This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/Yi680tyzJGfIAumOzsiKpDqyZ-g.roa File: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (raw, json) Hash identifier: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo= Subject key identifier: 62:2E:BC:D2:DC:B3:24:67:C8:02:E9:8E:CE:C8:8A:A4:3A:B2:67:E8 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED524EF5EB0B433668C8D78663B9CA Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/Yi680tyzJGfIAumOzsiKpDqyZ-g.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209817 IP address blocks: 185.253.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:52:4e:f5:eb:0b:43:36:68:c8:d7:86:63:b9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=622ebcd2dcb32467c802e98ecec88aa43ab267e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:d4:a6:b9:3f:ea:ae:d3:0a:65:ff:f9:9d: 15:14:df:d5:14:1d:f5:92:f3:9c:ba:c9:e4:55:e0: ae:24:71:8a:f8:5a:44:f4:ee:eb:8d:38:ec:a0:ae: ca:0e:f5:40:45:9f:85:bb:6f:92:a6:41:f8:97:1a: 8a:58:8f:81:ee:5b:eb:ba:69:a4:c0:e0:02:27:c7: b3:bb:5a:f1:d9:31:b3:5d:8f:22:3b:71:7b:85:c5: 0d:b9:08:44:b1:4d:be:2c:06:f9:47:ea:57:e8:9e: a6:55:d4:66:24:3e:ea:b4:3b:64:02:c6:31:b7:b7: d2:33:fd:7c:12:cd:ee:1d:8c:7c:54:4f:84:b6:89: 4d:94:d8:47:87:ce:b4:0f:b8:f6:5a:69:f3:bd:cb: f4:b8:85:96:60:60:5b:69:d1:6e:53:b1:03:49:e8: 65:77:96:40:55:c9:00:34:91:93:80:eb:0a:72:a5: e2:c3:59:09:70:d4:3c:08:06:05:13:68:13:4e:1c: 57:55:72:5b:61:49:b9:9a:4c:3e:5a:d9:8f:23:b7: d8:0a:c7:c9:29:fd:b1:03:41:d5:41:0b:d8:98:d5: 96:49:6a:80:a2:6a:77:b6:77:62:4b:04:01:41:c2: ed:63:1d:e8:db:28:c8:31:30:2f:d5:d3:9b:cd:97: 95:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2E:BC:D2:DC:B3:24:67:C8:02:E9:8E:CE:C8:8A:A4:3A:B2:67:E8 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/Yi680tyzJGfIAumOzsiKpDqyZ-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.235.0/24 Signature Algorithm: sha256WithRSAEncryption 36:6a:11:da:91:18:7e:35:99:82:15:2a:21:85:d7:66:1a:75: 22:d7:e3:b0:8d:0b:ff:27:e5:e7:d3:ed:49:78:19:6a:2b:16: a7:c1:13:83:97:6d:6f:ce:7c:11:c0:57:13:11:88:a2:e6:66: b5:da:9c:c6:3a:1d:ab:11:3a:a0:e1:0f:4a:1c:b1:f4:13:e7: a2:d0:bc:74:9b:9d:d6:53:5c:94:70:ee:4c:a1:e7:52:c6:16: 33:b7:ab:c3:e1:e4:4d:f6:54:38:9c:55:13:49:04:3d:b8:26: fc:93:a1:23:8a:82:52:36:4e:70:30:65:36:c7:14:0c:e2:8b: 84:8e:52:b6:bb:1e:c9:28:85:0f:2c:ee:7c:d7:10:08:1e:a1: 5b:05:fe:95:e8:15:23:3a:06:db:00:97:64:a1:59:e3:e8:63: ef:8b:ee:a1:e3:96:3b:52:69:58:ba:bc:06:94:0b:8b:7d:8d: 86:67:cb:fd:cb:16:6c:ea:a8:ca:5b:cb:f5:04:c4:8d:b2:f8: b5:bf:13:ac:ae:c8:33:99:60:00:a0:2a:c1:e6:3d:c8:96:5d: 2c:fa:25:95:3f:14:36:b4:14:0d:2e:a1:0b:d9:4f:12:a8:07: 7d:4a:e4:48:85:9c:5f:c4:48:89:59:f3:01:7e:ce:ee:5a:ad: 3e:79:7f:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VJO9esLQzZoyNeGY7nKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjJlYmNkMmRjYjMyNDY3YzgwMmU5OGVjZWM4OGFhNDNhYjI2N2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTjUprk/6q7TCmX/+Z0VFN/VFB31 kvOcusnkVeCuJHGK+FpE9O7rjTjsoK7KDvVARZ+Fu2+SpkH4lxqKWI+B7lvrummk wOACJ8ezu1rx2TGzXY8iO3F7hcUNuQhEsU2+LAb5R+pX6J6mVdRmJD7qtDtkAsYx t7fSM/18Es3uHYx8VE+EtolNlNhHh860D7j2Wmnzvcv0uIWWYGBbadFuU7EDSehl d5ZAVckANJGTgOsKcqXiw1kJcNQ8CAYFE2gTThxXVXJbYUm5mkw+WtmPI7fYCsfJ Kf2xA0HVQQvYmNWWSWqAomp3tndiSwQBQcLtYx3o2yjIMTAv1dObzZeVJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIuvNLcsyRnyALpjs7IiqQ6smfoMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvWWk2ODB0eXpKR2ZJQXVtT3pzaUtwRHF5Wi1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf3rMA0G CSqGSIb3DQEBCwUAA4IBAQA2ahHakRh+NZmCFSohhddmGnUi1+OwjQv/J+Xn0+1J eBlqKxanwRODl21vznwRwFcTEYii5ma12pzGOh2rETqg4Q9KHLH0E+ei0Lx0m53W U1yUcO5MoedSxhYzt6vD4eRN9lQ4nFUTSQQ9uCb8k6EjioJSNk5wMGU2xxQM4ouE jlK2ux7JKIUPLO581xAIHqFbBf6V6BUjOgbbAJdkoVnj6GPvi+6h45Y7UmlYurwG lAuLfY2GZ8v9yxZs6qjKW8v1BMSNsvi1vxOsrsgzmWAAoCrB5j3Ill0s+iWVPxQ2 tBQNLqEL2U8SqAd9SuRIhZxfxEiJWfMBfs7uWq0+eX+b -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:24 2026 by rpki-client