This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/yV3n7Of-XfxujJs_oZpOk9T5zxc.roa File: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (raw, json) Hash identifier: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o= Subject key identifier: C9:5D:E7:EC:E7:FE:5D:FC:6E:8C:9B:3F:A1:9A:4E:93:D4:F9:CF:17 Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992 Certificate serial: 019B7AC81A2306209EF08E530AB2D08D1414 Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/yV3n7Of-XfxujJs_oZpOk9T5zxc.roa Signing time: Thu 01 Jan 2026 18:18:12 +0000 ROA not before: Thu 01 Jan 2026 18:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47455 IP address blocks: 185.144.252.0/22 maxlen: 24 2a07:4200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:1a:23:06:20:9e:f0:8e:53:0a:b2:d0:8d:14:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992 Validity Not Before: Jan 1 18:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c95de7ece7fe5dfc6e8c9b3fa19a4e93d4f9cf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:3d:b3:a1:c5:7d:12:f1:0f:f7:10:a4:ef: 2e:5f:b6:6e:fa:35:88:95:f6:61:90:71:0e:5f:7c: b8:69:bf:c6:96:5e:9f:6f:15:dc:ac:a4:b0:33:86: 3a:78:24:69:c8:25:e8:00:1c:bf:18:75:61:a7:95: 5e:ff:00:dd:21:fd:b4:38:8e:0f:ef:47:7a:f5:71: b9:05:98:eb:7a:7d:f2:3c:53:d5:8d:45:52:60:49: 52:7e:2a:f2:89:75:df:f6:37:45:71:ff:54:44:c8: 0a:ef:23:2f:ab:10:e5:cb:0c:ec:c4:80:8e:ae:d7: e2:4f:e6:ec:01:79:b3:69:11:95:52:cd:88:65:cf: e6:96:ff:90:e2:99:8e:72:80:67:b8:ca:ba:98:e7: de:d6:16:f3:01:58:d6:a8:4a:86:33:0b:a2:00:6a: ce:6c:ed:e0:cc:55:3c:ea:03:a3:ff:df:55:74:08: c4:d3:90:6c:f0:04:43:90:69:18:d4:c5:18:f4:ab: 7d:c7:fa:72:fe:65:f7:bc:18:3d:1f:25:2a:e2:66: 9a:7d:42:1f:76:13:52:63:ae:95:bf:df:74:9b:12: a7:c3:07:97:a0:17:30:be:ef:b1:cd:2a:ca:76:74: 3f:1b:76:fb:9f:48:4a:89:1b:c6:dc:80:db:b3:2d: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5D:E7:EC:E7:FE:5D:FC:6E:8C:9B:3F:A1:9A:4E:93:D4:F9:CF:17 X509v3 Authority Key Identifier: keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/yV3n7Of-XfxujJs_oZpOk9T5zxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.252.0/22 IPv6: 2a07:4200::/29 Signature Algorithm: sha256WithRSAEncryption 55:75:e2:2a:d6:56:10:fd:ca:ff:28:ef:27:45:8a:73:da:54: 22:b7:25:71:12:4d:ef:fd:64:2a:8c:fc:f5:a2:44:f6:ad:ce: 05:23:8d:b7:29:56:2b:74:b9:2b:51:30:2f:f6:fa:61:ec:4d: eb:7a:1f:4c:67:56:08:da:b2:c0:7f:ca:7a:1f:55:18:20:71: c6:7f:71:23:02:fb:b6:5a:22:a0:5d:ce:84:cb:79:44:68:60: de:13:27:74:c4:58:e2:61:e3:5a:9e:d1:34:3a:ff:7f:e9:df: e2:72:11:69:23:6a:2d:a8:98:89:1c:9e:40:4d:cd:4a:dd:ca: cc:10:a8:fa:da:78:b0:29:40:ec:52:80:59:10:2a:df:a3:cd: e7:33:d9:2a:74:7f:95:a8:8e:09:b9:b8:89:28:da:cc:31:4e: 13:dd:72:3e:fc:57:fd:a1:5e:40:1e:68:39:da:54:46:50:19: 50:d1:27:7a:f8:ac:ab:b2:5c:a3:ef:f7:fa:e9:cf:10:aa:9d: ab:f4:2d:60:ee:06:f5:b7:ab:80:aa:d1:f6:4f:de:92:25:8f: 78:cf:c1:69:4f:cf:88:83:47:ec:a6:a3:87:f9:cc:c3:8a:40: 0a:fb:b1:4e:ce:a5:c2:f9:a3:4b:81:0e:f2:da:80:b9:65:57: 81:89:04:ba -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yBojBiCe8I5TCrLQjRQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4 NjI5OTIwHhcNMjYwMTAxMTgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTVkZTdlY2U3ZmU1ZGZjNmU4YzliM2ZhMTlhNGU5M2Q0ZjljZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5c9s6HFfRLxD/cQpO8uX7Zu+jWI lfZhkHEOX3y4ab/Gll6fbxXcrKSwM4Y6eCRpyCXoABy/GHVhp5Ve/wDdIf20OI4P 70d69XG5BZjren3yPFPVjUVSYElSfiryiXXf9jdFcf9URMgK7yMvqxDlywzsxICO rtfiT+bsAXmzaRGVUs2IZc/mlv+Q4pmOcoBnuMq6mOfe1hbzAVjWqEqGMwuiAGrO bO3gzFU86gOj/99VdAjE05Bs8ARDkGkY1MUY9Kt9x/py/mX3vBg9HyUq4maafUIf dhNSY66Vv990mxKnwweXoBcwvu+xzSrKdnQ/G3b7n0hKiRvG3IDbsy3cxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMld5+zn/l38boybP6GaTpPU+c8XMB8GA1UdIwQY MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt OGYyMTVjMDlhZTcyLzEveVYzbjdPZi1YZnh1akpzX29acE9rOVQ1enhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZD8MA0E AgACMAcDBQMqB0IAMA0GCSqGSIb3DQEBCwUAA4IBAQBVdeIq1lYQ/cr/KO8nRYpz 2lQityVxEk3v/WQqjPz1okT2rc4FI423KVYrdLkrUTAv9vph7E3reh9MZ1YI2rLA f8p6H1UYIHHGf3EjAvu2WiKgXc6Ey3lEaGDeEyd0xFjiYeNantE0Ov9/6d/ichFp I2otqJiJHJ5ATc1K3crMEKj62niwKUDsUoBZECrfo83nM9kqdH+VqI4JubiJKNrM MU4T3XI+/Ff9oV5AHmg52lRGUBlQ0Sd6+Kyrslyj7/f66c8Qqp2r9C1g7gb1t6uA qtH2T96SJY94z8FpT8+Ig0fspqOH+czDikAK+7FOzqXC+aNLgQ7y2oC5ZVeBiQS6 -----END CERTIFICATE-----Generated at Mon Feb 2 08:04:05 2026 by rpki-client