This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/nyiPnK2r5FPcG4hEdHJrG0pBB_k.roa File: nyiPnK2r5FPcG4hEdHJrG0pBB_k.roa (raw, json) Hash identifier: 4zalWvXyIiVFZhKWkS+NdHFSuL4SaUsBDEJVOkcmQGg= Subject key identifier: 9F:28:8F:9C:AD:AB:E4:53:DC:1B:88:44:74:72:6B:1B:4A:41:07:F9 Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017 Certificate serial: 019B7BA365EAF0272ACF0C56D61AD2059AA5 Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/nyiPnK2r5FPcG4hEdHJrG0pBB_k.roa Signing time: Thu 01 Jan 2026 22:17:44 +0000 ROA not before: Thu 01 Jan 2026 22:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213644 IP address blocks: 185.84.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:65:ea:f0:27:2a:cf:0c:56:d6:1a:d2:05:9a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017 Validity Not Before: Jan 1 22:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f288f9cadabe453dc1b884474726b1b4a4107f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:c2:a6:f0:07:ec:43:08:9f:07:77:7b:6a: 54:d4:8b:0c:ca:da:99:f6:c5:da:5c:c8:fc:61:c5: 11:0d:69:5c:19:8e:a3:29:a9:da:c3:19:c3:e8:ab: 6f:59:9d:37:7e:46:cd:f5:f7:70:5f:30:99:22:74: 32:70:25:8a:33:47:a6:26:ef:2c:9b:98:da:22:45: d0:97:ba:01:a2:39:6e:23:8c:84:e3:38:8d:7f:b2: 18:72:05:91:65:ad:2c:c9:29:30:37:e1:bb:06:99: db:0b:4a:4d:f8:de:aa:af:4a:76:18:d4:02:58:5b: eb:fa:62:2d:b4:1a:c8:cf:b4:52:9a:6a:ba:d1:4f: a0:74:12:1c:95:cb:2e:79:9b:73:19:2b:b8:a2:37: 09:4e:3b:42:ba:4e:b9:80:a6:6f:b8:9b:ab:61:b1: 87:72:ea:4c:d9:51:46:a4:74:f0:23:39:ca:24:f8: d2:6b:fc:22:69:02:d1:f1:82:07:58:d4:e7:69:8e: a7:32:61:4f:11:22:5d:4c:f3:37:4d:0d:83:f2:0a: fc:e3:89:db:84:dd:72:67:88:99:a6:57:27:47:44: d4:3a:5f:78:56:53:1e:ed:3f:a2:89:33:0e:9b:1e: 82:c3:1e:16:73:dd:04:a1:99:23:25:ec:e1:fe:ae: 65:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:28:8F:9C:AD:AB:E4:53:DC:1B:88:44:74:72:6B:1B:4A:41:07:F9 X509v3 Authority Key Identifier: keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/nyiPnK2r5FPcG4hEdHJrG0pBB_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.157.0/24 Signature Algorithm: sha256WithRSAEncryption 26:b6:d3:3e:62:19:a6:3e:93:6a:57:2b:1f:9d:fb:b1:41:00: a0:c7:d7:75:8c:67:b9:32:dd:72:c4:f7:c7:e3:ce:99:bb:48: f0:81:f3:f8:1c:97:54:b4:72:fc:7c:8d:bf:40:6b:88:98:3d: dd:40:f1:3b:4b:71:63:b7:ee:91:d2:bc:4a:3b:5a:75:f7:87: cb:6e:da:55:31:32:21:73:0e:9b:0f:1c:b0:a4:fe:66:b0:91: 20:bb:f6:20:fe:04:6c:a4:98:61:a0:f4:cc:27:a3:c2:52:0e: 08:66:65:3a:13:b0:87:b1:2b:d7:22:14:86:b4:6c:53:ce:fb: 14:d5:0d:ba:65:ef:35:14:41:5d:77:4f:9a:00:69:ee:ed:bf: a3:de:33:ee:3c:b2:83:85:05:e8:72:7a:e9:42:80:20:4e:a2: 8f:b8:75:69:73:4f:5e:d8:43:c4:c5:ba:06:71:dc:ee:a4:85: f7:2c:08:1c:c5:a7:74:d2:59:53:b0:43:78:9e:0c:cd:37:b1: 36:0a:a6:5a:82:e4:1d:98:a2:07:20:e5:40:da:15:14:8b:02: 8b:44:97:d0:a9:71:14:46:d6:b0:fa:85:ef:6b:81:9f:22:8b: 11:7a:04:83:c0:47:b1:a8:2a:bf:3b:db:45:74:fd:58:95:c8: 4e:7d:07:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o2Xq8CcqzwxW1hrSBZqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YmNhMDQ4MmQ2MDU1ODdlYjBlMGM4NTFjMzhlODA3NzU1 ZjkwMTcwHhcNMjYwMTAxMjIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjI4OGY5Y2FkYWJlNDUzZGMxYjg4NDQ3NDcyNmIxYjRhNDEwN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK7CpvAH7EMInwd3e2pU1IsMytqZ 9sXaXMj8YcURDWlcGY6jKanawxnD6KtvWZ03fkbN9fdwXzCZInQycCWKM0emJu8s m5jaIkXQl7oBojluI4yE4ziNf7IYcgWRZa0sySkwN+G7BpnbC0pN+N6qr0p2GNQC WFvr+mIttBrIz7RSmmq60U+gdBIclcsueZtzGSu4ojcJTjtCuk65gKZvuJurYbGH cupM2VFGpHTwIznKJPjSa/wiaQLR8YIHWNTnaY6nMmFPESJdTPM3TQ2D8gr844nb hN1yZ4iZplcnR0TUOl94VlMe7T+iiTMOmx6Cwx4Wc90EoZkjJezh/q5lJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8oj5ytq+RT3BuIRHRyaxtKQQf5MB8GA1UdIwQY MBaAFAe8oEgtYFWH6w4MhRw46Ad1X5AXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjd5Z1NDMWdWWWZyRGd5RkhEam9CM1Zma0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NjYzMTEtY2FhNC00Mzk5LThiMzUt ZmM3OWFmMWY2ZmIzLzEvbnlpUG5LMnI1RlBjRzRoRWRISnJHMHBCQl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC83NjYzMTEtY2FhNC00Mzk5LThiMzUtZmM3OWFmMWY2ZmIz LzEvQjd5Z1NDMWdWWWZyRGd5RkhEam9CM1Zma0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVSdMA0G CSqGSIb3DQEBCwUAA4IBAQAmttM+YhmmPpNqVysfnfuxQQCgx9d1jGe5Mt1yxPfH 486Zu0jwgfP4HJdUtHL8fI2/QGuImD3dQPE7S3Fjt+6R0rxKO1p194fLbtpVMTIh cw6bDxywpP5msJEgu/Yg/gRspJhhoPTMJ6PCUg4IZmU6E7CHsSvXIhSGtGxTzvsU 1Q26Ze81FEFdd0+aAGnu7b+j3jPuPLKDhQXocnrpQoAgTqKPuHVpc09e2EPExboG cdzupIX3LAgcxad00llTsEN4ngzNN7E2CqZaguQdmKIHIOVA2hUUiwKLRJfQqXEU Rtaw+oXva4GfIosRegSDwEexqCq/O9tFdP1YlchOfQfD -----END CERTIFICATE-----Generated at Sun Jan 25 13:08:06 2026 by rpki-client