This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/yLu29NKuR8T_MSH1sV3ONALBBDI.roa File: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (raw, json) Hash identifier: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4= Subject key identifier: C8:BB:B6:F4:D2:AE:47:C4:FF:31:21:F5:B1:5D:CE:34:02:C1:04:32 Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B791080DEE558A041F1C3BFCB48043B45 Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/yLu29NKuR8T_MSH1sV3ONALBBDI.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26114 IP address blocks: 83.231.153.0/24 maxlen: 24 212.119.8.0/24 maxlen: 24 213.198.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:80:de:e5:58:a0:41:f1:c3:bf:cb:48:04:3b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8bbb6f4d2ae47c4ff3121f5b15dce3402c10432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:5f:be:94:14:4c:da:7f:3e:1e:77:fe:c4: 32:ea:2d:79:09:05:94:f7:9c:34:4a:1e:7d:65:f6: 95:0a:fd:f4:2d:b8:bf:20:53:db:f8:3b:76:9c:05: 0c:f7:85:2c:47:f2:5b:40:d4:82:e5:af:cc:5a:f3: 53:45:1a:2a:34:20:87:ae:d6:d4:5d:f6:27:09:11: 45:f8:83:69:8f:e4:d6:cd:4c:44:ae:a2:23:7b:c4: 9f:51:57:44:17:e2:c2:6e:23:17:8b:81:07:2a:fe: c4:a8:e2:6b:d7:f9:2a:a7:4b:09:ca:76:c4:cf:2b: f7:fc:02:d4:44:46:84:4a:99:c4:ff:5e:75:09:95: 73:51:3b:de:1d:c9:a5:2b:6a:a7:76:50:b0:9b:5e: 3c:1e:d8:8f:1c:a0:4d:15:4e:33:96:6a:ff:56:28: 27:2f:94:42:ee:0f:9b:e6:40:6e:e7:43:02:10:32: 26:d4:0d:a8:da:d1:52:03:c1:b1:f0:67:fb:db:e2: 02:47:23:83:fd:a3:de:6d:23:e2:4e:cb:63:a8:36: d9:0c:ff:81:36:5e:41:9b:70:b2:09:e6:eb:4f:58: d2:4c:80:72:5b:62:ae:37:3f:16:07:c6:6c:bc:ed: 71:25:cd:06:19:be:e1:c8:a6:de:c1:06:5f:4d:ec: 3e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BB:B6:F4:D2:AE:47:C4:FF:31:21:F5:B1:5D:CE:34:02:C1:04:32 X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/yLu29NKuR8T_MSH1sV3ONALBBDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.231.153.0/24 212.119.8.0/24 213.198.53.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:fe:5c:d4:54:6b:db:74:0f:be:97:c7:83:c4:ab:2a:5f:04: 6b:1a:65:2a:b4:dc:23:21:ef:0a:74:67:a9:6f:7a:77:fe:df: c9:29:23:13:5c:95:ab:b3:56:c7:cd:f5:1a:7d:b3:d4:24:d8: 8f:4a:e4:81:ea:a2:8a:fe:6b:72:80:82:da:3c:35:d0:4c:b1: 75:bc:3d:01:cb:dc:47:05:0b:4d:bb:b4:9c:a1:c8:ef:e6:7a: 1e:91:3e:00:d8:6e:4e:01:57:bc:09:ce:fd:fa:7b:65:a2:cb: 4f:ad:0b:0c:eb:c2:59:df:08:a8:78:50:a1:1e:57:eb:5d:19: 00:32:b9:3d:2e:89:1a:49:f2:a9:ee:5f:78:cc:d2:82:57:f8: 89:43:3c:19:a2:f0:50:e0:98:ea:c6:22:65:86:08:67:71:a7: 31:d6:0b:75:b9:bc:33:db:da:ec:65:74:6c:cd:84:9a:a3:39: 24:29:ef:a1:2f:bc:fa:8f:6f:1d:7c:c9:6c:ba:39:a3:9d:89: 4a:f0:29:58:b4:20:1b:36:48:6e:b6:5e:cc:0e:10:66:2d:db: 6f:29:b5:7f:26:17:d4:29:34:99:98:29:81:20:64:21:91:ed: 95:75:d8:ee:b9:2f:64:1d:d7:6c:7b:a7:e8:24:b8:5a:c5:35: b0:19:97:41 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EIDe5VigQfHDv8tIBDtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGJiYjZmNGQyYWU0N2M0ZmYzMTIxZjViMTVkY2UzNDAyYzEwNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg9fvpQUTNp/Ph53/sQy6i15CQWU 95w0Sh59ZfaVCv30Lbi/IFPb+Dt2nAUM94UsR/JbQNSC5a/MWvNTRRoqNCCHrtbU XfYnCRFF+INpj+TWzUxErqIje8SfUVdEF+LCbiMXi4EHKv7EqOJr1/kqp0sJynbE zyv3/ALUREaESpnE/151CZVzUTveHcmlK2qndlCwm148HtiPHKBNFU4zlmr/Vign L5RC7g+b5kBu50MCEDIm1A2o2tFSA8Gx8Gf72+ICRyOD/aPebSPiTstjqDbZDP+B Nl5Bm3CyCebrT1jSTIByW2KuNz8WB8ZsvO1xJc0GGb7hyKbewQZfTew+oQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMi7tvTSrkfE/zEh9bFdzjQCwQQyMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEveUx1MjlOS3VSOFRfTVNIMXNWM09OQUxCQkRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU+eZAwQA 1HcIAwQA1cY1MA0GCSqGSIb3DQEBCwUAA4IBAQCN/lzUVGvbdA++l8eDxKsqXwRr GmUqtNwjIe8KdGepb3p3/t/JKSMTXJWrs1bHzfUafbPUJNiPSuSB6qKK/mtygILa PDXQTLF1vD0By9xHBQtNu7Scocjv5noekT4A2G5OAVe8Cc79+ntlostPrQsM68JZ 3wioeFChHlfrXRkAMrk9LokaSfKp7l94zNKCV/iJQzwZovBQ4JjqxiJlhghncacx 1gt1ubwz29rsZXRszYSaozkkKe+hL7z6j28dfMlsujmjnYlK8ClYtCAbNkhutl7M DhBmLdtvKbV/JhfUKTSZmCmBIGQhke2VddjuuS9kHddse6foJLhaxTWwGZdB -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:09 2026 by rpki-client