This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/yx7n_319ZBwL0eqNMaxxSiyVPTE.roa File: yx7n_319ZBwL0eqNMaxxSiyVPTE.roa (raw, json) Hash identifier: DDdO4yg57n9C22JYHfd0ICckYRel7TybusY/aTLncRo= Subject key identifier: CB:1E:E7:FF:7D:7D:64:1C:0B:D1:EA:8D:31:AC:71:4A:2C:95:3D:31 Certificate issuer: /CN=1331334c8a35da66b44d909347a643ee44191aaf Certificate serial: 019B7CED2F81F4F899053C105DB96185D545 Authority key identifier: 13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/yx7n_319ZBwL0eqNMaxxSiyVPTE.roa Signing time: Fri 02 Jan 2026 04:17:57 +0000 ROA not before: Fri 02 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24824 IP address blocks: 185.44.48.0/22 maxlen: 22 185.44.48.0/23 maxlen: 23 185.44.50.0/23 maxlen: 23 194.107.0.0/20 maxlen: 20 194.107.8.0/23 maxlen: 23 194.107.12.0/23 maxlen: 23 194.107.14.0/23 maxlen: 23 2a00:f720::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2f:81:f4:f8:99:05:3c:10:5d:b9:61:85:d5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1331334c8a35da66b44d909347a643ee44191aaf Validity Not Before: Jan 2 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb1ee7ff7d7d641c0bd1ea8d31ac714a2c953d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:8b:80:eb:88:c2:83:db:a0:44:d3:00:07: 18:f6:d4:f5:5d:9e:e5:b3:75:15:19:2e:5b:32:0f: b1:ce:17:0d:b4:d3:b8:1e:52:be:20:1b:23:bb:9d: f6:a7:58:68:fc:37:ce:4a:3e:4f:f6:83:10:08:84: c3:b2:d0:3b:38:6c:a8:c8:fb:58:74:f8:be:7c:b4: 2c:6a:25:c0:88:43:27:b8:3a:bd:b0:64:77:12:8f: af:e8:9f:e0:27:eb:d0:ad:17:84:5e:5e:82:1d:22: 8f:a0:f6:b5:26:5a:08:94:00:37:c1:e5:d8:2c:54: ad:56:1a:38:cb:dc:e0:4a:8a:5f:77:4b:1f:76:92: 5f:d0:37:ce:a0:d5:c8:7d:f4:9c:4c:03:10:e2:16: 1e:ff:70:1a:4e:21:e9:60:3a:5b:8a:40:a3:32:78: d6:14:a5:a0:b9:f8:4b:82:65:41:cf:6e:29:84:78: 96:76:6b:1a:67:17:74:4e:77:e9:62:a6:f1:f5:71: 93:bd:86:6f:42:e0:f3:60:3d:6d:24:1d:87:88:7b: 18:ec:1e:e1:4a:e1:1f:eb:54:75:1f:1d:fe:79:d6: ab:6e:ca:64:c8:5b:c0:43:5d:5f:eb:ee:06:61:d4: fe:0e:15:a5:1f:01:9d:70:24:26:13:17:1f:ab:61: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1E:E7:FF:7D:7D:64:1C:0B:D1:EA:8D:31:AC:71:4A:2C:95:3D:31 X509v3 Authority Key Identifier: keyid:13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/yx7n_319ZBwL0eqNMaxxSiyVPTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.48.0/22 194.107.0.0/20 IPv6: 2a00:f720::/32 Signature Algorithm: sha256WithRSAEncryption a1:8e:6a:5a:e0:f0:92:c4:6e:42:f0:42:ed:a1:96:ee:e4:65: