This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/yGnG3HP3nemnG7Yzwu4wtoayiDo.roa File: yGnG3HP3nemnG7Yzwu4wtoayiDo.roa (raw, json) Hash identifier: lWgaSw9AoddwDlUpkfGonh4HcHHKtgX9pZvTG5NcRBE= Subject key identifier: C8:69:C6:DC:73:F7:9D:E9:A7:1B:B6:33:C2:EE:30:B6:86:B2:88:3A Certificate issuer: /CN=1627573c68929ab2a4590e92a51abc40ea9e5817 Certificate serial: 019B7834D8483DB5BF82D4B7B4C6B8674DEB Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/yGnG3HP3nemnG7Yzwu4wtoayiDo.roa Signing time: Thu 01 Jan 2026 06:18:07 +0000 ROA not before: Thu 01 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44808 IP address blocks: 185.175.96.0/22 maxlen: 22 2a0b:e300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d8:48:3d:b5:bf:82:d4:b7:b4:c6:b8:67:4d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c869c6dc73f79de9a71bb633c2ee30b686b2883a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:00:50:d9:7c:c5:6a:00:57:d1:ff:05:f3: 3b:20:e5:14:7f:20:74:b6:79:72:1b:24:c8:2a:4e: 72:3b:a9:95:60:cf:be:e3:e6:a1:1e:86:fc:1e:62: 8c:74:ab:d6:63:15:d9:74:3f:de:95:c1:49:00:e5: 0c:7f:81:b0:ed:1b:67:2f:5d:59:df:66:25:b4:05: 07:2a:ce:1f:ba:26:c1:64:03:7a:a9:cf:c7:3e:47: fb:94:18:3d:d6:22:7f:40:69:e0:b7:c8:74:d7:1a: 4b:5c:14:c2:2f:5f:d6:52:fb:b5:9b:62:ad:1d:29: 11:ec:4c:67:5e:27:52:bd:d9:19:52:29:86:79:09: 00:3b:ad:6b:2c:ea:5b:00:51:e9:9d:f6:10:9c:13: 2c:fb:ca:89:db:a4:c5:06:f8:0e:49:a3:ef:8d:b0: df:01:4a:75:1a:ff:e3:78:e8:9d:cf:06:c9:a0:71: 48:62:70:6b:8b:09:34:7c:35:51:3a:94:b4:aa:39: cb:ac:01:63:79:bb:33:99:7f:c1:28:bb:ce:01:dc: 9a:c4:7a:3b:dc:18:2c:e6:1e:2e:97:57:4a:23:7a: 2c:24:d2:71:ee:33:82:5c:8f:19:7c:b8:02:93:e2: c1:df:01:1d:cc:e1:36:69:7b:ef:42:d7:46:36:d5: 41:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:69:C6:DC:73:F7:9D:E9:A7:1B:B6:33:C2:EE:30:B6:86:B2:88:3A X509v3 Authority Key Identifier: keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/yGnG3HP3nemnG7Yzwu4wtoayiDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.96.0/22 IPv6: 2a0b:e300::/32 Signature Algorithm: sha256WithRSAEncryption 1c:5f:8f:51:b5:a9:98:bb:0a:5d:bb:44:4d:70:a7:43:ec:ed: f7:e4:4f:19:f7:5b:54:40:6f:af:01:d9:ed:37:a2:17:8d:a5: de:31:eb:1a:74:43:e1:ef:96:65:02:05:74:ad:5b:76:24:c3: 68:39:68:56:dd:63:a8:6d:93:00:4d:00:bf:85:4c:7c:81:09: 98:55:0e:b3:af:5e:48:82:4b:bd:31:c8:6f:18:0e:f0:d7:bb: 91:c2:f7:3b:63:f3:8b:8b:a9:a9:53:5c:a5:e1:d6:05:a5:e5: d4:35:0a:95:2e:85:a2:6a:14:f5:7c:aa:f6:33:45:55:81:35: bc:da:db:b6:6b:3a:a8:1e:5a:0d:92:0c:2f:e7:f7:56:fa:67: fd:4e:80:45:fa:bf:94:c8:16:8a:23:19:2a:d8:58:e4:f3:38: 59:b4:7f:ac:c8:d0:6c:b0:51:ce:20:d6:af:a3:35:f2:0c:54: 0a:88:5b:e4:d0:5f:89:04:4f:58:9a:9e:97:f7:b9:95:0c:9c: 90:73:78:68:d5:05:6a:08:7e:be:1b:03:7c:e2:7c:47:95:dc: 3b:9e:67:66:81:b6:c2:d9:7c:d2:61:8f:9c:44:d8:a9:ce:b0: 4d:29:ba:c8:61:4a:a4:63:92:7b:f5:3b:5f:a6:ba:12:47:84: cb:4f:b5:94 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NNhIPbW/gtS3tMa4Z03rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Mjc1NzNjNjg5MjlhYjJhNDU5MGU5MmE1MWFiYzQwZWE5 ZTU4MTcwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODY5YzZkYzczZjc5ZGU5YTcxYmI2MzNjMmVlMzBiNjg2YjI4ODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkAAUNl8xWoAV9H/BfM7IOUUfyB0 tnlyGyTIKk5yO6mVYM++4+ahHob8HmKMdKvWYxXZdD/elcFJAOUMf4Gw7RtnL11Z 32YltAUHKs4fuibBZAN6qc/HPkf7lBg91iJ/QGngt8h01xpLXBTCL1/WUvu1m2Kt HSkR7ExnXidSvdkZUimGeQkAO61rLOpbAFHpnfYQnBMs+8qJ26TFBvgOSaPvjbDf AUp1Gv/jeOidzwbJoHFIYnBriwk0fDVROpS0qjnLrAFjebszmX/BKLvOAdyaxHo7 3Bgs5h4ul1dKI3osJNJx7jOCXI8ZfLgCk+LB3wEdzOE2aXvvQtdGNtVBTQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMhpxtxz953ppxu2M8LuMLaGsog6MB8GA1UdIwQY MBaAFBYnVzxokpqypFkOkqUavEDqnlgXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2Ut ZTZmOWRiNzQxMzlkLzEveUduRzNIUDNuZW1uRzdZend1NHd0b2F5aURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2UtZTZmOWRiNzQxMzlk LzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua9gMA0E AgACMAcDBQAqC+MAMA0GCSqGSIb3DQEBCwUAA4IBAQAcX49RtamYuwpdu0RNcKdD 7O335E8Z91tUQG+vAdntN6IXjaXeMesadEPh75ZlAgV0rVt2JMNoOWhW3WOobZMA TQC/hUx8gQmYVQ6zr15Igku9MchvGA7w17uRwvc7Y/OLi6mpU1yl4dYFpeXUNQqV LoWiahT1fKr2M0VVgTW82tu2azqoHloNkgwv5/dW+mf9ToBF+r+UyBaKIxkq2Fjk 8zhZtH+syNBssFHOINavozXyDFQKiFvk0F+JBE9Ymp6X97mVDJyQc3ho1QVqCH6+ GwN84nxHldw7nmdmgbbC2XzSYY+cRNipzrBNKbrIYUqkY5J79TtfproSR4TLT7WU -----END CERTIFICATE-----Generated at Mon Jan 26 09:42:36 2026 by rpki-client