This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/Ap1ypGYwOd85RPP0rGtzYj0aIKY.roa File: Ap1ypGYwOd85RPP0rGtzYj0aIKY.roa (raw, json) Hash identifier: JnRnLw8/ZcrmuU2tq5TD695w7gD8V5C+7Y/KLO3u2VI= Subject key identifier: 02:9D:72:A4:66:30:39:DF:39:44:F3:F4:AC:6B:73:62:3D:1A:20:A6 Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab Certificate serial: 019B7910B002EA800F8D8BFF446D02D1E1D2 Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/Ap1ypGYwOd85RPP0rGtzYj0aIKY.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47264 IP address blocks: 185.75.240.0/24 maxlen: 24 2a05:5500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b0:02:ea:80:0f:8d:8b:ff:44:6d:02:d1:e1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=029d72a4663039df3944f3f4ac6b73623d1a20a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:75:60:ef:96:74:e1:e2:15:01:68:6b:5a: d9:9f:ae:f3:06:13:39:e6:00:52:de:34:ad:f2:ed: a6:90:ef:93:a2:51:dc:c8:96:87:8d:4e:d8:c4:45: ac:27:35:f8:a6:14:53:38:42:58:01:ec:06:08:5a: 67:0c:04:b2:81:da:f3:e6:0d:22:f2:62:ec:bc:47: db:5a:2e:c5:d3:f1:37:c7:60:4b:53:8e:5f:42:91: ee:58:61:8d:5f:02:0d:95:c2:eb:96:7b:f0:59:46: 0d:3f:68:82:cf:66:6e:10:7e:2a:04:e9:37:7f:84: 19:e9:ad:01:1b:ac:ee:3e:70:fa:a9:a6:16:ec:d3: ed:1a:21:ee:01:48:27:a0:78:05:93:e3:a8:1b:5e: 13:de:60:71:39:ce:c1:b5:54:79:a3:0c:8c:20:d4: 73:53:81:2c:4a:7c:f5:5a:a6:27:8c:9f:33:f4:e9: a3:db:10:f7:e2:e7:94:69:e8:63:6e:69:d3:8c:b8: bd:b6:e2:3b:e3:7a:b5:01:7a:3e:cc:87:5c:f4:7e: 76:42:fd:9e:12:05:7d:b4:bd:79:83:57:fd:b8:ce: e5:c9:c7:8f:09:3b:ab:1c:dc:24:95:75:cd:76:84: d9:ca:95:79:ff:a6:c6:50:a0:fa:0f:05:1d:2f:b3: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9D:72:A4:66:30:39:DF:39:44:F3:F4:AC:6B:73:62:3D:1A:20:A6 X509v3 Authority Key Identifier: keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/Ap1ypGYwOd85RPP0rGtzYj0aIKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.240.0/24 IPv6: 2a05:5500::/32 Signature Algorithm: sha256WithRSAEncryption 6e:53:9e:24:8b:fb:84:16:dd:65:c5:cc:91:29:3d:be:4d:ff: 43:33:57:32:4d:2f:80:df:4a:ee:71:58:ad:bb:69:1b:b7:be: db:df:d4:a9:ea:a8:aa:f2:6b:74:e9:d0:fd:bf:a0:fc:fe:0e: c8:3f:2c:48:39:3a:1f:13:a6:88:93:2d:b2:53:c2:91:08:a8: f0:19:46:e3:df:c0:1b:ee:d3:8f:21:4b:8c:86:e4:c7:94:4f: 50:3b:85:a2:28:96:76:06:be:d1:77:55:3e:87:6b:dc:3d:0f: 33:ca:e6:4e:34:f7:89:81:63:d2:44:a8:4d:2d:6f:45:29:29: 97:53:69:5b:1c:e9:3a:76:a7:2a:99:63:0e:fa:73:7c:0a:e2: 58:7b:ee:cd:9c:7f:e5:11:a1:a9:51:71:6c:5d:24:c2:41:66: a0:3c:a4:56:07:03:4c:d3:20:11:07:f9:10:7c:45:cd:59:7a: e4:b8:21:e4:7f:0b:8d:f4:80:f9:a0:98:39:2f:26:8e:71:6a: 44:05:db:17:d1:c0:41:78:16:5d:b6:ad:c5:d5:46:c4:2c:46: a8:82:37:23:2c:d3:6a:06:f0:af:20:75:d7:d1:27:e2:2b:5e: 9b:44:75:82:30:93:da:76:27:0e:af:5f:71:0b:7a:e3:73:b7: d7:03:87:a5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ELAC6oAPjYv/RG0C0eHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjQ2OTFjMzE4OTJjYzk5MWFkNGU5YTk2NzExNDc3NTll NDE3YWIwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjlkNzJhNDY2MzAzOWRmMzk0NGYzZjRhYzZiNzM2MjNkMWEyMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLd1YO+WdOHiFQFoa1rZn67zBhM5 5gBS3jSt8u2mkO+TolHcyJaHjU7YxEWsJzX4phRTOEJYAewGCFpnDASygdrz5g0i 8mLsvEfbWi7F0/E3x2BLU45fQpHuWGGNXwINlcLrlnvwWUYNP2iCz2ZuEH4qBOk3 f4QZ6a0BG6zuPnD6qaYW7NPtGiHuAUgnoHgFk+OoG14T3mBxOc7BtVR5owyMINRz U4EsSnz1WqYnjJ8z9Omj2xD34ueUaehjbmnTjLi9tuI743q1AXo+zIdc9H52Qv2e EgV9tL15g1f9uM7lycePCTurHNwklXXNdoTZypV5/6bGUKD6DwUdL7NEfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAKdcqRmMDnfOUTz9Kxrc2I9GiCmMB8GA1UdIwQY MBaAFO1kaRwxiSzJka1OmpZxFHdZ5BerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjIt N2M3ZGIyMTIzMGEzLzEvQXAxeXBHWXdPZDg1UlBQMHJHdHpZajBhSUtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjItN2M3ZGIyMTIzMGEz LzEvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUvwMA0E AgACMAcDBQAqBVUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuU54ki/uEFt1lxcyRKT2+ Tf9DM1cyTS+A30rucVitu2kbt77b39Sp6qiq8mt06dD9v6D8/g7IPyxIOTofE6aI ky2yU8KRCKjwGUbj38Ab7tOPIUuMhuTHlE9QO4WiKJZ2Br7Rd1U+h2vcPQ8zyuZO NPeJgWPSRKhNLW9FKSmXU2lbHOk6dqcqmWMO+nN8CuJYe+7NnH/lEaGpUXFsXSTC QWagPKRWBwNM0yARB/kQfEXNWXrkuCHkfwuN9ID5oJg5LyaOcWpEBdsX0cBBeBZd tq3F1UbELEaogjcjLNNqBvCvIHXX0SfiK16bRHWCMJPadicOr19xC3rjc7fXA4el -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:18 2026 by rpki-client