This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yX-hxbBiKImCyjW0HLJFssL6p8I.roa File: yX-hxbBiKImCyjW0HLJFssL6p8I.roa (raw, json) Hash identifier: pVa5uASox4SbHZ2KF1MCKpZhs3SP/cCrtxHWSgFqv9Q= Subject key identifier: C9:7F:A1:C5:B0:62:28:89:82:CA:35:B4:1C:B2:45:B2:C2:FA:A7:C2 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35A264811260F96E3C4AB3708B77C7 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yX-hxbBiKImCyjW0HLJFssL6p8I.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215945 IP address blocks: 81.180.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a2:64:81:12:60:f9:6e:3c:4a:b3:70:8b:77:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97fa1c5b062288982ca35b41cb245b2c2faa7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:a3:89:b3:d8:ab:ce:b6:4e:57:3c:8b:08: f8:53:9c:e1:88:22:82:d2:df:38:45:5b:36:6e:2c: 76:04:7d:31:61:c2:74:60:09:bf:c7:84:6c:aa:63: 50:e5:d6:c3:9e:9c:5c:0f:f6:b8:7f:a8:d0:4e:4b: 87:55:69:67:6a:11:c8:48:04:8d:e1:4b:88:ac:30: 4c:ff:2c:49:5f:26:02:19:e4:83:94:e7:15:a7:99: be:26:90:00:f6:62:ce:24:25:e0:42:e4:82:17:5a: ae:b3:c3:af:f6:26:c5:50:b9:f5:fd:c4:df:d5:74: f2:26:25:fc:d4:62:e0:63:3a:b9:34:ea:eb:97:de: d3:bd:d9:5d:20:22:07:4a:b6:9a:62:cd:04:34:b0: 82:85:73:da:af:f7:09:75:dd:24:d9:2f:2b:71:c4: c5:a2:c0:5a:ad:2d:eb:74:de:9f:a1:39:9e:b4:56: d5:1a:f4:99:35:e3:62:c0:db:ae:49:68:6d:fc:24: 4c:a6:6b:f1:cb:cb:2e:04:7f:18:1f:e4:d4:bf:b2: 52:65:59:77:3d:cd:a9:c4:0a:c1:f5:41:52:4f:a9: 02:d0:14:0f:5d:95:89:38:1c:83:c5:e1:fb:f6:02: 6c:1b:d5:89:e7:81:c1:bb:3c:0f:38:b5:7c:7f:42: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7F:A1:C5:B0:62:28:89:82:CA:35:B4:1C:B2:45:B2:C2:FA:A7:C2 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yX-hxbBiKImCyjW0HLJFssL6p8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.180.96.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:5f:40:53:9d:f2:57:5a:ed:36:5f:ca:42:a4:9e:17:a8:06: 0d:05:98:a7:7b:64:0e:09:c1:29:63:6b:ac:7b:78:6f:4a:58: a6:5b:df:91:c7:af:b3:63:6b:c4:59:ed:19:de:b8:ec:fe:8e: 08:4e:b6:e0:ac:a4:4c:21:bf:a4:48:3c:d9:b4:c6:35:f5:49: 9a:ed:2f:6d:58:17:d9:d2:56:b6:b2:9a:ca:f7:9d:3b:df:47: f6:ab:0f:11:01:9c:88:df:1d:1a:6e:3b:cb:54:1d:12:d2:09: 5f:65:38:53:42:5e:65:1b:13:58:c0:da:e2:8e:3a:47:a0:ce: 9a:4e:a1:87:e6:23:16:8e:a5:80:b6:0c:e0:27:bf:32:d3:b0: 1a:7a:aa:64:41:53:3b:d1:ed:a6:a2:81:19:b8:85:95:4d:84: fc:e6:b0:d7:fa:56:46:1d:32:e2:1b:b2:b0:85:db:96:88:34: 85:bf:88:17:00:5b:bd:e6:3a:0a:15:ff:bf:77:59:e7:75:88: ec:81:a2:e2:08:ac:09:d2:ea:f1:c1:da:22:74:e6:45:d8:af: b3:1b:04:18:ec:19:c0:65:16:26:ab:18:7f:4b:e2:e7:72:63: 1c:98:82:15:5a:22:10:a4:be:32:31:eb:c9:50:23:37:4f:90: c3:a4:df:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NaJkgRJg+W48SrNwi3fHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTdmYTFjNWIwNjIyODg5ODJjYTM1YjQxY2IyNDViMmMyZmFhN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAijibPYq862Tlc8iwj4U5zhiCKC 0t84RVs2bix2BH0xYcJ0YAm/x4RsqmNQ5dbDnpxcD/a4f6jQTkuHVWlnahHISASN 4UuIrDBM/yxJXyYCGeSDlOcVp5m+JpAA9mLOJCXgQuSCF1qus8Ov9ibFULn1/cTf 1XTyJiX81GLgYzq5NOrrl97TvdldICIHSraaYs0ENLCChXPar/cJdd0k2S8rccTF osBarS3rdN6foTmetFbVGvSZNeNiwNuuSWht/CRMpmvxy8suBH8YH+TUv7JSZVl3 Pc2pxArB9UFST6kC0BQPXZWJOByDxeH79gJsG9WJ54HBuzwPOLV8f0JV/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMl/ocWwYiiJgso1tByyRbLC+qfCMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEveVgtaHhiQmlLSW1DeWpXMEhMSkZzc0w2cDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUbRgMA0G CSqGSIb3DQEBCwUAA4IBAQBsX0BTnfJXWu02X8pCpJ4XqAYNBZine2QOCcEpY2us e3hvSlimW9+Rx6+zY2vEWe0Z3rjs/o4ITrbgrKRMIb+kSDzZtMY19Uma7S9tWBfZ 0la2sprK950730f2qw8RAZyI3x0abjvLVB0S0glfZThTQl5lGxNYwNrijjpHoM6a TqGH5iMWjqWAtgzgJ78y07AaeqpkQVM70e2mooEZuIWVTYT85rDX+lZGHTLiG7Kw hduWiDSFv4gXAFu95joKFf+/d1nndYjsgaLiCKwJ0urxwdoidOZF2K+zGwQY7BnA ZRYmqxh/S+LncmMcmIIVWiIQpL4yMevJUCM3T5DDpN+c -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:06 2026 by rpki-client