This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa File: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (raw, json) Hash identifier: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8= Subject key identifier: 62:0E:85:54:D6:41:97:5C:36:47:37:B6:4E:1B:30:E2:DD:F3:0A:D0 Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Certificate serial: 019B7759716E8D7E74403FEAC6570765B09C Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa Signing time: Thu 01 Jan 2026 02:18:29 +0000 ROA not before: Thu 01 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 185.165.248.0/23 maxlen: 23 185.165.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:71:6e:8d:7e:74:40:3f:ea:c6:57:07:65:b0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=620e8554d641975c364737b64e1b30e2ddf30ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:c5:00:c9:6e:32:38:66:29:dd:31:8e:d1: d6:4a:56:0b:4f:7c:4e:6f:c5:ec:73:02:a9:bb:9a: 61:b9:c4:53:de:cb:35:37:99:be:98:12:2e:0a:44: 76:43:d5:1a:dd:70:50:66:02:b0:39:83:b7:1d:6d: 30:8c:9e:13:ce:13:b6:32:a8:cd:89:dc:a0:69:5a: e9:39:9f:9e:a9:a7:00:12:d0:6d:cd:b8:03:0e:70: db:f8:ff:8e:31:0e:b8:cf:0d:c8:b1:25:2d:d8:10: de:f7:3d:ac:6c:3c:aa:a3:1b:5d:3b:87:9c:8f:10: 97:8a:2e:1c:ac:08:0a:6d:6d:e6:9f:37:98:94:69: 72:51:57:55:d3:53:dc:71:59:04:0c:37:a9:be:8f: a4:56:93:66:b3:3f:d9:d2:b1:85:01:69:97:aa:4a: 1c:46:94:2d:c6:2d:82:c0:98:18:f5:ce:70:0b:c6: a1:6c:97:3e:fd:e8:25:b9:2f:1b:c3:5f:46:a0:5e: 17:b3:38:be:da:e7:1a:96:7b:3f:48:eb:a8:c8:e8: 3e:69:9c:33:9f:2f:38:2f:3e:84:aa:26:1d:46:44: 2e:cd:bc:7c:ae:2c:94:00:ab:fc:2f:b3:5c:73:25: b3:93:94:ce:3b:a0:cd:fa:f2:3d:80:f9:16:7e:64: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0E:85:54:D6:41:97:5C:36:47:37:B6:4E:1B:30:E2:DD:F3:0A:D0 X509v3 Authority Key Identifier: keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.248.0/22 Signature Algorithm: sha256WithRSAEncryption b0:f5:db:77:a6:ea:94:da:4d:ef:e4:37:9c:ed:7d:20:3e:cf: 2d:be:06:a4:32:0b:23:a9:28:57:3f:9e:4f:6d:57:8b:cb:3b: b4:9d:a1:7d:67:5f:0c:9f:e5:7d:75:f5:d4:0e:e2:c7:10:9b: 13:eb:ed:bf:7f:26:59:06:26:8f:a1:bf:2c:4e:e9:05:02:81: 58:9e:ae:c1:4b:14:b3:5b:14:a5:9f:6c:65:72:3f:93:2f:75: 58:b8:6a:91:cf:c9:9a:72:99:fa:ae:16:d8:62:21:e6:64:5f: 98:f6:77:20:e3:9c:ba:0e:ca:26:a5:3b:61:dd:81:b4:88:a2: ea:c7:3f:1f:34:16:14:2f:8d:a1:a8:13:c3:9f:d3:07:2d:65: b9:95:67:7c:fb:e0:e8:ac:4b:d9:ef:98:47:42:a0:58:88:bb: 62:94:0c:76:97:6a:68:28:68:90:38:f8:74:3c:6f:fd:c3:61: fd:6d:3f:ba:56:6a:3d:24:66:dd:c4:95:70:9c:bd:73:2f:69: 2b:09:3b:0f:4f:f7:77:15:38:70:5b:a3:70:04:bc:7e:4f:26: d1:a2:61:8e:5a:ef:74:ff:a0:77:e1:76:37:1a:ff:89:fb:51: a2:d5:7c:8f:0c:08:af:5f:ca:76:1b:59:e4:9e:7b:12:ec:28: 83:68:98:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXFujX50QD/qxlcHZbCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYjkxMjViOGExMGQzMjIzNDg2ODFhMmQyYWM3ZDY3ZDJh ZDI1MzUwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjBlODU1NGQ2NDE5NzVjMzY0NzM3YjY0ZTFiMzBlMmRkZjMwYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixfFAMluMjhmKd0xjtHWSlYLT3xO b8XscwKpu5phucRT3ss1N5m+mBIuCkR2Q9Ua3XBQZgKwOYO3HW0wjJ4TzhO2MqjN idygaVrpOZ+eqacAEtBtzbgDDnDb+P+OMQ64zw3IsSUt2BDe9z2sbDyqoxtdO4ec jxCXii4crAgKbW3mnzeYlGlyUVdV01PccVkEDDepvo+kVpNmsz/Z0rGFAWmXqkoc RpQtxi2CwJgY9c5wC8ahbJc+/egluS8bw19GoF4Xszi+2ucalns/SOuoyOg+aZwz ny84Lz6EqiYdRkQuzbx8riyUAKv8L7NccyWzk5TOO6DN+vI9gPkWfmRaUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIOhVTWQZdcNkc3tk4bMOLd8wrQMB8GA1UdIwQY MBaAFGu5EluKENMiNIaBotKsfWfSrSU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUt ODNiYzQxM2EwNDhkLzEvWWc2RlZOWkJsMXcyUnplMlRoc3c0dDN6Q3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUtODNiYzQxM2EwNDhk LzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaX4MA0G CSqGSIb3DQEBCwUAA4IBAQCw9dt3puqU2k3v5Dec7X0gPs8tvgakMgsjqShXP55P bVeLyzu0naF9Z18Mn+V9dfXUDuLHEJsT6+2/fyZZBiaPob8sTukFAoFYnq7BSxSz WxSln2xlcj+TL3VYuGqRz8macpn6rhbYYiHmZF+Y9ncg45y6DsompTth3YG0iKLq xz8fNBYUL42hqBPDn9MHLWW5lWd8++DorEvZ75hHQqBYiLtilAx2l2poKGiQOPh0 PG/9w2H9bT+6Vmo9JGbdxJVwnL1zL2krCTsPT/d3FThwW6NwBLx+TybRomGOWu90 /6B34XY3Gv+J+1Gi1XyPDAivX8p2G1nknnsS7CiDaJhm -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:24 2026 by rpki-client