This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa File: y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa (raw, json) Hash identifier: K08tIX67yafvJ07B2O/CtxAn2jeh7RiwSsp1rC6qb3c= Subject key identifier: CB:E7:14:9A:CC:9D:D5:FD:8D:A9:AF:40:8C:57:FE:1E:B8:01:46:F6 Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Certificate serial: 019B76EBA0A17D89C85137E7D84E0FB7521E Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48520 IP address blocks: 185.114.184.0/22 maxlen: 22 185.114.184.0/24 maxlen: 24 185.114.185.0/24 maxlen: 24 185.114.186.0/24 maxlen: 24 185.114.187.0/24 maxlen: 24 2a06:7100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a0:a1:7d:89:c8:51:37:e7:d8:4e:0f:b7:52:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbe7149acc9dd5fd8da9af408c57fe1eb80146f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:0f:c2:7b:7f:74:de:9d:d3:d2:a2:64:77: 8f:9b:84:a6:f5:d1:6a:b7:fb:4b:cd:84:2a:9d:fd: 68:80:29:15:f8:a5:e2:1f:e2:4a:8f:4a:da:1f:7c: bd:dd:cf:ed:d7:ef:81:4f:b3:eb:e9:7a:9a:49:5f: 9b:39:3a:63:06:d4:ee:ac:d5:4e:ff:7e:3d:fd:bf: 47:e4:67:27:16:d1:dc:af:d8:8a:cf:5b:5d:ca:48: 59:93:97:3d:1d:09:94:8d:bc:b5:80:48:e4:18:e4: 6c:7c:06:5e:60:f7:4f:6c:fa:ca:9b:ae:a1:07:9b: 10:7e:e7:f9:58:26:c0:86:d6:dc:cd:7c:42:a2:92: af:26:c6:3e:c8:70:f1:a1:1b:53:90:af:d8:73:f8: 0d:e1:26:72:f1:49:b2:e2:e4:ff:ea:e8:02:ce:33: f8:50:4d:3a:14:55:74:d5:95:87:da:07:0c:79:21: ea:7d:d7:62:0f:5b:0b:5c:27:90:32:00:36:c3:54: e6:5a:95:87:dc:7a:30:a3:42:c4:05:99:ca:cb:a2: f5:1a:ed:36:c9:e8:22:3d:26:e4:5d:64:c8:67:9e: 05:2d:88:ea:4f:11:88:a5:1e:69:8b:37:a3:9c:b1: b5:49:fe:dd:0b:82:69:3a:f6:aa:62:54:af:b2:78: 0b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E7:14:9A:CC:9D:D5:FD:8D:A9:AF:40:8C:57:FE:1E:B8:01:46:F6 X509v3 Authority Key Identifier: keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.184.0/22 IPv6: 2a06:7100::/29 Signature Algorithm: sha256WithRSAEncryption 5d:63:be:4f:de:f6:79:a9:0e:e4:c9:b2:0c:37:d2:1b:7a:9f: 44:e3:1f:a6:10:fb:9d:12:8e:f8:f9:74:32:11:17:4b:1a:03: 05:91:cd:64:b6:4c:8d:d4:e0:c8:30:ad:d5:0b:3e:d9:91:75: 07:b0:80:0f:47:54:5c:e7:c7:0d:9d:1b:8f:90:03:13:b0:60: bb:76:a3:aa:6f:35:c4:dc:c2:20:0d:ec:80:a5:9d:d8:5c:fe: 34:6f:88:a7:5d:b1:b3:c2:15:92:81:0b:d2:91:36:67:df:0b: a2:7d:05:56:43:2b:d5:18:dd:91:5f:fe:1d:05:c8:a8:da:ce: f6:1c:3a:73:c0:56:b7:c9:15:9c:1f:57:e8:a2:95:ac:56:26: 6b:98:47:ec:1a:81:3c:92:c9:2f:be:aa:70:12:cd:86:72:e0: de:b3:b4:3b:01:c2:1a:08:32:51:6d:83:de:e3:d1:4f:b6:39: 4c:fc:5e:a6:09:11:c8:a1:a1:d3:76:2f:19:3c:17:a4:35:f1: 1c:e0:1c:01:ff:c0:12:fe:8e:16:f1:b2:6f:9a:6c:18:bf:5b: cd:3f:ad:15:99:06:7b:f7:95:63:20:c7:08:53:10:52:cc:76: 94:0d:64:da:63:a4:f3:66:64:67:30:93:6d:0a:2e:48:6b:c3: ca:e1:3b:49 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt266ChfYnIUTfn2E4Pt1IeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTU5NDRlODRkYzM3YmE2YTQyZDY4YmIxZTJiOWE0NDIx ZTg0YTQwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmU3MTQ5YWNjOWRkNWZkOGRhOWFmNDA4YzU3ZmUxZWI4MDE0NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XAPwnt/dN6d09KiZHePm4Sm9dFq t/tLzYQqnf1ogCkV+KXiH+JKj0raH3y93c/t1++BT7Pr6XqaSV+bOTpjBtTurNVO /349/b9H5GcnFtHcr9iKz1tdykhZk5c9HQmUjby1gEjkGORsfAZeYPdPbPrKm66h B5sQfuf5WCbAhtbczXxCopKvJsY+yHDxoRtTkK/Yc/gN4SZy8Umy4uT/6ugCzjP4 UE06FFV01ZWH2gcMeSHqfddiD1sLXCeQMgA2w1TmWpWH3Howo0LEBZnKy6L1Gu02 yegiPSbkXWTIZ54FLYjqTxGIpR5pizejnLG1Sf7dC4JpOvaqYlSvsngLpwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMvnFJrMndX9jamvQIxX/h64AUb2MB8GA1UdIwQY MBaAFCmVlE6E3De6akLWi7HiuaRCHoSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmIt MzM4YmRkNDM5ZWUxLzEveS1jVW1zeWQxZjJOcWE5QWpGZi1IcmdCUnZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmItMzM4YmRkNDM5ZWUx LzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXK4MA0E AgACMAcDBQMqBnEAMA0GCSqGSIb3DQEBCwUAA4IBAQBdY75P3vZ5qQ7kybIMN9Ib ep9E4x+mEPudEo74+XQyERdLGgMFkc1ktkyN1ODIMK3VCz7ZkXUHsIAPR1Rc58cN nRuPkAMTsGC7dqOqbzXE3MIgDeyApZ3YXP40b4inXbGzwhWSgQvSkTZn3wuifQVW QyvVGN2RX/4dBcio2s72HDpzwFa3yRWcH1foopWsViZrmEfsGoE8kskvvqpwEs2G cuDes7Q7AcIaCDJRbYPe49FPtjlM/F6mCRHIoaHTdi8ZPBekNfEc4BwB/8AS/o4W 8bJvmmwYv1vNP60VmQZ795VjIMcIUxBSzHaUDWTaY6TzZmRnMJNtCi5Ia8PK4TtJ -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:44 2026 by rpki-client