D:1C:47:B4:43:D4:29:36 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rHY11WNcjbmp-pTFPRxHtEPUKTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.41.119.0/24 Signature Algorithm: sha256WithRSAEncryption 53:a4:31:6a:10:9f:7d:ba:af:d8:8f:4a:28:6d:92:e4:7f:39: c8:9e:6a:1a:99:57:fd:f8:dc:bb:03:01:3c:fa:25:a6:4d:dd: c9:79:0a:5c:6f:be:f8:d6:b9:14:e4:20:2b:5f:ea:51:64:c4: c3:84:6c:96:4b:51:f0:3b:8a:43:45:16:c7:f1:90:f9:ee:77: 4b:4c:36:e4:03:d2:73:94:c0:85:f6:b2:7c:1b:e3:de:57:10: 9a:e8:9a:fe:c3:8d:f5:77:4e:e4:17:46:02:b6:46:45:5d:49: 61:79:a4:0b:ce:d8:c1:44:dd:f2:b7:5a:19:01:85:df:f6:f2: be:9a:c4:c8:db:35:30:b1:d0:18:06:f2:18:3f:0d:75:7b:78: f5:cb:7e:e0:8c:b7:f5:fc:d7:0c:69:52:fe:04:88:58:3f:00: e2:5c:0f:b5:8c:bf:d4:05:3d:24:78:52:5d:60:8c:5e:4b:81: 01:e3:28:59:a3:09:7d:4a:1d:e7:91:a0:ce:58:fb:9b:ad:ec: 05:05:fd:ff:db:68:fd:3f:6d:ac:9d:5b:3c:4e:e5:49:3d:ea: 3e:62:87:0d:d2:68:62:94:73:ad:0c:6a:87:ae:98:af:ac:82: 5e:ab:e9:32:1b:22:3b:d5:3a:6b:87:5c:05:dd:8f:fc:fc:ca: dd:11:5d:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E5UD1cXUhAIP42LJVCGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzc2MzVkNTYzNWM4ZGI5YTlmYTk0YzUzZDFjNDdiNDQzZDQyOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRu55JtNV30NFQZZJOK4hxdRt8VH Jglu0NLhNLGCx4eD22Q3MFcCCCZufpZ4Nba+9BSFfQCT7xYY305Tsx7hb3lUgNTo /myrXcJKmZrMroj6VtnhNGY6xDtJHYf9+vici6qraSIEYOtxW41TtC2l1JOhOxln zzdthqG2zyC4+rz6noAhMFB5Af74hDbrFaURGEgBUmD9pcwtjfhzmrL+R4T22rQI JVWL9S5YnCir87fccUH0XOZwcdVskOChzdx461NrrxR0tg1Ab5Dv1V7YWw0diJ1v yzj3n+nbVZq62tIPTdSs1vP7dlnJLIRFCTc5Utt8wjbPC0fQA/mXGSBfkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKx2NdVjXI25qfqUxT0cR7RD1Ck2MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvckhZMTFXTmNqYm1wLXBURlBSeEh0RVBVS1RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwil3MA0G CSqGSIb3DQEBCwUAA4IBAQBTpDFqEJ99uq/Yj0oobZLkfznInmoamVf9+Ny7AwE8 +iWmTd3JeQpcb7741rkU5CArX+pRZMTDhGyWS1HwO4pDRRbH8ZD57ndLTDbkA9Jz lMCF9rJ8G+PeVxCa6Jr+w431d07kF0YCtkZFXUlheaQLztjBRN3yt1oZAYXf9vK+ msTI2zUwsdAYBvIYPw11e3j1y37gjLf1/NcMaVL+BIhYPwDiXA+1jL/UBT0keFJd YIxeS4EB4yhZowl9Sh3nkaDOWPubrewFBf3/22j9P22snVs8TuVJPeo+YocN0mhi lHOtDGqHrpivrIJeq+kyGyI71Tprh1wF3Y/8/MrdEV2n -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:28 2026 by rpki-client