This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa File: nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa (raw, json) Hash identifier: ygakFRiKlCc1AsCZ9QHkHBLmK3WGXgznTKZOHRqQphU= Subject key identifier: 9C:0B:58:F9:16:F3:60:1A:03:1D:AC:3D:A4:A7:EA:8B:EF:51:8F:F7 Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019B7CEE67DB046719990BB15B4FCFDFF1C0 Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 81.85.63.0/24 maxlen: 24 185.22.168.0/24 maxlen: 24 185.22.170.0/24 maxlen: 24 185.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:67:db:04:67:19:99:0b:b1:5b:4f:cf:df:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c0b58f916f3601a031dac3da4a7ea8bef518ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:69:4d:b3:1d:81:67:c7:87:1f:04:c0:31: 25:84:00:f8:16:f4:8b:13:c3:98:96:7a:6c:80:90: 33:da:7c:53:21:33:37:73:03:dc:94:fc:99:21:37: d3:45:c7:a5:79:a9:83:45:57:1b:03:43:55:d3:84: 5f:a2:ee:15:09:59:ab:43:81:8d:ec:95:57:07:15: 94:54:74:f5:00:83:20:88:c8:0a:a4:c2:2f:fd:f6: 14:a9:25:85:1a:1c:10:65:ec:6a:fe:61:c4:e8:a4: 56:6e:dd:ac:ab:49:85:38:26:f8:eb:43:53:3f:d9: f1:16:0b:2b:e6:f0:8a:40:c0:b0:28:a1:22:3e:4e: 1b:b4:b1:ac:4c:db:2c:c0:89:f8:14:97:42:74:16: 51:e7:ed:c1:5a:41:7b:a4:94:ee:d5:8c:15:49:4d: b1:4d:99:8a:4e:81:bd:1e:ae:94:3e:89:19:c0:e9: 89:74:c0:61:85:d2:fd:b1:35:21:a9:14:4f:0c:78: 39:b4:84:81:df:fc:28:2e:67:c1:e3:e4:ce:db:bb: 84:47:52:fa:d5:f5:c0:71:5e:62:96:0e:e8:7a:83: 2f:e4:a3:bc:84:72:f3:99:ef:54:92:94:ed:1d:42: ad:b0:69:f0:e4:45:c3:47:e8:f5:0e:18:80:39:2f: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0B:58:F9:16:F3:60:1A:03:1D:AC:3D:A4:A7:EA:8B:EF:51:8F:F7 X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.63.0/24 185.22.168.0/24 185.22.170.0/23 Signature Algorithm: sha256WithRSAEncryption a3:72:84:62:25:91:6a:58:32:09:4e:16:8e:74:3e:4d:da:45: 1b:d7:37:54:8a:e2:c7:4c:52:7b:0c:9d:d1:a7:52:12:25:38: 1b:56:ee:f2:b7:ad:d9:4c:5f:fe:aa:78:ac:79:93:7a:b7:94: 26:b1:21:58:a7:74:8d:89:4b:11:c9:1a:56:5f:08:b1:71:03: 2f:de:be:34:f7:6d:ba:ce:24:80:d1:c4:d5:c9:69:f3:ee:0f: 4f:d2:2b:9d:db:b4:1e:48:d8:ec:ff:93:46:a4:fd:fc:cb:25: 7d:2e:b8:b4:5b:dd:09:a5:65:db:73:78:90:e5:f8:73:c1:64: 08:79:e1:65:ae:c8:89:fc:6d:0b:71:2b:8f:f2:86:d9:55:14: 09:f0:15:32:8b:1b:ab:03:52:3c:90:72:57:7a:31:8c:ec:45: 4c:4d:99:5f:6c:a4:6c:3e:ed:a1:45:2f:09:d5:22:9e:cd:15: e3:cb:e2:13:ba:9e:38:0e:34:fa:2b:a1:92:a3:28:86:8f:eb: 2e:8f:b5:04:09:c0:00:2d:a0:ac:49:6e:4e:64:14:04:08:68: a3:1b:88:c0:65:56:0b:2f:c8:4b:bf:d6:c2:b9:17:88:60:0d: e0:c7:74:67:e4:5d:5d:05:5e:21:0b:64:9f:3b:ea:9f:0e:d9: 36:5a:7d:39 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87mfbBGcZmQuxW0/P3/HAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzBiNThmOTE2ZjM2MDFhMDMxZGFjM2RhNGE3ZWE4YmVmNTE4ZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiJpTbMdgWfHhx8EwDElhAD4FvSL E8OYlnpsgJAz2nxTITM3cwPclPyZITfTRceleamDRVcbA0NV04Rfou4VCVmrQ4GN 7JVXBxWUVHT1AIMgiMgKpMIv/fYUqSWFGhwQZexq/mHE6KRWbt2sq0mFOCb460NT P9nxFgsr5vCKQMCwKKEiPk4btLGsTNsswIn4FJdCdBZR5+3BWkF7pJTu1YwVSU2x TZmKToG9Hq6UPokZwOmJdMBhhdL9sTUhqRRPDHg5tISB3/woLmfB4+TO27uER1L6 1fXAcV5ilg7oeoMv5KO8hHLzme9UkpTtHUKtsGnw5EXDR+j1DhiAOS+YSQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJwLWPkW82AaAx2sPaSn6ovvUY/3MB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvbkF0WS1SYnpZQm9ESGF3OXBLZnFpLTlSal9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUVU/AwQA uRaoAwQBuRaqMA0GCSqGSIb3DQEBCwUAA4IBAQCjcoRiJZFqWDIJThaOdD5N2kUb 1zdUiuLHTFJ7DJ3Rp1ISJTgbVu7yt63ZTF/+qniseZN6t5QmsSFYp3SNiUsRyRpW XwixcQMv3r409226ziSA0cTVyWnz7g9P0iud27QeSNjs/5NGpP38yyV9Lri0W90J pWXbc3iQ5fhzwWQIeeFlrsiJ/G0LcSuP8obZVRQJ8BUyixurA1I8kHJXejGM7EVM TZlfbKRsPu2hRS8J1SKezRXjy+ITup44DjT6K6GSoyiGj+suj7UECcAALaCsSW5O ZBQECGijG4jAZVYLL8hLv9bCuReIYA3gx3Rn5F1dBV4hC2SfO+qfDtk2Wn05 -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:33 2026 by rpki-client