This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/YXSgyUgUnB863rJPTcWCW7mGwFc.roa File: YXSgyUgUnB863rJPTcWCW7mGwFc.roa (raw, json) Hash identifier: V1Uuys2uya26ArEHIls/PYBVdC0Vm3sFwdUGRo5ZhTA= Subject key identifier: 61:74:A0:C9:48:14:9C:1F:3A:DE:B2:4F:4D:C5:82:5B:B9:86:C0:57 Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5 Certificate serial: 019B7759245D49ADAF7DBBC20CB7EB1689C5 Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/YXSgyUgUnB863rJPTcWCW7mGwFc.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64403 IP address blocks: 185.166.232.0/23 maxlen: 24 185.166.234.0/24 maxlen: 24 185.166.235.0/24 maxlen: 24 2a0b:2200::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:24:5d:49:ad:af:7d:bb:c2:0c:b7:eb:16:89:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f2a175be20108641c649553213f212511667a5 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6174a0c948149c1f3adeb24f4dc5825bb986c057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:de:f6:fc:e1:2b:52:30:3f:be:86:b2:80: 3f:95:ab:95:b9:23:92:ae:b5:07:ee:f5:1d:f9:4e: 0b:d1:2e:f4:53:3c:c0:f6:5a:98:4d:f7:13:e9:3e: 98:6b:1d:14:71:63:6c:1a:af:29:27:f7:e4:2f:be: c0:31:8b:5c:e7:94:eb:c4:f3:91:ff:77:67:87:ec: 0b:67:f8:be:60:89:96:e5:19:5e:2c:cb:8e:bb:91: 84:03:95:cb:04:4d:8e:a0:a3:d4:16:dc:2e:87:97: 62:fd:5f:a2:6c:cd:e9:f1:d8:22:3a:2c:79:46:40: 68:4d:53:70:9a:60:80:3e:4d:89:f3:b9:65:65:29: 23:a7:0e:07:dd:f5:13:d0:6e:4b:25:0a:1e:52:91: 74:2d:9b:18:e5:76:fc:46:7e:27:67:20:90:ea:79: d6:ad:20:51:55:e0:8e:a7:4d:45:8d:1d:d7:6f:43: ee:83:42:83:c3:77:da:ce:c4:ee:ff:ca:63:d4:67: ea:98:b4:a2:f8:87:11:50:14:cc:75:c9:7d:33:da: 4d:4f:13:4b:47:ce:c1:2b:09:55:4d:62:a8:4b:8a: f0:02:aa:0d:49:3a:34:fa:4e:60:c2:26:24:2c:d6: a8:66:80:94:14:a2:e2:7b:33:8c:f0:33:d0:c0:cf: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:A0:C9:48:14:9C:1F:3A:DE:B2:4F:4D:C5:82:5B:B9:86:C0:57 X509v3 Authority Key Identifier: keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/YXSgyUgUnB863rJPTcWCW7mGwFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.232.0/22 IPv6: 2a0b:2200::/29 Signature Algorithm: sha256WithRSAEncryption ad:21:7a:ef:d2:90:d4:8f:70:15:40:62:d8:1a:b0:9f:79:2e: 11:19:0c:ea:2b:75:e5:c7:13:54:f8:1d:6d:3e:3b:4a:33:ed: 5b:02:48:79:2a:18:b5:a4:b0:9c:0b:c7:99:68:77:26:c9:e7: b0:04:7c:97:eb:20:92:7b:2e:40:61:2f:5a:e4:4f:bf:15:47: 89:ae:59:90:f3:b1:4d:33:d9:42:d2:f5:8c:af:f4:a4:4f:4b: a2:41:ea:1d:de:d1:60:12:da:1b:12:e1:90:84:03:86:78:28: a6:12:65:00:4f:7b:7c:dd:d3:12:44:e3:ed:18:08:e2:93:1c: 21:2a:16:32:52:51:82:9c:ac:51:91:33:ed:84:56:db:14:37: bd:66:f8:41:8a:ba:6b:1e:84:86:24:2c:dd:24:96:16:cd:cb: 8c:dd:b9:6f:41:52:38:fd:4f:5b:ef:79:02:ff:a5:7b:0a:c3: 70:bf:4c:cf:49:bb:cd:7c:eb:57:aa:61:35:1b:c9:fc:10:57: 5e:c6:a5:e9:95:90:bc:16:99:ed:a2:ed:19:87:d6:bb:8c:88: 7c:8c:e6:36:d8:fa:cf:66:26:ca:4a:67:7a:64:fd:57:49:86: bd:0f:3d:81:d9:19:66:3b:01:e5:a8:82:89:24:e6:fc:1a:5a: e1:bb:d5:a0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WSRdSa2vfbvCDLfrFonFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjJhMTc1YmUyMDEwODY0MWM2NDk1NTMyMTNmMjEyNTEx NjY3YTUwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTc0YTBjOTQ4MTQ5YzFmM2FkZWIyNGY0ZGM1ODI1YmI5ODZjMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26/e9vzhK1IwP76GsoA/lauVuSOS rrUH7vUd+U4L0S70UzzA9lqYTfcT6T6Yax0UcWNsGq8pJ/fkL77AMYtc55TrxPOR /3dnh+wLZ/i+YImW5RleLMuOu5GEA5XLBE2OoKPUFtwuh5di/V+ibM3p8dgiOix5 RkBoTVNwmmCAPk2J87llZSkjpw4H3fUT0G5LJQoeUpF0LZsY5Xb8Rn4nZyCQ6nnW rSBRVeCOp01FjR3Xb0Pug0KDw3fazsTu/8pj1GfqmLSi+IcRUBTMdcl9M9pNTxNL R87BKwlVTWKoS4rwAqoNSTo0+k5gwiYkLNaoZoCUFKLiezOM8DPQwM8mTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGF0oMlIFJwfOt6yT03Fglu5hsBXMB8GA1UdIwQY MBaAFAfyoXW+IBCGQcZJVTIT8hJRFmelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGIt Mzc2NDI2ZmZkNjYyLzEvWVhTZ3lVZ1VuQjg2M3JKUFRjV0NXN21Hd0ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGItMzc2NDI2ZmZkNjYy LzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaboMA0E AgACMAcDBQMqCyIAMA0GCSqGSIb3DQEBCwUAA4IBAQCtIXrv0pDUj3AVQGLYGrCf eS4RGQzqK3XlxxNU+B1tPjtKM+1bAkh5Khi1pLCcC8eZaHcmyeewBHyX6yCSey5A YS9a5E+/FUeJrlmQ87FNM9lC0vWMr/SkT0uiQeod3tFgEtobEuGQhAOGeCimEmUA T3t83dMSROPtGAjikxwhKhYyUlGCnKxRkTPthFbbFDe9ZvhBirprHoSGJCzdJJYW zcuM3blvQVI4/U9b73kC/6V7CsNwv0zPSbvNfOtXqmE1G8n8EFdexqXplZC8Fpnt ou0Zh9a7jIh8jOY22PrPZibKSmd6ZP1XSYa9Dz2B2RlmOwHlqIKJJOb8Glrhu9Wg -----END CERTIFICATE-----Generated at Tue Feb 10 06:03:57 2026 by rpki-client