This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/_yiSgUOzwENT6HWFGMrWkl5JgGo.roa File: _yiSgUOzwENT6HWFGMrWkl5JgGo.roa (raw, json) Hash identifier: 0WyaaoMTpom+arYMmqs6/I0vff3v73Sx2KKt3/t+tGc= Subject key identifier: FF:28:92:81:43:B3:C0:43:53:E8:75:85:18:CA:D6:92:5E:49:80:6A Certificate issuer: /CN=dee02e267c89f50df1a176f0e75f5c28235b23a5 Certificate serial: 019B7FF1187C5CAC74CD4D56554A19350632 Authority key identifier: DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/_yiSgUOzwENT6HWFGMrWkl5JgGo.roa Signing time: Fri 02 Jan 2026 18:21:05 +0000 ROA not before: Fri 02 Jan 2026 18:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199782 IP address blocks: 185.46.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:18:7c:5c:ac:74:cd:4d:56:55:4a:19:35:06:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee02e267c89f50df1a176f0e75f5c28235b23a5 Validity Not Before: Jan 2 18:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff28928143b3c04353e8758518cad6925e49806a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:c3:dd:d2:70:ae:5b:dd:ca:33:f5:ce:52: 11:04:c1:cd:2b:b7:36:98:ad:cd:0c:0d:8a:22:ef: b9:1e:2a:6d:62:14:22:05:2c:1d:6e:e2:a8:b2:a1: 22:d7:57:f9:29:f3:a1:89:23:42:6b:14:11:8e:fd: 0e:07:55:82:95:3f:97:a4:26:08:72:0b:45:97:c0: 12:a6:2e:eb:0a:b6:d1:d9:7a:1e:7e:69:8e:4e:71: ee:24:6e:44:f4:23:f0:3f:35:d9:bb:6f:d6:6b:18: 4c:d2:84:6d:a4:8d:2d:84:18:68:43:0e:1a:78:18: b0:79:00:05:8d:c4:bc:4f:96:24:42:f1:34:ea:b9: 2f:cd:c8:e4:36:2c:b5:e9:2f:cb:c5:fc:35:f2:cf: 6a:30:ca:f2:30:67:f0:e7:7c:3e:2c:36:28:e2:f5: 06:36:07:21:e3:f4:7c:31:fa:01:aa:dc:10:11:a8: 6d:1d:34:02:dc:1c:57:0d:cb:3e:9c:13:08:d9:e6: b1:83:f2:fc:e1:ee:22:a3:94:1b:eb:ae:6a:af:7c: 8f:8c:4e:10:0a:ab:09:ea:56:48:0e:12:71:37:30: d1:79:1d:b3:48:04:35:69:8b:6e:94:f4:78:32:62: 21:a8:46:a1:c0:a8:a4:f0:98:8f:47:b8:ce:f0:d6: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:28:92:81:43:B3:C0:43:53:E8:75:85:18:CA:D6:92:5E:49:80:6A X509v3 Authority Key Identifier: keyid:DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/_yiSgUOzwENT6HWFGMrWkl5JgGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.16.0/22 Signature Algorithm: sha256WithRSAEncryption 93:d2:55:70:a8:e5:21:1a:57:5e:d6:ff:d7:47:a8:7d:9e:9e: 32:53:dc:d4:0d:08:24:e9:a0:cf:0a:e1:4b:c1:53:4d:07:e8: ef:bd:3c:00:a7:ff:66:6d:95:d7:e3:2f:36:a1:c4:0a:60:0b: ec:83:ff:36:92:69:73:e7:ae:04:13:5e:cf:99:0f:1c:f3:4f: 24:b0:b0:a9:dc:46:7d:cc:e3:35:e7:46:e9:f4:76:fe:c9:73: 8b:86:9c:f1:1f:3c:4a:8d:e0:97:e3:32:88:b7:74:68:b0:ad: 27:40:78:8c:f6:05:92:06:ff:b6:33:d7:53:3e:5e:2d:84:16: 2d:fa:54:c5:31:ec:fa:9a:fd:56:93:c1:f9:53:b6:99:ac:31: cf:27:fd:d4:3c:91:66:49:56:31:64:b3:e0:cb:9e:0e:9b:07: 1a:81:bb:4c:53:5b:53:8f:95:bb:45:02:65:93:e3:07:b5:b9: 51:46:7b:98:2f:5f:3f:12:5a:9a:25:45:79:3c:c0:0b:1b:a3: 82:c6:50:f8:c6:18:3c:d3:25:93:01:62:e9:e9:84:13:be:40: 0e:18:ed:f5:6e:fd:90:d1:a6:4e:a8:0b:aa:89:aa:8f:ef:69: 0b:9d:de:d6:e4:1e:46:43:8f:cf:83:22:ec:ad:4a:33:a4:39: 34:bb:df:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Rh8XKx0zU1WVUoZNQYyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTAyZTI2N2M4OWY1MGRmMWExNzZmMGU3NWY1YzI4MjM1 YjIzYTUwHhcNMjYwMTAyMTgyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjI4OTI4MTQzYjNjMDQzNTNlODc1ODUxOGNhZDY5MjVlNDk4MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08/D3dJwrlvdyjP1zlIRBMHNK7c2 mK3NDA2KIu+5HiptYhQiBSwdbuKosqEi11f5KfOhiSNCaxQRjv0OB1WClT+XpCYI cgtFl8ASpi7rCrbR2XoefmmOTnHuJG5E9CPwPzXZu2/WaxhM0oRtpI0thBhoQw4a eBiweQAFjcS8T5YkQvE06rkvzcjkNiy16S/Lxfw18s9qMMryMGfw53w+LDYo4vUG Ngch4/R8MfoBqtwQEahtHTQC3BxXDcs+nBMI2eaxg/L84e4io5Qb665qr3yPjE4Q CqsJ6lZIDhJxNzDReR2zSAQ1aYtulPR4MmIhqEahwKik8JiPR7jO8NaDMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP8okoFDs8BDU+h1hRjK1pJeSYBqMB8GA1UdIwQY MBaAFN7gLiZ8ifUN8aF28OdfXCgjWyOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUt MzcwMThiMWZlOWZhLzEvX3lpU2dVT3p3RU5UNkhXRkdNcldrbDVKZ0dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUtMzcwMThiMWZlOWZh LzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS4QMA0G CSqGSIb3DQEBCwUAA4IBAQCT0lVwqOUhGlde1v/XR6h9np4yU9zUDQgk6aDPCuFL wVNNB+jvvTwAp/9mbZXX4y82ocQKYAvsg/82kmlz564EE17PmQ8c808ksLCp3EZ9 zOM150bp9Hb+yXOLhpzxHzxKjeCX4zKIt3RosK0nQHiM9gWSBv+2M9dTPl4thBYt +lTFMez6mv1Wk8H5U7aZrDHPJ/3UPJFmSVYxZLPgy54OmwcagbtMU1tTj5W7RQJl k+MHtblRRnuYL18/ElqaJUV5PMALG6OCxlD4xhg80yWTAWLp6YQTvkAOGO31bv2Q 0aZOqAuqiaqP72kLnd7W5B5GQ4/PgyLsrUozpDk0u98V -----END CERTIFICATE-----Generated at Tue Jan 13 01:16:51 2026 by rpki-client