This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/Y4x7zeztB7lrOx01OBJN1UiLyT0.roa File: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (raw, json) Hash identifier: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI= Subject key identifier: 63:8C:7B:CD:EC:ED:07:B9:6B:3B:1D:35:38:12:4D:D5:48:8B:C9:3D Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca Certificate serial: 019B76EBA3E585BCD34969F56C869F525FEE Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/Y4x7zeztB7lrOx01OBJN1UiLyT0.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203936 IP address blocks: 185.118.188.0/22 maxlen: 24 185.118.188.0/24 maxlen: 24 185.118.189.0/24 maxlen: 24 185.118.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a3:e5:85:bc:d3:49:69:f5:6c:86:9f:52:5f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=638c7bcdeced07b96b3b1d3538124dd5488bc93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:b0:35:98:05:41:8b:50:df:97:f1:95:04: 84:e0:a1:e5:9d:c6:a1:b4:47:02:79:76:4e:23:8e: 5a:98:bc:60:94:35:74:f1:4f:db:c8:f4:f0:26:83: 96:4d:87:1a:73:4e:00:ef:50:dc:40:65:83:e4:36: 0b:1c:98:22:b3:91:f0:a1:8e:9b:c8:35:87:a6:5c: 81:65:e4:59:dd:4b:14:13:2a:d3:2f:4a:62:1f:3e: 91:a6:f0:c8:a7:ae:5e:5f:3a:08:2a:60:51:3a:cd: 86:f4:da:92:3b:a7:16:23:87:fa:46:e8:0a:45:4d: 3a:11:71:c0:dd:c0:11:71:77:f3:e9:2e:f9:1b:e0: 9d:92:40:28:de:f2:07:10:3a:f8:08:85:20:12:f0: 79:6e:84:8f:b8:4a:84:5f:af:bc:76:9e:d0:dd:37: 90:be:c1:69:39:b4:bb:55:7c:ec:0b:19:d1:5d:0f: da:40:70:49:0e:fd:da:4b:75:7c:c3:d5:9d:e2:40: a0:f6:d2:5f:92:13:73:ce:23:30:b7:a3:58:b9:96: 18:fa:fe:92:ae:77:68:aa:2e:74:0a:3c:2b:60:03: 7a:4b:db:ae:77:5c:3c:d7:d6:05:1d:7c:50:3a:5a: ae:9e:8b:f3:98:83:2c:4c:e0:cd:d3:f1:ac:fb:92: 46:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8C:7B:CD:EC:ED:07:B9:6B:3B:1D:35:38:12:4D:D5:48:8B:C9:3D X509v3 Authority Key Identifier: keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/Y4x7zeztB7lrOx01OBJN1UiLyT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.188.0/22 Signature Algorithm: sha256WithRSAEncryption 56:18:29:c2:e7:03:b2:05:08:31:fd:af:06:de:7e:b6:cc:79: 7b:1e:20:87:42:09:9f:db:79:ae:28:10:57:23:0d:4d:43:25: a0:ed:e7:1e:61:70:e2:da:9d:d3:41:37:c3:4c:d7:5d:35:94: 51:61:3c:4b:0e:ff:b1:e9:b6:55:1e:ed:5b:ec:ec:89:7b:53: 30:99:86:41:52:16:91:e6:37:16:06:5f:af:b3:57:b0:94:c6: 3b:97:f6:35:15:78:44:da:51:31:e3:1e:a7:01:c2:39:7f:5e: 1c:10:58:c0:61:96:5c:45:a2:13:72:a1:f6:b2:d0:5a:63:a0: e1:e8:40:91:e9:40:4b:c5:70:32:0a:a4:3a:3a:75:44:0b:22: 41:d5:a2:01:a8:4d:4d:d4:75:da:59:12:b1:90:2c:af:3f:4b: 7a:0f:3c:9a:19:a4:30:9d:68:6a:04:3a:23:6c:06:06:68:75: 9d:76:73:3d:69:7a:79:9a:0b:a7:42:43:27:fc:da:e7:09:b1: 2f:e2:0d:2c:52:a7:68:c8:50:b5:9e:de:60:6c:11:5b:3a:42: b4:8e:94:53:0b:7c:26:e3:33:c5:a3:7b:9e:7b:77:40:ad:3a: df:54:9b:68:b0:09:96:95:1a:93:73:74:16:3f:c4:7d:4a:a9: e0:d8:82:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266PlhbzTSWn1bIafUl/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy Mjk5Y2EwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzhjN2JjZGVjZWQwN2I5NmIzYjFkMzUzODEyNGRkNTQ4OGJjOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjmwNZgFQYtQ35fxlQSE4KHlncah tEcCeXZOI45amLxglDV08U/byPTwJoOWTYcac04A71DcQGWD5DYLHJgis5HwoY6b yDWHplyBZeRZ3UsUEyrTL0piHz6RpvDIp65eXzoIKmBROs2G9NqSO6cWI4f6RugK RU06EXHA3cARcXfz6S75G+CdkkAo3vIHEDr4CIUgEvB5boSPuEqEX6+8dp7Q3TeQ vsFpObS7VXzsCxnRXQ/aQHBJDv3aS3V8w9Wd4kCg9tJfkhNzziMwt6NYuZYY+v6S rndoqi50CjwrYAN6S9uud1w819YFHXxQOlqunovzmIMsTODN0/Gs+5JGTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGOMe83s7Qe5azsdNTgSTdVIi8k9MB8GA1UdIwQY MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt ZWE3YWU3MmJkMzJkLzEvWTR4N3plenRCN2xyT3gwMU9CSk4xVWlMeVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXa8MA0G CSqGSIb3DQEBCwUAA4IBAQBWGCnC5wOyBQgx/a8G3n62zHl7HiCHQgmf23muKBBX Iw1NQyWg7eceYXDi2p3TQTfDTNddNZRRYTxLDv+x6bZVHu1b7OyJe1MwmYZBUhaR 5jcWBl+vs1ewlMY7l/Y1FXhE2lEx4x6nAcI5f14cEFjAYZZcRaITcqH2stBaY6Dh 6ECR6UBLxXAyCqQ6OnVECyJB1aIBqE1N1HXaWRKxkCyvP0t6DzyaGaQwnWhqBDoj bAYGaHWddnM9aXp5mgunQkMn/NrnCbEv4g0sUqdoyFC1nt5gbBFbOkK0jpRTC3wm 4zPFo3uee3dArTrfVJtosAmWlRqTc3QWP8R9Sqng2IJ0 -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:38 2026 by rpki-client