This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/REMby4Ya31OA35rY4teZSHIa0ew.roa File: REMby4Ya31OA35rY4teZSHIa0ew.roa (raw, json) Hash identifier: XyeGvAoenWA3MJIYVq931n9fMFmepWjFnS5c3uEtCFE= Subject key identifier: 44:43:1B:CB:86:1A:DF:53:80:DF:9A:D8:E2:D7:99:48:72:1A:D1:EC Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7 Certificate serial: 019B78A35CE66276270804ED14F721A498EE Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/REMby4Ya31OA35rY4teZSHIa0ew.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198352 IP address blocks: 185.184.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5c:e6:62:76:27:08:04:ed:14:f7:21:a4:98:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44431bcb861adf5380df9ad8e2d79948721ad1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:8b:a8:c3:52:03:ab:5a:6c:68:36:8a:f5: 61:c4:2c:f7:29:38:cc:ee:bd:56:6d:51:73:c6:33: e5:d2:e0:19:9e:74:0d:2f:97:26:31:44:db:1a:84: e9:bb:80:76:94:06:e7:34:90:ab:b4:0e:22:21:9d: 36:a6:85:55:60:f0:9c:17:52:21:07:2c:e6:cb:27: bc:96:3a:e8:1c:de:6c:c0:f9:12:41:fa:8c:a8:69: 21:8c:4d:47:ed:85:d4:f0:56:2e:ef:1a:14:34:a2: be:93:13:d0:6d:5c:03:88:8e:e1:ba:bf:1d:34:c0: 5b:96:85:7d:c7:c6:c3:81:11:71:a5:b7:64:8a:af: 0a:f4:84:ff:e9:ea:b7:c7:8b:70:75:be:60:de:82: 52:71:66:1e:c2:1b:68:f9:bd:19:db:0d:a8:ec:ab: 26:cd:0b:bf:a3:6e:73:b2:d6:4e:71:46:28:4b:8d: 84:6d:0e:d8:5a:80:0c:b1:f6:89:73:8f:3b:e6:91: c6:f5:02:cb:c2:5a:1a:57:81:82:d2:a6:ab:f8:51: 92:fa:84:8c:82:88:b5:7e:db:1d:7a:87:e1:62:ff: 3e:9c:5e:04:57:30:5f:cb:7a:96:e7:b1:ea:67:91: 4f:20:28:a1:d3:c3:48:74:3f:43:57:67:cb:3d:48: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:43:1B:CB:86:1A:DF:53:80:DF:9A:D8:E2:D7:99:48:72:1A:D1:EC X509v3 Authority Key Identifier: keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/REMby4Ya31OA35rY4teZSHIa0ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.108.0/22 Signature Algorithm: sha256WithRSAEncryption 46:bc:30:7c:c2:27:1b:c7:f4:8b:ed:dd:d4:79:24:08:8f:36: de:43:97:d5:3e:ae:00:f3:67:11:e8:2e:7e:16:b5:58:77:11: fa:b8:39:17:b9:b1:4f:ec:28:e4:44:9e:ef:9b:5d:62:dc:f5: 6b:69:e1:7f:63:f9:7a:7e:46:b2:1c:57:f1:9b:5e:43:d6:87: b9:f7:8b:62:3d:21:47:c8:63:65:92:03:ca:97:1d:36:8f:0e: 07:9c:fc:e1:cd:79:ca:5f:32:bc:e7:8b:71:b0:91:f3:a6:89: cf:e9:0c:5c:9e:8f:b9:57:8a:71:33:ff:4a:17:85:96:2f:40: de:fa:fc:4f:aa:fe:d8:f8:26:b1:02:68:75:e3:28:e4:36:3c: 2b:c6:c1:1e:d9:13:3e:da:65:31:27:f3:7f:de:a0:49:48:3e: e9:5b:c6:1b:6b:71:02:ac:33:0f:ec:b3:86:9f:54:c6:c0:e2: 90:79:69:11:6b:40:a3:21:93:85:a4:e4:4b:ab:b3:3e:b8:73: 54:d4:4e:e1:f9:98:bf:77:f4:c5:98:4b:5f:fb:93:2e:4c:79: bd:b6:ff:ee:4c:11:f6:b3:6b:00:2e:c8:b0:8b:0e:8b:39:e5: f1:d5:87:53:c6:a2:81:dc:a5:24:f1:c0:02:42:2e:7e:bd:39: b7:d7:b6:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1zmYnYnCATtFPchpJjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NzI4ZTliZDM3Mzk5ZGY5ZmZhZTU4N2JkMDY4ODRiMzUw YTY1YjcwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDQzMWJjYjg2MWFkZjUzODBkZjlhZDhlMmQ3OTk0ODcyMWFkMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd6LqMNSA6tabGg2ivVhxCz3KTjM 7r1WbVFzxjPl0uAZnnQNL5cmMUTbGoTpu4B2lAbnNJCrtA4iIZ02poVVYPCcF1Ih Byzmyye8ljroHN5swPkSQfqMqGkhjE1H7YXU8FYu7xoUNKK+kxPQbVwDiI7hur8d NMBbloV9x8bDgRFxpbdkiq8K9IT/6eq3x4twdb5g3oJScWYewhto+b0Z2w2o7Ksm zQu/o25zstZOcUYoS42EbQ7YWoAMsfaJc4875pHG9QLLwloaV4GC0qar+FGS+oSM goi1ftsdeofhYv8+nF4EVzBfy3qW57HqZ5FPICih08NIdD9DV2fLPUi79wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFERDG8uGGt9TgN+a2OLXmUhyGtHsMB8GA1UdIwQY MBaAFDhyjpvTc5nfn/rlh70GiEs1CmW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzIt ZjhjZmEzM2Q2ODRlLzEvUkVNYnk0WWEzMU9BMzVyWTR0ZVpTSElhMGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzItZjhjZmEzM2Q2ODRl LzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubhsMA0G CSqGSIb3DQEBCwUAA4IBAQBGvDB8wicbx/SL7d3UeSQIjzbeQ5fVPq4A82cR6C5+ FrVYdxH6uDkXubFP7CjkRJ7vm11i3PVraeF/Y/l6fkayHFfxm15D1oe594tiPSFH yGNlkgPKlx02jw4HnPzhzXnKXzK854txsJHzponP6Qxcno+5V4pxM/9KF4WWL0De +vxPqv7Y+CaxAmh14yjkNjwrxsEe2RM+2mUxJ/N/3qBJSD7pW8Yba3ECrDMP7LOG n1TGwOKQeWkRa0CjIZOFpORLq7M+uHNU1E7h+Zi/d/TFmEtf+5MuTHm9tv/uTBH2 s2sALsiwiw6LOeXx1YdTxqKB3KUk8cACQi5+vTm317aa -----END CERTIFICATE-----Generated at Mon Jan 26 09:42:36 2026 by rpki-client