This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa File: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (raw, json) Hash identifier: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU= Subject key identifier: C8:D5:3E:4E:87:80:2F:B3:57:38:EC:FD:FF:E1:65:17:36:1F:A4:10 Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed Certificate serial: 019B79ED59CEDEF2E2EBCE69CEE015FE91A4 Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203217 IP address blocks: 185.65.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:59:ce:de:f2:e2:eb:ce:69:ce:e0:15:fe:91:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8d53e4e87802fb35738ecfdffe16517361fa410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:9e:a5:c7:9f:77:5d:bd:8b:02:f6:14:e9: 87:93:95:57:51:5f:7d:11:f2:03:9d:ec:66:70:26: b2:3a:8c:55:42:bb:72:fb:54:12:6d:ae:88:86:9a: e0:47:5a:f0:fc:fe:62:58:03:5c:c7:55:46:e3:c6: f9:30:37:6d:52:07:fa:ee:df:55:26:d0:26:7a:89: 56:20:6f:62:38:c0:1f:f3:73:11:f4:a2:01:75:ba: ad:52:96:c0:75:d5:85:3e:4d:dd:80:71:97:00:f3: ba:10:ce:95:a0:cf:9c:3d:59:6b:08:4e:31:0f:6d: 6b:e1:a2:da:c2:b9:78:d4:47:d1:54:5e:e5:df:26: d3:77:12:8f:09:50:15:09:df:86:12:db:d6:fb:cb: a4:c2:8b:f1:a9:b4:cb:5e:73:2d:84:75:c4:9e:f3: a4:b4:54:ad:41:a9:88:da:ec:a7:9f:86:de:d2:a9: a8:ad:fe:7d:c1:e2:26:eb:c1:64:50:ed:44:8b:ec: ab:25:6d:31:0b:41:60:65:ef:af:44:a6:bd:bc:81: a4:d3:3f:0e:fa:96:e7:2a:56:7b:6a:89:77:dd:a3: 0f:d1:69:af:3a:7d:3d:82:86:bb:95:01:07:3e:89: 88:00:18:af:10:c6:9a:51:64:c0:f9:d6:76:65:b5: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D5:3E:4E:87:80:2F:B3:57:38:EC:FD:FF:E1:65:17:36:1F:A4:10 X509v3 Authority Key Identifier: keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.252.0/24 Signature Algorithm: sha256WithRSAEncryption 83:99:39:d2:9c:c0:82:32:3f:b3:f9:de:52:8f:e5:ce:d8:f0: 7c:d3:5f:ce:aa:26:c5:ac:5c:f0:ae:d8:00:6b:cc:81:68:b6: 76:df:4e:dc:3b:a9:39:e0:03:6c:a4:45:9e:01:39:e7:c0:bb: d8:d9:09:6c:9b:7a:ce:2e:33:47:7f:a1:21:d0:7c:b4:26:b9: 73:6c:f2:f3:04:7f:0f:c4:5f:a6:83:1f:df:9a:f2:5f:67:f9: ee:33:e8:3c:60:e7:bb:26:5e:8a:99:42:9a:7f:93:a7:f2:10: 79:de:de:76:0f:6d:d0:ca:26:b3:c9:b9:18:b1:c5:0b:01:e1: 7c:bb:f0:9a:ab:5b:88:47:37:64:4e:5c:0b:49:5b:7a:dd:b2: 6d:cc:36:5e:91:11:47:d5:49:a5:57:e3:dc:10:f3:1c:b5:b8: 48:67:b9:04:5e:f0:69:95:35:56:93:b1:e7:e2:7e:eb:38:1d: 2b:26:98:1f:21:b0:1e:a7:9a:e1:b8:55:8e:75:17:cb:20:93: 53:d5:e3:ca:4f:d5:55:8c:29:78:e3:0b:ee:5d:2f:a5:f6:6f: 8c:2f:f1:65:af:0a:32:6f:39:9b:a7:0d:98:98:47:f6:ac:82: 6d:56:20:bf:a1:b7:c8:78:41:95:48:9f:52:57:cd:67:23:08: fa:fb:29:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VnO3vLi685pzuAV/pGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl Yjc2ZWQwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGQ1M2U0ZTg3ODAyZmIzNTczOGVjZmRmZmUxNjUxNzM2MWZhNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFeepcefd129iwL2FOmHk5VXUV99 EfIDnexmcCayOoxVQrty+1QSba6IhprgR1rw/P5iWANcx1VG48b5MDdtUgf67t9V JtAmeolWIG9iOMAf83MR9KIBdbqtUpbAddWFPk3dgHGXAPO6EM6VoM+cPVlrCE4x D21r4aLawrl41EfRVF7l3ybTdxKPCVAVCd+GEtvW+8ukwovxqbTLXnMthHXEnvOk tFStQamI2uynn4be0qmorf59weIm68FkUO1Ei+yrJW0xC0FgZe+vRKa9vIGk0z8O +pbnKlZ7aol33aMP0WmvOn09goa7lQEHPomIABivEMaaUWTA+dZ2ZbUVAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMjVPk6HgC+zVzjs/f/hZRc2H6QQMB8GA1UdIwQY MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt ZjQ3YWU3ZGRhZWMwLzEveU5VLVRvZUFMN05YT096OV8tRmxGellmcEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUH8MA0G CSqGSIb3DQEBCwUAA4IBAQCDmTnSnMCCMj+z+d5Sj+XO2PB801/OqibFrFzwrtgA a8yBaLZ2307cO6k54ANspEWeATnnwLvY2Qlsm3rOLjNHf6Eh0Hy0JrlzbPLzBH8P xF+mgx/fmvJfZ/nuM+g8YOe7Jl6KmUKaf5On8hB53t52D23QyiazybkYscULAeF8 u/Caq1uIRzdkTlwLSVt63bJtzDZekRFH1UmlV+PcEPMctbhIZ7kEXvBplTVWk7Hn 4n7rOB0rJpgfIbAep5rhuFWOdRfLIJNT1ePKT9VVjCl44wvuXS+l9m+ML/Flrwoy bzmbpw2YmEf2rIJtViC/obfIeEGVSJ9SV81nIwj6+ynw -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:11 2026 by rpki-client