This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/yA5GH7gLA1HVBnxPLthwZlHoljY.roa File: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (raw, json) Hash identifier: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA= Subject key identifier: C8:0E:46:1F:B8:0B:03:51:D5:06:7C:4F:2E:D8:70:66:51:E8:96:36 Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da Certificate serial: 019B7BA4BB72BF0193F01944C3C9E2DB266F Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/yA5GH7gLA1HVBnxPLthwZlHoljY.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18434 IP address blocks: 185.41.232.0/24 maxlen: 24 185.41.233.0/24 maxlen: 24 185.41.234.0/24 maxlen: 24 185.41.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bb:72:bf:01:93:f0:19:44:c3:c9:e2:db:26:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c80e461fb80b0351d5067c4f2ed8706651e89636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:d4:45:47:5c:f7:d5:99:9d:6a:a9:2b:bd: ee:21:80:ba:46:0f:60:18:f5:ed:7a:0b:8a:80:08: 32:2b:64:3e:90:e4:e8:fa:ec:e7:fe:50:2f:11:d5: 2b:86:32:65:e4:82:2f:6b:a0:ff:47:42:54:52:73: 05:6a:a2:13:50:b8:4f:72:22:ea:06:5c:52:e1:79: 32:22:98:4f:57:3f:52:3d:22:51:5e:1a:dd:3e:23: 30:2f:4f:3e:7b:62:80:fd:93:86:04:ed:f2:d4:fb: fa:44:38:ae:6e:35:2a:b1:bc:05:30:85:ad:16:49: 43:11:a2:6b:e2:5a:9b:45:de:0e:df:cc:6c:59:5e: 68:7e:91:aa:ac:70:54:3e:4b:b0:9f:3f:d3:7c:d9: cc:1c:e1:1e:40:0d:e3:be:52:4c:57:e4:76:8a:44: e8:6a:1f:4c:e3:e4:42:5b:35:b4:49:d4:2f:27:2a: 78:f8:d6:f8:ca:71:58:8c:3f:78:14:dc:8f:bd:b5: cc:07:a9:65:9b:ba:22:e4:db:eb:18:cd:09:18:ef: 5f:fc:8f:89:4b:11:97:67:29:4c:e4:40:4f:0a:c4: cc:47:6c:73:de:9a:21:d6:5c:4d:95:df:d7:7e:a1: 97:d7:79:5c:89:04:38:9c:17:e4:ef:5b:da:40:30: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0E:46:1F:B8:0B:03:51:D5:06:7C:4F:2E:D8:70:66:51:E8:96:36 X509v3 Authority Key Identifier: keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/yA5GH7gLA1HVBnxPLthwZlHoljY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.232.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:9d:91:db:d8:7d:b3:e8:a7:14:ec:d1:93:2c:7c:65:67:f0: fa:2e:ca:38:d6:a7:5b:c4:af:da:49:45:69:cb:29:40:23:ec: 01:80:2f:40:ff:b3:14:21:6c:a1:31:06:9e:cc:1f:70:d0:89: d4:03:f6:f6:59:8e:e1:e4:d4:52:3f:c3:4c:80:5d:91:69:49: 7e:55:10:d4:7a:77:54:24:5d:3c:93:27:9e:e0:04:55:fa:f2: e4:e6:0c:6f:d8:b0:4d:de:09:57:7c:04:25:6a:51:bd:dd:d5: 96:63:28:fb:4e:f3:c4:07:3b:0f:bd:e3:ea:df:78:c5:1d:c7: 0a:e7:8e:ea:91:5b:34:32:f1:45:f3:a1:48:87:48:69:32:93: b7:a4:86:1c:94:23:2b:04:4d:fd:32:12:b9:22:be:30:9b:c2: 21:91:3c:b7:3a:cb:ca:48:b6:c4:6c:96:32:42:61:8c:93:4f: ff:fa:02:6f:2d:ba:bc:91:e8:05:68:d3:5e:7a:a1:f7:cd:42: dd:04:fe:1c:95:c4:ac:89:7c:f3:39:08:e6:43:39:1c:cc:b4: ba:9f:ba:45:92:60:1f:5f:59:82:87:74:f2:97:f5:3d:0d:55: 0a:f2:46:1c:5a:a5:f3:35:70:d6:d2:88:9c:f0:87:9e:7d:7b: 2b:79:3c:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pLtyvwGT8BlEw8ni2yZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi MWU5ZGEwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODBlNDYxZmI4MGIwMzUxZDUwNjdjNGYyZWQ4NzA2NjUxZTg5NjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBfURUdc99WZnWqpK73uIYC6Rg9g GPXteguKgAgyK2Q+kOTo+uzn/lAvEdUrhjJl5IIva6D/R0JUUnMFaqITULhPciLq BlxS4XkyIphPVz9SPSJRXhrdPiMwL08+e2KA/ZOGBO3y1Pv6RDiubjUqsbwFMIWt FklDEaJr4lqbRd4O38xsWV5ofpGqrHBUPkuwnz/TfNnMHOEeQA3jvlJMV+R2ikTo ah9M4+RCWzW0SdQvJyp4+Nb4ynFYjD94FNyPvbXMB6llm7oi5NvrGM0JGO9f/I+J SxGXZylM5EBPCsTMR2xz3poh1lxNld/XfqGX13lciQQ4nBfk71vaQDDhqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgORh+4CwNR1QZ8Ty7YcGZR6JY2MB8GA1UdIwQY MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt ZDhiZjUyMWIyNmIwLzEveUE1R0g3Z0xBMUhWQm54UEx0aHdabEhvbGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSnoMA0G CSqGSIb3DQEBCwUAA4IBAQAunZHb2H2z6KcU7NGTLHxlZ/D6Lso41qdbxK/aSUVp yylAI+wBgC9A/7MUIWyhMQaezB9w0InUA/b2WY7h5NRSP8NMgF2RaUl+VRDUendU JF08kyee4ARV+vLk5gxv2LBN3glXfAQlalG93dWWYyj7TvPEBzsPvePq33jFHccK 547qkVs0MvFF86FIh0hpMpO3pIYclCMrBE39MhK5Ir4wm8IhkTy3OsvKSLbEbJYy QmGMk0//+gJvLbq8kegFaNNeeqH3zULdBP4clcSsiXzzOQjmQzkczLS6n7pFkmAf X1mCh3Tyl/U9DVUK8kYcWqXzNXDW0oic8IeefXsreTyd -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:34 2026 by rpki-client