This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/Ytkz7IxlIJqgH0OSm69kUlp-EPE.roa File: Ytkz7IxlIJqgH0OSm69kUlp-EPE.roa (raw, json) Hash identifier: 7rQof/E5rSCbBHNmieO3tmtfWyDOmcOWMAzvg/zrozI= Subject key identifier: 62:D9:33:EC:8C:65:20:9A:A0:1F:43:92:9B:AF:64:52:5A:7E:10:F1 Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Certificate serial: 019B7F153D95F10058087DDC5997D2FC4EAD Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/Ytkz7IxlIJqgH0OSm69kUlp-EPE.roa Signing time: Fri 02 Jan 2026 14:20:56 +0000 ROA not before: Fri 02 Jan 2026 14:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200449 IP address blocks: 46.174.140.0/24 maxlen: 24 46.174.141.0/24 maxlen: 24 2a06:3341::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3d:95:f1:00:58:08:7d:dc:59:97:d2:fc:4e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62d933ec8c65209aa01f43929baf64525a7e10f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:85:52:f8:f0:7e:35:12:0e:68:7c:a3:52: e6:81:c0:e0:57:64:46:c8:1e:c3:72:b3:f1:5b:ed: 86:b2:72:cb:a1:97:ea:41:73:cc:e2:3b:9e:46:20: 71:87:f9:4a:a6:76:89:c4:c6:ac:1a:cf:74:af:41: 9c:8f:2b:63:07:5f:6e:86:4b:23:e1:e6:b6:f4:b4: 4a:f1:45:9c:ee:a1:92:0f:1b:75:3c:5c:c2:bd:ea: 00:c0:d8:51:82:fe:56:4f:7d:36:d4:1b:85:51:54: 05:6d:65:1d:db:14:47:7e:37:58:f5:74:5d:32:4f: 30:66:b9:59:fa:ea:45:f7:cf:7b:49:35:ba:cd:18: f0:6f:f5:db:2c:e1:c4:8e:ea:81:23:e4:04:1d:cd: e9:0c:74:a1:2e:99:25:cc:99:9d:ca:3e:00:90:85: ae:f3:1b:7a:7b:82:22:2f:af:a1:60:16:15:8f:43: 99:e1:2e:74:5c:c1:05:62:69:6f:9e:52:d0:e4:5d: 40:6d:ad:03:43:3a:59:de:61:aa:9d:64:49:77:0d: 79:f9:55:8c:c2:7f:35:d3:6a:d0:c8:80:5b:07:11: 79:41:b0:41:d0:c3:66:5a:3a:39:e6:06:c5:54:a3: ba:8c:2f:15:99:5f:75:9e:40:35:2e:66:73:c9:a5: 1b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:33:EC:8C:65:20:9A:A0:1F:43:92:9B:AF:64:52:5A:7E:10:F1 X509v3 Authority Key Identifier: keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/Ytkz7IxlIJqgH0OSm69kUlp-EPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.140.0/23 IPv6: 2a06:3341::/32 Signature Algorithm: sha256WithRSAEncryption 06:d7:2d:21:42:97:d4:bf:d9:89:4a:1a:a4:bf:dd:21:74:5d: 04:c5:2a:24:99:62:ae:bd:bd:d3:31:b9:1b:34:71:b7:b4:38: a2:c0:20:e1:c7:00:43:a7:0c:fe:1d:1a:2e:e0:40:03:ce:d7: 29:35:5c:75:86:c0:a6:d3:67:52:02:ba:18:ea:09:f4:c5:5a: 46:df:b7:fc:63:1d:c8:dd:1a:55:e5:8c:90:d2:90:ce:b2:22: 86:2e:0c:f2:bd:68:20:88:e8:c5:93:ea:9d:16:a6:b6:54:07: 79:8e:b8:1a:b5:bf:d9:44:10:60:80:52:55:43:91:f3:82:dd: 25:7c:c8:7b:7a:01:67:01:e0:36:69:95:72:b3:ad:bc:dd:62: f4:89:14:40:5a:a4:8d:6c:52:69:2c:46:14:8e:e2:e2:a3:01: b6:f4:b5:3a:ac:09:2b:d2:47:a6:5f:b3:10:ca:d2:a5:a7:d5: 77:39:43:74:45:55:ed:79:4e:2d:fd:4f:36:53:09:87:c0:cb: ba:00:3b:49:ee:19:9d:d0:0e:9b:e1:a8:1d:79:f1:8c:91:81: 94:34:fe:c6:01:0f:ee:a1:ae:a5:a4:7b:75:6c:d2:28:8d:1d: ac:98:1e:59:74:a6:98:65:b2:f6:6b:c0:f1:19:51:0c:49:23: c8:33:6e:a3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FT2V8QBYCH3cWZfS/E6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmY5MzM5ZmJiOGNiMzNjNTIyNzUxYzUzMGYzYTIwYTc1 MzU0N2MwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmQ5MzNlYzhjNjUyMDlhYTAxZjQzOTI5YmFmNjQ1MjVhN2UxMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GyFUvjwfjUSDmh8o1LmgcDgV2RG yB7DcrPxW+2GsnLLoZfqQXPM4jueRiBxh/lKpnaJxMasGs90r0GcjytjB19uhksj 4ea29LRK8UWc7qGSDxt1PFzCveoAwNhRgv5WT3021BuFUVQFbWUd2xRHfjdY9XRd Mk8wZrlZ+upF9897STW6zRjwb/XbLOHEjuqBI+QEHc3pDHShLpklzJmdyj4AkIWu 8xt6e4IiL6+hYBYVj0OZ4S50XMEFYmlvnlLQ5F1Aba0DQzpZ3mGqnWRJdw15+VWM wn8102rQyIBbBxF5QbBB0MNmWjo55gbFVKO6jC8VmV91nkA1LmZzyaUbAwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGLZM+yMZSCaoB9DkpuvZFJafhDxMB8GA1UdIwQY MBaAFC0vkzn7uMszxSJ1HFMPOiCnU1R8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgt MWQzYTFlOWI3NTQ1LzEvWXRrejdJeGxJSnFnSDBPU202OWtVbHAtRVBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85NWZhNjEtMTdmYi00ODkwLTk1OTgtMWQzYTFlOWI3NTQ1 LzEvTFMtVE9mdTR5elBGSW5VY1V3ODZJS2RUVkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLq6MMA0E AgACMAcDBQAqBjNBMA0GCSqGSIb3DQEBCwUAA4IBAQAG1y0hQpfUv9mJShqkv90h dF0ExSokmWKuvb3TMbkbNHG3tDiiwCDhxwBDpwz+HRou4EADztcpNVx1hsCm02dS AroY6gn0xVpG37f8Yx3I3RpV5YyQ0pDOsiKGLgzyvWggiOjFk+qdFqa2VAd5jrga tb/ZRBBggFJVQ5Hzgt0lfMh7egFnAeA2aZVys6283WL0iRRAWqSNbFJpLEYUjuLi owG29LU6rAkr0kemX7MQytKlp9V3OUN0RVXteU4t/U82UwmHwMu6ADtJ7hmd0A6b 4agdefGMkYGUNP7GAQ/uoa6lpHt1bNIojR2smB5ZdKaYZbL2a8DxGVEMSSPIM26j -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:35 2026 by rpki-client