This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jY-5Ng_ZrYoCAsTCUtD1J48Oh-Y.roa File: jY-5Ng_ZrYoCAsTCUtD1J48Oh-Y.roa (raw, json) Hash identifier: 7gSA2JArrAW4NgkWz9TWe8bSD+7XTIkV5Oj0CNVe3Tg= Subject key identifier: 8D:8F:B9:36:0F:D9:AD:8A:02:02:C4:C2:52:D0:F5:27:8F:0E:87:E6 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3820479DC378184776F049A2CC949E Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jY-5Ng_ZrYoCAsTCUtD1J48Oh-Y.roa Signing time: Fri 02 Jan 2026 10:19:26 +0000 ROA not before: Fri 02 Jan 2026 10:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45054 IP address blocks: 31.184.228.0/23 maxlen: 24 37.9.51.0/24 maxlen: 24 45.159.200.0/22 maxlen: 22 46.161.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:20:47:9d:c3:78:18:47:76:f0:49:a2:cc:94:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d8fb9360fd9ad8a0202c4c252d0f5278f0e87e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:5e:3e:bd:2d:00:5b:55:a3:80:0d:ea:5b: 59:6a:4f:33:a9:00:70:44:e5:cf:6a:66:e8:c8:57: 49:d2:f7:fe:7d:fe:80:76:a6:67:de:52:70:9c:3c: 42:53:ef:e9:c5:4a:38:66:85:2a:e9:ac:e7:64:21: ac:ac:ca:bc:ce:31:eb:69:24:cb:e2:81:81:f0:89: 67:59:9a:04:95:5f:50:07:0b:63:02:55:e0:28:21: 2d:be:b8:f2:4a:4a:60:df:8f:74:24:b0:2e:d3:42: 33:53:60:93:87:a6:bb:02:bb:df:0e:98:13:ac:f6: 68:e2:6d:72:ad:41:ad:1e:fb:c3:d7:f9:f1:e7:9e: 4d:03:f8:69:07:70:c7:46:91:87:5a:50:37:71:fa: 7f:5e:ce:e8:02:3c:b7:47:59:41:fc:91:51:57:57: b7:71:c3:7c:f8:44:a1:8e:22:99:b3:8e:87:26:87: f5:f8:cd:0b:1d:2a:6e:2c:29:e1:9a:e0:5a:60:61: 57:37:5a:fd:93:61:8b:81:04:29:ac:8d:7d:11:19: 94:3e:55:5e:44:8b:2e:a6:0d:53:6a:e3:15:1d:19: 10:9f:de:39:33:41:32:c0:c3:03:78:d5:78:c4:45: a9:5e:16:d6:5f:d7:78:f4:41:fa:57:4f:c7:9b:19: 9a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8F:B9:36:0F:D9:AD:8A:02:02:C4:C2:52:D0:F5:27:8F:0E:87:E6 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jY-5Ng_ZrYoCAsTCUtD1J48Oh-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.184.228.0/23 37.9.51.0/24 45.159.200.0/22 46.161.42.0/23 Signature Algorithm: sha256WithRSAEncryption d0:64:46:34:de:be:15:79:6c:47:19:30:e3:cc:11:2a:7e:72: c1:c9:d9:eb:33:ba:47:9d:6a:87:be:63:ca:6b:26:26:54:43: 1f:0b:00:80:fa:1c:5e:b2:c5:2f:ba:cf:44:c5:85:97:4c:b8: 03:c4:ec:73:c7:b0:7a:f2:8f:e4:1e:6d:aa:f2:de:d8:31:9e: a8:a0:b3:e6:6c:27:91:73:98:d7:b2:bf:e9:bb:6d:82:e7:c2: 02:f0:36:0e:b8:dd:ad:da:9f:d9:65:da:aa:e4:8e:6f:b9:7f: f4:40:ad:26:cd:8e:c2:76:7b:c0:2a:e2:e7:6b:d0:3f:b0:c6: 1f:ae:be:c6:00:a1:45:30:8d:3d:8d:77:dd:71:7f:6f:c5:a9: 40:5f:ca:b4:c9:a9:12:d3:d6:f2:6c:d4:f9:f2:f1:d8:f7:07: fe:83:ee:0e:da:36:60:89:86:fc:e0:dc:be:7b:8d:12:2b:0f: aa:d8:76:ef:2e:69:54:52:b5:ac:1a:01:50:bc:bd:d6:c7:f6: 25:b8:a4:a4:57:2d:85:41:af:83:11:ce:54:c2:bf:c2:09:d8: 39:cf:c4:26:6c:05:3a:7a:de:88:3c:83:83:1c:08:3b:74:da: 83:74:da:3f:a3:5d:65:17:46:f9:6d:80:41:e4:4f:86:79:e0: a8:3c:93:48 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OCBHncN4GEd28EmizJSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDhmYjkzNjBmZDlhZDhhMDIwMmM0YzI1MmQwZjUyNzhmMGU4N2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/lePr0tAFtVo4AN6ltZak8zqQBw ROXPamboyFdJ0vf+ff6AdqZn3lJwnDxCU+/pxUo4ZoUq6aznZCGsrMq8zjHraSTL 4oGB8IlnWZoElV9QBwtjAlXgKCEtvrjySkpg3490JLAu00IzU2CTh6a7ArvfDpgT rPZo4m1yrUGtHvvD1/nx555NA/hpB3DHRpGHWlA3cfp/Xs7oAjy3R1lB/JFRV1e3 ccN8+EShjiKZs46HJof1+M0LHSpuLCnhmuBaYGFXN1r9k2GLgQQprI19ERmUPlVe RIsupg1TauMVHRkQn945M0EywMMDeNV4xEWpXhbWX9d49EH6V0/HmxmaVwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFI2PuTYP2a2KAgLEwlLQ9SePDofmMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvalktNU5nX1pyWW9DQXNUQ1V0RDFKNDhPaC1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBH7jkAwQA JQkzAwQCLZ/IAwQBLqEqMA0GCSqGSIb3DQEBCwUAA4IBAQDQZEY03r4VeWxHGTDj zBEqfnLBydnrM7pHnWqHvmPKayYmVEMfCwCA+hxessUvus9ExYWXTLgDxOxzx7B6 8o/kHm2q8t7YMZ6ooLPmbCeRc5jXsr/pu22C58IC8DYOuN2t2p/ZZdqq5I5vuX/0 QK0mzY7CdnvAKuLna9A/sMYfrr7GAKFFMI09jXfdcX9vxalAX8q0yakS09bybNT5 8vHY9wf+g+4O2jZgiYb84Ny+e40SKw+q2HbvLmlUUrWsGgFQvL3Wx/YluKSkVy2F Qa+DEc5Uwr/CCdg5z8QmbAU6et6IPIODHAg7dNqDdNo/o11lF0b5bYBB5E+GeeCo PJNI -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:59 2026 by rpki-client