This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/YmBgxnOOglEWqDI9vvh0tfVl6fA.roa File: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (raw, json) Hash identifier: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs= Subject key identifier: 62:60:60:C6:73:8E:82:51:16:A8:32:3D:BE:F8:74:B5:F5:65:E9:F0 Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785 Certificate serial: 019B78352CF94BA89181C051C29DC4AF100A Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/YmBgxnOOglEWqDI9vvh0tfVl6fA.roa Signing time: Thu 01 Jan 2026 06:18:29 +0000 ROA not before: Thu 01 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62340 IP address blocks: 92.43.166.0/23 maxlen: 23 185.39.112.0/23 maxlen: 23 185.39.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 06:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2c:f9:4b:a8:91:81:c0:51:c2:9d:c4:af:10:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785 Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=626060c6738e825116a8323dbef874b5f565e9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:05:2d:24:54:74:28:16:98:25:1e:2e:b6: 3a:bb:1f:d1:51:57:2a:66:39:90:bd:23:80:e2:4e: 5a:cd:08:ea:9b:3d:4c:ff:75:15:bf:8f:36:fd:35: 6e:fa:06:10:71:c8:a8:d5:b6:2f:32:ae:97:30:c6: 22:f1:2d:b6:a2:2c:68:86:c5:61:fb:06:80:15:2b: 9b:a2:ba:e2:b2:0a:fd:67:f5:2d:e3:a5:35:fa:bc: ad:00:23:52:7c:f3:0e:1a:4e:37:8f:19:31:98:3c: 2e:91:4a:b0:ba:cd:9c:94:6a:fe:6b:28:c2:6e:69: e8:b7:c0:55:67:14:50:6e:fb:ab:58:21:b5:54:19: f0:26:e1:3b:00:aa:ac:31:f9:73:06:00:07:ce:09: 94:ab:69:c7:64:00:b2:56:ce:38:e4:18:e3:bc:4c: c3:44:d1:20:b0:33:90:6b:c8:14:05:ae:1c:1b:ee: fc:c4:03:cb:a7:84:c2:34:5e:da:26:06:d2:e5:44: 87:69:70:9b:54:9e:2c:1c:7a:54:1a:a0:29:14:60: 94:a2:96:fc:13:f9:d5:f7:22:de:9c:0c:8f:ef:10: 82:87:10:3b:c8:c6:8d:9b:ed:cd:19:3a:21:d1:31: 49:10:16:ad:cb:df:1f:6b:fc:09:5e:13:05:ae:51: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:60:60:C6:73:8E:82:51:16:A8:32:3D:BE:F8:74:B5:F5:65:E9:F0 X509v3 Authority Key Identifier: keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/YmBgxnOOglEWqDI9vvh0tfVl6fA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.166.0/23 185.39.112.0/22 Signature Algorithm: sha256WithRSAEncryption 59:8e:11:44:05:09:07:63:1c:45:90:b7:29:05:08:d0:11:9e: 92:ea:bb:cb:b0:71:a8:d9:d5:e1:ea:bd:4a:2f:b4:e6:72:ee: 30:22:9f:77:84:3f:6d:af:45:c1:80:d4:21:66:6c:b2:b4:67: f5:69:74:1f:c6:95:41:03:49:3b:37:63:a8:4f:e0:34:f7:ea: 82:8a:d7:fb:fc:a4:04:37:40:4b:b1:c1:5c:9b:43:f8:30:73: 60:5d:55:5d:2f:15:f4:3a:8a:a2:97:e7:7f:37:50:a1:38:3a: 52:60:f1:50:49:e3:36:07:47:f1:62:ef:a8:80:a7:90:ce:93: 50:31:b5:5e:e2:06:ab:25:6a:60:3c:da:a7:bf:6c:9d:e9:13: 3b:11:d9:c5:51:9e:6f:e0:80:9d:22:07:67:c1:33:aa:a9:34: 13:66:8c:1f:e3:89:dc:24:22:2b:ee:bf:44:c4:44:ca:df:68: 6b:6b:28:71:90:d9:79:ca:55:1c:91:7b:6a:e6:97:55:0a:14: 82:58:c0:3e:43:40:81:1f:82:ce:78:2b:aa:ab:1f:49:1a:7a: 62:3c:06:ca:db:6a:57:50:f3:b9:72:eb:19:ef:18:d8:d9:6a: db:e4:0b:4c:53:39:1d:6f:9d:77:62:35:b6:e5:9a:8e:49:96: a5:fd:b5:61 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NSz5S6iRgcBRwp3ErxAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OGY0Yzg1ZDc2ODM2MzNjMzM4ZTAzZGQ4ZWNhNDQ3YmYz ZjY3ODUwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjYwNjBjNjczOGU4MjUxMTZhODMyM2RiZWY4NzRiNWY1NjVlOWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrIFLSRUdCgWmCUeLrY6ux/RUVcq ZjmQvSOA4k5azQjqmz1M/3UVv482/TVu+gYQccio1bYvMq6XMMYi8S22oixohsVh +waAFSuborrisgr9Z/Ut46U1+rytACNSfPMOGk43jxkxmDwukUqwus2clGr+ayjC bmnot8BVZxRQbvurWCG1VBnwJuE7AKqsMflzBgAHzgmUq2nHZACyVs445BjjvEzD RNEgsDOQa8gUBa4cG+78xAPLp4TCNF7aJgbS5USHaXCbVJ4sHHpUGqApFGCUopb8 E/nV9yLenAyP7xCChxA7yMaNm+3NGToh0TFJEBaty98fa/wJXhMFrlFTEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGJgYMZzjoJRFqgyPb74dLX1ZenwMB8GA1UdIwQY MBaAFOaPTIXXaDYzwzjgPdjspEe/P2eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQt OWI2Y2ZkOGEyYWEzLzEvWW1CZ3huT09nbEVXcURJOXZ2aDB0ZlZsNmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQtOWI2Y2ZkOGEyYWEz LzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXCumAwQC uSdwMA0GCSqGSIb3DQEBCwUAA4IBAQBZjhFEBQkHYxxFkLcpBQjQEZ6S6rvLsHGo 2dXh6r1KL7Tmcu4wIp93hD9tr0XBgNQhZmyytGf1aXQfxpVBA0k7N2OoT+A09+qC itf7/KQEN0BLscFcm0P4MHNgXVVdLxX0Ooqil+d/N1ChODpSYPFQSeM2B0fxYu+o gKeQzpNQMbVe4garJWpgPNqnv2yd6RM7EdnFUZ5v4ICdIgdnwTOqqTQTZowf44nc JCIr7r9ExETK32hrayhxkNl5ylUckXtq5pdVChSCWMA+Q0CBH4LOeCuqqx9JGnpi PAbK22pXUPO5cusZ7xjY2Wrb5AtMUzkdb513YjW25ZqOSZal/bVh -----END CERTIFICATE-----Generated at Thu Jan 1 10:26:39 2026 by rpki-client