This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/ryJYRRktlXHgBSVR5cvg8fyHDeM.roa File: ryJYRRktlXHgBSVR5cvg8fyHDeM.roa (raw, json) Hash identifier: WOEZWIHK7L7jVpd5u3Y2JfH4hWkoWnXMkfyztKy8m4M= Subject key identifier: AF:22:58:45:19:2D:95:71:E0:05:25:51:E5:CB:E0:F1:FC:87:0D:E3 Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c Certificate serial: 019B7A5B130659D4FC019BAD212820A9F9AE Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/ryJYRRktlXHgBSVR5cvg8fyHDeM.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57112 IP address blocks: 185.242.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:13:06:59:d4:fc:01:9b:ad:21:28:20:a9:f9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af225845192d9571e0052551e5cbe0f1fc870de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:31:c2:c3:8f:ac:bd:bd:20:93:b8:2b:89:93: 9e:e5:52:54:42:6f:54:d8:ec:17:df:7e:93:40:b6: 02:20:04:c1:0c:c1:84:d6:24:02:c5:99:52:b4:9c: fa:c4:98:f8:2d:1c:c4:a6:f8:94:00:48:40:69:bb: e1:6c:98:2a:42:22:cb:00:e4:f7:0a:15:b5:b6:1e: 4c:41:95:62:7f:7d:67:c2:f5:c6:69:f2:b9:03:d5: 04:a8:ed:8a:3c:44:bc:29:75:83:c5:7a:90:2a:2f: 8e:88:ba:7e:c8:f9:d9:6a:c4:6b:3e:56:63:6e:19: 24:ad:44:38:1b:9a:67:65:bc:dd:34:9f:c2:53:0c: 49:ae:35:b9:b8:80:2d:9b:cc:4a:80:8d:ae:88:97: bf:93:90:53:32:fb:a2:aa:a5:1e:d1:19:13:51:c3: 41:e4:6e:8e:bc:fd:36:3c:d5:51:78:8f:0d:cd:23: 95:74:e6:9a:bb:49:39:bc:d6:30:0e:af:7b:d1:91: b6:20:2a:2d:b3:1e:9c:a4:46:53:c8:c5:b1:b5:d3: 6f:7b:52:b4:02:ea:a5:09:3d:40:f8:c4:4a:53:f4: 50:f7:0d:4f:38:7e:50:cd:53:a7:d2:ce:5c:f9:ae: 01:b1:60:c8:92:92:11:1b:ac:1d:95:51:f0:e5:08: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:22:58:45:19:2D:95:71:E0:05:25:51:E5:CB:E0:F1:FC:87:0D:E3 X509v3 Authority Key Identifier: keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/ryJYRRktlXHgBSVR5cvg8fyHDeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.52.0/22 Signature Algorithm: sha256WithRSAEncryption a9:b2:cf:71:fa:c2:b6:c8:8c:31:88:c6:3f:ec:c7:16:56:18: 14:cc:0e:f4:88:ac:a2:1e:67:9b:f4:3b:a8:28:4e:8d:e5:26: 03:27:6d:08:bf:61:22:63:eb:10:e1:65:b2:c4:6a:fd:9e:7b: 9a:d8:d1:40:bb:d1:f2:1e:e4:d9:bd:3d:07:9f:d3:d9:b1:8e: fa:1d:65:6c:79:55:55:a1:2a:41:b6:a6:10:80:e6:cd:dd:99: 61:71:1a:4f:12:59:b5:05:49:7f:eb:0d:33:c7:1c:14:29:d9: b9:91:8f:bc:72:83:dc:9e:fc:1a:3c:25:a4:af:22:37:26:40: e2:55:44:e1:af:ea:f4:0e:85:c2:c6:b4:80:ce:ea:a6:b2:47: f5:ad:11:a7:83:88:5c:9f:d0:3b:60:30:f3:63:51:3e:41:3f: da:c5:c3:b9:9e:8a:5b:ac:62:16:16:8f:15:40:9a:3c:c4:84: b7:8e:99:b1:b2:85:60:ed:9c:24:44:cf:25:8f:8c:e4:b1:d1: e4:f2:c1:e3:ca:ae:4e:56:9d:45:ac:ea:a8:99:cb:05:c9:b0: f2:47:b3:f2:8c:13:97:ec:df:e0:db:ba:20:c3:02:61:6d:15: 39:fb:cf:c8:ad:7b:12:60:c5:29:22:6f:ba:d5:b4:7f:8f:9b: 8e:9b:5f:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxMGWdT8AZutISggqfmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZGRhMmM2MDc0YzU2MjQxZjVjN2UwNjBjYWNjYjY1N2Y2 NGU5MWMwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjIyNTg0NTE5MmQ5NTcxZTAwNTI1NTFlNWNiZTBmMWZjODcwZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDHCw4+svb0gk7griZOe5VJUQm9U 2OwX336TQLYCIATBDMGE1iQCxZlStJz6xJj4LRzEpviUAEhAabvhbJgqQiLLAOT3 ChW1th5MQZVif31nwvXGafK5A9UEqO2KPES8KXWDxXqQKi+OiLp+yPnZasRrPlZj bhkkrUQ4G5pnZbzdNJ/CUwxJrjW5uIAtm8xKgI2uiJe/k5BTMvuiqqUe0RkTUcNB 5G6OvP02PNVReI8NzSOVdOaau0k5vNYwDq970ZG2ICotsx6cpEZTyMWxtdNve1K0 AuqlCT1A+MRKU/RQ9w1POH5QzVOn0s5c+a4BsWDIkpIRG6wdlVHw5QjCDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8iWEUZLZVx4AUlUeXL4PH8hw3jMB8GA1UdIwQY MBaAFA7dosYHTFYkH1x+Bgysy2V/ZOkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iYTQ1OWYtODQ2Zi00N2E5LWE2MjUt NjcxMTU4YTYzYzIzLzEvcnlKWVJSa3RsWEhnQlNWUjVjdmc4ZnlIRGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9iYTQ1OWYtODQ2Zi00N2E5LWE2MjUtNjcxMTU4YTYzYzIz LzEvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufI0MA0G CSqGSIb3DQEBCwUAA4IBAQCpss9x+sK2yIwxiMY/7McWVhgUzA70iKyiHmeb9Duo KE6N5SYDJ20Iv2EiY+sQ4WWyxGr9nnua2NFAu9HyHuTZvT0Hn9PZsY76HWVseVVV oSpBtqYQgObN3ZlhcRpPElm1BUl/6w0zxxwUKdm5kY+8coPcnvwaPCWkryI3JkDi VUThr+r0DoXCxrSAzuqmskf1rRGng4hcn9A7YDDzY1E+QT/axcO5nopbrGIWFo8V QJo8xIS3jpmxsoVg7ZwkRM8lj4zksdHk8sHjyq5OVp1FrOqomcsFybDyR7PyjBOX 7N/g27ogwwJhbRU5+8/IrXsSYMUpIm+61bR/j5uOm18B -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:28 2026 by rpki-client