This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/yyeX8Lf7MoEXWE2nqjcL3MDHjGo.roa File: yyeX8Lf7MoEXWE2nqjcL3MDHjGo.roa (raw, json) Hash identifier: XTYQm0X78zzYn/UlRMeOq+rCLV2TTg08A4Y5J/JPyHo= Subject key identifier: CB:27:97:F0:B7:FB:32:81:17:58:4D:A7:AA:37:0B:DC:C0:C7:8C:6A Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306 Certificate serial: 019B79112BEDBF088413AA2640D5F9E93D4E Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/yyeX8Lf7MoEXWE2nqjcL3MDHjGo.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35762 IP address blocks: 5.252.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2b:ed:bf:08:84:13:aa:26:40:d5:f9:e9:3d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb2797f0b7fb328117584da7aa370bdcc0c78c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:15:d7:8c:4a:c2:d1:34:3e:1d:b6:05:c7: 2c:0a:7a:d9:8e:e0:e7:b4:d4:09:a8:e2:b4:0d:fb: f1:bb:b7:ed:49:5d:f7:d5:e2:94:67:79:36:76:c3: 67:be:15:c3:70:65:71:0e:dc:99:fa:d8:af:4e:88: 50:50:76:d0:63:38:8b:fb:9c:3e:98:e1:5a:13:d4: e8:8d:de:ab:53:70:24:3d:01:22:02:28:e1:d9:ea: 80:b9:56:84:85:13:1a:84:10:18:13:49:42:3b:3b: cf:d4:b6:02:00:e1:3c:81:02:25:6d:44:02:27:f5: 09:18:6d:be:02:f1:53:fc:87:52:1a:e8:07:06:28: 5e:93:14:93:7a:ec:45:d0:44:5c:34:00:ef:d7:a1: 03:d4:30:b0:6c:ea:d7:a0:73:31:87:86:aa:cb:61: eb:2d:72:60:73:86:3c:d2:a3:fc:fd:42:d7:29:cb: 02:cc:23:d6:dc:27:9e:30:0b:65:2d:9c:20:b4:7f: 59:b2:fb:5c:f2:d0:09:ed:ad:ca:e4:c0:bb:d7:b9: 9f:e3:52:e9:d5:3b:ca:d9:b6:47:58:27:89:83:19: 08:cd:62:b0:ab:11:cb:c0:e5:c3:8c:59:8b:97:7a: 03:ca:2d:98:3b:65:cd:b1:1d:a7:f2:56:ac:9f:85: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:27:97:F0:B7:FB:32:81:17:58:4D:A7:AA:37:0B:DC:C0:C7:8C:6A X509v3 Authority Key Identifier: keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/yyeX8Lf7MoEXWE2nqjcL3MDHjGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.44.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:77:64:c4:d8:43:5c:0e:c5:cc:f0:a0:61:bd:8c:d9:d4:6b: f4:65:be:b4:6a:8c:c5:bd:09:71:27:5d:3d:1c:10:ab:e1:44: a9:22:89:e7:5d:43:73:90:04:2b:b0:e5:3e:5d:75:74:8b:19: a9:b5:d1:f6:cf:73:ab:79:c0:65:62:4c:c3:a7:99:d3:d9:ac: ed:bf:9a:99:b9:f0:a7:30:c7:a4:5a:31:fe:a9:78:8a:38:cb: 93:59:91:71:13:43:f0:25:8a:0e:af:41:bd:a2:4e:d8:a3:ce: de:bd:e5:c7:ba:03:ad:58:1a:4d:c3:63:61:04:72:d5:c6:b9: 82:36:80:71:ac:f6:46:67:8d:4e:86:de:15:a1:cf:77:25:2f: 3e:5f:d7:52:e5:1a:cc:8f:12:57:47:af:11:a0:f2:b9:6a:9b: 53:4b:ee:3b:93:f1:28:2e:8c:3f:ab:b0:01:11:b6:c4:c5:9a: b7:50:0c:96:6e:23:8c:a9:75:d1:e4:97:97:7d:9f:cc:c7:47: de:09:db:e2:3f:d4:03:dc:a4:25:c2:28:9b:f8:f0:6a:38:e2: fc:dd:49:e3:c1:b5:4a:c6:70:6f:79:af:7d:67:1f:5e:eb:af: 62:3e:3e:93:95:25:0e:f7:11:9f:f9:82:0c:e8:ec:6c:aa:27: bc:1a:5f:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESvtvwiEE6omQNX56T1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTk4ZjQ4ZTk4ODc5MGQwZTA3OTM1Mzc5NDFiNDEzZDJl NjAzMDYwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjI3OTdmMGI3ZmIzMjgxMTc1ODRkYTdhYTM3MGJkY2MwYzc4YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgsV14xKwtE0Ph22BccsCnrZjuDn tNQJqOK0Dfvxu7ftSV331eKUZ3k2dsNnvhXDcGVxDtyZ+tivTohQUHbQYziL+5w+ mOFaE9Tojd6rU3AkPQEiAijh2eqAuVaEhRMahBAYE0lCOzvP1LYCAOE8gQIlbUQC J/UJGG2+AvFT/IdSGugHBihekxSTeuxF0ERcNADv16ED1DCwbOrXoHMxh4aqy2Hr LXJgc4Y80qP8/ULXKcsCzCPW3CeeMAtlLZwgtH9Zsvtc8tAJ7a3K5MC717mf41Lp 1TvK2bZHWCeJgxkIzWKwqxHLwOXDjFmLl3oDyi2YO2XNsR2n8lasn4VhRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMsnl/C3+zKBF1hNp6o3C9zAx4xqMB8GA1UdIwQY MBaAFH3pj0jpiHkNDgeTU3lBtBPS5gMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4Yjkt NDc2MzJjYjViODU0LzEveXllWDhMZjdNb0VYV0UybnFqY0wzTURIakdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4YjktNDc2MzJjYjViODU0 LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfwsMA0G CSqGSIb3DQEBCwUAA4IBAQBcd2TE2ENcDsXM8KBhvYzZ1Gv0Zb60aozFvQlxJ109 HBCr4USpIonnXUNzkAQrsOU+XXV0ixmptdH2z3OrecBlYkzDp5nT2aztv5qZufCn MMekWjH+qXiKOMuTWZFxE0PwJYoOr0G9ok7Yo87eveXHugOtWBpNw2NhBHLVxrmC NoBxrPZGZ41Oht4Voc93JS8+X9dS5RrMjxJXR68RoPK5aptTS+47k/EoLow/q7AB EbbExZq3UAyWbiOMqXXR5JeXfZ/Mx0feCdviP9QD3KQlwiib+PBqOOL83UnjwbVK xnBvea99Zx9e669iPj6TlSUO9xGf+YIM6Oxsqie8Gl8Y -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:28 2026 by rpki-client