This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/yDp_cabLhHNgFb7Jj4kWSqbMiuk.roa File: yDp_cabLhHNgFb7Jj4kWSqbMiuk.roa (raw, json) Hash identifier: v8TlzmItyWM72tUXJ5LijiOK5kdxTCw7SZEC3tomivk= Subject key identifier: C8:3A:7F:71:A6:CB:84:73:60:15:BE:C9:8F:89:16:4A:A6:CC:8A:E9 Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66 Certificate serial: 019B7E38C7B829022930AA23C841818AD31F Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/yDp_cabLhHNgFb7Jj4kWSqbMiuk.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15752 IP address blocks: 149.177.128.0/23 maxlen: 23 149.177.130.0/23 maxlen: 23 149.177.148.0/23 maxlen: 23 149.177.150.0/23 maxlen: 23 149.177.152.0/23 maxlen: 23 149.177.154.0/23 maxlen: 23 149.177.164.0/23 maxlen: 23 149.177.166.0/23 maxlen: 23 149.177.176.0/22 maxlen: 22 149.177.180.0/22 maxlen: 22 149.177.192.0/22 maxlen: 22 149.177.212.0/22 maxlen: 22 149.177.216.0/22 maxlen: 22 149.177.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c7:b8:29:02:29:30:aa:23:c8:41:81:8a:d3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66 Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c83a7f71a6cb84736015bec98f89164aa6cc8ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c7:b8:c5:2d:ac:a9:fe:ad:94:f3:48:79:d0: 2e:6b:b1:d9:b1:a2:fa:8d:21:bc:6e:6b:69:e5:aa: e5:cc:a5:12:a2:fd:04:b6:33:b2:e6:e5:9e:d9:62: b7:30:9b:74:49:40:73:20:59:9b:eb:19:35:d3:24: 5d:7f:1f:9d:bb:a3:9d:92:d9:65:8f:58:2d:a2:bc: ac:52:f3:95:c1:95:14:b3:a2:17:5a:3c:4f:0c:68: f7:1e:f3:3e:69:35:24:20:80:3e:a9:dd:26:95:e5: 3b:40:08:03:9a:2f:4e:3c:22:59:a6:e2:1b:30:10: 57:0f:6c:54:4f:8f:87:6a:c6:17:29:28:ae:51:a4: f6:94:56:a5:67:28:89:13:39:7b:32:7c:2e:74:40: bb:d5:cf:7d:c6:3e:f0:46:5e:b0:e3:74:6d:ad:99: 3b:63:0c:ef:2b:5d:8d:f9:de:81:7e:e0:9a:ce:2d: 29:6c:ab:12:3b:de:e3:fb:c3:f7:24:29:0b:df:2b: 91:fb:b0:f2:f4:33:e5:77:3c:a9:52:96:15:ba:0b: b2:20:46:e3:9e:0f:f9:67:7c:c6:ab:29:2c:b0:be: 90:6b:ce:70:bf:f6:6b:83:c3:7c:a3:ec:a2:11:c4: 2c:ca:d7:30:4c:6d:52:4a:69:d1:c1:bc:5a:67:e0: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:7F:71:A6:CB:84:73:60:15:BE:C9:8F:89:16:4A:A6:CC:8A:E9 X509v3 Authority Key Identifier: keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/yDp_cabLhHNgFb7Jj4kWSqbMiuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.177.128.0/22 149.177.148.0-149.177.155.255 149.177.164.0/22 149.177.176.0/21 149.177.192.0/22 149.177.212.0-149.177.219.255 149.177.224.0/21 