This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/LYaVyURA1Hqer0FhBdoqEAlltug.roa File: LYaVyURA1Hqer0FhBdoqEAlltug.roa (raw, json) Hash identifier: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4= Subject key identifier: 2D:86:95:C9:44:40:D4:7A:9E:AF:41:61:05:DA:2A:10:09:65:B6:E8 Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a Certificate serial: 019B7F80E700DA974E64EA92BF16B4A06468 Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/LYaVyURA1Hqer0FhBdoqEAlltug.roa Signing time: Fri 02 Jan 2026 16:18:32 +0000 ROA not before: Fri 02 Jan 2026 16:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210756 IP address blocks: 185.109.28.0/24 maxlen: 24 185.109.29.0/24 maxlen: 24 185.109.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:e7:00:da:97:4e:64:ea:92:bf:16:b4:a0:64:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a Validity Not Before: Jan 2 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d8695c94440d47a9eaf416105da2a100965b6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c1:b1:f5:44:66:ad:6c:2b:e6:0f:d0:d1:14: e9:8f:2b:05:56:aa:9f:bd:e9:17:4c:5c:cb:c7:5e: 84:d1:7c:3a:34:87:73:97:d3:75:54:f7:b4:5e:f7: 92:73:67:30:9e:50:3a:43:78:35:a2:e6:a8:45:29: 6e:83:e2:f4:b4:ab:97:0a:23:66:cd:e3:4d:60:c0: 7f:11:03:e2:ba:c6:9c:a7:4f:fd:ca:53:ab:7a:a7: 8d:04:a0:93:b2:0b:27:82:ac:86:c7:de:f5:58:dc: 16:e5:d7:e8:fa:b3:5b:9c:d7:d7:47:28:87:d1:f7: 5a:08:28:8c:23:ba:2e:f1:11:2e:77:c7:f9:c2:ce: e9:b3:da:26:2f:40:39:97:6c:65:45:6e:4d:5b:e3: ef:5d:34:cf:4a:ec:b8:0b:92:4b:47:16:fe:40:8f: 9e:07:4b:bd:b6:c9:99:77:8d:50:dc:41:17:fc:8b: e0:f6:c4:5e:b5:98:c3:c4:7b:48:8b:f6:2b:1a:19: 6e:3b:60:83:55:35:59:92:4c:f6:9c:de:db:0c:fb: 70:f1:88:81:27:e3:af:7b:d5:f7:25:24:9a:8c:f7: 46:d5:64:ce:19:55:b6:ab:81:4f:c7:2f:e1:65:2d: c4:e6:32:ba:b6:62:2b:7b:ca:8b:ca:ef:7f:55:30: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:86:95:C9:44:40:D4:7A:9E:AF:41:61:05:DA:2A:10:09:65:B6:E8 X509v3 Authority Key Identifier: keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/LYaVyURA1Hqer0FhBdoqEAlltug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.28.0-185.109.30.255 Signature Algorithm: sha256WithRSAEncryption 61:71:61:12:c1:9e:e7:34:16:69:be:78:d8:ea:18:fc:01:3a: fc:f9:01:f8:90:c3:88:d2:e9:f1:5a:78:46:f9:01:0f:af:59: 4f:5d:5e:8d:8e:4e:03:cb:b0:9d:87:b4:c9:7d:a2:82:f9:5b: b5:53:8b:40:f6:28:51:80:3b:03:cb:53:2a:c4:ed:e1:a4:48: e5:69:cb:56:14:47:34:cd:6d:6a:bb:2b:3a:2f:e1:ba:48:12: 9c:d6:73:20:a3:cd:8f:78:e2:ab:ea:fe:eb:48:81:62:16:4b: 51:31:e0:21:15:2d:ff:c7:54:b7:1e:65:bb:e6:f6:dd:88:d0: a0:17:95:6a:1f:19:ab:4e:fe:7b:26:7e:83:4d:32:6a:95:a9: ad:4b:ca:12:fe:2a:0c:8e:ce:ed:97:2d:5e:1a:88:e0:e5:4f: 01:a3:c4:56:b0:ac:d9:49:33:99:a2:df:eb:99:06:07:8a:42: d4:0b:41:99:a7:73:e5:f5:ab:2d:da:9f:38:99:36:46:d7:c8: cb:7a:91:a8:17:cc:47:40:7a:02:35:8f:0d:f1:a0:dc:db:30: d4:78:02:82:1b:9a:01:ca:03:66:c8:b7:61:da:ec:47:55:50: 43:fb:39:37:fe:bd:1f:4c:e6:6f:29:9d:b3:4d:7f:5b:d6:97: c5:8e:0f:40 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/gOcA2pdOZOqSvxa0oGRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4 ZTY3MGEwHhcNMjYwMTAyMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDg2OTVjOTQ0NDBkNDdhOWVhZjQxNjEwNWRhMmExMDA5NjViNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsGx9URmrWwr5g/Q0RTpjysFVqqf vekXTFzLx16E0Xw6NIdzl9N1VPe0XveSc2cwnlA6Q3g1ouaoRSlug+L0tKuXCiNm zeNNYMB/EQPiusacp0/9ylOreqeNBKCTsgsngqyGx971WNwW5dfo+rNbnNfXRyiH 0fdaCCiMI7ou8REud8f5ws7ps9omL0A5l2xlRW5NW+PvXTTPSuy4C5JLRxb+QI+e B0u9tsmZd41Q3EEX/Ivg9sRetZjDxHtIi/YrGhluO2CDVTVZkkz2nN7bDPtw8YiB J+Ove9X3JSSajPdG1WTOGVW2q4FPxy/hZS3E5jK6tmIre8qLyu9/VTBZQwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC2GlclEQNR6nq9BYQXaKhAJZbboMB8GA1UdIwQY MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt YzI0MGJmYzljYmMxLzEvTFlhVnlVUkExSHFlcjBGaEJkb3FFQWxsdHVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5bRwD BAC5bR4wDQYJKoZIhvcNAQELBQADggEBAGFxYRLBnuc0Fmm+eNjqGPwBOvz5AfiQ w4jS6fFaeEb5AQ+vWU9dXo2OTgPLsJ2HtMl9ooL5W7VTi0D2KFGAOwPLUyrE7eGk SOVpy1YURzTNbWq7Kzov4bpIEpzWcyCjzY944qvq/utIgWIWS1Ex4CEVLf/HVLce Zbvm9t2I0KAXlWofGatO/nsmfoNNMmqVqa1LyhL+KgyOzu2XLV4aiODlTwGjxFaw rNlJM5mi3+uZBgeKQtQLQZmnc+X1qy3anziZNkbXyMt6kagXzEdAegI1jw3xoNzb MNR4AoIbmgHKA2bIt2Ha7EdVUEP7OTf+vR9M5m8pnbNNf1vWl8WOD0A= -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:09 2026 by rpki-client