This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa File: vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa (raw, json) Hash identifier: cUJ90bZFPukFANzteUEP/DKwx2ymm3AfgIUKRxH9Byw= Subject key identifier: BD:86:B7:22:1E:8B:5C:43:AE:39:83:24:F6:B5:C9:5A:B1:5E:F1:34 Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95 Certificate serial: 019B7C7EFC41FF2E62AC1EC50C85D97A1D4B Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa Signing time: Fri 02 Jan 2026 02:17:35 +0000 ROA not before: Fri 02 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.201.57.0/24 maxlen: 24 185.201.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:fc:41:ff:2e:62:ac:1e:c5:0c:85:d9:7a:1d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95 Validity Not Before: Jan 2 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd86b7221e8b5c43ae398324f6b5c95ab15ef134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:2d:5b:4f:f8:73:18:47:cb:eb:da:12:7b: a1:68:84:b0:fa:4b:9a:b5:25:a0:ff:64:01:bf:f7: 5c:59:fc:ea:98:97:38:4b:71:c4:ba:71:7a:14:68: 2b:af:94:17:45:0b:2c:54:a3:92:ad:b3:95:34:92: 78:b6:54:e2:fe:8c:3c:51:03:22:3a:89:1a:bd:d1: 18:6f:9c:08:da:75:9d:f8:c5:10:3d:b2:b8:8c:06: 97:99:b6:cf:b5:c5:bf:8e:62:48:30:c0:a3:71:e2: aa:78:1e:e3:b7:eb:b3:76:88:83:e6:4a:16:92:36: 33:3e:e2:fb:a8:e6:a3:38:3c:59:ec:6d:3f:8f:f0: 46:14:b2:83:17:ff:e7:65:78:97:89:c0:0c:ad:58: a3:0b:65:91:90:4b:67:2d:fc:1d:8b:08:c4:ca:40: 6b:c6:a4:c0:11:00:41:04:c0:f6:3f:c9:2f:44:20: 63:8d:4f:2c:6a:bc:db:80:d1:bd:41:58:a3:3f:c9: 67:2c:6f:2a:84:6b:bc:96:70:f4:34:17:ef:c9:7b: 69:4a:a2:a0:3b:98:d0:23:80:38:52:f3:07:27:42: ba:a6:2f:7e:5a:fa:c9:a0:18:fb:73:d5:55:c9:e8: a1:9c:26:28:2a:c3:8d:03:65:10:9c:70:7e:11:1b: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:86:B7:22:1E:8B:5C:43:AE:39:83:24:F6:B5:C9:5A:B1:5E:F1:34 X509v3 Authority Key Identifier: keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.57.0-185.201.58.255 Signature Algorithm: sha256WithRSAEncryption 8b:9c:dd:e3:3c:5b:70:6f:32:f6:6b:f0:45:22:c9:aa:78:8d: 69:00:12:19:9a:68:e6:a7:67:4f:6a:63:31:0d:b1:b0:16:42: 02:d3:11:10:fe:9c:80:15:6b:a6:cb:03:d5:24:3e:f5:37:17: 48:71:4e:cb:9e:a3:8b:dd:10:38:1e:52:79:ed:5a:fa:f4:ab: 47:1c:08:e2:9f:7d:ab:f9:95:54:c0:f6:83:db:53:b8:04:c2: 22:7d:fe:43:99:31:07:20:2a:dd:df:c4:7f:f1:d6:06:31:c7: 10:bd:15:01:4e:77:a7:1c:0e:c9:60:a3:98:92:1e:3e:3f:57: 04:fe:1f:cd:a0:70:dc:e2:d5:7f:2a:77:dc:86:29:9b:0e:0d: ce:dd:f4:a6:14:b9:6e:5d:b3:7f:16:c0:c7:4f:ff:f7:61:89: db:79:18:8d:cf:04:61:13:14:02:4a:43:0f:e6:8d:64:76:e3: 3c:ba:6c:e7:1b:83:8e:af:7e:eb:72:0a:56:35:a1:1c:a3:ab: 95:b1:54:df:31:56:5a:95:bf:59:27:e2:d0:f5:ff:75:ce:2c: 5e:78:5f:57:f6:2b:08:58:e3:fe:e8:5e:51:e5:79:10:bf:69: f0:13:15:3c:78:d9:27:60:63:23:c7:0c:c9:68:ce:77:31:20: fe:1e:a6:c8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8fvxB/y5irB7FDIXZeh1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNmViYWI0ZjQ2ZjI1NGQ5NWY0OTY1Yjg0YThjZjI0MTk2 YjljOTUwHhcNMjYwMTAyMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDg2YjcyMjFlOGI1YzQzYWUzOTgzMjRmNmI1Yzk1YWIxNWVmMTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CMtW0/4cxhHy+vaEnuhaISw+kua tSWg/2QBv/dcWfzqmJc4S3HEunF6FGgrr5QXRQssVKOSrbOVNJJ4tlTi/ow8UQMi OokavdEYb5wI2nWd+MUQPbK4jAaXmbbPtcW/jmJIMMCjceKqeB7jt+uzdoiD5koW kjYzPuL7qOajODxZ7G0/j/BGFLKDF//nZXiXicAMrVijC2WRkEtnLfwdiwjEykBr xqTAEQBBBMD2P8kvRCBjjU8sarzbgNG9QVijP8lnLG8qhGu8lnD0NBfvyXtpSqKg O5jQI4A4UvMHJ0K6pi9+WvrJoBj7c9VVyeihnCYoKsONA2UQnHB+ERtLcQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFL2GtyIei1xDrjmDJPa1yVqxXvE0MB8GA1UdIwQY MBaAFCFuurT0byVNlfSWW4SozyQZa5yVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ZDhhMmMtZTIyOC00ZDQwLThkOTAt ZGVjMjBkZGM3M2FhLzEvdllhM0loNkxYRU91T1lNazlyWEpXckZlOFRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82ZDhhMmMtZTIyOC00ZDQwLThkOTAtZGVjMjBkZGM3M2Fh LzEvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5yTkD BAC5yTowDQYJKoZIhvcNAQELBQADggEBAIuc3eM8W3BvMvZr8EUiyap4jWkAEhma aOanZ09qYzENsbAWQgLTERD+nIAVa6bLA9UkPvU3F0hxTsueo4vdEDgeUnntWvr0 q0ccCOKffav5lVTA9oPbU7gEwiJ9/kOZMQcgKt3fxH/x1gYxxxC9FQFOd6ccDslg o5iSHj4/VwT+H82gcNzi1X8qd9yGKZsODc7d9KYUuW5ds38WwMdP//dhidt5GI3P BGETFAJKQw/mjWR24zy6bOcbg46vfutyClY1oRyjq5WxVN8xVlqVv1kn4tD1/3XO LF54X1f2KwhY4/7oXlHleRC/afATFTx42SdgYyPHDMlozncxIP4epsg= -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:16 2026 by rpki-client