This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/76Y2-HUPTiLdTCSIpYCkR2ZgGcQ.roa File: 76Y2-HUPTiLdTCSIpYCkR2ZgGcQ.roa (raw, json) Hash identifier: aIEXIJxpvH5c1txE7w8Ef9ChmAewpEGy4MTuP+uMjCA= Subject key identifier: EF:A6:36:F8:75:0F:4E:22:DD:4C:24:88:A5:80:A4:47:66:60:19:C4 Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587 Certificate serial: 019B7C801E188C4BA22439A157D0B2601C9B Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/76Y2-HUPTiLdTCSIpYCkR2ZgGcQ.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47600 IP address blocks: 185.45.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1e:18:8c:4b:a2:24:39:a1:57:d0:b2:60:1c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587 Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efa636f8750f4e22dd4c2488a580a447666019c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:c6:ba:fa:91:e0:2a:a5:7f:7d:c5:a9:f3: d0:23:8c:cd:6b:04:9a:4a:18:53:0c:2a:05:c6:26: 24:5a:b1:98:ef:54:65:9f:00:28:ab:6f:9b:70:88: c6:5d:59:0b:66:0c:7d:85:75:32:49:71:df:3d:09: 08:cf:00:56:f9:b1:85:00:e7:48:c7:95:28:0d:c2: ad:bd:c5:6d:a0:ad:bf:7d:49:38:fd:61:98:87:2f: 5d:f5:6e:8d:ff:39:6d:01:71:d6:a6:57:d4:5e:bb: b4:48:88:65:e5:b7:43:b8:66:13:f6:d4:ad:1c:fe: 25:33:1f:a9:78:13:f1:44:b9:16:17:a6:ed:a7:60: 4e:9a:4b:8e:b7:13:f6:e9:81:ab:50:2b:e0:f7:47: 96:b4:d4:95:84:4c:bf:19:45:40:c8:41:ad:4f:b0: 64:79:3b:1f:e2:40:fa:bb:ff:c9:74:19:68:96:a0: 9b:b6:fe:d4:65:bb:3d:6c:33:84:15:ab:71:b8:ec: e2:32:13:1b:6a:d9:f1:c5:47:90:2b:5b:a1:83:29: 3f:66:f9:6e:4a:4c:51:0c:f1:4b:11:f8:65:f6:ca: 5e:bc:c1:06:8c:02:a1:a7:33:8d:98:a4:cb:bc:7e: 11:ff:eb:80:4b:db:8d:21:32:72:05:4c:b4:4a:1f: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A6:36:F8:75:0F:4E:22:DD:4C:24:88:A5:80:A4:47:66:60:19:C4 X509v3 Authority Key Identifier: keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/76Y2-HUPTiLdTCSIpYCkR2ZgGcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.150.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ba:da:8e:e7:07:b5:ca:5a:2c:7f:56:de:74:74:b3:a1:f4: 28:bf:6e:58:2c:95:e5:f0:d5:74:ea:d6:0d:c3:40:d2:29:c3: 10:3e:28:da:a4:4d:25:1c:02:a7:27:32:aa:9e:c2:a8:94:26: 00:ee:d2:0c:54:ea:92:7b:43:54:ed:54:b2:c7:e8:b8:07:f5: 43:c3:8b:a0:e0:3c:88:e7:a8:e4:db:16:e7:1d:5b:93:4a:80: c8:83:ed:6e:58:11:94:39:c2:ee:f4:65:ad:5a:63:6f:84:d0: b6:b7:b7:41:06:ed:72:77:0c:fb:fb:c6:73:e4:a4:59:be:49: 8e:b6:20:be:a9:ce:cb:22:d4:77:b6:ac:0b:41:97:29:b2:fd: f4:c1:7d:0f:6d:f1:8c:90:e3:ad:ee:0a:66:f6:b8:09:55:01: fc:dc:08:ba:85:37:c7:23:b5:54:dd:61:94:22:11:6c:3d:7c: 7b:25:79:3f:8f:12:ad:2f:91:b5:3e:f6:4a:c1:21:0c:ec:d0: 63:fd:27:81:28:67:f8:bf:90:5b:9f:57:6d:a6:94:cc:30:2a: 75:02:59:aa:2c:5d:99:37:f0:88:d5:8f:95:cc:ee:36:20:7d: 64:cb:65:12:44:db:94:26:e1:74:12:70:f9:4c:a2:45:f9:59: 6e:fc:fd:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gB4YjEuiJDmhV9CyYBybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjRmOGMwZTFiMzlkOGE4ZWY4ZThjOGI1YTBmZmVlMmI1 M2I1ODcwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmE2MzZmODc1MGY0ZTIyZGQ0YzI0ODhhNTgwYTQ0NzY2NjAxOWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrvGuvqR4Cqlf33FqfPQI4zNawSa ShhTDCoFxiYkWrGY71RlnwAoq2+bcIjGXVkLZgx9hXUySXHfPQkIzwBW+bGFAOdI x5UoDcKtvcVtoK2/fUk4/WGYhy9d9W6N/zltAXHWplfUXru0SIhl5bdDuGYT9tSt HP4lMx+peBPxRLkWF6btp2BOmkuOtxP26YGrUCvg90eWtNSVhEy/GUVAyEGtT7Bk eTsf4kD6u//JdBlolqCbtv7UZbs9bDOEFatxuOziMhMbatnxxUeQK1uhgyk/Zvlu SkxRDPFLEfhl9spevMEGjAKhpzONmKTLvH4R/+uAS9uNITJyBUy0Sh9ivwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO+mNvh1D04i3UwkiKWApEdmYBnEMB8GA1UdIwQY MBaAFEtk+MDhs52KjvjoyLWg/+4rU7WHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUt OTVkNWUxNmNkZGVmLzEvNzZZMi1IVVBUaUxkVENTSXBZQ2tSMlpnR2NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUtOTVkNWUxNmNkZGVm LzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS2WMA0G CSqGSIb3DQEBCwUAA4IBAQBcutqO5we1ylosf1bedHSzofQov25YLJXl8NV06tYN w0DSKcMQPijapE0lHAKnJzKqnsKolCYA7tIMVOqSe0NU7VSyx+i4B/VDw4ug4DyI 56jk2xbnHVuTSoDIg+1uWBGUOcLu9GWtWmNvhNC2t7dBBu1ydwz7+8Zz5KRZvkmO tiC+qc7LItR3tqwLQZcpsv30wX0PbfGMkOOt7gpm9rgJVQH83Ai6hTfHI7VU3WGU IhFsPXx7JXk/jxKtL5G1PvZKwSEM7NBj/SeBKGf4v5Bbn1dtppTMMCp1AlmqLF2Z N/CI1Y+VzO42IH1ky2USRNuUJuF0EnD5TKJF+Vlu/P2c -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:16 2026 by rpki-client