This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/YCkhVzl1kc7Gznj8NLyf1ekh9bk.roa File: YCkhVzl1kc7Gznj8NLyf1ekh9bk.roa (raw, json) Hash identifier: pAjAIrqpfxVq+D0TEnCShzgTAby51DVmf4jXA87+HYQ= Subject key identifier: 60:29:21:57:39:75:91:CE:C6:CE:78:FC:34:BC:9F:D5:E9:21:F5:B9 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B76EB2EDAD2F87DFD6C5F43A420B5DD9A Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/YCkhVzl1kc7Gznj8NLyf1ekh9bk.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48763 IP address blocks: 185.162.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2e:da:d2:f8:7d:fd:6c:5f:43:a4:20:b5:dd:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60292157397591cec6ce78fc34bc9fd5e921f5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:45:54:30:40:01:2c:1d:ff:2c:fd:f7:f0:55: 0e:3b:65:e0:f1:a7:b0:28:b0:8b:e5:4a:c2:59:12: f0:47:78:5d:61:75:6a:aa:94:51:6c:21:ed:a8:22: 7c:63:ec:04:46:6f:fe:45:6c:2e:6a:f9:97:d4:1a: 97:5a:de:17:9a:62:77:2e:97:f7:50:5e:16:93:a2: 7f:24:75:59:d6:c8:f1:42:a6:f9:cc:ef:ea:22:af: 1c:d7:0f:f6:a4:10:82:48:69:ba:e4:17:ec:1f:19: e0:15:f6:a4:af:27:bd:37:7e:19:1b:eb:be:9a:df: 3f:4b:54:db:3b:28:30:40:2a:d0:ac:cc:10:4b:09: 55:b6:74:6f:86:fc:78:9d:77:49:74:cf:9b:55:d5: ad:d9:1f:d6:c9:68:fa:b9:ed:ab:e6:82:6b:08:c5: 91:35:ac:49:be:2c:f3:db:1f:b1:c5:a5:2b:1c:e7: 5e:32:56:76:74:bc:d2:51:5b:8b:05:49:e3:a3:65: 2f:a3:d7:24:38:d1:a5:d6:01:a0:34:67:ab:35:e0: 64:c2:d9:91:9b:02:67:f6:b8:3f:bd:ce:17:ae:a2: 70:97:ad:b1:4e:78:ff:46:2e:e9:d9:18:50:ac:55: 94:15:e5:bd:2e:60:de:5f:7e:1e:20:2c:4a:2d:05: 10:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:29:21:57:39:75:91:CE:C6:CE:78:FC:34:BC:9F:D5:E9:21:F5:B9 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/YCkhVzl1kc7Gznj8NLyf1ekh9bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.235.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:50:fe:21:f7:64:b9:97:21:38:e7:08:6f:04:00:13:c1:54: d6:15:bf:c0:25:25:b0:bb:68:ce:98:9a:00:ba:b5:9d:30:ef: b5:37:5a:ed:53:10:66:8d:81:34:11:24:9d:22:e6:e5:05:43: ee:05:72:4c:cb:4f:fd:81:d1:3c:c7:2a:bf:93:4b:10:11:78: 44:25:1f:a8:aa:5c:f2:e8:57:55:4a:aa:73:50:47:3c:21:99: 73:ac:5b:56:e2:0c:b7:e0:68:e5:8f:7d:99:ee:be:55:97:e5: 07:f2:10:5f:df:5e:e5:e8:ee:9a:53:38:d3:a8:54:fe:25:a2: 6d:6c:50:e9:62:53:b9:71:a5:33:28:dd:ce:07:90:6c:13:a6: db:89:5c:6c:af:d5:2e:0d:bf:f0:c4:7d:49:71:ae:d4:ab:f7: 34:98:e1:9e:2d:63:53:0f:4e:01:82:43:6d:87:71:5e:5b:5e: 20:f1:4c:fe:4d:7c:df:78:81:be:12:4a:5f:ba:15:4a:14:14: cf:cd:49:a6:1b:55:76:aa:cd:2d:0b:36:36:50:2c:ea:07:7d: 1f:61:aa:87:f3:9b:ae:ca:58:68:14:e2:38:24:7e:15:d0:ad: 1a:c9:e5:88:35:2b:16:ba:09:4f:06:8d:96:ae:c0:d0:97:29: ed:e5:38:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26y7a0vh9/WxfQ6Qgtd2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDI5MjE1NzM5NzU5MWNlYzZjZTc4ZmMzNGJjOWZkNWU5MjFmNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EVUMEABLB3/LP338FUOO2Xg8aew KLCL5UrCWRLwR3hdYXVqqpRRbCHtqCJ8Y+wERm/+RWwuavmX1BqXWt4XmmJ3Lpf3 UF4Wk6J/JHVZ1sjxQqb5zO/qIq8c1w/2pBCCSGm65BfsHxngFfakrye9N34ZG+u+ mt8/S1TbOygwQCrQrMwQSwlVtnRvhvx4nXdJdM+bVdWt2R/WyWj6ue2r5oJrCMWR NaxJvizz2x+xxaUrHOdeMlZ2dLzSUVuLBUnjo2Uvo9ckONGl1gGgNGerNeBkwtmR mwJn9rg/vc4XrqJwl62xTnj/Ri7p2RhQrFWUFeW9LmDeX34eICxKLQUQfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGApIVc5dZHOxs54/DS8n9XpIfW5MB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWUNraFZ6bDFrYzdHem5qOE5MeWYxZWtoOWJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaLrMA0G CSqGSIb3DQEBCwUAA4IBAQBLUP4h92S5lyE45whvBAATwVTWFb/AJSWwu2jOmJoA urWdMO+1N1rtUxBmjYE0ESSdIublBUPuBXJMy0/9gdE8xyq/k0sQEXhEJR+oqlzy 6FdVSqpzUEc8IZlzrFtW4gy34Gjlj32Z7r5Vl+UH8hBf317l6O6aUzjTqFT+JaJt bFDpYlO5caUzKN3OB5BsE6bbiVxsr9UuDb/wxH1Jca7Uq/c0mOGeLWNTD04BgkNt h3FeW14g8Uz+TXzfeIG+EkpfuhVKFBTPzUmmG1V2qs0tCzY2UCzqB30fYaqH85uu ylhoFOI4JH4V0K0ayeWINSsWuglPBo2WrsDQlynt5TgS -----END CERTIFICATE-----Generated at Wed Jan 21 17:16:55 2026 by rpki-client