This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa File: yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa (raw, json) Hash identifier: fzqLa9/pLczJAubnxnbiM1yIch9oKlX3jK2XbY433q4= Subject key identifier: C9:FA:12:53:83:10:23:52:08:03:D6:23:DF:36:A6:70:F5:1F:EC:AE Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600 Certificate serial: 019B7758AE1BF0AFA4ADE132CD98CB3A0412 Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa Signing time: Thu 01 Jan 2026 02:17:39 +0000 ROA not before: Thu 01 Jan 2026 02:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42621 IP address blocks: 77.105.64.0/18 maxlen: 18 185.138.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ae:1b:f0:af:a4:ad:e1:32:cd:98:cb:3a:04:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600 Validity Not Before: Jan 1 02:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9fa1253831023520803d623df36a670f51fecae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:db:4d:28:3a:fa:8b:2f:ea:e1:8e:82:e6: 48:25:f8:3a:da:2e:69:ec:38:38:e1:7f:3c:c3:6d: dc:b0:35:ca:19:74:0b:90:9a:29:03:18:33:e6:40: 07:d6:cc:9f:34:50:12:aa:ce:74:11:65:13:52:ae: 80:69:c0:03:00:a3:61:fa:64:6d:57:19:b5:bb:3c: cd:99:bc:93:f3:42:4a:11:e4:59:8b:0c:ed:a2:37: be:c9:54:8a:33:d9:60:7f:1c:51:2a:21:96:6b:8f: c6:f7:9c:fc:36:6c:0d:68:d1:cb:ba:f6:d9:6d:65: 31:f2:cd:32:cd:3b:40:fe:97:82:2c:84:f0:f4:bb: 62:a7:6a:80:bb:fe:d9:52:d0:26:a0:f8:61:fb:a5: 2d:2b:f4:21:1b:b4:41:72:b4:12:10:88:68:1e:c2: f1:e4:b2:33:b7:1c:2a:bc:49:a8:75:c6:c4:40:b8: d5:92:e3:58:e3:dc:6d:61:72:ce:43:af:6a:b0:44: 45:01:11:c5:46:bd:00:96:cd:9a:9e:e9:e9:07:cf: 1a:82:f0:7d:38:e2:6d:ee:1c:0b:ca:81:ac:8b:ce: 0a:b5:78:08:a3:3a:3d:f6:1b:b8:eb:ab:0e:c2:22: 1a:c4:9b:68:b4:43:66:a7:3f:50:12:03:1a:f9:e4: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FA:12:53:83:10:23:52:08:03:D6:23:DF:36:A6:70:F5:1F:EC:AE X509v3 Authority Key Identifier: keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.64.0/18 185.138.48.0/22 Signature Algorithm: sha256WithRSAEncryption 26:66:cf:53:79:3f:49:6c:20:c7:91:df:1f:f2:76:4e:d9:a7: 17:52:9e:8f:1d:ab:c2:48:a8:bd:b4:5d:b7:5d:7d:ff:0f:ab: 7d:e6:55:72:ce:e4:ee:45:6b:41:29:77:fc:d7:ba:06:79:95: 40:bc:ab:20:1f:ca:81:a3:f6:b9:ea:2c:c6:81:2d:82:c1:0d: 16:b0:ca:c4:ed:6b:b8:91:ad:dc:86:33:c1:3d:c4:44:1d:49: 67:18:8a:49:21:6a:50:c4:1b:62:8a:fb:c2:0a:a3:d1:14:15: 5a:6f:2b:ca:85:e6:59:e3:57:8b:b3:8e:ae:da:f0:9f:39:51: ee:3a:32:11:65:25:f1:fc:48:5c:b9:2f:c2:7b:7f:20:fc:85: 7e:54:6d:07:73:25:4c:17:a2:82:2a:6f:ec:f9:29:0b:e4:bb: 41:24:9f:08:fe:fe:b8:e3:4e:bd:80:3f:0f:c3:6a:7d:de:66: ff:44:e4:1f:49:bc:1c:06:d9:db:ef:e3:21:5a:97:14:ce:50: 0c:27:b4:e4:e8:fc:12:89:f9:0b:b7:e6:d1:8c:ab:0a:54:ec: e5:fb:2a:31:ee:b2:9b:e9:94:94:3e:94:a3:4f:3b:64:4c:eb: 84:44:3c:d0:cd:de:d5:eb:6c:19:b7:44:f1:d1:37:72:72:df: 12:93:cc:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WK4b8K+kreEyzZjLOgQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjliZDFjNzE2ZmQyZTk1YWM5ZDYxMDc1ZDcwOTYyMWFl ODA2MDAwHhcNMjYwMTAxMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWZhMTI1MzgzMTAyMzUyMDgwM2Q2MjNkZjM2YTY3MGY1MWZlY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJTbTSg6+osv6uGOguZIJfg62i5p 7Dg44X88w23csDXKGXQLkJopAxgz5kAH1syfNFASqs50EWUTUq6AacADAKNh+mRt Vxm1uzzNmbyT80JKEeRZiwztoje+yVSKM9lgfxxRKiGWa4/G95z8NmwNaNHLuvbZ bWUx8s0yzTtA/peCLITw9Ltip2qAu/7ZUtAmoPhh+6UtK/QhG7RBcrQSEIhoHsLx 5LIztxwqvEmodcbEQLjVkuNY49xtYXLOQ69qsERFARHFRr0Als2anunpB88agvB9 OOJt7hwLyoGsi84KtXgIozo99hu466sOwiIaxJtotENmpz9QEgMa+eS8WQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMn6ElODECNSCAPWI982pnD1H+yuMB8GA1UdIwQY MBaAFBD5vRxxb9LpWsnWEHXXCWIa6AYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUt ZDJhZjFjYzNmYTMxLzEveWZvU1U0TVFJMUlJQTlZajN6YW1jUFVmN0s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUtZDJhZjFjYzNmYTMx LzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGTWlAAwQC uYowMA0GCSqGSIb3DQEBCwUAA4IBAQAmZs9TeT9JbCDHkd8f8nZO2acXUp6PHavC SKi9tF23XX3/D6t95lVyzuTuRWtBKXf817oGeZVAvKsgH8qBo/a56izGgS2CwQ0W sMrE7Wu4ka3chjPBPcREHUlnGIpJIWpQxBtiivvCCqPRFBVabyvKheZZ41eLs46u 2vCfOVHuOjIRZSXx/EhcuS/Ce38g/IV+VG0HcyVMF6KCKm/s+SkL5LtBJJ8I/v64 4069gD8Pw2p93mb/ROQfSbwcBtnb7+MhWpcUzlAMJ7Tk6PwSifkLt+bRjKsKVOzl +yox7rKb6ZSUPpSjTztkTOuERDzQzd7V62wZt0Tx0Tdyct8Sk8zD -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:15 2026 by rpki-client