Signature Algorithm: sha256WithRSAEncryption 47:b1:d9:79:e2:04:45:d4:e6:0c:1a:6c:81:d8:0d:46:24:ac: 59:bc:0a:36:8b:fb:a0:e5:93:b8:b4:a5:51:aa:89:a1:29:e0: c7:cc:7f:a1:ae:56:f7:87:32:ce:c1:1e:fa:23:bf:3a:0f:02: 0f:43:8a:7e:71:9f:c9:93:1e:8d:f2:36:fa:bb:17:04:cf:5f: 3a:6f:bf:fa:f7:db:e7:98:20:04:1e:de:5d:a2:f2:c2:db:2e: a4:44:be:62:ae:66:1d:58:65:0c:3e:4b:f4:2b:3f:4e:06:2d: 28:70:3a:cd:29:18:1d:58:12:b1:8b:11:35:47:f4:67:2b:89: f0:88:be:c3:df:53:51:ea:b8:ee:9e:67:29:a7:d0:f3:73:87: de:3b:ce:3e:98:81:a4:45:9b:dd:9a:09:cb:c1:e9:61:02:df: 6a:ca:1a:ef:5e:0f:70:93:fd:a4:4b:44:0c:a6:73:80:42:cc: 41:3c:8e:a0:a0:08:85:9d:49:ed:cc:46:01:2a:89:68:72:f3: 0e:69:ba:44:91:2f:2e:c0:50:e2:a9:9b:51:2b:ff:81:c0:b4: f6:a0:9e:71:3d:0a:d2:be:76:84:eb:08:3c:51:dc:b0:3d:71: d9:b4:c1:5e:0c:c2:df:b4:08:3a:1c:b7:c1:78:9f:14:be:66: f1:d4:c3:1e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt+OMe4KQIpMKojyEGBitMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDYwZDY1NTRkNTgxZWJiODBlMzllNDUwMTVjZDdkMzZk OTNmNjYwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODNhN2Y3MWE2Y2I4NDczNjAxNWJlYzk4Zjg5MTY0YWE2Y2M4YWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzce4xS2sqf6tlPNIedAua7HZsaL6 jSG8bmtp5arlzKUSov0EtjOy5uWe2WK3MJt0SUBzIFmb6xk10yRdfx+du6Odktll j1gtorysUvOVwZUUs6IXWjxPDGj3HvM+aTUkIIA+qd0mleU7QAgDmi9OPCJZpuIb MBBXD2xUT4+HasYXKSiuUaT2lFalZyiJEzl7MnwudEC71c99xj7wRl6w43RtrZk7 YwzvK12N+d6BfuCazi0pbKsSO97j+8P3JCkL3yuR+7Dy9DPldzypUpYVuguyIEbj ng/5Z3zGqykssL6Qa85wv/Zrg8N8o+yiEcQsytcwTG1SSmnRwbxaZ+DwFwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFMg6f3Gmy4RzYBW+yY+JFkqmzIrpMB8GA1UdIwQY MBaAFPRGDWVU1YHruA455FAVzX022T9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEt ZWJkZjM4YjAwOTVjLzEveURwX2NhYkxoSE5nRmI3Smo0a1dTcWJNaXVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEtZWJkZjM4YjAwOTVj LzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQClbGAMAwD BAKVsZQDBAKVsZgDBAKVsaQDBAOVsbADBAKVscAwDAMEApWx1AMEApWx2AMEA5Wx 4DANBgkqhkiG9w0BAQsFAAOCAQEAR7HZeeIERdTmDBpsgdgNRiSsWbwKNov7oOWT uLSlUaqJoSngx8x/oa5W94cyzsEe+iO/Og8CD0OKfnGfyZMejfI2+rsXBM9fOm+/ +vfb55ggBB7eXaLywtsupES+Yq5mHVhlDD5L9Cs/TgYtKHA6zSkYHVgSsYsRNUf0 ZyuJ8Ii+w99TUeq47p5nKafQ83OH3jvOPpiBpEWb3ZoJy8HpYQLfasoa714PcJP9 pEtEDKZzgELMQTyOoKAIhZ1J7cxGASqJaHLzDmm6RJEvLsBQ4qmbUSv/gcC09qCe cT0K0r52hOsIPFHcsD1x2bTBXgzC37QIOhy3wXifFL5m8dTDHg== -----END CERTIFICATE-----Generated at Mon Jan 12 01:57:47 2026 by rpki-client