This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/1y38PR10Vv3q34i9joY2RmqK9ws.roa File: 1y38PR10Vv3q34i9joY2RmqK9ws.roa (raw, json) Hash identifier: WeX7D0CbRCituwqc2ZHAm4HR95Ee3JW1/xIonHquU3w= Subject key identifier: D7:2D:FC:3D:1D:74:56:FD:EA:DF:88:BD:8E:86:36:46:6A:8A:F7:0B Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf Certificate serial: 019B7B36639EDF106D3E29910D955D4744AD Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/1y38PR10Vv3q34i9joY2RmqK9ws.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34863 IP address blocks: 185.85.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:63:9e:df:10:6d:3e:29:91:0d:95:5d:47:44:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d72dfc3d1d7456fdeadf88bd8e8636466a8af70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:3b:1f:a1:ae:ef:b5:5f:3f:d3:71:1e:50: 26:a6:cb:75:1c:aa:16:59:f6:bb:75:5f:cd:16:cb: 2f:cf:85:2d:0c:a2:74:2e:7f:25:9e:10:0a:fc:1b: 18:ad:a9:c5:c3:ae:ff:e8:ab:d7:bf:39:87:c3:45: 0a:f6:0e:bb:74:23:2f:19:60:84:77:aa:6f:fd:b8: c5:a1:78:59:c0:50:33:64:77:90:de:1e:0c:61:d4: 64:8a:77:00:b4:7c:f9:6c:dd:a7:41:db:28:63:f9: 40:bd:a9:08:93:13:13:dc:75:d0:5e:31:4b:ac:f1: 4e:b9:b1:0a:51:36:d4:5b:f3:5b:df:27:3b:5d:d2: 8e:91:2a:9e:33:4f:1e:5e:f5:83:62:c6:0a:e8:9c: 18:4a:31:2b:9f:bd:b5:ad:cf:06:43:29:08:0f:2e: af:3a:0c:b0:0f:d0:0a:7a:e1:bc:5d:f3:8a:a8:5d: 08:91:1f:e2:15:c9:b1:b2:6f:4b:3e:04:e7:84:46: 7f:25:62:72:4f:74:3e:83:fe:4f:5d:d7:51:cc:e7: ff:ac:2f:cd:b5:73:7e:0f:fc:32:4d:b0:b0:35:eb: 8b:82:86:55:15:9a:8c:d1:50:53:1a:e9:9e:2e:32: 04:41:a3:a0:2c:9f:01:cb:83:bd:29:1e:79:a6:f6: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2D:FC:3D:1D:74:56:FD:EA:DF:88:BD:8E:86:36:46:6A:8A:F7:0B X509v3 Authority Key Identifier: keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/1y38PR10Vv3q34i9joY2RmqK9ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.232.0/22 Signature Algorithm: sha256WithRSAEncryption 38:2f:4b:db:58:32:b6:cb:74:97:cb:82:ca:d3:32:7b:0b:15: 5f:ae:96:a5:57:4e:53:82:e6:89:3b:1f:c3:a1:91:26:71:5b: 68:41:53:2a:2f:87:68:6f:04:16:5e:0f:f2:95:f9:70:9f:7f: e4:77:bb:c6:f8:db:6a:f6:f2:b7:a6:ea:f0:9f:95:fd:50:cc: d5:dc:d5:7b:54:11:4c:20:d5:4d:d6:2b:8b:7f:b4:88:5f:39: 76:d1:c6:3e:e1:88:64:8c:4d:6e:98:93:c7:72:92:47:67:7b: cb:c4:3a:55:65:16:b9:5b:7a:0b:16:f7:10:0f:87:97:d8:b2: 00:e7:3e:1e:87:1e:a1:a1:5a:33:87:e2:9c:da:52:80:91:84: b7:3f:69:43:bb:a1:2e:3b:10:ef:fe:aa:02:33:4d:d6:ce:2b: 6d:a1:aa:6b:c4:fe:07:eb:86:3e:10:54:46:73:07:dd:3d:96: 4f:e5:56:d7:b9:66:b2:55:18:9c:2d:ba:bc:d0:a7:94:1b:03: 03:b4:dc:5b:f5:7d:24:15:b7:89:e8:0f:c5:3a:dd:0c:cc:bb: cc:6c:8d:c2:3e:ce:0b:d9:2b:bf:3a:2d:aa:e6:8c:39:19:e3: 1c:e4:65:0c:37:24:59:ad:7e:fa:c3:84:e5:e1:f5:c8:87:dd: 67:8f:72:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NmOe3xBtPimRDZVdR0StMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4 OTZkYmYwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzJkZmMzZDFkNzQ1NmZkZWFkZjg4YmQ4ZTg2MzY0NjZhOGFmNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMA7H6Gu77VfP9NxHlAmpst1HKoW Wfa7dV/NFssvz4UtDKJ0Ln8lnhAK/BsYranFw67/6KvXvzmHw0UK9g67dCMvGWCE d6pv/bjFoXhZwFAzZHeQ3h4MYdRkincAtHz5bN2nQdsoY/lAvakIkxMT3HXQXjFL rPFOubEKUTbUW/Nb3yc7XdKOkSqeM08eXvWDYsYK6JwYSjErn721rc8GQykIDy6v OgywD9AKeuG8XfOKqF0IkR/iFcmxsm9LPgTnhEZ/JWJyT3Q+g/5PXddRzOf/rC/N tXN+D/wyTbCwNeuLgoZVFZqM0VBTGumeLjIEQaOgLJ8By4O9KR55pvb+fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNct/D0ddFb96t+IvY6GNkZqivcLMB8GA1UdIwQY MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt NzUzZDk2OWEwNzAyLzEvMXkzOFBSMTBWdjNxMzRpOWpvWTJSbXFLOXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVXoMA0G CSqGSIb3DQEBCwUAA4IBAQA4L0vbWDK2y3SXy4LK0zJ7CxVfrpalV05TguaJOx/D oZEmcVtoQVMqL4dobwQWXg/ylflwn3/kd7vG+Ntq9vK3purwn5X9UMzV3NV7VBFM INVN1iuLf7SIXzl20cY+4YhkjE1umJPHcpJHZ3vLxDpVZRa5W3oLFvcQD4eX2LIA 5z4ehx6hoVozh+Kc2lKAkYS3P2lDu6EuOxDv/qoCM03WzittoaprxP4H64Y+EFRG cwfdPZZP5VbXuWayVRicLbq80KeUGwMDtNxb9X0kFbeJ6A/FOt0MzLvMbI3CPs4L 2Su/Oi2q5ow5GeMc5GUMNyRZrX76w4Tl4fXIh91nj3L7 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:49 2026 by rpki-client