This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/YZnN_D9K8I6oAKeftWU-F1SrfFA.roa File: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (raw, json) Hash identifier: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo= Subject key identifier: 61:99:CD:FC:3F:4A:F0:8E:A8:00:A7:9F:B5:65:3E:17:54:AB:7C:50 Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Certificate serial: 019B76EB1B76B05F4681E68F6857B2ABC84E Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/YZnN_D9K8I6oAKeftWU-F1SrfFA.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20559 IP address blocks: 185.157.145.0/24 maxlen: 24 185.202.253.0/24 maxlen: 24 185.202.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1b:76:b0:5f:46:81:e6:8f:68:57:b2:ab:c8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6199cdfc3f4af08ea800a79fb5653e1754ab7c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e6:1b:96:67:d6:32:c0:6c:db:cb:05:65:d1: fc:6d:7b:e9:31:06:6b:32:f4:bb:58:4c:67:58:a5: 4a:b9:e1:32:c7:96:49:18:6d:10:10:d6:41:e1:97: e4:80:64:4e:ca:15:bf:3f:99:eb:5d:4a:6b:65:66: 52:0d:16:18:02:83:d2:ba:73:32:be:71:56:c6:99: fd:18:a4:c6:c2:28:07:36:01:d8:34:28:9d:bf:68: da:32:37:b6:4c:c6:40:f6:14:a6:0f:7b:c0:e7:9b: 41:89:87:6f:69:c5:20:2e:32:6d:ef:1f:87:39:0f: d2:4e:ad:42:1b:a5:7a:e0:7d:5d:54:f8:c8:74:bd: f0:6d:0c:2b:d8:40:f3:09:87:90:cc:8a:da:8f:55: fb:22:ea:f9:5e:90:9f:dc:d3:b8:41:9e:3a:8f:79: 78:cf:a1:d2:9f:b2:89:51:76:aa:b8:eb:0f:b5:98: 44:84:db:91:bf:65:74:06:dc:7a:e2:1b:7b:f2:71: 49:ae:12:df:f4:73:2a:78:64:fa:97:e5:c4:6d:81: 96:23:b3:32:b6:b7:65:02:da:24:3b:5c:6e:7a:05: 87:66:9d:ec:06:11:40:17:d0:f2:43:a5:5e:e7:f0: ca:21:28:09:a0:1c:8d:ca:be:76:a3:3c:a1:9b:0a: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:CD:FC:3F:4A:F0:8E:A8:00:A7:9F:B5:65:3E:17:54:AB:7C:50 X509v3 Authority Key Identifier: keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/YZnN_D9K8I6oAKeftWU-F1SrfFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.145.0/24 185.202.253.0-185.202.254.255 Signature Algorithm: sha256WithRSAEncryption 39:51:7d:23:d6:e5:8f:b6:b8:f2:e3:76:38:1e:21:f2:95:1c: dc:2c:38:9b:a5:ca:53:f6:d9:2a:e2:d0:38:88:df:87:95:64: 02:bf:52:c6:ab:24:ae:6c:cb:be:40:5b:9b:0c:07:d1:ae:d1: dd:68:45:1d:c3:c7:7e:8b:e7:03:ac:f7:d6:6d:0d:16:d8:f2: a1:1e:b4:fe:7d:02:cd:e8:b7:c3:04:af:7b:2e:57:cb:2f:07: bf:fc:ba:2d:88:31:69:ea:40:8b:16:3d:b9:43:07:5f:76:0e: 93:63:b8:f9:49:30:e8:86:7e:8c:ce:fd:cd:f7:e0:ce:1e:9b: 58:61:b2:32:d9:2b:4a:09:57:c1:b9:59:bc:08:b7:e0:1e:69: 2e:ca:56:fe:10:c4:d9:61:10:ab:e7:63:b1:cc:f6:e0:3d:33: 2f:a8:9f:20:91:b6:2c:43:4c:7a:00:11:23:d6:d5:02:4e:1a: ed:5b:01:eb:56:3d:ea:f0:78:f5:b1:52:93:d2:01:02:6a:e4: 2b:4b:32:52:c9:ea:c1:1a:cd:b0:f5:97:5c:97:e5:ad:c6:23: aa:27:8f:19:a7:e2:91:30:f6:99:97:09:79:09:c3:14:45:a1: 4a:ce:a4:76:95:3b:06:54:76:8d:6b:83:49:85:69:1f:7b:08: 66:8f:cb:6c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt26xt2sF9GgeaPaFeyq8hOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjBmMDdjYTBhNmI0Y2IyYzE1OWU5MDQ1OTc0NTAzYWUy ODg1ODEwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTk5Y2RmYzNmNGFmMDhlYTgwMGE3OWZiNTY1M2UxNzU0YWI3YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uYblmfWMsBs28sFZdH8bXvpMQZr MvS7WExnWKVKueEyx5ZJGG0QENZB4ZfkgGROyhW/P5nrXUprZWZSDRYYAoPSunMy vnFWxpn9GKTGwigHNgHYNCidv2jaMje2TMZA9hSmD3vA55tBiYdvacUgLjJt7x+H OQ/STq1CG6V64H1dVPjIdL3wbQwr2EDzCYeQzIraj1X7Iur5XpCf3NO4QZ46j3l4 z6HSn7KJUXaquOsPtZhEhNuRv2V0Btx64ht78nFJrhLf9HMqeGT6l+XEbYGWI7My trdlAtokO1xuegWHZp3sBhFAF9DyQ6Ve5/DKISgJoByNyr52ozyhmwqJvwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGGZzfw/SvCOqACnn7VlPhdUq3xQMB8GA1UdIwQY MBaAFPXw8HygprTLLBWekEWXRQOuKIWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0Zjkt MzIzNDg2Y2EwNTQwLzEvWVpuTl9EOUs4STZvQUtlZnRXVS1GMVNyZkZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0ZjktMzIzNDg2Y2EwNTQw LzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuZ2RMAwD BAC5yv0DBAC5yv4wDQYJKoZIhvcNAQELBQADggEBADlRfSPW5Y+2uPLjdjgeIfKV HNwsOJulylP22Sri0DiI34eVZAK/UsarJK5sy75AW5sMB9Gu0d1oRR3Dx36L5wOs 99ZtDRbY8qEetP59As3ot8MEr3suV8svB7/8ui2IMWnqQIsWPblDB192DpNjuPlJ MOiGfozO/c334M4em1hhsjLZK0oJV8G5WbwIt+AeaS7KVv4QxNlhEKvnY7HM9uA9 My+onyCRtixDTHoAESPW1QJOGu1bAetWPerwePWxUpPSAQJq5CtLMlLJ6sEazbD1 l1yX5a3GI6onjxmn4pEw9pmXCXkJwxRFoUrOpHaVOwZUdo1rg0mFaR97CGaPy2w= -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:27 2026 by rpki-client