This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/sY-TUHF1C-E9ygZ13WzUi8BWces.roa File: sY-TUHF1C-E9ygZ13WzUi8BWces.roa (raw, json) Hash identifier: 77GL8ja7gbPVNkhP3o+2Z/gcrzDHUURJAQYF2c5XqdU= Subject key identifier: B1:8F:93:50:71:75:0B:E1:3D:CA:06:75:DD:6C:D4:8B:C0:56:71:EB Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9 Certificate serial: 019B7E378E652FDBEB7F3ED7E95F463018D0 Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/sY-TUHF1C-E9ygZ13WzUi8BWces.roa Signing time: Fri 02 Jan 2026 10:18:48 +0000 ROA not before: Fri 02 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50254 IP address blocks: 185.145.124.0/22 maxlen: 22 185.145.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8e:65:2f:db:eb:7f:3e:d7:e9:5f:46:30:18:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9 Validity Not Before: Jan 2 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b18f935071750be13dca0675dd6cd48bc05671eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:7c:c2:81:79:34:44:d2:96:92:9d:cd:01: e2:39:63:88:7b:63:70:13:e9:30:2f:b8:77:cb:6a: 0e:7f:cf:43:6e:d6:21:1d:70:e1:0e:19:08:26:ef: 28:0d:3e:7c:4e:89:76:7d:2a:ee:a5:5f:c8:13:58: 03:0e:5f:91:4f:fd:c4:ab:17:7c:ef:a6:2a:6d:19: 06:ee:6e:4c:12:83:e6:ae:78:72:d5:15:5f:41:b4: 1c:96:71:6c:e3:39:ad:ca:4a:04:e4:ea:9d:36:33: 6b:6d:94:5d:7a:dc:21:94:0a:da:8d:b0:ae:68:bf: 8f:e0:85:58:38:4f:86:14:0b:cb:13:11:bb:d7:86: d5:2a:bb:ec:9c:74:2c:f2:2d:90:9e:ab:32:b1:ba: 79:d7:99:37:89:30:b9:af:ad:82:44:38:8e:5d:c3: c8:7b:c0:65:dc:89:5f:dd:a2:1d:8b:6a:5a:da:c0: a1:03:39:a7:f4:b2:18:30:ee:bc:1a:3e:07:68:e2: 43:0b:51:fe:a9:1d:1c:77:99:94:84:e9:6b:c0:9e: 34:37:f3:57:27:d8:d7:04:86:59:33:33:07:c8:cc: 31:81:9d:5c:ed:06:01:90:a3:6b:4a:2c:22:7f:a4: 5a:85:6c:c4:20:20:2c:16:a6:7d:79:00:be:1d:4d: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:93:50:71:75:0B:E1:3D:CA:06:75:DD:6C:D4:8B:C0:56:71:EB X509v3 Authority Key Identifier: keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/sY-TUHF1C-E9ygZ13WzUi8BWces.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.124.0/22 Signature Algorithm: sha256WithRSAEncryption a0:95:8b:38:c3:12:4f:02:fe:e8:99:df:00:b9:6a:a2:38:44: 28:08:ee:39:9f:c3:72:1c:36:99:36:72:73:43:52:d1:e1:db: 90:4f:fc:33:f6:09:bd:57:68:f7:4a:34:36:cf:3d:ca:e6:86: 2f:3e:93:bf:bc:59:98:b8:c0:7a:05:0c:b9:54:d7:c8:42:c9: 4f:36:d1:31:07:d7:00:e2:cf:bf:11:62:fb:80:f9:00:70:f9: c7:3e:20:86:c5:2f:10:0e:7f:ae:73:67:99:31:85:07:0a:20: eb:e6:e5:e8:a4:6c:33:ff:92:ee:83:40:a9:4c:85:a2:7c:3e: 33:c4:92:d6:9f:2f:ae:93:c6:cc:be:de:04:d8:53:5d:e0:8f: d0:ec:dd:cd:f5:2a:5a:3b:0c:ad:32:ff:7c:b7:93:33:51:03: f6:8e:94:b8:f7:72:82:6b:c5:81:cb:ac:53:79:89:02:ff:7d: 43:a3:90:3a:a8:9c:98:e4:b2:d0:83:96:53:28:e7:cf:70:3e: ec:e8:85:6e:74:60:4d:e3:16:cc:87:18:58:c5:b0:63:40:e6: 27:a1:7f:9b:c3:6c:a9:0f:c1:68:f0:28:2d:76:c0:68:3f:c0: 15:b4:36:dc:d3:a0:3c:23:9e:46:25:64:c1:26:a7:cb:02:19: 6a:40:b9:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N45lL9vrfz7X6V9GMBjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDRkMmZkYmVlM2FhM2UxMjE0MjhlYTcwNTBjOTQzOWQ4 ODg2YTkwHhcNMjYwMTAyMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMThmOTM1MDcxNzUwYmUxM2RjYTA2NzVkZDZjZDQ4YmMwNTY3MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiZ8woF5NETSlpKdzQHiOWOIe2Nw E+kwL7h3y2oOf89DbtYhHXDhDhkIJu8oDT58Tol2fSrupV/IE1gDDl+RT/3Eqxd8 76YqbRkG7m5MEoPmrnhy1RVfQbQclnFs4zmtykoE5OqdNjNrbZRdetwhlArajbCu aL+P4IVYOE+GFAvLExG714bVKrvsnHQs8i2Qnqsysbp515k3iTC5r62CRDiOXcPI e8Bl3Ilf3aIdi2pa2sChAzmn9LIYMO68Gj4HaOJDC1H+qR0cd5mUhOlrwJ40N/NX J9jXBIZZMzMHyMwxgZ1c7QYBkKNrSiwif6RahWzEICAsFqZ9eQC+HU3TFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGPk1BxdQvhPcoGdd1s1IvAVnHrMB8GA1UdIwQY MBaAFD/U0v2+46o+EhQo6nBQyUOdiIapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMt NjI2MWU1YjFmYzIwLzEvc1ktVFVIRjFDLUU5eWdaMTNXelVpOEJXY2VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMtNjI2MWU1YjFmYzIw LzEvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZF8MA0G CSqGSIb3DQEBCwUAA4IBAQCglYs4wxJPAv7omd8AuWqiOEQoCO45n8NyHDaZNnJz Q1LR4duQT/wz9gm9V2j3SjQ2zz3K5oYvPpO/vFmYuMB6BQy5VNfIQslPNtExB9cA 4s+/EWL7gPkAcPnHPiCGxS8QDn+uc2eZMYUHCiDr5uXopGwz/5Lug0CpTIWifD4z xJLWny+uk8bMvt4E2FNd4I/Q7N3N9SpaOwytMv98t5MzUQP2jpS493KCa8WBy6xT eYkC/31Do5A6qJyY5LLQg5ZTKOfPcD7s6IVudGBN4xbMhxhYxbBjQOYnoX+bw2yp D8Fo8CgtdsBoP8AVtDbc06A8I55GJWTBJqfLAhlqQLm7 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:13 2026 by rpki-client