This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa File: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (raw, json) Hash identifier: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I= Subject key identifier: D5:80:26:ED:DE:A7:1C:79:6C:44:38:30:D4:EE:BF:11:4B:B3:C3:D5 Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e Certificate serial: 019B7F15DFB7C24AA3B73A299A9D193CD16F Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa Signing time: Fri 02 Jan 2026 14:21:38 +0000 ROA not before: Fri 02 Jan 2026 14:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41480 IP address blocks: 185.25.164.0/22 maxlen: 22 185.67.24.0/22 maxlen: 22 2a00:8120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:df:b7:c2:4a:a3:b7:3a:29:9a:9d:19:3c:d1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e Validity Not Before: Jan 2 14:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d58026eddea71c796c443830d4eebf114bb3c3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ea:6d:17:72:43:8a:43:32:1b:17:0d:50:a3: 3c:df:9c:70:bd:6c:e1:4f:d6:8d:12:45:e9:00:ba: 2c:f5:51:8f:36:f6:a7:e4:36:4e:04:ed:35:0e:c9: 1d:de:53:5e:47:5d:c8:89:36:10:7f:3e:1d:1b:2d: 3e:6a:af:f1:11:e8:7d:b8:51:60:d1:75:38:e4:31: 56:b7:0e:83:33:8e:ce:2d:f6:f3:a5:a5:16:76:bd: 4a:6c:f6:ed:ef:56:d5:9a:90:11:77:e0:36:c2:16: 85:30:52:2e:14:9c:e2:43:91:d4:19:8b:e4:e1:ce: d0:d3:21:b4:f0:94:dd:a9:25:26:6b:58:8e:1a:80: 23:c9:c9:60:02:c1:84:2e:59:39:71:36:77:a0:51: 62:f4:e0:57:e1:fb:ee:4f:34:d2:4a:98:65:a1:bc: 4a:a1:0f:d7:5c:6a:1f:b1:4c:5a:5e:d8:b3:20:cc: 31:df:b1:d4:90:7c:56:53:eb:b6:68:d8:eb:e0:5a: c3:a0:ed:a5:93:fe:8c:ec:97:6c:d2:52:8d:a0:44: 0f:09:84:cb:40:90:37:7e:02:a9:80:cd:0a:fb:2c: fa:0b:f9:38:d7:cd:19:a1:06:a5:1a:fb:26:08:b4: 61:e7:85:8f:92:88:f0:f6:85:26:80:09:0b:d9:79: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:80:26:ED:DE:A7:1C:79:6C:44:38:30:D4:EE:BF:11:4B:B3:C3:D5 X509v3 Authority Key Identifier: keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.164.0/22 185.67.24.0/22 IPv6: 2a00:8120::/32 Signature Algorithm: sha256WithRSAEncryption 86:8f:8a:e6:aa:75:61:73:be:b0:90:bf:e7:b7:c4:2a:56:e1: 6a:8a:2a:d0:33:04:72:47:12:62:14:2a:90:0c:d0:12:b0:ec: 1d:8a:03:a4:5d:6d:ad:f0:01:79:ba:c1:05:9a:0e:5b:ca:bb: d5:3a:bc:dc:94:92:ae:9c:29:64:c2:63:c4:5b:29:76:dc:b1: 92:41:b2:28:aa:6e:03:4c:18:45:50:50:8a:16:94:f7:b5:a8: ca:86:7f:e3:20:f2:92:42:67:44:9b:fa:1b:a8:50:81:0a:3d: 10:b1:b1:1f:46:3e:8a:54:eb:a1:5f:5f:1b:f1:c0:b5:f6:96: 3d:41:78:fa:40:67:10:52:32:45:6e:2e:ec:2b:da:0e:8f:2d: 06:ca:d0:f5:ee:c6:ea:c9:ec:a3:85:b2:b1:ef:7e:be:c5:d3: 96:18:24:2d:ab:10:21:4e:e2:28:9c:1f:12:aa:81:06:cc:3a: 00:f0:42:41:6e:a1:cd:1b:a9:2c:10:47:28:76:d1:11:5a:1e: 7f:b7:6f:cf:83:21:82:2d:34:ae:8b:80:7a:ce:c3:a3:e4:99: b3:11:34:bd:ff:c1:f5:7e:b2:9a:0a:4e:1c:d2:8a:c1:3a:1a: 6e:26:ee:7c:d1:03:66:a9:e9:33:73:35:21:d3:86:09:77:3d: 17:06:ce:bb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/Fd+3wkqjtzopmp0ZPNFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWMwYzlmMjM3NjNjMDM3YmQ2ODg0NzQ1Y2Y4NDY0ZDJk YjY2M2UwHhcNMjYwMTAyMTQyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTgwMjZlZGRlYTcxYzc5NmM0NDM4MzBkNGVlYmYxMTRiYjNjM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+ptF3JDikMyGxcNUKM835xwvWzh T9aNEkXpALos9VGPNvan5DZOBO01Dskd3lNeR13IiTYQfz4dGy0+aq/xEeh9uFFg 0XU45DFWtw6DM47OLfbzpaUWdr1KbPbt71bVmpARd+A2whaFMFIuFJziQ5HUGYvk 4c7Q0yG08JTdqSUma1iOGoAjyclgAsGELlk5cTZ3oFFi9OBX4fvuTzTSSphlobxK oQ/XXGofsUxaXtizIMwx37HUkHxWU+u2aNjr4FrDoO2lk/6M7Jds0lKNoEQPCYTL QJA3fgKpgM0K+yz6C/k4180ZoQalGvsmCLRh54WPkojw9oUmgAkL2XmPBwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNWAJu3epxx5bEQ4MNTuvxFLs8PVMB8GA1UdIwQY MBaAFIBcDJ8jdjwDe9aIR0XPhGTS22Y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQt ODJlMWUyMDA1MDRlLzEvMVlBbTdkNm5ISGxzUkRndzFPNl9FVXV6dzlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQtODJlMWUyMDA1MDRl LzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRmkAwQC uUMYMA0EAgACMAcDBQAqAIEgMA0GCSqGSIb3DQEBCwUAA4IBAQCGj4rmqnVhc76w kL/nt8QqVuFqiirQMwRyRxJiFCqQDNASsOwdigOkXW2t8AF5usEFmg5byrvVOrzc lJKunClkwmPEWyl23LGSQbIoqm4DTBhFUFCKFpT3tajKhn/jIPKSQmdEm/obqFCB Cj0QsbEfRj6KVOuhX18b8cC19pY9QXj6QGcQUjJFbi7sK9oOjy0GytD17sbqyeyj hbKx736+xdOWGCQtqxAhTuIonB8SqoEGzDoA8EJBbqHNG6ksEEcodtERWh5/t2/P gyGCLTSui4B6zsOj5JmzETS9/8H1frKaCk4c0orBOhpuJu580QNmqekzczUh04YJ dz0XBs67 -----END CERTIFICATE-----Generated at Wed Jan 7 07:00:12 2026 by rpki-client