This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/yhxgRAr99RGmci9ROhuXvzy0jYE.roa File: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (raw, json) Hash identifier: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw= Subject key identifier: CA:1C:60:44:0A:FD:F5:11:A6:72:2F:51:3A:1B:97:BF:3C:B4:8D:81 Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31 Certificate serial: 019B7F15D9D8AFB3F6353E08DA604BE9018A Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/yhxgRAr99RGmci9ROhuXvzy0jYE.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48393 IP address blocks: 185.184.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d9:d8:af:b3:f6:35:3e:08:da:60:4b:e9:01:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca1c60440afdf511a6722f513a1b97bf3cb48d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:a5:07:9e:d1:88:e2:3c:aa:c8:b4:b1:29: 3a:72:0c:1f:16:31:65:bf:fc:f6:dc:1a:1b:ba:2c: ee:29:e8:bf:8f:10:83:d3:d1:26:33:65:34:81:9c: c2:75:5d:be:e8:5d:1f:2e:0e:15:02:f6:71:46:ee: 62:06:d6:7c:69:77:49:3e:8f:9a:53:ce:53:2c:b0: 7c:ad:30:c2:ec:9e:30:16:df:cf:e9:ae:fd:24:02: 65:88:83:e4:f3:7a:d4:8a:2d:8b:78:3c:eb:13:11: 40:9d:b3:8e:e4:06:14:93:2e:89:d7:83:78:38:87: e7:68:cb:1b:c5:ff:fe:24:c9:26:92:47:b5:17:bc: e2:e1:5f:b0:a0:93:e7:f5:3d:b1:25:db:9f:47:6a: 4f:f7:7a:1d:d1:6a:b2:40:9a:d4:59:69:4e:7a:f5: a8:88:ca:a6:8d:5e:2f:66:33:81:12:52:94:c9:c3: 19:51:56:a5:b5:e8:83:88:28:34:bf:b1:83:9b:9a: 4a:e9:d0:63:0d:34:03:28:b6:20:5d:88:15:0f:23: df:8b:55:87:03:df:f9:4f:1f:f4:72:56:86:89:98: bd:91:2d:26:05:9b:e0:74:88:1b:1d:f4:b4:c9:3f: c0:c3:e1:2e:de:db:a9:8e:1b:25:66:48:b2:e1:c6: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1C:60:44:0A:FD:F5:11:A6:72:2F:51:3A:1B:97:BF:3C:B4:8D:81 X509v3 Authority Key Identifier: keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/yhxgRAr99RGmci9ROhuXvzy0jYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.40.0/24 Signature Algorithm: sha256WithRSAEncryption c4:b5:cc:b7:36:27:10:44:9e:02:78:77:ba:b2:91:31:e2:31: 61:7b:42:67:c5:a1:e8:ee:03:4b:42:e3:83:e9:b5:67:db:6e: a5:45:4d:97:b2:be:ef:2f:e4:ab:55:a0:7c:ce:f9:ed:b1:5a: 9c:50:07:d4:70:eb:1a:ce:9e:b4:c0:fc:4b:50:a1:06:57:04: fc:1d:86:e3:51:3f:f7:48:66:6b:13:7b:33:b8:7a:4a:96:ca: 04:ab:22:d6:19:de:4e:29:02:d0:dd:da:88:c4:af:82:5b:16: 19:fe:2e:81:04:30:ac:88:b6:a0:87:02:93:90:61:06:0f:b2: 37:42:44:2b:0a:7d:55:a9:96:9a:33:37:49:00:bc:81:f9:ba: 83:5c:bc:df:32:49:2d:07:ae:62:6f:08:29:15:46:83:7e:f1: 51:e9:85:85:eb:5c:86:3d:e4:f0:05:18:6e:ce:aa:b1:d2:9f: 47:55:46:5c:ac:58:66:00:4c:ce:a1:e4:04:b4:ce:05:2e:53: be:df:b5:c9:b7:c9:d8:30:b9:3b:6d:2b:66:3f:26:15:6d:d2: bc:c9:53:8a:4d:b6:e2:5d:7a:c2:20:2a:07:db:0e:79:2a:9b: 4e:5c:de:6a:e5:45:c6:de:3c:5d:40:71:8a:e4:00:34:8b:cf: ad:e5:08:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdnYr7P2NT4I2mBL6QGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNjBjNzhiMWQ0NjJkNmJhZmRmNzM1OWQzYzIzM2RkYmY5 MjlkMzEwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFjNjA0NDBhZmRmNTExYTY3MjJmNTEzYTFiOTdiZjNjYjQ4ZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6elB57RiOI8qsi0sSk6cgwfFjFl v/z23BobuizuKei/jxCD09EmM2U0gZzCdV2+6F0fLg4VAvZxRu5iBtZ8aXdJPo+a U85TLLB8rTDC7J4wFt/P6a79JAJliIPk83rUii2LeDzrExFAnbOO5AYUky6J14N4 OIfnaMsbxf/+JMkmkke1F7zi4V+woJPn9T2xJdufR2pP93od0WqyQJrUWWlOevWo iMqmjV4vZjOBElKUycMZUValteiDiCg0v7GDm5pK6dBjDTQDKLYgXYgVDyPfi1WH A9/5Tx/0claGiZi9kS0mBZvgdIgbHfS0yT/Aw+Eu3tupjhslZkiy4cYTWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMocYEQK/fURpnIvUTobl788tI2BMB8GA1UdIwQY MBaAFPNgx4sdRi1rr99zWdPCM92/kp0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmIt OTAwZDFjYTMyZDdlLzEveWh4Z1JBcjk5UkdtY2k5Uk9odVh2enkwallFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmItOTAwZDFjYTMyZDdl LzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubgoMA0G CSqGSIb3DQEBCwUAA4IBAQDEtcy3NicQRJ4CeHe6spEx4jFhe0JnxaHo7gNLQuOD 6bVn226lRU2Xsr7vL+SrVaB8zvntsVqcUAfUcOsazp60wPxLUKEGVwT8HYbjUT/3 SGZrE3szuHpKlsoEqyLWGd5OKQLQ3dqIxK+CWxYZ/i6BBDCsiLaghwKTkGEGD7I3 QkQrCn1VqZaaMzdJALyB+bqDXLzfMkktB65ibwgpFUaDfvFR6YWF61yGPeTwBRhu zqqx0p9HVUZcrFhmAEzOoeQEtM4FLlO+37XJt8nYMLk7bStmPyYVbdK8yVOKTbbi XXrCICoH2w55KptOXN5q5UXG3jxdQHGK5AA0i8+t5Qhf -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:03 2026 by rpki-client