This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/nyuDVVWpDgRFf-6djBvIh8G6IaQ.roa File: nyuDVVWpDgRFf-6djBvIh8G6IaQ.roa (raw, json) Hash identifier: V73akF511kFqlwWUk+buaBhxPXu4PPDC0iD4dONZGKk= Subject key identifier: 9F:2B:83:55:55:A9:0E:04:45:7F:EE:9D:8C:1B:C8:87:C1:BA:21:A4 Certificate issuer: /CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b Certificate serial: 019B7DCA69E6E5F83402B0159047A28225A9 Authority key identifier: F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/nyuDVVWpDgRFf-6djBvIh8G6IaQ.roa Signing time: Fri 02 Jan 2026 08:19:36 +0000 ROA not before: Fri 02 Jan 2026 08:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31452 IP address blocks: 185.7.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:69:e6:e5:f8:34:02:b0:15:90:47:a2:82:25:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b Validity Not Before: Jan 2 08:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f2b835555a90e04457fee9d8c1bc887c1ba21a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:0c:d0:58:1d:a6:05:c6:ba:ab:d5:c2:db: 2d:b2:e1:03:54:65:6f:f1:49:a0:84:8f:a8:15:15: b0:51:fe:71:89:6f:db:e2:01:48:2d:74:cf:a8:4a: 45:5f:ad:bc:b1:ff:c3:cf:80:69:bc:07:af:b5:aa: 10:88:fe:8e:62:51:0e:24:dc:4b:51:d8:ab:07:6a: 60:cc:6e:ac:f6:71:a1:b3:b2:eb:c0:c5:6f:3a:e5: 12:1f:84:b9:27:2d:9d:58:60:0a:ce:05:69:3e:d6: 79:74:62:ba:74:59:b1:8e:52:c9:ca:36:d5:73:f2: 17:ac:7a:4f:8c:2d:d0:86:8a:fe:ee:ed:2c:58:d8: 98:54:04:3a:13:20:de:c8:79:e9:1e:39:f5:eb:97: 47:5f:0e:8b:fe:38:98:d9:db:ac:46:28:6d:0b:78: 33:de:77:1d:62:ab:ce:d4:5a:a9:b0:76:e1:3c:6f: ce:65:d0:7d:12:f0:94:a0:27:85:7a:f8:11:fc:f6: 8c:27:85:29:7d:0d:98:de:30:eb:24:ae:ae:14:43: 88:3f:79:0d:67:61:d2:98:f8:86:c2:df:01:d7:9e: 29:d3:e8:e6:31:73:c8:7e:75:a1:db:2b:68:9e:3f: d4:e0:23:80:fc:3c:e3:39:0b:e4:03:cf:be:33:d2: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2B:83:55:55:A9:0E:04:45:7F:EE:9D:8C:1B:C8:87:C1:BA:21:A4 X509v3 Authority Key Identifier: keyid:F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/nyuDVVWpDgRFf-6djBvIh8G6IaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.8.0/22 Signature Algorithm: sha256WithRSAEncryption 96:62:54:d0:53:a2:ad:c5:78:28:1a:5e:84:4c:3f:93:ed:63: 63:83:b8:ad:84:cb:82:39:7e:ac:ab:bd:1f:7b:b8:c9:81:24: 74:27:2d:9a:8b:68:be:e9:ce:0f:da:ab:3b:e2:d7:31:a4:f7: 3a:50:3c:6e:b4:88:eb:23:df:5a:8d:43:38:28:36:58:2f:0d: b6:a1:6c:cd:24:b5:5c:49:43:40:4a:09:15:b8:2a:8d:27:ef: ba:9e:2a:ef:a3:40:2c:1c:89:fd:65:a6:e0:7e:6a:a4:c4:a7: 58:1d:bb:1f:78:cb:41:43:cb:95:5e:9a:5e:2a:66:42:40:c0: e0:7a:23:a5:92:03:f8:c8:a0:f8:2d:22:08:40:46:4b:c9:0a: 05:65:2e:68:c3:c6:79:6c:c2:31:1a:c1:bd:b3:2b:bc:f8:18: ca:f5:61:6e:f1:56:43:78:c1:9b:c7:1d:c6:aa:5b:d3:9f:23: 52:79:32:ef:73:d0:2b:ff:38:85:70:c8:d0:a5:f2:67:c2:af: bf:30:71:9a:1e:cb:18:11:8e:1c:0d:5f:79:fa:48:bf:eb:b1: 11:19:9b:77:14:fd:65:4e:2b:ec:61:bf:ad:4d:47:45:0a:b7: 23:e1:c1:d6:e6:3a:40:67:c1:ef:8d:35:c3:60:0a:a0:28:20: ce:f9:fc:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ymnm5fg0ArAVkEeigiWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDQzZjViNWM3OGQ2OGU3MzlkNGZhNmZlYWZkZDI0M2Iw NTJhNGIwHhcNMjYwMTAyMDgxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjJiODM1NTU1YTkwZTA0NDU3ZmVlOWQ4YzFiYzg4N2MxYmEyMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr28M0FgdpgXGuqvVwtstsuEDVGVv 8UmghI+oFRWwUf5xiW/b4gFILXTPqEpFX628sf/Dz4BpvAevtaoQiP6OYlEOJNxL UdirB2pgzG6s9nGhs7LrwMVvOuUSH4S5Jy2dWGAKzgVpPtZ5dGK6dFmxjlLJyjbV c/IXrHpPjC3Qhor+7u0sWNiYVAQ6EyDeyHnpHjn165dHXw6L/jiY2dusRihtC3gz 3ncdYqvO1FqpsHbhPG/OZdB9EvCUoCeFevgR/PaMJ4UpfQ2Y3jDrJK6uFEOIP3kN Z2HSmPiGwt8B154p0+jmMXPIfnWh2ytonj/U4COA/DzjOQvkA8++M9IZ1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8rg1VVqQ4ERX/unYwbyIfBuiGkMB8GA1UdIwQY MBaAFPNEP1tceNaOc51Ppv6v3SQ7BSpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBRX1cxeDQxbzV6blUtbV9xX2RKRHNGS2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mZDMwYTgtYzBiZi00MTRmLWFiYTct YjE2NTFhNjRmMzVlLzEvbnl1RFZWV3BEZ1JGZi02ZGpCdkloOEc2SWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mZDMwYTgtYzBiZi00MTRmLWFiYTctYjE2NTFhNjRmMzVl LzEvODBRX1cxeDQxbzV6blUtbV9xX2RKRHNGS2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQcIMA0G CSqGSIb3DQEBCwUAA4IBAQCWYlTQU6KtxXgoGl6ETD+T7WNjg7ithMuCOX6sq70f e7jJgSR0Jy2ai2i+6c4P2qs74tcxpPc6UDxutIjrI99ajUM4KDZYLw22oWzNJLVc SUNASgkVuCqNJ++6nirvo0AsHIn9ZabgfmqkxKdYHbsfeMtBQ8uVXppeKmZCQMDg eiOlkgP4yKD4LSIIQEZLyQoFZS5ow8Z5bMIxGsG9syu8+BjK9WFu8VZDeMGbxx3G qlvTnyNSeTLvc9Ar/ziFcMjQpfJnwq+/MHGaHssYEY4cDV95+ki/67ERGZt3FP1l TivsYb+tTUdFCrcj4cHW5jpAZ8HvjTXDYAqgKCDO+fxm -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:13 2026 by rpki-client