This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/ryw8pANYiWDQuIyjdZ7oamR1t58.roa File: ryw8pANYiWDQuIyjdZ7oamR1t58.roa (raw, json) Hash identifier: 2HMSeXqRqzVzH58INszxQlwSvF3HPks2TZimmKfWKr4= Subject key identifier: AF:2C:3C:A4:03:58:89:60:D0:B8:8C:A3:75:9E:E8:6A:64:75:B7:9F Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397 Certificate serial: 019B7A5AC3CA8D5891409569FAAC49BE89D0 Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/ryw8pANYiWDQuIyjdZ7oamR1t58.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.249.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c3:ca:8d:58:91:40:95:69:fa:ac:49:be:89:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af2c3ca403588960d0b88ca3759ee86a6475b79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:d3:9a:85:92:15:93:01:68:3f:4c:da:92: 55:17:88:2d:d2:78:a6:ee:7b:6d:93:fc:2f:c2:80: 3b:d5:d7:05:af:dc:f0:4c:6f:39:19:bb:87:21:0a: 0e:26:2d:f7:58:b8:70:8e:fe:94:87:06:59:ad:e6: 40:7e:8a:04:19:6f:e0:5d:ef:62:cf:56:27:98:ab: 67:cc:bc:72:3e:4e:4e:2b:4e:35:dc:49:1b:64:78: 65:b9:2f:82:e5:2d:95:0b:45:ea:e1:bc:74:2d:c0: 81:92:8f:d4:e4:03:76:e7:4e:04:c7:fe:b1:fb:fd: ef:89:c8:5e:97:51:b4:40:17:17:11:7c:84:4a:61: c9:e4:6e:e1:a2:73:d8:d8:9c:e6:d2:4e:1c:ea:3a: 9f:a2:ac:9e:ed:39:8e:8c:01:a2:7a:42:62:7a:48: 6d:e4:f1:d1:52:c7:b2:2c:dc:87:db:7a:79:34:4c: e6:12:42:8d:30:81:3d:1f:21:04:9a:5f:ee:1b:30: 0a:c3:a7:38:c7:03:65:e9:97:ce:1a:44:9b:60:bb: 1c:bc:44:dd:49:ad:b4:b7:99:c2:bc:51:de:a8:20: 95:79:a6:cc:02:01:29:04:86:24:79:f3:c3:c8:ad: f1:0e:bc:7d:7b:f6:18:53:91:f2:ec:01:37:14:91: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2C:3C:A4:03:58:89:60:D0:B8:8C:A3:75:9E:E8:6A:64:75:B7:9F X509v3 Authority Key Identifier: keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/ryw8pANYiWDQuIyjdZ7oamR1t58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.159.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:3f:07:10:cb:ec:7c:9d:15:84:0d:cd:f4:81:d1:c5:83:48: 81:4c:aa:8c:aa:45:49:74:e3:76:b8:e2:d3:40:0f:fd:61:82: fb:6a:eb:92:50:3f:de:f8:08:59:dc:45:f9:15:d5:96:a0:9c: a5:7e:3c:a2:5b:3d:df:61:aa:55:f8:80:97:85:67:a5:dc:7e: a9:01:43:5f:50:a1:ac:d7:7c:05:21:15:34:a6:7c:07:2f:4d: b2:c0:37:be:4a:87:39:75:b3:aa:35:99:71:d7:a7:f1:81:d5: 34:76:7f:b4:47:28:6d:b9:a3:be:e5:5d:eb:21:4b:dc:73:9b: ad:20:b1:f7:21:07:a3:66:55:8a:89:e1:2a:41:77:d0:b1:ef: 03:bf:1e:a5:d4:30:c9:49:92:72:4f:f8:fd:44:e3:a1:dc:3a: a2:9b:d0:60:1f:57:c5:1c:5d:79:0f:04:34:f3:7e:21:16:20: ef:d8:ff:e0:b8:d1:ef:7f:f4:74:5a:83:b8:a0:27:7e:26:28: f3:2e:6c:e8:b6:5b:7c:8d:97:d2:0d:be:db:d9:dd:ab:5f:ee: c9:89:d6:77:d8:67:07:40:65:65:39:57:d4:59:13:e1:f3:a7: e4:df:89:8f:2d:e3:26:75:2d:88:d9:17:fe:70:52:e4:e2:b4: 35:bd:44:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsPKjViRQJVp+qxJvonQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODg2ZTMzOTcxMDE0ZjBlMzVmYWU2ZWUzNTVhOTVlZTUz ZjEzOTcwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjJjM2NhNDAzNTg4OTYwZDBiODhjYTM3NTllZTg2YTY0NzViNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNTTmoWSFZMBaD9M2pJVF4gt0nim 7nttk/wvwoA71dcFr9zwTG85GbuHIQoOJi33WLhwjv6UhwZZreZAfooEGW/gXe9i z1YnmKtnzLxyPk5OK0413EkbZHhluS+C5S2VC0Xq4bx0LcCBko/U5AN2504Ex/6x +/3vichel1G0QBcXEXyESmHJ5G7honPY2Jzm0k4c6jqfoqye7TmOjAGiekJiekht 5PHRUseyLNyH23p5NEzmEkKNMIE9HyEEml/uGzAKw6c4xwNl6ZfOGkSbYLscvETd Sa20t5nCvFHeqCCVeabMAgEpBIYkefPDyK3xDrx9e/YYU5Hy7AE3FJHZwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8sPKQDWIlg0LiMo3We6GpkdbefMB8GA1UdIwQY MBaAFHuIbjOXEBTw41+ubuNVqV7lPxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEt M2QwZGI4ZWI0ZTEzLzEvcnl3OHBBTllpV0RRdUl5amRaN29hbVIxdDU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEtM2QwZGI4ZWI0ZTEz LzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufmfMA0G CSqGSIb3DQEBCwUAA4IBAQBKPwcQy+x8nRWEDc30gdHFg0iBTKqMqkVJdON2uOLT QA/9YYL7auuSUD/e+AhZ3EX5FdWWoJylfjyiWz3fYapV+ICXhWel3H6pAUNfUKGs 13wFIRU0pnwHL02ywDe+Soc5dbOqNZlx16fxgdU0dn+0RyhtuaO+5V3rIUvcc5ut ILH3IQejZlWKieEqQXfQse8Dvx6l1DDJSZJyT/j9ROOh3Dqim9BgH1fFHF15DwQ0 834hFiDv2P/guNHvf/R0WoO4oCd+JijzLmzotlt8jZfSDb7b2d2rX+7JidZ32GcH QGVlOVfUWRPh86fk34mPLeMmdS2I2Rf+cFLk4rQ1vUQ6 -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:46 2026 by rpki-client