This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/rYSG2dYjGVa3YG5opt3m2blLdDQ.roa File: rYSG2dYjGVa3YG5opt3m2blLdDQ.roa (raw, json) Hash identifier: 0jQGDr8z5IsaWt/3i/Wtvl19AvDMpjEhc4vCy+qWV/A= Subject key identifier: AD:84:86:D9:D6:23:19:56:B7:60:6E:68:A6:DD:E6:D9:B9:4B:74:34 Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b Certificate serial: 019B7B360E6384FB44F5C2B508CABCE4BBB2 Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/rYSG2dYjGVa3YG5opt3m2blLdDQ.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215284 IP address blocks: 185.40.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0e:63:84:fb:44:f5:c2:b5:08:ca:bc:e4:bb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad8486d9d6231956b7606e68a6dde6d9b94b7434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:95:78:74:5d:38:c2:cc:0a:4d:c4:77:d0: f3:5c:8a:f4:02:95:79:13:cb:1a:6a:f8:88:0b:d1: 87:4d:66:13:d3:1d:0a:2d:de:d6:bf:0f:2c:b4:38: de:a6:eb:5f:b3:49:7e:bd:72:92:85:79:47:50:b1: fb:5a:b9:0f:2a:3a:72:14:74:8a:7a:69:e8:ad:80: a6:a0:9c:8f:f3:6a:94:62:44:55:30:a0:99:f7:69: b7:ef:e1:b3:aa:f0:16:c0:6b:d5:4a:d7:c5:32:77: 47:ba:2b:29:3d:f2:d8:11:f0:1c:08:2c:c7:f7:69: 3a:f8:e6:09:28:0a:ba:74:c8:64:24:4a:fe:01:45: c8:27:eb:73:9c:0d:a1:e7:c4:86:87:be:8b:b8:f3: 9b:a6:1a:35:0f:6b:44:19:65:d7:eb:29:23:6c:1c: 52:61:8d:0f:b7:88:b0:cf:56:60:cb:9e:c2:9c:2e: 27:00:f0:b4:b7:91:77:28:50:95:dd:e9:f1:a5:61: 72:7f:bb:73:a6:66:1e:26:93:39:60:5e:59:0f:49: 4f:37:e8:de:de:19:bd:24:46:47:ac:08:1a:50:af: 09:dd:5c:2d:87:e0:17:3b:a8:7e:79:19:b4:ec:74: 2c:3a:01:ae:a0:e8:81:e4:e9:ee:c2:09:bd:12:9f: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:84:86:D9:D6:23:19:56:B7:60:6E:68:A6:DD:E6:D9:B9:4B:74:34 X509v3 Authority Key Identifier: keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/rYSG2dYjGVa3YG5opt3m2blLdDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.34.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:80:6a:8b:0c:e7:fe:91:46:89:8e:4b:8a:dd:6a:6c:8c:ce: 02:9a:81:63:c8:cf:56:e7:e3:fd:6d:30:18:52:f3:b2:2b:e5: 8c:9d:73:7a:6e:c8:5d:6f:d4:23:39:68:b3:0c:27:14:16:06: 5e:8b:c2:da:d6:e7:59:08:9e:2f:5e:6b:bb:04:78:3e:9c:05: 97:c1:f9:15:f1:03:6c:d2:b3:67:13:8a:97:29:cf:fe:cf:ea: 6d:b2:97:33:11:77:81:89:51:3a:67:22:47:b2:4f:e3:2f:50: cc:a3:3f:3d:81:5e:68:2a:99:80:61:63:d9:d9:e8:a3:ba:ae: c9:14:4c:a5:23:ad:69:47:ed:28:a2:6a:7a:ac:7a:ef:b9:f6: 1b:bc:03:6f:7c:a9:69:21:56:b4:f0:11:56:c5:56:88:cb:71: 01:72:0c:cc:e8:5b:1f:c3:84:6c:7c:0b:24:51:ac:d7:c3:72: 19:30:e9:9a:05:bd:72:90:47:8d:ab:84:98:52:15:61:84:69: 19:7f:5f:ea:01:e5:cb:ee:b2:63:0c:80:2d:44:f3:36:fd:d5: 85:ee:f9:a4:84:50:66:70:5e:c0:f6:7f:84:1e:1b:e6:10:ba: 73:6d:45:29:00:01:14:6e:88:65:d7:ca:40:be:30:80:87:f3: 81:ca:2d:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ng5jhPtE9cK1CMq85LuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYjMzMDk0MjI5OGY3NTgyM2NiYjk4MGM4ZWIyYWNmMGI3 YzBjMWIwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDg0ODZkOWQ2MjMxOTU2Yjc2MDZlNjhhNmRkZTZkOWI5NGI3NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOCVeHRdOMLMCk3Ed9DzXIr0ApV5 E8saaviIC9GHTWYT0x0KLd7Wvw8stDjeputfs0l+vXKShXlHULH7WrkPKjpyFHSK emnorYCmoJyP82qUYkRVMKCZ92m37+GzqvAWwGvVStfFMndHuispPfLYEfAcCCzH 92k6+OYJKAq6dMhkJEr+AUXIJ+tznA2h58SGh76LuPObpho1D2tEGWXX6ykjbBxS YY0Pt4iwz1Zgy57CnC4nAPC0t5F3KFCV3enxpWFyf7tzpmYeJpM5YF5ZD0lPN+je 3hm9JEZHrAgaUK8J3Vwth+AXO6h+eRm07HQsOgGuoOiB5Onuwgm9Ep+i9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2EhtnWIxlWt2BuaKbd5tm5S3Q0MB8GA1UdIwQY MBaAFCuzMJQimPdYI8u5gMjrKs8LfAwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt NmIzYTQ3NjY3Y2E4LzEvcllTRzJkWWpHVmEzWUc1b3B0M20yYmxMZERRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4 LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSgiMA0G CSqGSIb3DQEBCwUAA4IBAQCagGqLDOf+kUaJjkuK3WpsjM4CmoFjyM9W5+P9bTAY UvOyK+WMnXN6bshdb9QjOWizDCcUFgZei8La1udZCJ4vXmu7BHg+nAWXwfkV8QNs 0rNnE4qXKc/+z+ptspczEXeBiVE6ZyJHsk/jL1DMoz89gV5oKpmAYWPZ2eijuq7J FEylI61pR+0oomp6rHrvufYbvANvfKlpIVa08BFWxVaIy3EBcgzM6Fsfw4RsfAsk UazXw3IZMOmaBb1ykEeNq4SYUhVhhGkZf1/qAeXL7rJjDIAtRPM2/dWF7vmkhFBm cF7A9n+EHhvmELpzbUUpAAEUbohl18pAvjCAh/OByi19 -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:26 2026 by rpki-client