This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/YNqhL0EtlsirShTzaqZkwbs3OBc.roa File: YNqhL0EtlsirShTzaqZkwbs3OBc.roa (raw, json) Hash identifier: QZXz9YywrRKzWwJHdlWEx//kGNdzCHiJy5Bj7InLuuo= Subject key identifier: 60:DA:A1:2F:41:2D:96:C8:AB:4A:14:F3:6A:A6:64:C1:BB:37:38:17 Certificate issuer: /CN=31ebbb9fc09f37d3dd0141bcb0a67ec83b78081f Certificate serial: 019B7EA69B9E0DC5CDD8BE85491584321CE1 Authority key identifier: 31:EB:BB:9F:C0:9F:37:D3:DD:01:41:BC:B0:A6:7E:C8:3B:78:08:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/YNqhL0EtlsirShTzaqZkwbs3OBc.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207112 IP address blocks: 185.165.104.0/24 maxlen: 24 185.165.105.0/24 maxlen: 24 185.165.106.0/24 maxlen: 24 185.165.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9b:9e:0d:c5:cd:d8:be:85:49:15:84:32:1c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31ebbb9fc09f37d3dd0141bcb0a67ec83b78081f Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60daa12f412d96c8ab4a14f36aa664c1bb373817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:33:3d:67:35:e5:f7:e9:e7:fe:63:8d:2b: b9:9a:e0:55:f7:ea:1a:80:8f:cf:9f:44:f6:10:f3: 26:2d:f3:a3:07:6d:17:a0:ec:6b:46:b6:cb:52:68: fa:3c:0b:67:e3:ac:87:05:a3:e3:35:5c:25:7c:d6: 81:c2:89:50:a3:25:e6:27:3e:81:db:7c:96:32:63: a3:ea:cb:80:14:ad:0c:45:b6:d4:14:b3:49:86:b0: 0a:8a:f1:61:5f:0a:1d:d5:fa:8c:a4:fb:3a:87:38: 13:81:15:a5:58:f7:b2:ec:09:37:c4:1f:76:e7:e9: a7:4e:cf:b1:77:8d:b6:7d:68:aa:c0:27:0d:c8:1b: 13:a1:41:5d:5a:e0:75:fc:75:d5:b9:d3:0c:60:8f: e3:55:d4:72:f3:4c:fc:03:82:6e:0b:a7:62:ad:5a: 5f:62:bd:90:49:96:e2:fa:2d:83:41:e7:94:9c:ae: 05:51:27:5e:75:ad:c8:b1:53:d4:46:9f:e8:bb:00: 99:f7:b5:0d:20:74:b9:80:81:20:5e:d9:9c:84:1e: 10:11:ee:91:58:71:de:ed:ed:3a:f3:eb:da:70:a9: ed:7b:ac:f6:9a:e8:da:b7:94:4d:62:14:5d:18:f9: cd:96:e6:df:24:a9:af:bf:88:61:5b:32:31:e9:56: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DA:A1:2F:41:2D:96:C8:AB:4A:14:F3:6A:A6:64:C1:BB:37:38:17 X509v3 Authority Key Identifier: keyid:31:EB:BB:9F:C0:9F:37:D3:DD:01:41:BC:B0:A6:7E:C8:3B:78:08:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/YNqhL0EtlsirShTzaqZkwbs3OBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.104.