This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/dyUespYQq3mAO5ciQOI9W33sub4.roa File: dyUespYQq3mAO5ciQOI9W33sub4.roa (raw, json) Hash identifier: f5ONEWQltft9lq7xj2n38xNWDCpMGTw5GICFFgsknX0= Subject key identifier: 77:25:1E:B2:96:10:AB:79:80:3B:97:22:40:E2:3D:5B:7D:EC:B9:BE Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda Certificate serial: 019B7AC786AF7D7139C62BB1080624D5D20F Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/dyUespYQq3mAO5ciQOI9W33sub4.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203234 IP address blocks: 185.138.240.0/23 maxlen: 23 2a07:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:86:af:7d:71:39:c6:2b:b1:08:06:24:d5:d2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77251eb29610ab79803b972240e23d5b7decb9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:58:0c:08:9b:98:c9:8b:ce:0b:33:cf:4d: 32:d1:8a:45:32:20:45:b2:b8:15:36:cc:7e:bc:f5: b4:38:b7:a0:51:16:e5:59:ab:79:f3:83:c0:90:c8: 22:b7:8e:cf:72:94:35:bd:79:7b:26:ad:2a:68:7f: 32:cb:cb:41:d0:52:94:c8:8f:ba:ef:ac:d9:97:08: af:97:51:b9:dd:81:e3:77:8c:a8:98:74:d7:64:8b: 27:b2:41:f6:73:77:4b:85:ca:28:63:70:fe:82:20: 5c:0d:0d:fe:2b:cc:c1:62:78:24:b4:8f:e1:55:54: 56:a8:cf:70:ba:14:cc:54:1f:73:71:f5:43:0c:3d: 02:a7:f0:f0:32:5e:80:1a:ce:f6:8b:5e:0e:8d:70: 43:91:62:0f:5c:1c:9c:38:8e:ba:00:41:44:1e:4e: 56:cd:c2:de:86:f9:6c:48:dd:a0:8f:07:94:34:e9: 65:53:0c:79:a2:6b:93:d0:f1:e6:59:4f:d0:68:4b: 77:0b:8a:c6:86:b8:4b:d1:8f:5d:03:86:af:15:77: 66:94:a0:bc:76:da:c2:f6:9e:8d:07:0d:43:57:2f: 4d:9b:8e:49:84:03:b3:7e:73:76:09:92:da:65:aa: 2b:41:fe:f5:be:21:68:69:b3:54:c1:b7:00:b0:b0: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:25:1E:B2:96:10:AB:79:80:3B:97:22:40:E2:3D:5B:7D:EC:B9:BE X509v3 Authority Key Identifier: keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/dyUespYQq3mAO5ciQOI9W33sub4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.240.0/23 IPv6: 2a07:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 27:f0:04:14:0a:d6:3a:53:8a:29:db:1f:72:b2:f2:ab:c8:a2: 24:20:9c:69:8a:27:2d:70:eb:4e:20:b3:37:6c:68:8c:11:fc: 8e:e6:91:fb:3d:9b:8c:1e:b9:22:57:40:e1:d5:55:66:f6:ec: 5b:c7:36:1c:46:35:6a:89:25:62:f3:97:83:2a:bc:75:e2:31: 18:be:2e:81:ea:f4:4b:7b:77:83:35:45:4b:5a:5e:12:c1:16: bd:f2:6c:cc:26:9a:2f:ab:ac:56:73:5c:80:33:ee:c5:17:01: 03:18:74:be:b0:e1:c4:86:ff:00:5c:75:06:29:1c:83:b5:6e: 7f:02:9a:99:63:6f:5e:56:93:5d:a5:ab:98:e8:b5:b8:08:4d: 27:82:6d:98:ef:a1:0a:60:70:6a:34:c8:52:05:b1:08:5c:46: ee:4f:b7:23:81:17:05:a7:7d:f4:c7:0b:04:17:8a:af:54:e3: f8:95:2c:f6:40:87:7a:46:8e:5b:8e:65:a0:dc:af:53:81:7d: 04:26:dd:e1:f2:cc:f1:cf:a4:80:cd:7a:68:18:95:07:4c:4a: e4:16:b7:23:80:d6:fc:e0:e2:d7:91:5d:3f:b9:f0:b6:45:90: 61:65:7a:f3:30:b3:e7:15:1c:2c:e9:85:dd:e5:ad:c1:97:58: 5e:63:69:6b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x4avfXE5xiuxCAYk1dIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjEwNWQxNDhkZTk5NjAzNmZkZjIxY2IyMDhhMzM4YTE1 OGNlZGEwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzI1MWViMjk2MTBhYjc5ODAzYjk3MjI0MGUyM2Q1YjdkZWNiOWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNZYDAibmMmLzgszz00y0YpFMiBF srgVNsx+vPW0OLegURblWat584PAkMgit47PcpQ1vXl7Jq0qaH8yy8tB0FKUyI+6 76zZlwivl1G53YHjd4yomHTXZIsnskH2c3dLhcooY3D+giBcDQ3+K8zBYngktI/h VVRWqM9wuhTMVB9zcfVDDD0Cp/DwMl6AGs72i14OjXBDkWIPXBycOI66AEFEHk5W zcLehvlsSN2gjweUNOllUwx5omuT0PHmWU/QaEt3C4rGhrhL0Y9dA4avFXdmlKC8 dtrC9p6NBw1DVy9Nm45JhAOzfnN2CZLaZaorQf71viFoabNUwbcAsLAhqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHclHrKWEKt5gDuXIkDiPVt97Lm+MB8GA1UdIwQY MBaAFBmxBdFI3plgNv3yHLIIozihWM7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTIt MjZlNjRkNzhiMGM2LzEvZHlVZXNwWVFxM21BTzVjaVFPSTlXMzNzdWI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTItMjZlNjRkNzhiMGM2 LzEvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuYrwMA8E AgACMAkDBwAqBxDAAAAwDQYJKoZIhvcNAQELBQADggEBACfwBBQK1jpTiinbH3Ky 8qvIoiQgnGmKJy1w604gszdsaIwR/I7mkfs9m4weuSJXQOHVVWb27FvHNhxGNWqJ JWLzl4MqvHXiMRi+LoHq9Et7d4M1RUtaXhLBFr3ybMwmmi+rrFZzXIAz7sUXAQMY dL6w4cSG/wBcdQYpHIO1bn8Cmpljb15Wk12lq5jotbgITSeCbZjvoQpgcGo0yFIF sQhcRu5PtyOBFwWnffTHCwQXiq9U4/iVLPZAh3pGjluOZaDcr1OBfQQm3eHyzPHP pIDNemgYlQdMSuQWtyOA1vzg4teRXT+58LZFkGFlevMws+cVHCzphd3lrcGXWF5j aWs= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:33 2026 by rpki-client