This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/yNoIji7kPj6SkrPhrYc1VI7PgwE.roa File: yNoIji7kPj6SkrPhrYc1VI7PgwE.roa (raw, json) Hash identifier: y0iJCdo0OgTZ1Mu1ZduXdjf6TefpBi+JC2BMHyoKy/4= Subject key identifier: C8:DA:08:8E:2E:E4:3E:3E:92:92:B3:E1:AD:87:35:54:8E:CF:83:01 Certificate issuer: /CN=fd261d45319e8375187436da44bf5b9adb044a7f Certificate serial: 019B7DCAD077626E5382B74D86EEC4156124 Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/yNoIji7kPj6SkrPhrYc1VI7PgwE.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206492 IP address blocks: 212.25.7.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d0:77:62:6e:53:82:b7:4d:86:ee:c4:15:61:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8da088e2ee43e3e9292b3e1ad8735548ecf8301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:db:6a:bc:1e:21:54:1a:95:77:1f:e5:58:0f: 74:47:a9:83:8a:cc:a6:ba:53:c5:a0:dd:05:fa:d6: 6b:ad:09:ec:8c:f9:0b:f6:fa:23:51:d1:5e:ce:8a: 4b:94:b8:11:7a:f5:96:81:28:52:9f:13:32:99:7c: 76:d4:a2:2d:2e:03:e3:a4:c1:ce:e4:24:bf:24:bf: fb:95:5f:4f:4c:09:c1:c1:61:c3:d2:f0:c3:1e:76: 1d:fe:eb:ee:71:1d:ee:85:3c:56:8f:00:f6:63:b1: f0:62:39:7f:06:65:60:4e:6c:0f:56:f8:0e:e5:06: 00:fe:52:36:0f:31:3b:d2:9d:a0:6b:eb:3e:ec:5a: b1:85:97:23:b1:39:53:06:a8:8f:8f:bb:9d:b7:b5: bd:76:96:f3:e6:ca:ac:a9:c6:b7:52:09:f9:ad:65: 35:cc:91:3e:38:3e:53:ef:64:e5:61:f4:58:1e:87: 70:1f:20:57:36:15:5b:38:fa:ec:e5:76:af:3e:ff: 41:93:b0:50:43:47:20:5e:fa:7a:77:8f:25:fe:f4: bd:63:c9:ce:65:37:2a:10:ca:be:2a:70:af:2a:34: 75:dd:3c:95:a6:0b:63:8b:63:00:be:14:73:2f:b2: a9:87:8f:ce:e7:7b:b5:24:e6:15:48:dd:d4:49:dd: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DA:08:8E:2E:E4:3E:3E:92:92:B3:E1:AD:87:35:54:8E:CF:83:01 X509v3 Authority Key Identifier: keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/yNoIji7kPj6SkrPhrYc1VI7PgwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.25.7.64/28 Signature Algorithm: sha256WithRSAEncryption 74:74:fb:7e:64:dd:33:c1:bb:e6:b3:7f:e1:b7:81:3d:53:ba: 46:97:da:02:f4:e9:66:cc:af:5f:99:4e:df:30:b2:5d:9e:ed: 8a:c3:53:c3:a6:86:bc:57:a5:b9:83:a0:dc:61:54:4e:ce:2c: c1:95:ac:71:85:b0:81:43:10:dd:31:0b:1c:03:a5:e0:8c:96: c1:ec:cf:bc:1e:a5:5c:bb:c9:e5:c9:ee:56:99:dc:f3:d8:bd: 33:ce:fd:a3:48:42:3f:a6:62:1b:7c:d3:72:1a:b9:3a:44:fd: 32:20:ef:43:0d:bf:26:83:80:6b:2b:90:a9:71:c3:c1:0e:fd: 8e:b4:5b:76:e0:f0:e1:b9:f7:99:df:5a:df:af:ab:c5:af:23: 8f:13:6d:a2:c4:2c:3b:30:3e:b8:f0:69:cc:a1:d6:14:33:d5: 20:f5:4c:11:af:6c:04:38:9e:ad:b2:1d:38:65:0c:91:ed:57: fe:ed:01:12:fe:96:a0:67:9c:e6:00:6d:8d:d6:84:ce:49:1d: 12:0c:6b:e3:2a:b6:ef:f3:66:c9:18:8a:5b:0a:91:9b:d3:ee: b2:01:e7:09:de:68:db:7e:70:6e:64:3e:13:e8:0a:3e:07:66: 29:40:7c:7b:57:04:af:2a:1f:c4:00:cc:01:9a:31:03:0c:95: 63:88:31:26 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9ytB3Ym5TgrdNhu7EFWEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMjYxZDQ1MzE5ZTgzNzUxODc0MzZkYTQ0YmY1YjlhZGIw NDRhN2YwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGRhMDg4ZTJlZTQzZTNlOTI5MmIzZTFhZDg3MzU1NDhlY2Y4MzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ttqvB4hVBqVdx/lWA90R6mDisym ulPFoN0F+tZrrQnsjPkL9vojUdFezopLlLgRevWWgShSnxMymXx21KItLgPjpMHO 5CS/JL/7lV9PTAnBwWHD0vDDHnYd/uvucR3uhTxWjwD2Y7HwYjl/BmVgTmwPVvgO 5QYA/lI2DzE70p2ga+s+7FqxhZcjsTlTBqiPj7udt7W9dpbz5sqsqca3Ugn5rWU1 zJE+OD5T72TlYfRYHodwHyBXNhVbOPrs5XavPv9Bk7BQQ0cgXvp6d48l/vS9Y8nO ZTcqEMq+KnCvKjR13TyVpgtji2MAvhRzL7Kph4/O53u1JOYVSN3USd1zwQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMjaCI4u5D4+kpKz4a2HNVSOz4MBMB8GA1UdIwQY MBaAFP0mHUUxnoN1GHQ22kS/W5rbBEp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQt ZWI1MDkzYjIzMWMxLzEveU5vSWppN2tQajZTa3JQaHJZYzFWSTdQZ3dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQtZWI1MDkzYjIzMWMx LzEvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE1BkHQDAN BgkqhkiG9w0BAQsFAAOCAQEAdHT7fmTdM8G75rN/4beBPVO6RpfaAvTpZsyvX5lO 3zCyXZ7tisNTw6aGvFeluYOg3GFUTs4swZWscYWwgUMQ3TELHAOl4IyWwezPvB6l XLvJ5cnuVpnc89i9M879o0hCP6ZiG3zTchq5OkT9MiDvQw2/JoOAayuQqXHDwQ79 jrRbduDw4bn3md9a36+rxa8jjxNtosQsOzA+uPBpzKHWFDPVIPVMEa9sBDierbId OGUMke1X/u0BEv6WoGec5gBtjdaEzkkdEgxr4yq27/NmyRiKWwqRm9PusgHnCd5o 235wbmQ+E+gKPgdmKUB8e1cEryofxADMAZoxAwyVY4gxJg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:42:19 2026 by rpki-client