This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/rApyy9LbM0uS_U40RfrxHNOVdiM.roa File: rApyy9LbM0uS_U40RfrxHNOVdiM.roa (raw, json) Hash identifier: 5VE5ESPrV4HmrUqHS1KQMWvKC/g6VrBmO48ttb+FhcE= Subject key identifier: AC:0A:72:CB:D2:DB:33:4B:92:FD:4E:34:45:FA:F1:1C:D3:95:76:23 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C806EDC7DAF0C3F41205CDAF2557FC9 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/rApyy9LbM0uS_U40RfrxHNOVdiM.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213021 IP address blocks: 185.39.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6e:dc:7d:af:0c:3f:41:20:5c:da:f2:55:7f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac0a72cbd2db334b92fd4e3445faf11cd3957623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:7e:64:17:9b:e7:37:04:7e:6f:6e:fe:a4: 30:a4:ad:88:8c:70:cc:18:b8:6d:68:15:43:e9:89: 2b:90:a5:46:3c:4b:e4:9c:17:f2:a8:a5:92:48:24: a3:24:95:7f:8a:2e:6a:66:b3:8e:14:89:70:26:6d: 25:3a:89:67:0e:4c:eb:30:b5:7d:e0:f9:f4:7a:13: 31:c5:81:59:16:00:be:ac:c0:63:b6:3b:0f:7b:59: db:58:a5:81:1d:aa:6e:bf:1b:18:61:cb:74:61:30: fa:d7:40:e8:30:92:cd:b0:24:5a:00:50:10:97:98: 61:a9:8b:ef:3e:a0:f7:55:58:2f:eb:18:a4:68:23: f5:c9:f6:14:65:ef:ae:fd:7f:94:05:87:51:04:4f: 5e:b7:68:eb:ee:19:30:44:a6:03:6e:5b:3a:fd:2e: 5c:7f:7b:8e:0f:b4:7a:b8:80:70:f4:85:3c:6f:a5: 25:8f:23:e5:5e:3e:94:fc:dc:10:a2:50:f3:79:aa: 59:80:58:8d:ea:16:69:bb:04:ba:a4:95:2b:ba:a0: 52:86:48:51:3f:ac:ec:9a:07:11:32:01:0f:bd:16: 2a:5c:bf:f3:e9:aa:6a:ff:00:5c:09:55:bb:e1:b9: 1b:82:56:5a:1a:51:78:a3:ff:8b:ba:05:32:fd:cb: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0A:72:CB:D2:DB:33:4B:92:FD:4E:34:45:FA:F1:1C:D3:95:76:23 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/rApyy9LbM0uS_U40RfrxHNOVdiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.19.0/24 Signature Algorithm: sha256WithRSAEncryption b2:ef:60:cc:c4:d5:48:f7:be:04:77:e9:74:ca:2d:cb:dc:b0: 00:81:c5:0e:40:9c:8c:86:c4:a2:8c:18:47:11:7c:ce:6c:87: 2a:75:fd:ee:47:66:77:89:fe:61:43:d9:e5:1c:de:94:2a:b5: a5:cd:c6:5b:51:f3:6e:79:0d:58:d4:98:5b:cb:64:83:fc:f1: ff:9e:5f:15:df:58:23:d8:59:df:c5:86:bc:ed:af:8b:cf:de: db:2b:a4:69:d3:f4:4b:d9:25:9b:14:5f:19:68:c7:89:1e:2c: a0:d9:f4:37:44:73:1c:31:f0:cf:d1:e9:5e:26:e0:47:3c:4a: 6e:e6:60:a8:f4:b1:04:c7:59:68:95:aa:b3:9e:93:f4:53:62: 48:45:67:2f:90:2a:bb:82:12:3b:ed:b3:36:2f:39:71:6e:a8: 60:31:63:88:e6:dd:1e:3f:81:13:79:3d:a9:a3:a6:9f:5e:70: 82:62:8d:c3:e4:2e:17:bb:eb:2d:7d:69:56:4c:91:d2:17:5f: 4d:62:a4:d5:71:a8:e1:27:04:b5:a2:5b:fd:00:72:0f:b5:b6: 26:eb:1d:63:6e:37:d3:30:4f:61:68:8d:a8:3a:b8:4e:0b:05: 1f:64:bd:4f:ca:bd:d8:a6:a1:f8:68:c1:dd:79:6a:1f:f8:3e: 1f:72:59:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gG7cfa8MP0EgXNryVX/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzBhNzJjYmQyZGIzMzRiOTJmZDRlMzQ0NWZhZjExY2QzOTU3NjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB9+ZBeb5zcEfm9u/qQwpK2IjHDM GLhtaBVD6YkrkKVGPEvknBfyqKWSSCSjJJV/ii5qZrOOFIlwJm0lOolnDkzrMLV9 4Pn0ehMxxYFZFgC+rMBjtjsPe1nbWKWBHapuvxsYYct0YTD610DoMJLNsCRaAFAQ l5hhqYvvPqD3VVgv6xikaCP1yfYUZe+u/X+UBYdRBE9et2jr7hkwRKYDbls6/S5c f3uOD7R6uIBw9IU8b6UljyPlXj6U/NwQolDzeapZgFiN6hZpuwS6pJUruqBShkhR P6zsmgcRMgEPvRYqXL/z6apq/wBcCVW74bkbglZaGlF4o/+LugUy/ctiAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwKcsvS2zNLkv1ONEX68RzTlXYjMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvckFweXk5TGJNMHVTX1U0MFJmcnhITk9WZGlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScTMA0G CSqGSIb3DQEBCwUAA4IBAQCy72DMxNVI974Ed+l0yi3L3LAAgcUOQJyMhsSijBhH EXzObIcqdf3uR2Z3if5hQ9nlHN6UKrWlzcZbUfNueQ1Y1Jhby2SD/PH/nl8V31gj 2FnfxYa87a+Lz97bK6Rp0/RL2SWbFF8ZaMeJHiyg2fQ3RHMcMfDP0eleJuBHPEpu 5mCo9LEEx1lolaqznpP0U2JIRWcvkCq7ghI77bM2LzlxbqhgMWOI5t0eP4ETeT2p o6afXnCCYo3D5C4Xu+stfWlWTJHSF19NYqTVcajhJwS1olv9AHIPtbYm6x1jbjfT ME9haI2oOrhOCwUfZL1Pyr3YpqH4aMHdeWof+D4fclls -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:15 2026 by rpki-client