This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/yjgjGxpLkbkBBTHpBV60vJnCSUc.roa File: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (raw, json) Hash identifier: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ= Subject key identifier: CA:38:23:1B:1A:4B:91:B9:01:05:31:E9:05:5E:B4:BC:99:C2:49:47 Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Certificate serial: 019B77C665D7F788465C79AAAF62263F8E53 Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/yjgjGxpLkbkBBTHpBV60vJnCSUc.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208208 IP address blocks: 185.240.240.0/24 maxlen: 24 185.240.241.0/24 maxlen: 24 185.240.242.0/24 maxlen: 24 185.240.243.0/24 maxlen: 24 2a09:6302::/32 maxlen: 32 2a09:6305::/32 maxlen: 32 2a09:6306::/32 maxlen: 32 2a09:6307::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:65:d7:f7:88:46:5c:79:aa:af:62:26:3f:8e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca38231b1a4b91b9010531e9055eb4bc99c24947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:d9:04:df:51:8d:2c:46:1f:7f:98:d0:8c: 55:a3:be:d8:01:60:26:c8:4b:51:bb:24:fd:6e:42: 98:dc:a7:4a:36:a3:b2:e9:1e:bf:00:3a:72:7d:5e: 3f:42:ca:49:ff:0c:44:bd:3a:f4:26:e7:d8:a7:ec: e3:58:4f:92:a4:8d:cf:4a:fe:f5:65:2f:ff:73:d9: 11:5b:78:07:fd:94:5c:41:67:fd:96:63:30:1a:da: b6:2d:09:d9:b9:22:80:f5:01:aa:4f:6f:93:33:be: db:a7:85:43:9d:cd:ba:fa:d9:81:49:c6:f4:6e:b3: ca:e8:60:7b:45:1a:58:75:58:46:18:33:13:3b:c9: dc:84:88:3c:95:14:2b:af:a3:c0:1a:f3:9a:10:8f: 1c:74:dd:56:cf:55:54:da:76:f0:c3:e9:1f:d9:e2: c8:5c:56:36:57:ac:cd:1e:08:6c:d8:96:94:3f:63: 6f:27:6b:49:bd:87:59:45:a9:a6:d3:9d:82:19:09: 04:51:52:ba:a6:71:b0:a8:2e:d9:05:41:e4:96:8a: c7:52:80:1e:62:f7:31:2d:e7:b3:fd:4f:76:a7:35: a2:8b:9d:d1:03:7d:ca:2e:bc:dd:0d:85:c4:80:53: ec:e2:60:7c:93:c3:44:5a:8e:7e:fa:8e:81:7c:22: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:38:23:1B:1A:4B:91:B9:01:05:31:E9:05:5E:B4:BC:99:C2:49:47 X509v3 Authority Key Identifier: keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/yjgjGxpLkbkBBTHpBV60vJnCSUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.240.0/22 IPv6: 2a09:6302::/32 2a09:6305::-2a09:6307:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ab:4d:cf:6a:f9:f6:ce:b3:24:04:8b:74:84:26:c3:e6:35:f0: 58:db:e6:c4:de:86:f6:2a:77:5a:1b:5e:d5:af:1e:51:9f:29: ba:e1:38:37:2a:6b:25:e4:4f:03:c0:93:db:10:d0:77:35:66: aa:80:10:90:b8:df:88:40:c9:ac:ba:f1:cc:ab:fb:78:7e:39: be:71:0a:dd:be:4d:22:df:7c:77:5c:7b:40:bf:d4:d9:d1:66: 35:8d:ac:d1:e8:42:9b:44:1e:a8:3e:0b:7c:c7:2d:ab:69:7d: 2f:ac:fc:44:fe:a4:a5:ec:5a:5e:f5:42:a6:1e:f8:b7:43:18: 84:8b:fb:f4:30:7b:dc:54:f7:80:bd:e6:b4:a2:1c:48:e3:5a: de:f8:4a:26:c6:07:ec:8d:f6:bc:1e:db:1b:c5:ad:47:66:34: bc:37:97:dc:0a:57:61:fe:75:9c:cd:13:6b:9c:0e:86:e6:36: ed:c5:ba:ad:87:ef:9f:4c:af:84:fc:45:93:4c:be:c7:7f:b6: 96:c2:c5:ba:66:3b:3e:98:83:88:ae:b9:b0:18:18:fb:d4:cd: e5:3c:7c:d8:22:83:c7:04:31:86:47:10:fa:6b:45:be:3b:fa: 5d:30:bb:d7:6c:10:f9:9c:4b:99:ed:06:e4:0f:62:66:95:81: 79:61:ed:20 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt3xmXX94hGXHmqr2ImP45TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm NmM5YzUwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTM4MjMxYjFhNGI5MWI5MDEwNTMxZTkwNTVlYjRiYzk5YzI0OTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8bZBN9RjSxGH3+Y0IxVo77YAWAm yEtRuyT9bkKY3KdKNqOy6R6/ADpyfV4/QspJ/wxEvTr0JufYp+zjWE+SpI3PSv71 ZS//c9kRW3gH/ZRcQWf9lmMwGtq2LQnZuSKA9QGqT2+TM77bp4VDnc26+tmBScb0 brPK6GB7RRpYdVhGGDMTO8nchIg8lRQrr6PAGvOaEI8cdN1Wz1VU2nbww+kf2eLI XFY2V6zNHghs2JaUP2NvJ2tJvYdZRamm052CGQkEUVK6pnGwqC7ZBUHklorHUoAe YvcxLeez/U92pzWii53RA33KLrzdDYXEgFPs4mB8k8NEWo5++o6BfCLGOwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFMo4IxsaS5G5AQUx6QVetLyZwklHMB8GA1UdIwQY MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt NTY2MjhhNDZkZjQwLzEveWpnakd4cExrYmtCQlRIcEJWNjB2Sm5DU1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAMBAIAATAGAwQCufDwMB0E AgACMBcDBQAqCWMCMA4DBQAqCWMFAwUDKgljADANBgkqhkiG9w0BAQsFAAOCAQEA q03Pavn2zrMkBIt0hCbD5jXwWNvmxN6G9ip3Whte1a8eUZ8puuE4NyprJeRPA8CT 2xDQdzVmqoAQkLjfiEDJrLrxzKv7eH45vnEK3b5NIt98d1x7QL/U2dFmNY2s0ehC m0QeqD4LfMctq2l9L6z8RP6kpexaXvVCph74t0MYhIv79DB73FT3gL3mtKIcSONa 3vhKJsYH7I32vB7bG8WtR2Y0vDeX3ApXYf51nM0Ta5wOhuY27cW6rYfvn0yvhPxF k0y+x3+2lsLFumY7PpiDiK65sBgY+9TN5Tx82CKDxwQxhkcQ+mtFvjv6XTC712wQ +ZxLme0G5A9iZpWBeWHtIA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:20 2026 by rpki-client