This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/yYgOsbfO_ILG6YcX9QCFy7jrZlQ.roa File: yYgOsbfO_ILG6YcX9QCFy7jrZlQ.roa (raw, json) Hash identifier: DACPJnZscxbHEOmbZYNR1bRZKHxl5ev0RDcNgFEGAgc= Subject key identifier: C9:88:0E:B1:B7:CE:FC:82:C6:E9:87:17:F5:00:85:CB:B8:EB:66:54 Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Certificate serial: 019B7F82118BD4593294B0DB977FDFCBDCE9 Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/yYgOsbfO_ILG6YcX9QCFy7jrZlQ.roa Signing time: Fri 02 Jan 2026 16:19:49 +0000 ROA not before: Fri 02 Jan 2026 16:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31167 IP address blocks: 185.244.18.0/24 maxlen: 24 185.244.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:11:8b:d4:59:32:94:b0:db:97:7f:df:cb:dc:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Validity Not Before: Jan 2 16:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9880eb1b7cefc82c6e98717f50085cbb8eb6654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:40:4b:01:03:03:8e:ab:66:c5:38:2f:74: cc:8f:c8:ac:ef:5a:78:8e:66:23:e5:70:68:84:ba: 78:bd:b2:b7:c7:38:e0:81:ec:9f:b4:9b:e3:63:29: 2c:aa:a3:52:c9:4c:76:d0:89:21:b8:cc:07:32:cd: 8c:2c:d1:be:f4:86:03:93:67:fc:fc:0a:46:82:f8: 08:3a:c3:dc:e9:9e:21:c9:b8:29:2b:4a:74:df:6c: f2:88:93:18:9e:f2:59:d9:8c:b6:1c:0d:ba:fb:ee: 1b:89:ab:d6:5f:3b:25:98:06:7f:f0:f5:ae:91:09: da:4b:6b:8c:91:03:a4:71:fe:2d:2a:84:cb:b5:ce: 42:3d:23:f0:0d:33:be:35:6c:07:28:98:8e:08:49: 16:75:9a:0e:3d:71:14:75:bb:69:eb:46:c7:b1:9e: bc:00:30:ba:c1:5e:e3:e6:7d:ea:d9:de:04:8a:92: 17:08:aa:96:b4:91:1b:19:42:f9:1b:46:25:28:90: 79:d0:28:1c:46:59:42:4f:d9:53:25:7d:24:a5:9f: 34:32:27:2d:8c:6a:2f:06:4d:f6:74:10:16:9b:8f: dc:8e:59:f3:86:5b:b9:eb:c2:6c:a6:1c:42:ad:ad: bc:c9:3a:56:c8:d8:b2:d0:22:6a:c4:4c:ff:d5:e0: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:88:0E:B1:B7:CE:FC:82:C6:E9:87:17:F5:00:85:CB:B8:EB:66:54 X509v3 Authority Key Identifier: keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/yYgOsbfO_ILG6YcX9QCFy7jrZlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.18.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:fe:f9:ee:03:8c:45:80:96:65:ae:45:b3:ce:28:e1:02:7b: e6:63:24:b0:5f:79:15:09:d2:45:65:04:b5:55:05:7d:7f:09: cf:9c:96:06:4d:30:c4:d7:72:24:97:e1:04:87:7f:05:9a:90: 5d:3c:df:62:f4:9d:06:41:ab:c1:3d:27:6e:87:e1:a8:ed:92: 0d:6e:a8:10:eb:e5:48:4e:41:1a:8d:87:6e:83:10:a1:ab:2b: 47:15:55:76:aa:5c:cc:30:1d:78:9f:10:57:d9:3d:58:f2:d2: 02:cd:fa:4e:27:0f:ab:29:5f:32:3d:5b:b1:5d:eb:bc:02:63: 95:97:b7:39:39:1b:93:cf:2c:8f:bf:de:83:3e:6d:82:e6:b8: 0b:24:12:20:c4:0c:de:50:df:09:9a:e2:55:f1:cc:48:8a:4c: 9e:a3:27:9b:26:26:97:c7:19:78:b6:f8:c9:3c:4f:b6:f3:c7: f1:5a:e0:61:c9:97:d3:8c:df:86:bd:35:63:c6:2c:30:c5:2c: 7d:4f:72:54:81:db:f6:95:a1:d3:f2:4a:70:ea:3e:de:87:6b: 2b:3c:64:f4:0c:e4:0e:f8:e8:aa:2a:2b:53:ec:3f:6e:3a:7c: 8c:81:8d:9b:cf:04:31:2f:17:a5:ac:f4:de:e7:51:04:0d:1b: 3e:14:97:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/ghGL1FkylLDbl3/fy9zpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5 MGMxNTcwHhcNMjYwMTAyMTYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTg4MGViMWI3Y2VmYzgyYzZlOTg3MTdmNTAwODVjYmI4ZWI2NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOlASwEDA46rZsU4L3TMj8is71p4 jmYj5XBohLp4vbK3xzjggeyftJvjYyksqqNSyUx20IkhuMwHMs2MLNG+9IYDk2f8 /ApGgvgIOsPc6Z4hybgpK0p032zyiJMYnvJZ2Yy2HA26++4biavWXzslmAZ/8PWu kQnaS2uMkQOkcf4tKoTLtc5CPSPwDTO+NWwHKJiOCEkWdZoOPXEUdbtp60bHsZ68 ADC6wV7j5n3q2d4EipIXCKqWtJEbGUL5G0YlKJB50CgcRllCT9lTJX0kpZ80Mict jGovBk32dBAWm4/cjlnzhlu568JsphxCra28yTpWyNiy0CJqxEz/1eAxpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmIDrG3zvyCxumHF/UAhcu462ZUMB8GA1UdIwQY MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt ZTAzNGY2NWU3ZjYwLzEveVlnT3NiZk9fSUxHNlljWDlRQ0Z5N2pyWmxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufQSMA0G CSqGSIb3DQEBCwUAA4IBAQCN/vnuA4xFgJZlrkWzzijhAnvmYySwX3kVCdJFZQS1 VQV9fwnPnJYGTTDE13Ikl+EEh38FmpBdPN9i9J0GQavBPSduh+Go7ZINbqgQ6+VI TkEajYdugxChqytHFVV2qlzMMB14nxBX2T1Y8tICzfpOJw+rKV8yPVuxXeu8AmOV l7c5ORuTzyyPv96DPm2C5rgLJBIgxAzeUN8JmuJV8cxIikyeoyebJiaXxxl4tvjJ PE+288fxWuBhyZfTjN+GvTVjxiwwxSx9T3JUgdv2laHT8kpw6j7eh2srPGT0DOQO +OiqKitT7D9uOnyMgY2bzwQxLxelrPTe51EEDRs+FJcf -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:10 2026 by rpki-client