This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/cyldzaN5uMb66fkP-hiffFjw-IE.roa File: cyldzaN5uMb66fkP-hiffFjw-IE.roa (raw, json) Hash identifier: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY= Subject key identifier: 73:29:5D:CD:A3:79:B8:C6:FA:E9:F9:0F:FA:18:9F:7C:58:F0:F8:81 Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Certificate serial: 019B7A5ABA2FEBAD4E72D6355D50C99F9C96 Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/cyldzaN5uMb66fkP-hiffFjw-IE.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 194.147.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ba:2f:eb:ad:4e:72:d6:35:5d:50:c9:9f:9c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73295dcda379b8c6fae9f90ffa189f7c58f0f881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:ff:0d:04:be:bc:b5:ed:fa:ba:db:9a:60: e3:db:28:b5:84:68:08:d3:38:7a:3b:6d:b9:20:fd: 58:ea:2b:84:6b:03:db:b8:ff:34:5c:8c:1c:90:e9: 13:30:26:17:75:5c:6d:1e:00:21:6a:a6:54:22:f1: ac:d9:0f:bc:49:ac:2e:f2:01:ca:23:ba:03:99:c7: 2e:0c:5a:ba:da:47:3b:50:68:0d:1d:35:58:81:29: 7b:6d:c1:f7:8c:d6:04:c9:95:25:56:af:f4:0b:e6: 8f:7b:cc:af:71:70:ef:fd:07:1b:90:78:a5:8a:8e: 60:6b:77:c4:4b:1f:83:1c:46:70:7b:b5:1e:4d:66: 76:c1:f3:bc:99:d9:c3:65:5d:e1:24:fd:62:4a:93: 2c:5b:90:67:60:bb:67:b3:44:3c:06:9d:6b:44:42: 42:a7:dd:d0:4b:e8:76:88:78:1d:67:a2:be:39:7a: cc:21:c0:d5:88:17:53:48:51:a8:72:06:f4:da:31: 0c:6e:cc:e6:9c:cb:4f:bf:fa:22:d6:5a:69:f4:27: 94:eb:71:a1:41:22:f3:af:bd:43:70:d5:ba:57:b6: 34:0d:9f:54:7c:63:07:b2:d4:f5:69:9b:67:4d:4e: b9:18:2d:bc:32:43:05:84:55:73:59:16:bc:17:7b: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:29:5D:CD:A3:79:B8:C6:FA:E9:F9:0F:FA:18:9F:7C:58:F0:F8:81 X509v3 Authority Key Identifier: keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/cyldzaN5uMb66fkP-hiffFjw-IE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.164.0/22 Signature Algorithm: sha256WithRSAEncryption 22:08:d9:0c:70:51:04:6a:00:e8:fb:82:f5:43:8f:f1:74:82: ac:8f:f6:2b:a8:81:c9:f7:bf:f4:ec:d1:a3:e2:57:1e:69:b3: ff:55:a0:b2:45:c3:16:c5:2b:79:1b:92:57:fc:98:6c:05:62: 4b:18:de:44:3f:96:6a:76:4b:99:08:07:ab:ac:04:88:54:e9: 76:72:d4:9f:3b:80:d9:18:44:48:24:6b:cb:6f:63:bc:5c:7b: 17:44:d4:d8:25:89:10:65:b6:01:1b:73:f3:0d:4f:5f:b5:70: e6:d0:b2:42:ed:ad:5b:e5:39:f7:c4:74:70:1d:97:5e:c5:01: 2d:88:26:f3:f0:ac:bf:ad:e2:78:4b:3b:e4:2b:82:9d:db:73: d5:a1:57:be:0a:b9:46:a8:02:d1:db:01:41:fd:ca:99:57:58: d4:ef:ac:df:00:6d:ef:6b:fd:bb:ab:65:f7:f6:99:78:7d:3c: 2f:68:5c:bb:d3:c0:4f:e7:04:81:94:f3:c0:7a:9d:9a:f7:b4: a5:d4:f0:79:a7:ce:6b:1a:e3:20:0d:10:2b:73:1d:ef:fb:1f: 6b:2d:4c:60:19:b9:c6:4c:7f:ac:68:a0:5e:48:65:17:f6:96: 5f:dd:51:5d:ae:85:3e:f4:a4:15:6f:19:a1:94:82:0d:34:65: f5:4e:65:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wrov661OctY1XVDJn5yWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTI1OGY1ZTNiNmI5NGUzOTE2ZGQyYjVkMTZlMzQyZmQ2 MDU5NjYwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzI5NWRjZGEzNzliOGM2ZmFlOWY5MGZmYTE4OWY3YzU4ZjBmODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5T/DQS+vLXt+rrbmmDj2yi1hGgI 0zh6O225IP1Y6iuEawPbuP80XIwckOkTMCYXdVxtHgAhaqZUIvGs2Q+8Sawu8gHK I7oDmccuDFq62kc7UGgNHTVYgSl7bcH3jNYEyZUlVq/0C+aPe8yvcXDv/QcbkHil io5ga3fESx+DHEZwe7UeTWZ2wfO8mdnDZV3hJP1iSpMsW5BnYLtns0Q8Bp1rREJC p93QS+h2iHgdZ6K+OXrMIcDViBdTSFGocgb02jEMbszmnMtPv/oi1lpp9CeU63Gh QSLzr71DcNW6V7Y0DZ9UfGMHstT1aZtnTU65GC28MkMFhFVzWRa8F3vAqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMpXc2jebjG+un5D/oYn3xY8PiBMB8GA1UdIwQY MBaAFEYSWPXjtrlOORbdK10W40L9YFlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUt NTgzYmNlNmZiNTY3LzEvY3lsZHphTjV1TWI2NmZrUC1oaWZmRmp3LUlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUtNTgzYmNlNmZiNTY3 LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpOkMA0G CSqGSIb3DQEBCwUAA4IBAQAiCNkMcFEEagDo+4L1Q4/xdIKsj/YrqIHJ97/07NGj 4lceabP/VaCyRcMWxSt5G5JX/JhsBWJLGN5EP5ZqdkuZCAerrASIVOl2ctSfO4DZ GERIJGvLb2O8XHsXRNTYJYkQZbYBG3PzDU9ftXDm0LJC7a1b5Tn3xHRwHZdexQEt iCbz8Ky/reJ4SzvkK4Kd23PVoVe+CrlGqALR2wFB/cqZV1jU76zfAG3va/27q2X3 9pl4fTwvaFy708BP5wSBlPPAep2a97Sl1PB5p85rGuMgDRArcx3v+x9rLUxgGbnG TH+saKBeSGUX9pZf3VFdroU+9KQVbxmhlIINNGX1TmXg -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:00 2026 by rpki-client