This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/nYyVLm0gMDde0qblfT3ncHKAnz8.roa File: nYyVLm0gMDde0qblfT3ncHKAnz8.roa (raw, json) Hash identifier: jNbahQjR6FvDEsOWUHlprHyKe5vIEPV9UxOl9Q91iVk= Subject key identifier: 9D:8C:95:2E:6D:20:30:37:5E:D2:A6:E5:7D:3D:E7:70:72:80:9F:3F Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Certificate serial: 019B77C6C424AF36130103F56A10458771F4 Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/nYyVLm0gMDde0qblfT3ncHKAnz8.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212376 IP address blocks: 185.184.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c4:24:af:36:13:01:03:f5:6a:10:45:87:71:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d8c952e6d2030375ed2a6e57d3de77072809f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:67:0c:1b:a8:5b:d1:67:48:1d:c9:fe:93: 43:71:d5:86:83:09:7a:1e:fe:28:9f:e7:74:7a:d0: 1d:86:af:53:60:0d:ca:0d:ba:d8:8b:a4:f4:f8:4e: 31:5b:28:f1:02:45:5f:c7:3b:86:04:77:5d:e8:a8: ad:9e:dd:17:9a:c1:13:22:4b:81:79:8d:67:4c:6c: 8d:c8:f7:30:96:b0:85:6b:a0:ff:eb:80:80:ff:eb: 5d:86:9c:6e:75:4c:3e:52:81:13:11:3e:b8:bd:54: dc:bf:dd:c0:82:43:1f:65:3a:7f:87:c3:2f:0a:79: f1:95:00:83:07:96:de:3e:44:51:2a:67:27:e7:f7: 67:c0:48:c5:db:84:74:1a:d8:12:a3:75:8a:84:24: a0:35:75:f0:b4:ba:82:7a:a5:ad:1c:31:c9:3c:13: 4b:1e:76:b6:95:75:64:52:fe:ce:0c:6b:d1:f0:70: 73:73:e8:ec:5b:5a:39:dd:6f:75:03:27:e1:b0:2c: 3e:63:15:6d:9c:90:20:7b:44:df:2a:3d:ac:48:ef: 7c:c2:5d:d0:03:ba:b3:37:67:32:d1:7d:3f:74:dd: 8d:81:d0:9c:c6:2e:bf:1e:55:82:d5:60:f3:ba:4f: 22:de:a1:f6:b2:1d:5f:9b:38:4c:3a:4c:dd:8c:46: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8C:95:2E:6D:20:30:37:5E:D2:A6:E5:7D:3D:E7:70:72:80:9F:3F X509v3 Authority Key Identifier: keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/nYyVLm0gMDde0qblfT3ncHKAnz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.196.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:15:a8:f5:23:35:22:6e:ef:a5:26:ca:31:3f:20:2e:a2:b4: ad:06:d0:c4:31:9b:9e:69:47:0b:60:a7:01:76:13:c0:c7:ca: 10:37:4d:ce:8d:d3:bb:45:3f:74:88:f1:7a:53:e8:40:56:86: 37:a0:55:b7:be:ab:b8:d3:9d:8f:29:8c:72:b6:43:c4:28:9d: b2:6b:b9:94:8f:45:e9:c8:fb:59:cf:1d:e3:81:80:d6:95:c4: 6e:2d:7f:42:a2:d0:db:2b:6a:54:cc:5b:54:b7:e8:35:e7:ad: 94:6a:bb:ea:1a:31:a7:85:c7:b7:38:51:b5:18:3b:04:70:b5: aa:da:11:ae:aa:8a:e4:ff:e1:05:fd:32:da:29:dc:97:d4:4a: 3d:69:d9:94:c3:37:9f:02:cc:69:5d:2d:70:0f:2c:53:52:4b: 43:73:d3:f7:14:75:73:4f:35:5a:38:76:cd:99:84:27:b8:77: 8e:86:c4:01:8e:11:d5:27:ef:51:58:a3:9f:f7:84:bf:8f:7e: 58:ee:2d:cf:67:2b:16:8e:a9:a7:88:bb:7b:a0:45:35:30:62: 6b:dc:a0:dd:e7:77:cd:97:ab:f0:3a:b0:20:80:28:bb:09:e9: 1c:66:70:22:60:10:79:0a:33:ef:65:27:54:eb:46:6a:39:b4: ef:83:68:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsQkrzYTAQP1ahBFh3H0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0 ZWE1OWIwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDhjOTUyZTZkMjAzMDM3NWVkMmE2ZTU3ZDNkZTc3MDcyODA5ZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3dnDBuoW9FnSB3J/pNDcdWGgwl6 Hv4on+d0etAdhq9TYA3KDbrYi6T0+E4xWyjxAkVfxzuGBHdd6Kitnt0XmsETIkuB eY1nTGyNyPcwlrCFa6D/64CA/+tdhpxudUw+UoETET64vVTcv93AgkMfZTp/h8Mv CnnxlQCDB5bePkRRKmcn5/dnwEjF24R0GtgSo3WKhCSgNXXwtLqCeqWtHDHJPBNL Hna2lXVkUv7ODGvR8HBzc+jsW1o53W91AyfhsCw+YxVtnJAge0TfKj2sSO98wl3Q A7qzN2cy0X0/dN2NgdCcxi6/HlWC1WDzuk8i3qH2sh1fmzhMOkzdjEZ0VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2MlS5tIDA3XtKm5X0953BygJ8/MB8GA1UdIwQY MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt OTRiYjgzYTIwMDI5LzEvbll5VkxtMGdNRGRlMHFibGZUM25jSEtBbno4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5 LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubjEMA0G CSqGSIb3DQEBCwUAA4IBAQA/Faj1IzUibu+lJsoxPyAuorStBtDEMZueaUcLYKcB dhPAx8oQN03OjdO7RT90iPF6U+hAVoY3oFW3vqu4052PKYxytkPEKJ2ya7mUj0Xp yPtZzx3jgYDWlcRuLX9CotDbK2pUzFtUt+g1562UarvqGjGnhce3OFG1GDsEcLWq 2hGuqork/+EF/TLaKdyX1Eo9admUwzefAsxpXS1wDyxTUktDc9P3FHVzTzVaOHbN mYQnuHeOhsQBjhHVJ+9RWKOf94S/j35Y7i3PZysWjqmniLt7oEU1MGJr3KDd53fN l6vwOrAggCi7CekcZnAiYBB5CjPvZSdU60ZqObTvg2im -----END CERTIFICATE-----Generated at Fri Jan 9 00:00:46 2026 by rpki-client