c5:a6:92:8b:c8:3e:d4:ce:3d:21:6c:e6:ba:08:47:95:f8:c9: 7b:ed:6d:f9:f5:bb:13:54:fc:d5:f5:59:10:f2:38:69:82:90: 77:e6:92:7a:c7:07:ab:0f:31:7f:8f:a4:3a:8b:05:09:85:1c: a1:bd:35:18:89:6d:27:58:ad:26:be:79:50:8c:ed:04:9b:87: 1c:25:84:53:b0:9d:6e:12:e9:05:e7:ab:c9:e5:33:45:74:64: eb:f4:5b:b1:45:88:3d:fc:38:6f:8f:4c:71:33:51:55:d3:46: 1b:14:37:95:0c:5b:7f:87:67:28:4a:90:fe:74:2c:08:f9:70: ff:a5:2d:05:ca:9a:1c:4f:20:f8:04:5f:bb:6c:2c:ca:f8:6c: 39:3b:60:75:f3:db:3b:43:ff:85:73:ba:3d:e9:8f:a9:46:8b: 0b:44:db:ca:78:16:12:9d:10:72:70:05:1c:7e:92:f3:34:11: 2a:95:42:72:e8:4f:bc:8b:c2:37:0f:b2:83:d1:3c:87:db:05: 31:4d:5d:2b:ab:ab:ec:ee:fe:8c:5b:cf:df:28:0a:a1:02:08: 5a:49:9e:88:21:75:27:6c:1c:35:11:6c:34:02:66:b7:e6:82: f4:10:92:3f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87S+B9PiZBTwQXblhhdVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMzEzMzRjOGEzNWRhNjZiNDRkOTA5MzQ3YTY0M2VlNDQx OTFhYWYwHhcNMjYwMTAyMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjFlZTdmZjdkN2Q2NDFjMGJkMWVhOGQzMWFjNzE0YTJjOTUzZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPSLgOuIwoPboETTAAcY9tT1XZ7l s3UVGS5bMg+xzhcNtNO4HlK+IBsju532p1ho/DfOSj5P9oMQCITDstA7OGyoyPtY dPi+fLQsaiXAiEMnuDq9sGR3Eo+v6J/gJ+vQrReEXl6CHSKPoPa1JloIlAA3weXY LFStVho4y9zgSopfd0sfdpJf0DfOoNXIffScTAMQ4hYe/3AaTiHpYDpbikCjMnjW FKWgufhLgmVBz24phHiWdmsaZxd0TnfpYqbx9XGTvYZvQuDzYD1tJB2HiHsY7B7h SuEf61R1Hx3+edarbspkyFvAQ11f6+4GYdT+DhWlHwGdcCQmExcfq2HMqQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMse5/99fWQcC9HqjTGscUoslT0xMB8GA1UdIwQY MBaAFBMxM0yKNdpmtE2Qk0emQ+5EGRqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXpFelRJbzEybWEwVFpDVFI2WkQ3a1FaR3E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNGFhNDctODBhZS00ZmZkLTgxZGUt YTdlM2U4YTU3MzZjLzEveXg3bl8zMTlaQndMMGVxTk1heHhTaXlWUFRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hNGFhNDctODBhZS00ZmZkLTgxZGUtYTdlM2U4YTU3MzZj LzEvRXpFelRJbzEybWEwVFpDVFI2WkQ3a1FaR3E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSwwAwQE wmsAMA0EAgACMAcDBQAqAPcgMA0GCSqGSIb3DQEBCwUAA4IBAQChjmpa4PCSxG5C 8ELtoZbu5GXFppKLyD7Uzj0hbOa6CEeV+Ml77W359bsTVPzV9VkQ8jhpgpB35pJ6 xwerDzF/j6Q6iwUJhRyhvTUYiW0nWK0mvnlQjO0Em4ccJYRTsJ1uEukF56vJ5TNF dGTr9FuxRYg9/Dhvj0xxM1FV00YbFDeVDFt/h2coSpD+dCwI+XD/pS0FypocTyD4 BF+7bCzK+Gw5O2B189s7Q/+Fc7o96Y+pRosLRNvKeBYSnRBycAUcfpLzNBEqlUJy 6E+8i8I3D7KD0TyH2wUxTV0rq6vs7v6MW8/fKAqhAghaSZ6IIXUnbBw1EWw0Ama3 5oL0EJI/ -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:25 2026 by rpki-client