This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/_Y-O8ekNdVfY5HtjN_OYTT1fqM4.roa File: _Y-O8ekNdVfY5HtjN_OYTT1fqM4.roa (raw, json) Hash identifier: pFGA1J6zYejxHObAaVatKz5v/A7RWzNi5OOP9dChUSY= Subject key identifier: FD:8F:8E:F1:E9:0D:75:57:D8:E4:7B:63:37:F3:98:4D:3D:5F:A8:CE Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e Certificate serial: 019B76EB40B58EB4E01E26C8818B3DB36314 Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/_Y-O8ekNdVfY5HtjN_OYTT1fqM4.roa Signing time: Thu 01 Jan 2026 00:18:07 +0000 ROA not before: Thu 01 Jan 2026 00:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49619 IP address blocks: 185.252.128.0/22 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:40:b5:8e:b4:e0:1e:26:c8:81:8b:3d:b3:63:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd8f8ef1e90d7557d8e47b6337f3984d3d5fa8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:38:db:27:44:c8:dd:1c:55:78:23:b7:f2:d4: 46:fa:16:e8:d2:0d:68:b6:c8:1b:ce:24:69:4d:43: 47:49:8d:15:88:79:5b:97:e9:c6:79:2f:d2:00:4a: 1e:d5:f0:5a:81:ec:bb:3a:4a:0b:8d:e6:1b:a3:61: 9b:eb:b0:d6:73:fd:9c:29:26:3e:97:d7:12:5d:01: a2:7c:c5:ce:af:a6:f6:24:3f:8c:65:77:e5:a2:ee: de:d1:11:2f:32:64:ed:f7:10:0a:99:c1:9e:fe:59: 73:23:c4:f3:11:33:a0:e1:96:06:91:04:23:4f:da: 53:57:c9:9f:5a:b4:f2:f3:4d:a6:71:e4:8d:74:75: 41:8a:e0:e5:4c:0c:6e:ac:dc:55:6a:69:ef:74:ad: 1b:a3:f2:9b:8a:d2:2d:b0:b2:a9:10:b9:8c:0b:8d: 52:d3:fd:52:62:84:c8:84:9a:ef:13:9d:e3:eb:5b: c8:c9:03:42:82:f4:37:df:11:df:5e:37:d3:7e:06: 40:b0:36:7e:0c:b2:9f:e3:1d:4d:e9:cd:d5:44:4d: 35:f9:b1:2b:85:68:2f:d0:73:3b:37:17:53:10:2e: 64:0c:c0:52:f8:4f:c3:96:86:3c:73:fb:a6:e9:6e: 81:46:7e:f2:99:73:62:6d:ce:a8:64:30:ba:21:61: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8F:8E:F1:E9:0D:75:57:D8:E4:7B:63:37:F3:98:4D:3D:5F:A8:CE X509v3 Authority Key Identifier: keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/_Y-O8ekNdVfY5HtjN_OYTT1fqM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.128.0/22 Signature Algorithm: sha256WithRSAEncryption 35:cd:f6:77:b4:08:6f:7e:c1:ee:8a:91:66:dd:18:9c:ad:00: 5c:42:3f:6d:29:d8:84:ce:a7:8d:48:1c:66:96:e7:97:4e:58: 21:92:3d:02:5d:b8:61:d3:6d:79:df:63:76:e3:4c:f7:cc:a6: 1a:c1:12:3e:ad:10:73:63:e7:45:0d:41:68:85:c1:41:b2:ee: b5:b8:73:6e:24:27:0a:6e:81:23:55:3d:bf:da:bc:c0:cf:6f: 3a:b1:2a:b4:87:fc:a1:d7:d1:c1:35:fb:a6:52:f8:e1:1b:de: a6:a1:97:95:d9:4b:ca:eb:59:95:2b:ab:ae:31:8a:c7:24:67: 9a:fb:14:67:73:12:ec:a9:75:d8:9f:64:b7:f4:3d:86:e4:86: 29:42:a2:83:03:b2:c4:9b:ee:5c:25:c6:ee:95:b4:60:16:9c: d9:a8:2d:77:72:a8:b0:06:09:c6:74:ff:87:ef:66:53:00:35: af:1c:f7:89:6b:92:f5:01:73:c7:4a:f7:24:f2:df:20:09:02: 52:c9:34:de:49:b3:53:23:ec:04:8f:b1:39:2a:d3:d2:94:47: 40:c8:f5:68:6b:3a:eb:c6:60:be:92:d5:97:5b:f6:d7:49:c9: 72:9c:eb:72:9d:0d:4a:62:67:af:50:bd:46:cf:46:3e:89:6e: 95:68:54:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260C1jrTgHibIgYs9s2MUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OTRmMDA0NzFlMjQ4YWJlMzk0ZDUyMWU5NmNiYTk2MzBk ODUyMGUwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDhmOGVmMWU5MGQ3NTU3ZDhlNDdiNjMzN2YzOTg0ZDNkNWZhOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTjbJ0TI3RxVeCO38tRG+hbo0g1o tsgbziRpTUNHSY0ViHlbl+nGeS/SAEoe1fBagey7OkoLjeYbo2Gb67DWc/2cKSY+ l9cSXQGifMXOr6b2JD+MZXflou7e0REvMmTt9xAKmcGe/llzI8TzETOg4ZYGkQQj T9pTV8mfWrTy802mceSNdHVBiuDlTAxurNxVamnvdK0bo/KbitItsLKpELmMC41S 0/1SYoTIhJrvE53j61vIyQNCgvQ33xHfXjfTfgZAsDZ+DLKf4x1N6c3VRE01+bEr hWgv0HM7NxdTEC5kDMBS+E/DloY8c/um6W6BRn7ymXNibc6oZDC6IWElGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP2PjvHpDXVX2OR7YzfzmE09X6jOMB8GA1UdIwQY MBaAFBWU8ARx4kir45TVIelsupYw2FIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEt OGNkNDJjZWRlMjIwLzEvX1ktTzhla05kVmZZNUh0ak5fT1lUVDFmcU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEtOGNkNDJjZWRlMjIw LzEvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufyAMA0G CSqGSIb3DQEBCwUAA4IBAQA1zfZ3tAhvfsHuipFm3RicrQBcQj9tKdiEzqeNSBxm lueXTlghkj0CXbhh021532N240z3zKYawRI+rRBzY+dFDUFohcFBsu61uHNuJCcK boEjVT2/2rzAz286sSq0h/yh19HBNfumUvjhG96moZeV2UvK61mVK6uuMYrHJGea +xRncxLsqXXYn2S39D2G5IYpQqKDA7LEm+5cJcbulbRgFpzZqC13cqiwBgnGdP+H 72ZTADWvHPeJa5L1AXPHSvck8t8gCQJSyTTeSbNTI+wEj7E5KtPSlEdAyPVoazrr xmC+ktWXW/bXSclynOtynQ1KYmevUL1Gz0Y+iW6VaFTU -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:51 2026 by rpki-client