This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/yU0vwXn7yD2UDac1BWPWUjn-AM8.roa File: yU0vwXn7yD2UDac1BWPWUjn-AM8.roa (raw, json) Hash identifier: Np9P2I8XGJ13iXO9H8+fl6UpCumJcTThSzJsLZdbAPE= Subject key identifier: C9:4D:2F:C1:79:FB:C8:3D:94:0D:A7:35:05:63:D6:52:39:FE:00:CF Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3DEFAE6ED24DCF52BF92A6676674 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/yU0vwXn7yD2UDac1BWPWUjn-AM8.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210405 IP address blocks: 185.223.164.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3d:ef:ae:6e:d2:4d:cf:52:bf:92:a6:67:66:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c94d2fc179fbc83d940da7350563d65239fe00cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:0c:18:e1:b7:23:de:41:eb:49:88:02:b1: 9b:30:f9:00:f9:a8:e3:5e:75:e0:21:d6:d5:89:10: 0f:53:39:3b:92:4a:e4:5d:98:7f:11:e2:1b:37:3d: 21:ba:df:7c:32:c6:ea:9a:4b:26:04:21:42:86:d9: ec:2b:3f:71:68:a7:37:79:4e:e2:26:67:61:de:13: 60:93:21:2e:3b:e1:9b:1f:8f:63:e3:eb:8f:12:3d: 4d:44:85:51:e9:2c:b7:e2:9f:92:80:28:9e:2a:a5: 66:4b:ae:6a:4f:60:ca:e2:bb:3e:1c:44:a3:6a:16: e8:dd:0d:2e:56:a7:e9:8d:06:04:05:df:ce:d5:fe: ea:36:28:70:72:e4:61:29:4d:fb:9a:6b:0a:4a:ee: 76:ac:c9:ea:c9:c7:05:25:a7:63:17:33:2b:85:9b: b5:73:07:d1:9e:69:0c:e4:81:af:32:43:9e:cd:2e: 17:51:1f:88:72:de:c5:d8:4f:b8:e1:01:09:27:06: 99:f7:90:26:a0:06:14:11:6e:2a:b0:a4:93:3a:e4: 3d:78:7a:a4:68:77:88:4e:20:1c:29:c5:0c:af:04: 0d:af:d2:32:63:6d:bb:95:71:cb:ae:34:7d:b7:7d: c3:ac:ea:4a:1b:94:de:f5:93:ce:3d:ff:db:56:10: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4D:2F:C1:79:FB:C8:3D:94:0D:A7:35:05:63:D6:52:39:FE:00:CF X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/yU0vwXn7yD2UDac1BWPWUjn-AM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.164.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:96:ed:f7:30:3e:86:e7:a7:f3:4a:11:6f:27:ba:3d:fa:db: f4:9a:a3:15:36:1d:2f:13:09:87:af:ef:ee:43:83:11:33:8e: 25:8d:06:4d:af:59:73:4e:e0:3b:c1:bb:ce:9d:94:2d:7a:ef: f3:3f:43:3c:fd:a2:cd:71:38:fc:39:df:63:d7:f8:c6:fa:65: 78:13:ce:2f:fa:11:6a:d6:e3:87:0c:69:26:82:14:96:ea:8d: 49:f4:7d:44:93:eb:52:fb:6b:07:0b:b3:2a:86:aa:bd:99:64: 5f:45:ba:b3:5e:82:ba:ae:d5:42:5b:b4:a9:72:6b:4a:64:53: ba:b8:5a:98:5d:94:95:48:ce:88:a4:f0:5b:84:11:7f:86:a6: 4f:ae:3a:70:7a:ce:63:62:a7:64:24:82:c9:07:1c:e0:45:bd: ef:aa:95:46:5a:9d:73:61:ef:4a:61:f7:5b:b2:c4:cc:77:2f: 79:b8:c5:18:ba:43:ab:11:0b:d2:8a:fa:b8:ab:40:f1:3d:8f: e8:1a:de:e4:21:9a:d1:74:81:ff:0f:84:6a:b3:38:59:52:57: 48:21:83:56:c4:e9:7d:10:46:10:f8:db:42:2e:49:b3:fb:10: f6:11:5b:cf:09:67:38:6f:88:e0:f0:2a:a9:78:78:c8:5e:5a: 24:ec:87:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fj3vrm7STc9Sv5KmZ2Z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTRkMmZjMTc5ZmJjODNkOTQwZGE3MzUwNTYzZDY1MjM5ZmUwMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunsMGOG3I95B60mIArGbMPkA+ajj XnXgIdbViRAPUzk7kkrkXZh/EeIbNz0hut98MsbqmksmBCFChtnsKz9xaKc3eU7i Jmdh3hNgkyEuO+GbH49j4+uPEj1NRIVR6Sy34p+SgCieKqVmS65qT2DK4rs+HESj ahbo3Q0uVqfpjQYEBd/O1f7qNihwcuRhKU37mmsKSu52rMnqyccFJadjFzMrhZu1 cwfRnmkM5IGvMkOezS4XUR+Ict7F2E+44QEJJwaZ95AmoAYUEW4qsKSTOuQ9eHqk aHeITiAcKcUMrwQNr9IyY227lXHLrjR9t33DrOpKG5Te9ZPOPf/bVhBW/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMlNL8F5+8g9lA2nNQVj1lI5/gDPMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEveVUwdndYbjd5RDJVRGFjMUJXUFdVam4tQU04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud+kMA0G CSqGSIb3DQEBCwUAA4IBAQCflu33MD6G56fzShFvJ7o9+tv0mqMVNh0vEwmHr+/u Q4MRM44ljQZNr1lzTuA7wbvOnZQteu/zP0M8/aLNcTj8Od9j1/jG+mV4E84v+hFq 1uOHDGkmghSW6o1J9H1Ek+tS+2sHC7Mqhqq9mWRfRbqzXoK6rtVCW7SpcmtKZFO6 uFqYXZSVSM6IpPBbhBF/hqZPrjpwes5jYqdkJILJBxzgRb3vqpVGWp1zYe9KYfdb ssTMdy95uMUYukOrEQvSivq4q0DxPY/oGt7kIZrRdIH/D4RqszhZUldIIYNWxOl9 EEYQ+NtCLkmz+xD2EVvPCWc4b4jg8CqpeHjIXlok7IcN -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:57 2026 by rpki-client