This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/Py-y3i4hM_niS2FAlbK-g-CG53U.roa File: Py-y3i4hM_niS2FAlbK-g-CG53U.roa (raw, json) Hash identifier: XmwAKXCN1UVsid2Ow64xLKVGJOuuu5RfqZ+9WMGZctw= Subject key identifier: 3F:2F:B2:DE:2E:21:33:F9:E2:4B:61:40:95:B2:BE:83:E0:86:E7:75 Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf Certificate serial: 019B7B3662E08AB310A1EA9396E986755863 Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/Py-y3i4hM_niS2FAlbK-g-CG53U.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25540 IP address blocks: 185.85.233.0/24 maxlen: 24 185.85.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:62:e0:8a:b3:10:a1:ea:93:96:e9:86:75:58:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f2fb2de2e2133f9e24b614095b2be83e086e775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:f9:e1:db:59:cc:09:ea:9e:f5:b1:ee:3a: de:13:c5:a2:e2:5e:d3:ab:6c:c2:89:a6:16:eb:cf: 3f:cc:b5:38:fc:a1:8d:40:e0:96:17:d2:8a:a4:55: 9d:22:bf:65:91:5a:e4:51:f4:00:35:12:61:30:42: d9:df:11:25:99:ef:d0:83:6f:9b:1c:51:7e:0d:24: 40:63:4d:e6:e6:6f:b5:4c:f0:36:9e:14:2d:82:8d: 21:a0:d0:5a:86:fb:e5:80:cb:12:76:30:f7:c2:f0: 3e:42:f9:ce:d6:51:13:e9:8d:36:8a:a2:77:44:b5: a9:65:7d:e0:02:bd:63:62:96:3b:0e:dd:95:44:03: d4:a9:6a:fd:4d:b9:aa:9a:c1:71:53:21:93:f1:79: 91:05:d4:62:d6:9f:9e:4d:7b:58:ee:c7:54:ec:69: 11:61:9b:a2:c9:57:e2:c8:69:99:44:e5:3f:a0:41: ed:02:e5:57:9b:68:1f:c7:ab:5e:35:08:26:db:7d: 2e:ee:21:20:c4:0e:b1:bc:ed:f2:b5:5b:0c:20:dd: 47:e3:c1:6a:b2:cf:79:ce:09:8b:c1:73:6b:06:51: 49:56:bf:bf:88:b6:fe:af:61:16:b7:b7:6d:8a:a0: f9:85:ae:17:a5:22:78:20:5e:04:e9:ef:eb:e9:1a: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2F:B2:DE:2E:21:33:F9:E2:4B:61:40:95:B2:BE:83:E0:86:E7:75 X509v3 Authority Key Identifier: keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/Py-y3i4hM_niS2FAlbK-g-CG53U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.233.0/24 185.85.235.0/24 Signature Algorithm: sha256WithRSAEncryption 06:48:45:85:9d:ee:1b:44:7d:da:c7:b8:31:54:5e:41:07:5d: 96:d8:cb:90:53:1b:1c:db:a0:4b:ea:7f:2d:74:e5:d1:e4:82: e4:65:0b:ee:a5:59:71:12:ee:84:ce:6b:be:9b:82:f3:42:a9: ff:96:d2:3b:86:a8:57:66:4a:46:f8:05:e3:10:49:a6:77:46: db:73:37:5c:dd:e9:62:51:b7:06:a0:8f:77:f4:a1:3e:21:92: ad:1f:d0:ee:67:fc:65:d2:4f:64:c8:8c:6c:76:e0:e0:2d:b8: be:e8:2d:43:4c:63:fd:61:f8:74:61:12:b9:59:bf:be:79:e7: a3:d2:65:47:f6:6f:e8:73:6d:23:42:09:ee:c3:2a:53:30:78: e9:fe:45:b6:aa:47:83:c5:ab:26:82:ea:00:bb:6a:66:40:ef: 54:bb:97:34:15:2f:2f:89:2c:59:41:b5:16:8c:d7:62:4f:93: cf:7b:bd:45:44:0c:4f:c5:72:95:53:94:c6:25:ad:d8:cf:81: 4d:02:df:4f:bb:b5:90:a5:ca:2a:33:bc:44:8e:59:85:9c:06: ac:19:97:42:64:03:23:bf:1d:8f:ba:c6:7e:c4:15:ec:7b:08: 78:48:5c:e8:52:29:d2:30:18:5c:d3:b8:d2:a3:5f:17:39:e6: 37:9c:2b:9d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NmLgirMQoeqTlumGdVhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4 OTZkYmYwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjJmYjJkZTJlMjEzM2Y5ZTI0YjYxNDA5NWIyYmU4M2UwODZlNzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2754dtZzAnqnvWx7jreE8Wi4l7T q2zCiaYW688/zLU4/KGNQOCWF9KKpFWdIr9lkVrkUfQANRJhMELZ3xElme/Qg2+b HFF+DSRAY03m5m+1TPA2nhQtgo0hoNBahvvlgMsSdjD3wvA+QvnO1lET6Y02iqJ3 RLWpZX3gAr1jYpY7Dt2VRAPUqWr9TbmqmsFxUyGT8XmRBdRi1p+eTXtY7sdU7GkR YZuiyVfiyGmZROU/oEHtAuVXm2gfx6teNQgm230u7iEgxA6xvO3ytVsMIN1H48Fq ss95zgmLwXNrBlFJVr+/iLb+r2EWt7dtiqD5ha4XpSJ4IF4E6e/r6RrakQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD8vst4uITP54kthQJWyvoPghud1MB8GA1UdIwQY MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt NzUzZDk2OWEwNzAyLzEvUHkteTNpNGhNX25pUzJGQWxiSy1nLUNHNTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVXpAwQA uVXrMA0GCSqGSIb3DQEBCwUAA4IBAQAGSEWFne4bRH3ax7gxVF5BB12W2MuQUxsc 26BL6n8tdOXR5ILkZQvupVlxEu6Ezmu+m4LzQqn/ltI7hqhXZkpG+AXjEEmmd0bb czdc3eliUbcGoI939KE+IZKtH9DuZ/xl0k9kyIxsduDgLbi+6C1DTGP9Yfh0YRK5 Wb++eeej0mVH9m/oc20jQgnuwypTMHjp/kW2qkeDxasmguoAu2pmQO9Uu5c0FS8v iSxZQbUWjNdiT5PPe71FRAxPxXKVU5TGJa3Yz4FNAt9Pu7WQpcoqM7xEjlmFnAas GZdCZAMjvx2PusZ+xBXsewh4SFzoUinSMBhc07jSo18XOeY3nCud -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:05 2026 by rpki-client