This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa File: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (raw, json) Hash identifier: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I= Subject key identifier: 8D:8D:0C:A0:E2:77:3E:D7:6F:79:0B:82:B1:9D:1F:B8:12:21:4E:36 Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320 Certificate serial: 019B7CEDE1985F83A3868E5FC388CE5DC664 Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 46.244.32.0/20 maxlen: 20 92.246.224.0/19 maxlen: 19 185.45.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e1:98:5f:83:a3:86:8e:5f:c3:88:ce:5d:c6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320 Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d8d0ca0e2773ed76f790b82b19d1fb812214e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:6f:fc:fa:19:71:63:02:33:36:d8:47:43: 2e:1f:ae:16:41:f3:b1:6e:d8:fa:c5:da:cd:06:84: 9b:74:2f:5b:a8:66:23:21:9f:d0:83:8b:1b:33:68: e8:d6:a0:bf:16:8d:81:46:74:fc:b7:8b:d0:46:db: 17:4e:e6:97:1e:44:3d:5d:5b:4b:13:14:32:c0:00: be:af:b0:b6:0b:7d:af:b1:96:68:3b:19:c4:5f:3c: 80:b3:a5:48:e7:ca:c0:37:54:56:2a:cf:cb:65:f4: b0:c1:92:fd:e4:eb:02:61:e1:19:50:02:dc:7c:25: 05:db:62:dd:77:96:a8:0c:40:f2:0e:ce:f2:24:8c: ec:cd:bc:2f:19:aa:6c:d2:e3:2b:b7:69:e5:4a:4a: e6:01:8f:c4:3c:67:ef:97:0a:54:b0:71:ef:e7:d3: d7:c3:43:44:cd:78:61:98:5b:2e:b2:93:5b:fe:7a: f6:8a:c3:a9:5e:b8:1e:18:7f:82:98:f2:1b:e7:2c: 66:39:cf:7a:65:72:25:5f:a2:bb:63:c9:12:64:d1: ae:57:17:35:af:7a:9a:79:55:d3:52:68:8a:04:80: 4b:d5:43:85:00:2c:3d:a7:51:66:7d:86:34:5e:4d: f9:2e:88:53:33:9a:ca:48:2b:00:7a:45:13:5c:90: 90:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8D:0C:A0:E2:77:3E:D7:6F:79:0B:82:B1:9D:1F:B8:12:21:4E:36 X509v3 Authority Key Identifier: keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.244.32.0/20 92.246.224.0/19 185.45.160.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:3f:55:fe:d3:25:6b:58:e9:6a:9b:c7:4a:68:29:f6:49:75: 34:d5:34:ac:16:c5:53:5b:56:66:78:ac:25:30:5f:88:c6:b9: d8:94:2f:9d:70:36:02:5d:2b:e4:dd:d6:e5:ee:eb:bf:f4:ea: 7b:c8:97:63:7a:ae:35:d3:40:d9:bf:5a:96:76:41:ba:9d:af: 52:73:62:07:ec:cd:54:c0:da:f9:c3:c8:3e:88:30:a4:72:97: 6f:aa:ef:1c:07:94:58:5a:00:14:fd:1e:86:a9:74:ab:a6:52: bc:c1:a9:87:ff:11:0b:44:42:ee:e0:67:54:6c:ff:b2:cb:31: 2a:72:03:28:c3:90:e7:39:19:52:c4:ef:f4:67:4b:b1:24:76: 32:fe:cd:e0:71:a1:0b:0e:41:15:18:1a:85:a0:63:9d:1d:9b: 0b:9c:3d:0c:a1:93:64:da:b7:ab:a7:4a:14:dc:5a:ca:d1:7c: 0e:69:e8:b7:a3:16:ee:4f:71:92:84:47:fe:1c:31:27:12:98: be:a3:b4:23:bd:45:7f:a3:0b:2e:46:8c:f6:7b:d7:0c:6c:89: ef:0a:1f:4d:18:f1:40:25:70:ef:01:7c:27:5a:6f:dd:6f:5a: f4:ff:b1:80:a2:03:cc:91:38:07:96:e2:b8:72:cd:26:c9:a6: c6:36:08:12 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87eGYX4Ojho5fw4jOXcZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMDE5Y2FkYTE2M2UzNjhjYzMzNjI3NjNmMjA2YjNkZWFj NGQzMjAwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDhkMGNhMGUyNzczZWQ3NmY3OTBiODJiMTlkMWZiODEyMjE0ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ1v/PoZcWMCMzbYR0MuH64WQfOx btj6xdrNBoSbdC9bqGYjIZ/Qg4sbM2jo1qC/Fo2BRnT8t4vQRtsXTuaXHkQ9XVtL ExQywAC+r7C2C32vsZZoOxnEXzyAs6VI58rAN1RWKs/LZfSwwZL95OsCYeEZUALc fCUF22Ldd5aoDEDyDs7yJIzszbwvGaps0uMrt2nlSkrmAY/EPGfvlwpUsHHv59PX w0NEzXhhmFsuspNb/nr2isOpXrgeGH+CmPIb5yxmOc96ZXIlX6K7Y8kSZNGuVxc1 r3qaeVXTUmiKBIBL1UOFACw9p1FmfYY0Xk35LohTM5rKSCsAekUTXJCQHwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI2NDKDidz7Xb3kLgrGdH7gSIU42MB8GA1UdIwQY MBaAFCoBnK2hY+NozDNidj8gaz3qxNMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDkt MTQ5ZjYzNjVmZmRhLzEvalkwTW9PSjNQdGR2ZVF1Q3NaMGZ1QkloVGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDktMTQ5ZjYzNjVmZmRh LzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELvQgAwQF XPbgAwQCuS2gMA0GCSqGSIb3DQEBCwUAA4IBAQAfP1X+0yVrWOlqm8dKaCn2SXU0 1TSsFsVTW1ZmeKwlMF+IxrnYlC+dcDYCXSvk3dbl7uu/9Op7yJdjeq4100DZv1qW dkG6na9Sc2IH7M1UwNr5w8g+iDCkcpdvqu8cB5RYWgAU/R6GqXSrplK8wamH/xEL RELu4GdUbP+yyzEqcgMow5DnORlSxO/0Z0uxJHYy/s3gcaELDkEVGBqFoGOdHZsL nD0MoZNk2rerp0oU3FrK0XwOaei3oxbuT3GShEf+HDEnEpi+o7QjvUV/owsuRoz2 e9cMbInvCh9NGPFAJXDvAXwnWm/db1r0/7GAogPMkTgHluK4cs0myabGNggS -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:16 2026 by rpki-client