This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/ydyTTB3FHmlgmrUF4u_cEkdDzws.roa File: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (raw, json) Hash identifier: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50= Subject key identifier: C9:DC:93:4C:1D:C5:1E:69:60:9A:B5:05:E2:EF:DC:12:47:43:CF:0B Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Certificate serial: 019B77C6DA1EDB58796CEC21B8A4A56DD871 Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/ydyTTB3FHmlgmrUF4u_cEkdDzws.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203068 IP address blocks: 185.145.176.0/24 maxlen: 24 185.145.177.0/24 maxlen: 24 185.145.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:da:1e:db:58:79:6c:ec:21:b8:a4:a5:6d:d8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9dc934c1dc51e69609ab505e2efdc124743cf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5f:ee:bc:db:d3:8d:56:27:79:7f:33:25:86: 00:61:4b:91:65:63:96:e5:b3:ed:04:ed:4e:44:5c: 2b:ae:55:60:4a:bb:ad:77:b6:56:cf:97:62:83:d2: 94:37:00:1d:c9:59:cf:a4:31:88:9b:54:03:af:56: 6c:1d:50:b4:87:0e:b7:4d:e4:2b:a5:1e:78:56:34: 2f:24:42:7f:04:87:a1:d5:21:f6:fb:6c:d3:02:52: 70:ac:47:ef:c7:61:72:8b:d6:ba:f6:3b:90:6f:fd: 46:1a:fa:ba:cb:ef:94:69:2c:48:dd:e4:f8:42:be: 8d:9a:d4:6b:a3:42:55:a1:e0:b0:ae:a9:71:76:2a: bb:1c:a3:00:ed:2a:a7:79:ea:9c:d5:08:2e:67:9e: 9d:43:70:23:44:30:5d:cd:7f:f2:ef:5e:9d:32:fa: 7b:6c:e2:7e:42:fc:a9:14:da:b2:3d:03:8d:53:11: 8e:77:56:61:80:07:e3:4b:c5:ae:ed:04:d8:e4:35: 9a:8d:76:da:dd:68:e4:c5:a5:68:04:13:49:ef:be: 5f:5b:a4:59:bf:0a:dc:e9:cb:2c:96:e5:43:3e:81: 51:44:50:b3:03:0a:8e:23:9d:2c:2b:87:4a:2a:52: fa:0b:c6:b0:bb:b8:09:1c:52:32:ea:73:02:8c:a7: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DC:93:4C:1D:C5:1E:69:60:9A:B5:05:E2:EF:DC:12:47:43:CF:0B X509v3 Authority Key Identifier: keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/ydyTTB3FHmlgmrUF4u_cEkdDzws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.176.0/23 185.145.179.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:4e:ad:0f:99:03:8a:3d:e1:13:c0:1b:d2:44:ac:59:22:01: 8d:fc:a7:b9:4c:85:04:47:96:7f:ee:ef:80:c5:60:a4:bc:29: fd:87:02:78:a8:ed:6e:58:5b:c0:d5:79:f7:66:a4:5c:df:bd: 8a:05:e9:9f:b6:14:3b:d0:3e:9e:f6:a4:74:88:50:35:29:13: e0:96:b0:ee:34:66:5b:58:22:ab:63:87:d5:a4:83:f3:16:ca: e6:22:72:f2:2d:88:29:2a:e4:cc:20:cb:40:f7:62:08:09:14: 5a:94:a6:3a:dc:9f:77:f8:39:cd:31:b4:02:24:3f:18:26:e1: 57:9f:32:ce:19:35:74:04:d9:80:87:64:ca:f2:e3:0c:90:71: 6c:e8:eb:16:23:a1:10:34:06:2e:9c:97:a8:68:e5:f9:a1:97: 4a:7f:b3:16:c5:2e:52:ca:7c:f6:1f:6e:61:1f:06:ce:ac:59: d0:3c:2b:8e:84:c9:dd:55:9b:7a:52:d9:54:01:25:21:5a:46: 9b:be:4f:00:2d:65:95:89:61:ce:61:08:9a:10:da:9d:e0:61: 6c:66:ce:25:49:42:dc:5d:af:86:b0:a8:97:43:e1:7f:83:aa: 62:0c:3c:22:02:f1:90:aa:37:55:c8:bd:81:04:d6:97:ca:43: 4b:df:81:de -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xtoe21h5bOwhuKSlbdhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1 YzUwM2EwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWRjOTM0YzFkYzUxZTY5NjA5YWI1MDVlMmVmZGMxMjQ3NDNjZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V/uvNvTjVYneX8zJYYAYUuRZWOW 5bPtBO1ORFwrrlVgSrutd7ZWz5dig9KUNwAdyVnPpDGIm1QDr1ZsHVC0hw63TeQr pR54VjQvJEJ/BIeh1SH2+2zTAlJwrEfvx2Fyi9a69juQb/1GGvq6y++UaSxI3eT4 Qr6NmtRro0JVoeCwrqlxdiq7HKMA7Sqneeqc1QguZ56dQ3AjRDBdzX/y716dMvp7 bOJ+QvypFNqyPQONUxGOd1ZhgAfjS8Wu7QTY5DWajXba3WjkxaVoBBNJ775fW6RZ vwrc6cssluVDPoFRRFCzAwqOI50sK4dKKlL6C8awu7gJHFIy6nMCjKf1uQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMnck0wdxR5pYJq1BeLv3BJHQ88LMB8GA1UdIwQY MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt MTgzZjk5NzVmYzk0LzEveWR5VFRCM0ZIbWxnbXJVRjR1X2NFa2REendzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0 LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuZGwAwQA uZGzMA0GCSqGSIb3DQEBCwUAA4IBAQBdTq0PmQOKPeETwBvSRKxZIgGN/Ke5TIUE R5Z/7u+AxWCkvCn9hwJ4qO1uWFvA1Xn3ZqRc372KBemfthQ70D6e9qR0iFA1KRPg lrDuNGZbWCKrY4fVpIPzFsrmInLyLYgpKuTMIMtA92IICRRalKY63J93+DnNMbQC JD8YJuFXnzLOGTV0BNmAh2TK8uMMkHFs6OsWI6EQNAYunJeoaOX5oZdKf7MWxS5S ynz2H25hHwbOrFnQPCuOhMndVZt6UtlUASUhWkabvk8ALWWViWHOYQiaENqd4GFs Zs4lSULcXa+GsKiXQ+F/g6piDDwiAvGQqjdVyL2BBNaXykNL34He -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:20 2026 by rpki-client