This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/rVyXgVyYp5rnr4oV3loTRO-57j0.roa File: rVyXgVyYp5rnr4oV3loTRO-57j0.roa (raw, json) Hash identifier: U1gvzfizC5IaJxRnfZJGhEooOdvqsMkE+qdUPQBcx04= Subject key identifier: AD:5C:97:81:5C:98:A7:9A:E7:AF:8A:15:DE:5A:13:44:EF:B9:EE:3D Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019B797E415FC7A320857FA22DCA76EF7D3C Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/rVyXgVyYp5rnr4oV3loTRO-57j0.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197393 IP address blocks: 185.138.68.0/22 maxlen: 24 193.138.152.0/22 maxlen: 22 2a07:bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:41:5f:c7:a3:20:85:7f:a2:2d:ca:76:ef:7d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad5c97815c98a79ae7af8a15de5a1344efb9ee3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:ee:2e:02:68:6c:2f:08:e9:93:a3:72:e9: 95:74:42:25:ab:32:5d:55:92:33:fb:32:7c:f2:01: f4:52:3b:27:db:07:61:c4:4c:4c:06:68:56:d3:ce: 23:b7:95:da:96:33:01:aa:de:de:86:97:7d:87:73: ce:69:17:73:27:ab:a3:fc:87:5f:c7:87:cb:37:e2: bd:e6:ab:2d:b1:42:8b:24:3a:11:61:37:db:61:74: 46:33:41:0c:0b:91:77:ee:08:20:1e:23:41:28:cc: 92:3d:c1:0a:3c:7b:03:8d:7e:c7:8c:67:19:8d:06: 2a:13:c6:12:10:52:93:f2:8c:5d:56:6b:7a:d2:8e: 88:95:09:59:8b:6d:16:d5:58:23:16:ab:86:4c:a2: 44:08:b0:fc:fe:66:22:b1:95:a0:ff:c2:f7:00:71: ce:0f:3c:8e:a6:e7:f1:ef:f0:a7:9b:94:9a:db:74: 39:05:41:63:5c:3a:b6:a2:9b:64:ac:0e:85:04:02: 74:a8:d5:8b:20:52:86:9c:41:a3:83:26:da:12:54: 0a:ae:4c:45:1e:69:cf:1a:86:d3:22:42:bb:47:24: 0d:25:81:42:0e:0c:07:2b:4a:ff:b4:6a:43:01:26: 7c:62:5b:32:8f:ae:0d:03:dc:13:60:7b:14:63:60: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5C:97:81:5C:98:A7:9A:E7:AF:8A:15:DE:5A:13:44:EF:B9:EE:3D X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/rVyXgVyYp5rnr4oV3loTRO-57j0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.68.0/22 193.138.152.0/22 IPv6: 2a07:bc0::/29 Signature Algorithm: sha256WithRSAEncryption 3f:1d:fb:70:dd:92:c2:4f:d3:87:28:92:66:91:1d:99:e0:5f: 87:05:61:ca:2f:22:7a:61:26:19:3b:77:69:a1:e3:3d:f6:f5: 1e:c6:82:44:e8:20:0b:3d:7c:73:f4:9d:45:ee:6b:4d:87:74: 45:0c:52:64:d2:ee:61:55:e6:8b:6e:da:d6:78:fc:5d:68:d0: fc:53:45:1b:34:92:99:1b:6f:2a:0d:d7:97:0b:9c:57:2e:71: 13:0e:c3:a0:12:61:17:a9:8b:55:64:ac:76:a7:ee:ca:fd:0e: 31:81:24:31:bb:96:2f:57:33:1a:d9:95:f9:a4:a2:a2:1f:30: e1:72:27:ac:6d:27:f1:02:39:7b:48:a2:eb:82:8d:5d:2c:5a: ec:ee:5c:5b:92:4c:94:5e:2e:f1:df:74:60:9f:15:14:58:9a: bf:be:61:19:c4:26:89:19:cc:9f:7d:38:4f:40:92:dc:08:63: d1:d0:89:0b:99:87:c7:0d:c9:a9:24:1b:9f:b2:25:5e:01:1c: f0:d3:57:51:2d:44:09:9f:b8:f4:be:14:15:5f:9e:b0:3a:13: ef:6a:12:fc:de:d2:24:11:86:95:6e:8f:40:7c:34:c3:d9:61: b6:e4:5d:14:49:e5:37:d9:a1:73:ab:cd:be:d3:f9:36:d3:ee: 76:12:20:80 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fkFfx6MghX+iLcp27308MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDVjOTc4MTVjOThhNzlhZTdhZjhhMTVkZTVhMTM0NGVmYjllZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5HuLgJobC8I6ZOjcumVdEIlqzJd VZIz+zJ88gH0Ujsn2wdhxExMBmhW084jt5XaljMBqt7ehpd9h3POaRdzJ6uj/Idf x4fLN+K95qstsUKLJDoRYTfbYXRGM0EMC5F37gggHiNBKMySPcEKPHsDjX7HjGcZ jQYqE8YSEFKT8oxdVmt60o6IlQlZi20W1VgjFquGTKJECLD8/mYisZWg/8L3AHHO DzyOpufx7/Cnm5Sa23Q5BUFjXDq2optkrA6FBAJ0qNWLIFKGnEGjgybaElQKrkxF HmnPGobTIkK7RyQNJYFCDgwHK0r/tGpDASZ8Ylsyj64NA9wTYHsUY2BGxwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFK1cl4FcmKea56+KFd5aE0Tvue49MB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvclZ5WGdWeVlwNXJucjRvVjNsb1RSTy01N2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYpEAwQC wYqYMA0EAgACMAcDBQMqBwvAMA0GCSqGSIb3DQEBCwUAA4IBAQA/Hftw3ZLCT9OH KJJmkR2Z4F+HBWHKLyJ6YSYZO3dpoeM99vUexoJE6CALPXxz9J1F7mtNh3RFDFJk 0u5hVeaLbtrWePxdaND8U0UbNJKZG28qDdeXC5xXLnETDsOgEmEXqYtVZKx2p+7K /Q4xgSQxu5YvVzMa2ZX5pKKiHzDhciesbSfxAjl7SKLrgo1dLFrs7lxbkkyUXi7x 33RgnxUUWJq/vmEZxCaJGcyffThPQJLcCGPR0IkLmYfHDcmpJBufsiVeARzw01dR LUQJn7j0vhQVX56wOhPvahL83tIkEYaVbo9AfDTD2WG25F0USeU32aFzq82+0/k2 0+52EiCA -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:30 2026 by rpki-client