This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/yiDY3SGI7WigaQvKhlaQ0G9KHiw.roa File: yiDY3SGI7WigaQvKhlaQ0G9KHiw.roa (raw, json) Hash identifier: 3jx8WLBTA4o7Ytgp7aYJ5rkqcrsl0J+rRTYWA5viX9w= Subject key identifier: CA:20:D8:DD:21:88:ED:68:A0:69:0B:CA:86:56:90:D0:6F:4A:1E:2C Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019B7F139D00F04939F559CACE352FDE7B10 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/yiDY3SGI7WigaQvKhlaQ0G9KHiw.roa Signing time: Fri 02 Jan 2026 14:19:10 +0000 ROA not before: Fri 02 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49074 IP address blocks: 85.255.112.0/22 maxlen: 22 91.228.140.0/22 maxlen: 22 91.234.56.0/22 maxlen: 22 151.248.95.0/24 maxlen: 24 178.212.207.0/24 maxlen: 24 194.40.204.0/22 maxlen: 22 2a04:2041::/32 maxlen: 32 2a04:2043::/32 maxlen: 32 2a04:2045::/32 maxlen: 32 2a04:2047::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9d:00:f0:49:39:f5:59:ca:ce:35:2f:de:7b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 2 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca20d8dd2188ed68a0690bca865690d06f4a1e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:00:fe:22:5f:58:85:fd:48:1d:d5:03:6f: e0:ea:1d:bb:c3:94:33:19:7b:8a:36:7b:4b:2d:1a: 88:26:5c:86:e1:8d:cb:a1:1c:0b:ad:ca:3f:4c:99: b2:51:09:53:13:e1:00:d0:82:06:28:8f:25:dc:6a: 54:67:d6:23:fc:be:91:6f:72:06:ca:7b:4f:f9:ea: 9a:62:1b:b7:4c:29:f3:d3:95:9c:20:c4:a1:55:d7: 77:85:47:29:c9:89:28:aa:04:e6:5d:8c:e5:08:a2: 1b:f2:95:eb:ef:c3:9f:32:5d:d1:db:a1:3f:d4:dc: a1:df:03:a1:37:f5:0a:39:cd:9e:76:e7:37:c8:98: 75:7c:4e:10:9f:aa:d9:44:b0:07:0e:ae:63:a3:59: 8c:23:fa:e6:89:f2:f6:2d:f0:74:ba:99:2a:ee:0b: b4:3b:12:1e:6b:68:1e:fb:3e:12:34:ff:0d:6a:a3: 15:0e:03:e7:ca:60:97:bd:4a:88:6a:a9:e4:d3:75: 6c:6e:48:d3:2f:1c:c8:8e:e8:17:a8:d6:d5:e5:66: 5a:1a:a5:83:3d:46:a0:4e:9b:ca:3c:45:bf:4e:f3: 87:44:82:b5:53:e9:ec:2d:4b:fb:a0:af:f5:d0:b7: 98:c1:c5:53:a2:48:ec:f9:47:26:27:d3:d7:0b:8d: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:20:D8:DD:21:88:ED:68:A0:69:0B:CA:86:56:90:D0:6F:4A:1E:2C X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/yiDY3SGI7WigaQvKhlaQ0G9KHiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.112.0/22 91.228.140.0/22 91.234.56.0/22 151.248.95.0/24 178.212.207.0/24 194.40.204.0/22 IPv6: 2a04:2041::/32 2a04:2043::/32 2a04:2045::/32 2a04:2047::/32 Signature Algorithm: sha256WithRSAEncryption 8b:6e:44:32:5c:eb:88:49:e0:c1:c4:af:55:7a:be:85:14:bb: f8:94:ad:dd:50:f2:dd:45:06:92:20:3d:31:ea:c9:43:37:df: 8c:c0:1d:c0:48:f4:6e:ac:ee:90:8c:59:0e:4e:29:2f:75:15: 6b:5d:92:61:eb:ce:3d:de:21:55:04:d3:d9:65:b2:c4:c1:bd: fa:0b:3a:f2:e1:33:39:bb:ff:e0:49:e6:a0:2b:9d:6c:30:ee: 4e:50:f7:e5:15:fe:49:b3:7f:63:46:c3:d2:34:fa:ce:25:25: f8:5e:68:9c:76:c6:b1:a6:19:01:83:48:45:e8:0b:6f:fd:18: b8:33:a5:18:48:bc:c5:c2:a9:e7:1a:ec:b1:31:dc:0e:76:d5: ec:43:18:0f:31:05:f3:f9:1a:72:32:6c:ec:bc:9e:18:b4:55: b2:2a:cc:bd:fb:41:48:0d:d7:b3:0b:07:1a:61:f0:ce:08:42: 60:41:fc:7e:2c:52:65:e5:fd:cb:51:72:f9:e9:cc:fb:fa:bc: 0e:19:a8:29:7b:6b:f8:12:1c:a0:79:97:17:b1:52:1a:e1:fb: 08:e2:b6:85:15:bf:c4:26:8e:65:2e:03:c1:14:d5:2a:5e:fe: 04:a0:7f:ee:b4:e4:39:2d:62:3d:67:ff:ff:92:80:cd:2e:4d: b6:3c:2c:79 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt/E50A8Ek59VnKzjUv3nsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTAyMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTIwZDhkZDIxODhlZDY4YTA2OTBiY2E4NjU2OTBkMDZmNGExZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplcA/iJfWIX9SB3VA2/g6h27w5Qz GXuKNntLLRqIJlyG4Y3LoRwLrco/TJmyUQlTE+EA0IIGKI8l3GpUZ9Yj/L6Rb3IG yntP+eqaYhu3TCnz05WcIMShVdd3hUcpyYkoqgTmXYzlCKIb8pXr78OfMl3R26E/ 1Nyh3wOhN/UKOc2educ3yJh1fE4Qn6rZRLAHDq5jo1mMI/rmifL2LfB0upkq7gu0 OxIea2ge+z4SNP8NaqMVDgPnymCXvUqIaqnk03VsbkjTLxzIjugXqNbV5WZaGqWD PUagTpvKPEW/TvOHRIK1U+nsLUv7oK/10LeYwcVTokjs+UcmJ9PXC42BEQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMog2N0hiO1ooGkLyoZWkNBvSh4sMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEveWlEWTNTR0k3V2lnYVF2S2hsYVEwRzlLSGl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAqBAIAATAkAwQCVf9wAwQC W+SMAwQCW+o4AwQAl/hfAwQAstTPAwQCwijMMCIEAgACMBwDBQAqBCBBAwUAKgQg QwMFACoEIEUDBQAqBCBHMA0GCSqGSIb3DQEBCwUAA4IBAQCLbkQyXOuISeDBxK9V er6FFLv4lK3dUPLdRQaSID0x6slDN9+MwB3ASPRurO6QjFkOTikvdRVrXZJh6849 3iFVBNPZZbLEwb36Czry4TM5u//gSeagK51sMO5OUPflFf5Js39jRsPSNPrOJSX4 XmicdsaxphkBg0hF6Atv/Ri4M6UYSLzFwqnnGuyxMdwOdtXsQxgPMQXz+RpyMmzs vJ4YtFWyKsy9+0FIDdezCwcaYfDOCEJgQfx+LFJl5f3LUXL56cz7+rwOGagpe2v4 EhygeZcXsVIa4fsI4raFFb/EJo5lLgPBFNUqXv4EoH/utOQ5LWI9Z///koDNLk22 PCx5 -----END CERTIFICATE-----Generated at Sun Jan 25 16:14:06 2026 by rpki-client