This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/v_XHykEwak2dkypOZlkKnIcvHjg.roa File: v_XHykEwak2dkypOZlkKnIcvHjg.roa (raw, json) Hash identifier: wPesZRFwPi25Hxkj8zNeoC1Q7PscctJb/ypci5kVAc0= Subject key identifier: BF:F5:C7:CA:41:30:6A:4D:9D:93:2A:4E:66:59:0A:9C:87:2F:1E:38 Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140 Certificate serial: 019B7F1477596484F611B6667BE4011EA2B8 Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/v_XHykEwak2dkypOZlkKnIcvHjg.roa Signing time: Fri 02 Jan 2026 14:20:06 +0000 ROA not before: Fri 02 Jan 2026 14:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200845 IP address blocks: 85.208.16.0/22 maxlen: 24 185.233.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:77:59:64:84:f6:11:b6:66:7b:e4:01:1e:a2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140 Validity Not Before: Jan 2 14:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bff5c7ca41306a4d9d932a4e66590a9c872f1e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:8c:f1:d5:d8:69:3e:84:df:ce:84:90:bc: 96:13:01:8b:f9:cb:c6:e5:9b:0d:78:e4:fe:0a:84: 7f:42:31:e3:81:a2:94:28:78:fb:16:0a:02:33:87: ef:fd:c2:3c:50:6e:f6:d6:c6:20:7a:56:7e:a1:47: d5:6e:8f:5a:f0:4d:37:03:4d:94:c2:80:5c:2d:f7: e8:90:aa:0a:13:a3:65:63:08:89:ad:4f:3c:e2:c1: b1:a6:cd:15:dd:26:aa:16:e9:08:41:5c:2c:8a:a6: c6:4a:c9:16:31:d0:b3:14:ca:29:42:ae:dc:73:23: 49:bb:bf:63:9b:34:ae:95:32:36:3d:71:74:9f:c5: 21:b8:9e:2a:d7:b7:37:77:9d:59:d3:40:78:63:54: 0c:24:14:b7:cc:db:5d:21:29:9a:54:66:92:15:b8: ff:36:52:79:45:02:1c:60:b4:4e:fb:4f:32:24:50: 59:ec:4b:d5:52:2e:fe:36:74:2d:09:1f:23:89:62: ec:6f:b7:bf:56:35:cc:fc:92:68:1e:e2:b4:40:1c: 6f:49:60:10:0f:82:0a:42:57:b3:86:2f:b0:b9:0a: 2a:99:5f:e7:54:97:29:42:da:28:7a:27:de:cb:0c: 4a:cc:86:97:85:5a:ab:b0:33:37:73:76:97:15:f4: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F5:C7:CA:41:30:6A:4D:9D:93:2A:4E:66:59:0A:9C:87:2F:1E:38 X509v3 Authority Key Identifier: keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/v_XHykEwak2dkypOZlkKnIcvHjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.16.0/22 185.233.234.0/23 Signature Algorithm: sha256WithRSAEncryption 18:fe:5e:14:ea:30:8d:fb:87:fc:58:bc:61:0a:aa:19:ad:b9: 2e:44:f0:e9:02:50:5b:ae:92:df:0a:f8:47:15:bc:a2:8e:29: c2:13:27:76:82:78:54:b7:4f:91:ac:8b:04:1d:3d:a1:37:3a: 61:40:e1:2f:70:e1:95:67:c7:77:94:e6:a2:b2:41:4e:ad:e1: 8a:ba:d2:22:9f:11:53:22:97:1a:b5:e8:c5:9f:1e:16:bb:5c: 92:09:67:8c:45:40:b2:94:0c:0b:2f:1e:bd:c9:e4:03:a6:24: 45:3a:b6:06:3d:42:bf:8f:a3:2c:a2:10:79:7c:a7:4c:05:e7: e0:af:1b:de:eb:39:69:8e:57:9b:26:1a:37:56:95:a5:7e:aa: 25:58:86:f9:28:9d:a7:a2:68:3e:8f:4d:2b:c9:17:96:d7:ce: 43:50:b3:9f:41:c0:07:56:17:01:ea:6e:8b:45:7d:cf:32:f6: e6:90:39:1d:07:38:f3:6e:78:5f:14:34:25:25:8a:47:06:2c: 4d:11:56:7d:23:af:7d:81:46:2c:82:02:91:dc:0a:36:9c:84: 3e:2b:8f:12:b4:3e:05:b4:47:27:c8:0c:cc:72:a4:50:4e:cd: 3a:7a:cf:54:1d:38:c9:a3:5d:7a:dd:0f:38:cd:b7:cf:12:59: 5b:6a:57:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FHdZZIT2EbZme+QBHqK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MzVhODI5NWEzMGQ3ZGZjYWMyYTU3MGI4ZGVjYjI1YzQ2 NTIxNDAwHhcNMjYwMTAyMTQyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmY1YzdjYTQxMzA2YTRkOWQ5MzJhNGU2NjU5MGE5Yzg3MmYxZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7KM8dXYaT6E386EkLyWEwGL+cvG 5ZsNeOT+CoR/QjHjgaKUKHj7FgoCM4fv/cI8UG721sYgelZ+oUfVbo9a8E03A02U woBcLffokKoKE6NlYwiJrU884sGxps0V3SaqFukIQVwsiqbGSskWMdCzFMopQq7c cyNJu79jmzSulTI2PXF0n8UhuJ4q17c3d51Z00B4Y1QMJBS3zNtdISmaVGaSFbj/ NlJ5RQIcYLRO+08yJFBZ7EvVUi7+NnQtCR8jiWLsb7e/VjXM/JJoHuK0QBxvSWAQ D4IKQlezhi+wuQoqmV/nVJcpQtooeifeywxKzIaXhVqrsDM3c3aXFfQ58QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL/1x8pBMGpNnZMqTmZZCpyHLx44MB8GA1UdIwQY MBaAFGc1qClaMNffysKlcLjeyyXEZSFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMt MThlMThkNjU5ZDhmLzEvdl9YSHlrRXdhazJka3lwT1psa0tuSWN2SGpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMtMThlMThkNjU5ZDhm LzEvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVdAQAwQB uenqMA0GCSqGSIb3DQEBCwUAA4IBAQAY/l4U6jCN+4f8WLxhCqoZrbkuRPDpAlBb rpLfCvhHFbyijinCEyd2gnhUt0+RrIsEHT2hNzphQOEvcOGVZ8d3lOaiskFOreGK utIinxFTIpcatejFnx4Wu1ySCWeMRUCylAwLLx69yeQDpiRFOrYGPUK/j6MsohB5 fKdMBefgrxve6zlpjlebJho3VpWlfqolWIb5KJ2nomg+j00ryReW185DULOfQcAH VhcB6m6LRX3PMvbmkDkdBzjzbnhfFDQlJYpHBixNEVZ9I699gUYsggKR3Ao2nIQ+ K48StD4FtEcnyAzMcqRQTs06es9UHTjJo1163Q84zbfPEllbaldf -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:58 2026 by rpki-client