This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa File: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (raw, json) Hash identifier: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ= Subject key identifier: 37:20:73:D7:83:0E:9A:4A:41:B6:58:59:ED:63:35:6E:2D:DC:28:71 Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B7CED5F2018C351C44CD3C57DC6895CE9 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa Signing time: Fri 02 Jan 2026 04:18:09 +0000 ROA not before: Fri 02 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205223 IP address blocks: 185.223.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5f:20:18:c3:51:c4:4c:d3:c5:7d:c6:89:5c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jan 2 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=372073d7830e9a4a41b65859ed63356e2ddc2871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:47:c1:75:6f:dd:0f:1f:84:ca:84:8b:06: 23:0e:f6:4c:5b:f1:bc:21:2d:aa:95:4b:4a:4b:1a: 13:72:d8:08:bd:8f:54:48:1c:9a:3e:92:af:7d:7f: ee:c2:39:82:e2:55:b8:cf:93:f6:66:31:b6:53:93: 85:55:c6:a8:a7:31:59:ba:b3:fe:31:84:87:89:63: 61:5e:62:ab:03:8a:d4:42:70:48:4e:c7:5d:f3:db: 64:d9:e7:95:6c:b1:12:0d:53:59:63:01:12:e0:56: 2b:87:90:36:c8:6a:db:94:e1:c9:f7:2b:bc:1c:21: 58:d7:72:5e:8e:3b:fa:30:35:3f:e0:1b:51:1e:16: cc:e3:b9:e1:5b:c9:40:51:e2:95:3f:e0:88:95:f0: 48:09:d9:60:5e:ac:4d:57:3c:33:8c:5d:fe:17:ac: c6:a8:16:61:5e:ee:7c:3d:3c:0c:16:69:23:39:80: 64:f0:07:f1:03:06:76:de:90:bb:b2:e6:df:1f:1c: a5:75:9f:10:05:fc:cf:9f:74:c3:97:02:dd:f0:52: 11:92:d7:b2:59:a5:56:bd:42:d3:e1:51:12:3e:8f: 47:57:aa:5e:6e:f2:93:4f:ea:36:24:51:bf:5a:ad: 86:52:5b:b0:5b:3e:17:cd:4b:c9:d0:51:a7:ae:60: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:20:73:D7:83:0E:9A:4A:41:B6:58:59:ED:63:35:6E:2D:DC:28:71 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.219.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:a3:ec:57:d3:88:3b:b3:5c:7b:64:e8:38:57:0b:30:ca:e2: ef:cf:53:dd:c3:7b:3f:d6:15:5f:ee:3a:1c:e0:8a:f3:a1:07: c6:1f:94:ca:27:9e:fd:c6:4c:ab:59:e3:23:04:43:f3:c6:ae: 42:a6:fc:fc:01:e4:28:05:08:24:d4:3a:7f:ef:b7:f7:11:ad: ec:c7:2f:af:76:26:0a:78:09:8c:f6:23:ef:46:4b:d5:df:28: f4:4f:29:aa:44:bb:d6:e6:10:fd:e0:61:4c:02:fb:53:b4:bb: 5f:8f:09:60:3f:17:a7:3f:c7:0e:50:df:01:9c:a9:cf:f1:a0: cd:74:94:71:76:94:43:b7:86:7d:75:dd:22:47:97:74:13:94: 76:59:b9:a9:7a:03:ae:fe:c5:1c:7e:fd:75:f1:8a:38:c4:31: 94:f6:e2:86:91:2a:59:e2:3f:05:84:01:53:4d:3e:84:0a:c4: 01:85:c7:05:7b:00:72:86:1a:83:5a:af:4f:8c:99:c0:ee:90: 6c:61:1f:3d:4d:33:71:e4:e8:50:5a:37:4b:fe:aa:0a:ab:a2: 9a:b5:2d:88:64:74:fd:2d:7b:08:c9:60:98:75:b6:06:3f:6d: 3c:96:d8:df:94:95:bf:ce:60:b1:df:d6:10:dc:a3:79:ee:98: 1a:58:e9:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87V8gGMNRxEzTxX3GiVzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMTAyMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzIwNzNkNzgzMGU5YTRhNDFiNjU4NTllZDYzMzU2ZTJkZGMyODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiFHwXVv3Q8fhMqEiwYjDvZMW/G8 IS2qlUtKSxoTctgIvY9USByaPpKvfX/uwjmC4lW4z5P2ZjG2U5OFVcaopzFZurP+ MYSHiWNhXmKrA4rUQnBITsdd89tk2eeVbLESDVNZYwES4FYrh5A2yGrblOHJ9yu8 HCFY13Jejjv6MDU/4BtRHhbM47nhW8lAUeKVP+CIlfBICdlgXqxNVzwzjF3+F6zG qBZhXu58PTwMFmkjOYBk8AfxAwZ23pC7subfHxyldZ8QBfzPn3TDlwLd8FIRktey WaVWvULT4VESPo9HV6pebvKTT+o2JFG/Wq2GUluwWz4XzUvJ0FGnrmDKOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDcgc9eDDppKQbZYWe1jNW4t3ChxMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvTnlCejE0TU9ta3BCdGxoWjdXTTFiaTNjS0hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud/bMA0G CSqGSIb3DQEBCwUAA4IBAQB7o+xX04g7s1x7ZOg4VwswyuLvz1Pdw3s/1hVf7joc 4IrzoQfGH5TKJ579xkyrWeMjBEPzxq5Cpvz8AeQoBQgk1Dp/77f3Ea3sxy+vdiYK eAmM9iPvRkvV3yj0TymqRLvW5hD94GFMAvtTtLtfjwlgPxenP8cOUN8BnKnP8aDN dJRxdpRDt4Z9dd0iR5d0E5R2WbmpegOu/sUcfv118Yo4xDGU9uKGkSpZ4j8FhAFT TT6ECsQBhccFewByhhqDWq9PjJnA7pBsYR89TTNx5OhQWjdL/qoKq6KatS2IZHT9 LXsIyWCYdbYGP208ltjflJW/zmCx39YQ3KN57pgaWOlc -----END CERTIFICATE-----Generated at Mon Jan 12 03:02:07 2026 by rpki-client