This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa File: YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa (raw, json) Hash identifier: JDywiyYxTdXyaQTqvpu95Q6O2+pyo8JzaDgoM+cMFa8= Subject key identifier: 61:86:F8:A3:64:2B:7F:94:40:3E:FA:FC:8C:CF:9E:18:F8:A3:BC:B3 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019B7AC7A3F8C7FEAFB8BA0DF08FF893F6AB Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 185.227.216.0/24 maxlen: 24 185.227.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a3:f8:c7:fe:af:b8:ba:0d:f0:8f:f8:93:f6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6186f8a3642b7f94403efafc8ccf9e18f8a3bcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:f1:bf:b8:38:68:83:55:36:56:33:f3:1e: b6:6e:a9:a2:b3:44:9e:f6:f8:03:3a:84:47:0f:33: 47:15:7b:d1:7d:0a:02:2d:fe:75:1c:7d:c3:42:9b: f2:64:b9:93:23:56:fb:21:ff:8b:13:25:e0:18:e4: 1b:92:f5:18:2b:59:84:45:fd:6a:fc:fc:f8:01:2e: 10:50:93:ef:95:ad:e9:65:74:40:7a:b7:c7:30:22: 0d:cd:8a:7b:e2:e4:38:0b:20:92:e9:9e:5a:c0:25: 63:5b:20:88:58:45:d3:9b:ba:7c:46:26:79:f4:d1: 85:0d:bd:55:1a:f1:57:41:2d:c7:57:d7:d4:07:7d: 38:2a:70:f0:50:58:d2:4a:43:e5:75:22:f6:5d:11: 66:a3:85:f4:f2:85:c9:ef:b7:19:24:f8:b0:a8:af: 63:bc:46:7e:71:38:70:e2:e2:a6:56:77:71:5f:69: fe:e0:0f:07:23:3c:74:62:04:95:b9:f5:c1:07:3a: a7:08:94:7b:d9:84:5e:40:6e:da:ed:59:d3:b0:0f: 26:71:aa:97:40:cd:33:36:9e:f4:74:d2:81:29:3f: 2c:17:01:8e:02:52:28:82:cd:1b:af:f8:fc:55:d4: 53:13:f3:9a:31:74:5e:97:20:a2:f4:91:3d:19:41: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:86:F8:A3:64:2B:7F:94:40:3E:FA:FC:8C:CF:9E:18:F8:A3:BC:B3 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.216.0/24 185.227.218.0/24 Signature Algorithm: sha256WithRSAEncryption 75:f7:74:10:45:c5:44:64:73:2b:27:93:85:a2:82:d6:91:8a: 9c:71:18:a1:26:c1:83:bc:fd:f7:35:68:ad:83:80:cb:c9:57: 42:3d:69:06:d4:6f:3d:4f:72:a2:e3:e6:82:1e:e5:1a:38:5c: 3b:88:82:1f:91:df:cc:c3:8f:d4:5a:f0:ad:03:47:2a:21:ca: ef:94:06:ee:29:0b:5f:82:44:3d:96:5d:48:04:64:97:20:73: 7b:62:10:e6:cd:be:56:c3:58:d8:06:a6:42:3f:7a:7f:ef:25: e3:e4:f6:00:a0:3b:9a:c1:c2:4b:fc:90:4f:80:f8:d8:c6:55: ce:2f:4c:ed:81:f6:4c:8c:67:f7:68:f2:e9:16:62:a5:10:ff: 51:39:55:1b:1f:6d:05:c9:06:df:63:56:ae:82:76:5c:87:2a: a0:42:29:56:6f:21:8f:78:d8:a0:5a:48:08:4c:ea:37:13:38: 49:03:22:1c:34:5a:8e:7e:7b:a4:d6:a6:ec:4a:9c:e9:a1:a2: 88:42:d6:a4:18:04:7c:75:bd:e4:30:6e:40:3c:b6:50:82:b1: 51:29:a0:9d:eb:15:e1:5a:c9:6e:e2:4c:86:10:67:34:ae:18: e3:cb:9d:9b:67:0f:4f:d7:e2:df:89:d3:80:49:a8:58:43:4e: fe:ae:8d:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x6P4x/6vuLoN8I/4k/arMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTg2ZjhhMzY0MmI3Zjk0NDAzZWZhZmM4Y2NmOWUxOGY4YTNiY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN/xv7g4aINVNlYz8x62bqmis0Se 9vgDOoRHDzNHFXvRfQoCLf51HH3DQpvyZLmTI1b7If+LEyXgGOQbkvUYK1mERf1q /Pz4AS4QUJPvla3pZXRAerfHMCINzYp74uQ4CyCS6Z5awCVjWyCIWEXTm7p8RiZ5 9NGFDb1VGvFXQS3HV9fUB304KnDwUFjSSkPldSL2XRFmo4X08oXJ77cZJPiwqK9j vEZ+cThw4uKmVndxX2n+4A8HIzx0YgSVufXBBzqnCJR72YReQG7a7VnTsA8mcaqX QM0zNp70dNKBKT8sFwGOAlIogs0br/j8VdRTE/OaMXRelyCi9JE9GUG+TQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGGG+KNkK3+UQD76/IzPnhj4o7yzMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvWVliNG8yUXJmNVJBUHZyOGpNLWVHUGlqdkxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuePYAwQA uePaMA0GCSqGSIb3DQEBCwUAA4IBAQB193QQRcVEZHMrJ5OFooLWkYqccRihJsGD vP33NWitg4DLyVdCPWkG1G89T3Ki4+aCHuUaOFw7iIIfkd/Mw4/UWvCtA0cqIcrv lAbuKQtfgkQ9ll1IBGSXIHN7YhDmzb5Ww1jYBqZCP3p/7yXj5PYAoDuawcJL/JBP gPjYxlXOL0ztgfZMjGf3aPLpFmKlEP9ROVUbH20FyQbfY1augnZchyqgQilWbyGP eNigWkgITOo3EzhJAyIcNFqOfnuk1qbsSpzpoaKIQtakGAR8db3kMG5APLZQgrFR KaCd6xXhWslu4kyGEGc0rhjjy52bZw9P1+LfidOASahYQ07+ro3Z -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:44 2026 by rpki-client