This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa File: Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa (raw, json) Hash identifier: bSnQnShvbXI84/DgdDetWzox4Bh8KlqChBqyyJnAbOU= Subject key identifier: 63:88:D0:26:7F:7E:5F:C8:73:CA:D9:90:73:1A:CE:D0:76:54:D9:FD Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019BA4DAFF93FC14ED5E97BBDCD411107445 Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa Signing time: Fri 09 Jan 2026 22:22:54 +0000 ROA not before: Fri 09 Jan 2026 22:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216018 IP address blocks: 185.23.72.0/24 maxlen: 24 185.23.73.0/24 maxlen: 24 185.23.74.0/24 maxlen: 24 185.23.75.0/24 maxlen: 24 2a14:1b00:1::/48 maxlen: 48 2a14:1b00:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:da:ff:93:fc:14:ed:5e:97:bb:dc:d4:11:10:74:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Jan 9 22:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6388d0267f7e5fc873cad990731aced07654d9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f2:b0:9e:c9:42:c2:f6:3a:3d:e1:1a:de:b6: 4d:a9:85:09:88:fd:96:79:0d:00:11:27:9c:88:5c: ba:f9:a4:4d:68:7f:34:cf:ae:01:55:c1:8c:61:19: 07:af:ae:15:f8:ee:34:de:8e:01:f9:36:d5:c6:aa: a3:4f:07:ab:53:85:00:f5:e4:70:0a:0d:0b:2d:dd: 73:58:4e:73:1c:fb:ec:ad:b8:3d:df:d9:4f:00:22: 4e:24:b9:d6:ae:eb:0a:27:6b:8d:d4:3f:56:af:d5: 2b:c7:7e:12:2d:5c:35:e7:38:1e:cb:7a:86:41:96: d2:27:a2:8e:4c:cd:f8:f2:78:ac:7a:0c:34:af:92: 22:7c:be:0a:5a:50:b9:e3:2a:02:6f:8f:b2:da:0a: f6:e0:97:d2:7a:17:a2:41:c4:33:9d:2f:be:11:d6: e3:1f:a6:01:fe:c6:e9:4d:71:02:e1:5b:30:95:f5: a1:01:cb:7a:89:57:9a:d7:c6:55:93:cd:d0:08:ef: ac:ca:a4:46:e0:d5:06:5d:6a:39:c4:b1:25:85:a7: 7c:00:fd:26:a5:4d:c8:fa:1d:42:cc:df:74:ed:77: 8a:58:ab:95:4b:0c:3a:cc:a4:95:d6:44:2c:d8:a3: 67:85:d9:71:0c:0f:18:f8:0a:91:17:f7:50:6c:90: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:D0:26:7F:7E:5F:C8:73:CA:D9:90:73:1A:CE:D0:76:54:D9:FD X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.72.0/22 IPv6: 2a14:1b00:1::-2a14:1b00:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b9:85:85:20:6c:7b:ce:da:0e:89:34:0d:21:5a:bc:e5:97:d5: 6c:f1:65:9a:56:61:55:6f:70:ec:fc:29:8f:9a:7d:60:10:f8: e7:ad:79:d0:2e:0f:f3:b1:73:8d:e6:10:fe:96:c0:1c:1f:10: 01:df:ee:fe:fe:4b:29:0d:87:14:ac:fc:0f:77:1b:52:29:f1: af:40:80:ec:94:3b:8d:0b:d5:a0:32:29:10:ea:b5:73:b3:6c: 92:62:98:7a:e4:f2:8c:20:e8:27:3e:ec:79:a5:2b:c1:69:41: da:2c:65:cc:2a:34:6a:1c:8e:27:16:70:9a:9c:96:3f:e0:99: 9c:16:b7:89:c7:05:0d:8b:47:35:32:fe:cd:69:7c:6d:64:e3: ed:1b:65:17:6b:a3:4d:36:85:43:b0:7a:a8:ed:06:58:1e:fc: 97:a8:57:8d:ea:b4:23:82:99:f2:a0:a3:d3:8e:2a:f9:c0:81: 2a:f2:de:fd:13:fb:80:2f:aa:55:bb:4e:03:ea:7a:cd:d7:2f: 77:3c:23:60:e9:b6:61:84:c6:84:3e:96:f6:b3:3a:3d:f9:d8: 0e:cb:a4:54:d8:91:7b:74:f0:5c:12:25:7e:93:b7:2f:90:c0: dd:04:3d:16:b4:8f:f2:7d:6d:ff:a0:3f:d5:40:39:46:ff:74: dc:32:27:4f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZuk2v+T/BTtXpe73NQREHRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjYwMTA5MjIyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzg4ZDAyNjdmN2U1ZmM4NzNjYWQ5OTA3MzFhY2VkMDc2NTRkOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/KwnslCwvY6PeEa3rZNqYUJiP2W eQ0AESeciFy6+aRNaH80z64BVcGMYRkHr64V+O403o4B+TbVxqqjTwerU4UA9eRw Cg0LLd1zWE5zHPvsrbg939lPACJOJLnWrusKJ2uN1D9Wr9Urx34SLVw15zgey3qG QZbSJ6KOTM348nisegw0r5IifL4KWlC54yoCb4+y2gr24JfSeheiQcQznS++Edbj H6YB/sbpTXEC4VswlfWhAct6iVea18ZVk83QCO+syqRG4NUGXWo5xLElhad8AP0m pU3I+h1CzN907XeKWKuVSww6zKSV1kQs2KNnhdlxDA8Y+AqRF/dQbJCYpQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGOI0CZ/fl/Ic8rZkHMaztB2VNn9MB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvWTRqUUpuOS1YOGh6eXRtUWN4ck8wSFpVMmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCuRdIMBoE AgACMBQwEgMHACoUGwAAAQMHACoUGwAAAjANBgkqhkiG9w0BAQsFAAOCAQEAuYWF IGx7ztoOiTQNIVq85ZfVbPFlmlZhVW9w7Pwpj5p9YBD456150C4P87FzjeYQ/pbA HB8QAd/u/v5LKQ2HFKz8D3cbUinxr0CA7JQ7jQvVoDIpEOq1c7NskmKYeuTyjCDo Jz7seaUrwWlB2ixlzCo0ahyOJxZwmpyWP+CZnBa3iccFDYtHNTL+zWl8bWTj7Rtl F2ujTTaFQ7B6qO0GWB78l6hXjeq0I4KZ8qCj044q+cCBKvLe/RP7gC+qVbtOA+p6 zdcvdzwjYOm2YYTGhD6W9rM6PfnYDsukVNiRe3TwXBIlfpO3L5DA3QQ9FrSP8n1t /6A/1UA5Rv903DInTw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:20:39 2026 by rpki-client