This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/yIldRRlB5bm94vmFwH-N8K1Rolk.roa File: yIldRRlB5bm94vmFwH-N8K1Rolk.roa (raw, json) Hash identifier: aHVLfMmPkPo5z8uQwk9maqTl2LVG/IoG19YLPq/oNr4= Subject key identifier: C8:89:5D:45:19:41:E5:B9:BD:E2:F9:85:C0:7F:8D:F0:AD:51:A2:59 Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583 Certificate serial: 019B7BA376E081485A8FF0D1BEB40A79DCF8 Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/yIldRRlB5bm94vmFwH-N8K1Rolk.roa Signing time: Thu 01 Jan 2026 22:17:48 +0000 ROA not before: Thu 01 Jan 2026 22:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205600 IP address blocks: 185.236.47.0/24 maxlen: 24 2a10:88c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:76:e0:81:48:5a:8f:f0:d1:be:b4:0a:79:dc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8895d451941e5b9bde2f985c07f8df0ad51a259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:c8:59:87:28:c8:da:aa:57:f8:18:f7:29: 82:dd:ae:be:44:15:f9:69:67:2b:3d:8d:4c:e4:e3: 55:fb:1b:4a:71:de:77:a8:9c:2b:c7:3d:ec:0f:6e: 2b:1d:41:97:c7:25:49:47:79:87:e9:2a:54:d1:fd: bd:89:38:d3:bd:97:42:2f:c1:cc:6d:56:87:eb:05: f9:88:21:44:84:d2:3f:3d:03:d8:47:9f:53:da:e4: 64:de:60:1c:eb:8a:41:70:bb:38:05:bc:ec:a5:56: ba:3f:6e:4b:ae:d1:94:a8:48:a4:3c:19:06:e2:37: ee:a0:07:af:cb:bd:6e:d3:8f:c7:9e:5e:6c:42:04: 5b:00:64:ed:56:d0:44:8d:2f:c8:0f:61:56:47:1d: 4e:36:18:92:63:9c:19:5e:66:43:02:30:3b:d6:31: ee:b8:cf:ae:ee:af:ae:d4:6d:57:af:08:ad:b6:c5: dc:99:2e:ad:15:cd:b5:4f:59:70:6f:76:de:8b:b8: bc:fc:33:f1:f4:20:5e:65:2e:d5:b2:18:dd:28:cf: 4f:67:d9:3f:33:bd:48:4b:71:93:f6:e8:c5:80:cd: 58:2e:84:38:e4:00:6f:68:07:1e:1c:38:fa:7e:da: ec:8e:1d:b3:81:e6:ff:62:21:49:18:90:e1:84:98: 0a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:89:5D:45:19:41:E5:B9:BD:E2:F9:85:C0:7F:8D:F0:AD:51:A2:59 X509v3 Authority Key Identifier: keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/yIldRRlB5bm94vmFwH-N8K1Rolk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.47.0/24 IPv6: 2a10:88c0::/29 Signature Algorithm: sha256WithRSAEncryption 6e:bc:94:ce:ec:01:a8:ff:9e:c7:f1:0c:7e:06:71:a1:82:f4: 68:39:08:6b:55:cd:05:34:f0:f2:4c:f4:d6:25:33:be:ed:5f: 72:94:06:48:85:a2:88:f1:4a:6b:5c:ae:91:8b:25:8f:40:35: 14:11:15:28:e4:22:bd:0e:0f:a7:07:ea:35:5d:da:39:25:55: ab:a8:a3:df:be:3d:a2:33:cb:16:05:0a:88:16:48:65:e4:2c: 32:73:f2:a8:99:7f:42:c5:42:92:3f:76:87:3d:c6:ba:98:1d: 38:4c:e0:5d:1a:7d:3b:a5:40:db:a4:e6:b8:42:b1:3d:2c:55: a4:30:47:49:c2:34:4e:a1:05:67:38:1b:9e:7c:63:91:a2:65: b7:26:47:b5:84:f9:34:81:82:f2:65:70:89:c7:40:d3:92:53: 9b:ab:48:77:b5:2e:bd:51:e9:e0:42:11:9b:88:9c:bb:12:c1: 40:ff:30:89:8c:fe:e0:8a:d8:01:a9:c2:3a:c6:45:96:a0:37: 3c:3a:fa:66:e7:a5:10:7c:18:b7:72:00:9a:dc:5a:57:86:00: de:11:0c:ec:0c:76:19:82:8c:d6:02:80:86:3f:85:bc:18:18: f1:9f:5a:18:33:80:b2:b3:6b:06:5b:77:90:6c:0c:e8:b2:d8: bb:8c:00:b6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o3bggUhaj/DRvrQKedz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTM0M2MyZmIzZDZiOGQyMzc4OWFiNGRhNmZjZDQ2NWE2 OTA1ODMwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODg5NWQ0NTE5NDFlNWI5YmRlMmY5ODVjMDdmOGRmMGFkNTFhMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyPIWYcoyNqqV/gY9ymC3a6+RBX5 aWcrPY1M5ONV+xtKcd53qJwrxz3sD24rHUGXxyVJR3mH6SpU0f29iTjTvZdCL8HM bVaH6wX5iCFEhNI/PQPYR59T2uRk3mAc64pBcLs4BbzspVa6P25LrtGUqEikPBkG 4jfuoAevy71u04/Hnl5sQgRbAGTtVtBEjS/ID2FWRx1ONhiSY5wZXmZDAjA71jHu uM+u7q+u1G1XrwittsXcmS6tFc21T1lwb3bei7i8/DPx9CBeZS7VshjdKM9PZ9k/ M71IS3GT9ujFgM1YLoQ45ABvaAceHDj6ftrsjh2zgeb/YiFJGJDhhJgKXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMiJXUUZQeW5veL5hcB/jfCtUaJZMB8GA1UdIwQY MBaAFJvjQ8L7PWuNI3iatNpvzUZaaQWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUt YWRjZWZkYWExMDI4LzEveUlsZFJSbEI1Ym05NHZtRndILU44SzFSb2xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUtYWRjZWZkYWExMDI4 LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuewvMA0E AgACMAcDBQMqEIjAMA0GCSqGSIb3DQEBCwUAA4IBAQBuvJTO7AGo/57H8Qx+BnGh gvRoOQhrVc0FNPDyTPTWJTO+7V9ylAZIhaKI8UprXK6RiyWPQDUUERUo5CK9Dg+n B+o1Xdo5JVWrqKPfvj2iM8sWBQqIFkhl5Cwyc/KomX9CxUKSP3aHPca6mB04TOBd Gn07pUDbpOa4QrE9LFWkMEdJwjROoQVnOBuefGORomW3Jke1hPk0gYLyZXCJx0DT klObq0h3tS69UengQhGbiJy7EsFA/zCJjP7gitgBqcI6xkWWoDc8Ovpm56UQfBi3 cgCa3FpXhgDeEQzsDHYZgozWAoCGP4W8GBjxn1oYM4Cys2sGW3eQbAzosti7jAC2 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:28 2026 by rpki-client