This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/1JygZse09WhD_TFE_zA66uiprzY.roa File: 1JygZse09WhD_TFE_zA66uiprzY.roa (raw, json) Hash identifier: AmilRSzrrx0BVP9tqrk96CZobMZmirkjhTzH5EijyEs= Subject key identifier: D4:9C:A0:66:C7:B4:F5:68:43:FD:31:44:FF:30:3A:EA:E8:A9:AF:36 Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc Certificate serial: 019B79114BB65B87E93737817A39F355D86C Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/1JygZse09WhD_TFE_zA66uiprzY.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205889 IP address blocks: 185.135.68.0/24 maxlen: 24 185.135.69.0/24 maxlen: 24 185.135.70.0/24 maxlen: 24 185.135.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4b:b6:5b:87:e9:37:37:81:7a:39:f3:55:d8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d49ca066c7b4f56843fd3144ff303aeae8a9af36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:73:6a:e0:c5:2e:6b:47:43:5d:f2:23:4c: 87:80:fa:0b:c2:b7:1f:2c:ae:07:70:2c:f9:11:95: ff:f7:73:e5:1e:c9:d4:17:99:41:ae:76:33:7a:a3: 9d:dd:86:78:94:b6:ef:6c:b4:9d:d4:9e:97:fe:dc: 1a:22:cb:b2:d2:4d:eb:be:3f:3b:2d:f1:ac:72:bd: 8b:cf:4d:9d:76:67:60:a5:b1:d8:2c:24:d8:28:fb: 7a:44:3e:8f:ee:ef:9d:f1:6b:b1:63:41:a5:89:de: fa:72:8b:f7:55:96:59:0e:86:11:6b:60:62:a4:dd: a0:32:ba:0c:e6:89:aa:ef:85:1e:60:e5:9e:96:69: f3:cf:26:0b:18:a7:06:a1:cf:37:38:02:e6:7f:87: 78:53:25:b9:a8:88:a4:68:0a:26:d3:b7:59:95:01: 3d:d9:b4:63:a3:63:fe:b8:22:71:39:5f:0b:1d:25: b5:a4:ef:8f:fb:fc:eb:a6:c7:ce:f0:cb:ab:42:21: 4d:81:43:54:44:27:05:da:32:62:60:74:b1:f7:86: 05:20:36:3d:1e:ac:6e:27:02:bb:d8:fd:72:f7:ae: 8a:8c:0c:d6:c7:fa:73:d8:97:61:21:2d:f3:6d:d4: 22:2c:a6:e0:96:2b:3f:ca:43:06:b2:9f:e0:fd:17: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9C:A0:66:C7:B4:F5:68:43:FD:31:44:FF:30:3A:EA:E8:A9:AF:36 X509v3 Authority Key Identifier: keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/1JygZse09WhD_TFE_zA66uiprzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.68.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:21:15:37:67:61:33:cf:7c:4b:b9:f2:29:c1:f3:58:e9:b4: 63:12:f5:be:98:99:af:08:c5:d9:9a:2a:c7:11:0b:a7:57:39: 83:79:dc:9b:a7:15:d5:85:2e:e8:03:a0:9c:fb:ab:45:95:6d: e8:04:40:fc:0e:0d:2b:8d:f1:c7:90:f9:1e:79:b6:18:d3:ff: 8a:4c:ec:22:33:20:ee:14:8e:8b:49:6a:d1:41:96:1c:9a:d3: 01:ff:5f:0b:e6:db:66:ed:32:9b:45:23:f6:b0:a0:1d:6c:34: 18:60:a3:55:db:a3:21:3f:a6:03:49:be:26:38:23:1b:84:5d: f2:d2:4c:a5:cd:2f:6b:97:d4:2b:2b:79:97:40:1b:44:f6:4f: 1c:18:8d:6c:76:6d:5a:d2:39:39:fd:d0:81:08:37:bb:ac:bd: 65:a6:5a:99:88:55:1d:51:5c:2d:48:72:f6:7d:23:b8:af:4a: fb:19:0a:a4:03:c6:e8:ff:4b:d8:f6:62:19:99:b9:2c:2f:fb: c5:a7:f5:2a:4b:3e:eb:d4:8f:59:fa:67:ba:9b:84:71:78:df: f7:7f:99:e3:98:26:5e:06:a7:b6:f7:74:52:e9:e0:78:aa:d3: a7:8b:ad:1a:e9:51:98:33:d6:36:10:cd:8c:52:bc:4b:86:8f: ac:c2:1a:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUu2W4fpNzeBejnzVdhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZmMxN2JlYTU1NWI2ZDM4MzIxZjk0MDI4ZTUxNWZiYTRm YTc0ZGMwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDljYTA2NmM3YjRmNTY4NDNmZDMxNDRmZjMwM2FlYWU4YTlhZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m1zauDFLmtHQ13yI0yHgPoLwrcf LK4HcCz5EZX/93PlHsnUF5lBrnYzeqOd3YZ4lLbvbLSd1J6X/twaIsuy0k3rvj87 LfGscr2Lz02ddmdgpbHYLCTYKPt6RD6P7u+d8WuxY0Glid76cov3VZZZDoYRa2Bi pN2gMroM5omq74UeYOWelmnzzyYLGKcGoc83OALmf4d4UyW5qIikaAom07dZlQE9 2bRjo2P+uCJxOV8LHSW1pO+P+/zrpsfO8MurQiFNgUNURCcF2jJiYHSx94YFIDY9 HqxuJwK72P1y966KjAzWx/pz2JdhIS3zbdQiLKbglis/ykMGsp/g/ReAzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNScoGbHtPVoQ/0xRP8wOuroqa82MB8GA1UdIwQY MBaAFOb8F76lVbbTgyH5QCjlFfuk+nTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZ3WHZxVlZ0dE9ESWZsQUtPVVYtNlQ2ZE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMGQ0NjMtYTE3NC00ZjVkLWI0ZWUt OTY5NjdmY2Q0MmU5LzEvMUp5Z1pzZTA5V2hEX1RGRV96QTY2dWlwcnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9jMGQ0NjMtYTE3NC00ZjVkLWI0ZWUtOTY5NjdmY2Q0MmU5 LzEvNXZ3WHZxVlZ0dE9ESWZsQUtPVVYtNlQ2ZE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYdEMA0G CSqGSIb3DQEBCwUAA4IBAQB9IRU3Z2Ezz3xLufIpwfNY6bRjEvW+mJmvCMXZmirH EQunVzmDedybpxXVhS7oA6Cc+6tFlW3oBED8Dg0rjfHHkPkeebYY0/+KTOwiMyDu FI6LSWrRQZYcmtMB/18L5ttm7TKbRSP2sKAdbDQYYKNV26MhP6YDSb4mOCMbhF3y 0kylzS9rl9QrK3mXQBtE9k8cGI1sdm1a0jk5/dCBCDe7rL1lplqZiFUdUVwtSHL2 fSO4r0r7GQqkA8bo/0vY9mIZmbksL/vFp/UqSz7r1I9Z+me6m4RxeN/3f5njmCZe Bqe293RS6eB4qtOni60a6VGYM9Y2EM2MUrxLho+swhqv -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:33 2026 by rpki-client