This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/PpOYs6t43PH4GR9qIThOE1vaAks.roa File: PpOYs6t43PH4GR9qIThOE1vaAks.roa (raw, json) Hash identifier: Im1Y98FpEgnUbHH9KOtV4b1u5NuFFGfeVmvEGUjUXPY= Subject key identifier: 3E:93:98:B3:AB:78:DC:F1:F8:19:1F:6A:21:38:4E:13:5B:DA:02:4B Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c Certificate serial: 019B76EABF2CC5C767EA74F5568FB389AFE4 Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/PpOYs6t43PH4GR9qIThOE1vaAks.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211588 IP address blocks: 185.229.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bf:2c:c5:c7:67:ea:74:f5:56:8f:b3:89:af:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e9398b3ab78dcf1f8191f6a21384e135bda024b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:78:b6:ff:4e:a1:2b:dd:2c:bd:13:fd:7a: 61:04:13:1f:d0:cd:a5:88:1e:ec:01:30:76:c0:92: 0b:41:b9:78:af:ea:a7:87:6b:ea:26:a4:16:d2:88: 79:76:85:f3:00:ad:53:7a:f0:22:e7:36:75:e0:36: 76:47:f7:a1:c2:4c:eb:a3:f1:23:2e:27:a7:93:2f: 19:15:64:60:f3:a2:64:c4:b9:70:aa:86:68:02:e4: ea:5f:73:ef:5a:8f:25:82:e7:bb:ab:58:51:6c:48: fb:71:79:9f:42:ab:4c:96:df:91:d0:2f:99:3b:84: 47:ed:0b:79:35:8d:da:fe:ce:12:3e:0f:e6:39:26: fc:dd:9b:71:82:50:90:f4:10:35:74:66:cf:05:f8: 2f:e4:fa:1a:db:7a:75:59:96:51:e6:0c:1d:f6:90: e3:f9:4e:39:c3:43:4f:86:d7:90:e0:fc:d7:85:2a: ed:2a:89:e1:83:61:08:db:50:09:83:1b:e6:ba:7e: 87:ef:14:c9:33:8b:af:67:27:72:5a:cc:06:e0:47: 35:6b:ee:9a:f2:d4:7a:3d:fb:b0:f4:fc:2e:ae:9f: e6:ca:4f:51:3d:2d:fb:a6:e1:b8:ff:f7:1e:f8:fe: 42:ea:24:48:31:e7:15:27:e5:f4:4e:e2:99:31:9f: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:93:98:B3:AB:78:DC:F1:F8:19:1F:6A:21:38:4E:13:5B:DA:02:4B X509v3 Authority Key Identifier: keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/PpOYs6t43PH4GR9qIThOE1vaAks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.33.0/24 Signature Algorithm: sha256WithRSAEncryption 53:2e:b5:d3:39:ca:ab:a6:72:e5:13:32:e4:43:31:6a:34:9f: 1d:79:6f:25:6e:39:ae:7d:ac:37:f5:25:71:30:32:2a:f7:43: 5c:f7:96:f5:dc:88:7f:88:d6:04:04:ac:94:15:c3:ec:7d:09: 65:37:c3:51:30:50:96:5a:1e:ac:14:6b:3c:04:57:11:26:cf: 84:d8:99:ca:f7:6e:80:3e:5d:d0:3a:3e:68:19:ce:be:06:6d: eb:04:f2:7d:c4:f4:1e:0f:df:95:cf:5e:47:54:b3:34:9b:af: 16:bc:3c:34:ae:22:df:cc:00:b2:22:6e:35:dc:89:c2:12:1c: 78:1b:8b:dd:17:a5:75:22:71:1f:d3:82:e2:2c:34:e4:3a:61: 93:1e:13:0c:14:c0:94:e7:cf:e0:f5:28:f2:8e:39:0c:7e:7c: 72:bf:2d:f6:c1:7d:59:e1:f3:87:e9:c2:32:54:12:29:7d:f7: 7f:a9:c8:ec:47:bd:20:13:d0:00:c6:58:86:2c:41:4c:58:2c: 3a:86:02:53:fa:83:d5:87:03:4b:12:70:1c:32:10:af:6c:0c: dd:9e:70:a5:55:a7:c3:e8:e6:04:f3:43:71:f6:9f:ab:08:64: 85:8c:72:28:d7:5a:4e:69:52:e0:dc:ee:66:fb:26:90:2c:ed: e3:1a:21:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26r8sxcdn6nT1Vo+zia/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm MGIwNWMwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTkzOThiM2FiNzhkY2YxZjgxOTFmNmEyMTM4NGUxMzViZGEwMjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPF4tv9OoSvdLL0T/XphBBMf0M2l iB7sATB2wJILQbl4r+qnh2vqJqQW0oh5doXzAK1TevAi5zZ14DZ2R/ehwkzro/Ej Lienky8ZFWRg86JkxLlwqoZoAuTqX3PvWo8lgue7q1hRbEj7cXmfQqtMlt+R0C+Z O4RH7Qt5NY3a/s4SPg/mOSb83ZtxglCQ9BA1dGbPBfgv5Poa23p1WZZR5gwd9pDj +U45w0NPhteQ4PzXhSrtKonhg2EI21AJgxvmun6H7xTJM4uvZydyWswG4Ec1a+6a 8tR6Pfuw9Pwurp/myk9RPS37puG4//ce+P5C6iRIMecVJ+X0TuKZMZ8zRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD6TmLOreNzx+BkfaiE4ThNb2gJLMB8GA1UdIwQY MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt YmJmZDQ1Yzg0YmVhLzEvUHBPWXM2dDQzUEg0R1I5cUlUaE9FMXZhQWtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueUhMA0G CSqGSIb3DQEBCwUAA4IBAQBTLrXTOcqrpnLlEzLkQzFqNJ8deW8lbjmufaw39SVx MDIq90Nc95b13Ih/iNYEBKyUFcPsfQllN8NRMFCWWh6sFGs8BFcRJs+E2JnK926A Pl3QOj5oGc6+Bm3rBPJ9xPQeD9+Vz15HVLM0m68WvDw0riLfzACyIm413InCEhx4 G4vdF6V1InEf04LiLDTkOmGTHhMMFMCU58/g9SjyjjkMfnxyvy32wX1Z4fOH6cIy VBIpffd/qcjsR70gE9AAxliGLEFMWCw6hgJT+oPVhwNLEnAcMhCvbAzdnnClVafD 6OYE80Nx9p+rCGSFjHIo11pOaVLg3O5m+yaQLO3jGiHB -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:59 2026 by rpki-client