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:99:8d:0f:39:b6:a3:4d:18:9f:02:1f:0d:05:89:4e:7d:e1: 9a:b1:00:e6:2d:40:33:1b:52:59:29:80:64:42:3e:56:66:bb: 4d:7a:3c:d6:03:10:d3:66:a1:06:19:e3:0d:82:d0:6b:0a:67: 3a:10:86:bd:01:c4:47:0d:bf:1f:8f:99:e2:09:d2:2e:a7:fb: 35:da:88:fc:6b:c8:33:bf:3b:7c:c6:81:1b:fe:83:f4:2d:28: 76:bc:19:ab:41:6f:0c:4a:35:56:6d:20:52:2d:45:a8:e3:83: 55:af:24:36:1f:f9:1a:ca:f5:bb:80:9b:ac:52:ac:ae:4b:24: 56:83:8f:e2:73:17:8f:32:c1:9d:03:16:ea:50:76:d3:f8:c0: 9b:9e:25:d0:8c:0b:96:00:96:d5:52:b0:36:2c:9b:b8:1e:1f: 63:06:37:b6:6a:66:2e:59:43:cc:b3:18:fa:40:18:b9:b3:f1: bc:dc:21:c5:10:40:ea:70:70:42:3b:35:ef:f8:0e:df:e9:99: 9f:03:88:91:bc:91:c0:1e:f0:dc:df:db:ae:fa:8f:bc:8b:0b: 8c:3f:00:07:e4:1d:dc:47:e9:53:b6:83:b9:41:86:66:36:b0: 02:78:3c:8f:90:07:11:8d:1c:25:d2:ee:07:6f:d2:2a:bf:46: 2a:78:d0:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppueDcXN2L6FSRWEMhzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZWJiYjlmYzA5ZjM3ZDNkZDAxNDFiY2IwYTY3ZWM4M2I3 ODA4MWYwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGRhYTEyZjQxMmQ5NmM4YWI0YTE0ZjM2YWE2NjRjMWJiMzczODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo4zPWc15ffp5/5jjSu5muBV9+oa gI/Pn0T2EPMmLfOjB20XoOxrRrbLUmj6PAtn46yHBaPjNVwlfNaBwolQoyXmJz6B 23yWMmOj6suAFK0MRbbUFLNJhrAKivFhXwod1fqMpPs6hzgTgRWlWPey7Ak3xB92 5+mnTs+xd422fWiqwCcNyBsToUFdWuB1/HXVudMMYI/jVdRy80z8A4JuC6dirVpf Yr2QSZbi+i2DQeeUnK4FUSdeda3IsVPURp/ouwCZ97UNIHS5gIEgXtmchB4QEe6R WHHe7e068+vacKnte6z2mujat5RNYhRdGPnNlubfJKmvv4hhWzIx6VbjoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGDaoS9BLZbIq0oU82qmZMG7NzgXMB8GA1UdIwQY MBaAFDHru5/AnzfT3QFBvLCmfsg7eAgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWV1N244Q2ZOOVBkQVVHOHNLWi15RHQ0Q0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80M2YyNmYtMWI0ZS00NDI2LWJmNTAt YzRiYTYxZTVhMjEwLzEvWU5xaEwwRXRsc2lyU2hUemFxWmt3YnMzT0JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80M2YyNmYtMWI0ZS00NDI2LWJmNTAtYzRiYTYxZTVhMjEw LzEvTWV1N244Q2ZOOVBkQVVHOHNLWi15RHQ0Q0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaVoMA0G CSqGSIb3DQEBCwUAA4IBAQBsmY0PObajTRifAh8NBYlOfeGasQDmLUAzG1JZKYBk Qj5WZrtNejzWAxDTZqEGGeMNgtBrCmc6EIa9AcRHDb8fj5niCdIup/s12oj8a8gz vzt8xoEb/oP0LSh2vBmrQW8MSjVWbSBSLUWo44NVryQ2H/kayvW7gJusUqyuSyRW g4/icxePMsGdAxbqUHbT+MCbniXQjAuWAJbVUrA2LJu4Hh9jBje2amYuWUPMsxj6 QBi5s/G83CHFEEDqcHBCOzXv+A7f6ZmfA4iRvJHAHvDc39uu+o+8iwuMPwAH5B3c R+lTtoO5QYZmNrACeDyPkAcRjRwl0u4Hb9Iqv0YqeNCZ -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:01 2026 by rpki-client