This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/yAk7pTQzpD51OJrc_S667Imeu48.roa File: yAk7pTQzpD51OJrc_S667Imeu48.roa (raw, json) Hash identifier: n0K5DBh2ynsAKZZ7ysTsFDJrtSamCGO0UaXEVFVUgGA= Subject key identifier: C8:09:3B:A5:34:33:A4:3E:75:38:9A:DC:FD:2E:BA:EC:89:9E:BB:8F Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F49E2ACF3F9C8D694C4365D6155EC Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/yAk7pTQzpD51OJrc_S667Imeu48.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204457 IP address blocks: 213.238.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:49:e2:ac:f3:f9:c8:d6:94:c4:36:5d:61:55:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8093ba53433a43e75389adcfd2ebaec899ebb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:25:8e:c2:21:8a:55:3c:0b:a5:3f:f1:e4: 1f:ab:9d:4b:4a:f5:85:0d:bd:45:a5:86:02:41:e3: c8:af:b8:bc:d2:ae:a8:7a:85:b9:9a:9d:47:1b:0f: 79:e6:a4:98:05:d3:36:c1:4f:65:a2:12:e3:2a:80: ae:0a:44:60:44:ed:cb:db:fa:43:6d:cc:6a:68:88: 7c:1b:9d:dc:d0:ea:ca:91:46:23:8f:6a:56:37:1f: c2:cc:e9:69:aa:2a:92:bc:c8:e6:63:12:4a:e6:99: db:a3:e6:a3:8b:80:ee:ec:4d:56:be:e1:8d:b5:b4: cb:8a:fe:19:95:f7:58:7b:ea:84:fa:de:7f:14:d7: 86:4c:83:c6:f0:8f:87:f1:fd:2e:82:35:e4:16:65: 1e:43:6a:ea:0d:7a:cc:fb:d3:34:71:28:87:04:17: 17:57:4f:c4:59:e1:5f:21:c8:9c:77:8c:b6:09:5d: 33:41:a6:28:13:83:77:89:44:88:7e:7c:75:ac:60: 77:a1:3a:96:26:cc:9d:51:8f:b9:e6:fc:63:8e:6f: 68:ae:a9:04:51:fb:3d:af:77:e4:1e:16:11:07:77: b3:9e:ea:0a:90:b5:2e:3e:f3:0c:b6:74:12:8f:bf: 11:1e:47:62:21:13:13:a7:fc:20:75:7e:d7:bc:ee: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:09:3B:A5:34:33:A4:3E:75:38:9A:DC:FD:2E:BA:EC:89:9E:BB:8F X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/yAk7pTQzpD51OJrc_S667Imeu48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.174.0/24 Signature Algorithm: sha256WithRSAEncryption 41:1c:f9:ef:e7:29:b5:59:10:02:ea:c6:55:b5:e9:06:89:82: 86:07:ca:3f:52:8a:d1:35:62:ae:16:8e:5c:7f:66:37:16:9b: eb:ab:52:0d:5d:61:db:30:44:41:15:9c:bb:1e:b7:18:07:25: 8e:ac:87:b3:c3:67:d0:41:20:33:d8:3f:c6:40:d1:1b:38:2b: 1a:8f:02:97:16:d7:09:e3:31:f0:8d:79:b5:1a:00:41:ef:4b: 78:09:cb:89:8c:70:cd:2e:cb:f9:22:82:b6:e0:c0:f7:2c:07: 32:c2:01:cb:96:97:d1:30:77:f1:36:3c:b5:48:b3:31:e2:c4: 87:49:88:d3:3d:96:8c:b9:e8:af:8a:75:1a:b5:5c:12:6e:ec: 41:82:e0:b1:12:70:4e:54:39:00:82:21:dd:b7:97:71:6d:b7: 07:0d:28:74:5b:d9:66:2e:fb:64:09:38:8b:60:c3:3f:30:e3: 81:0b:73:a7:71:64:bf:c0:47:0c:01:29:f4:b5:24:6a:2e:f7: 31:66:0f:f8:87:e9:e4:2e:5b:df:b8:36:a5:f9:24:96:9d:c9: 32:85:28:0a:d5:45:d0:4c:16:90:29:36:f8:49:83:49:3d:6a: 33:a5:48:59:90:3b:42:14:2c:c2:17:2e:4b:1a:c4:b0:ab:de: eb:20:02:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0nirPP5yNaUxDZdYVXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODA5M2JhNTM0MzNhNDNlNzUzODlhZGNmZDJlYmFlYzg5OWViYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW8ljsIhilU8C6U/8eQfq51LSvWF Db1FpYYCQePIr7i80q6oeoW5mp1HGw955qSYBdM2wU9lohLjKoCuCkRgRO3L2/pD bcxqaIh8G53c0OrKkUYjj2pWNx/CzOlpqiqSvMjmYxJK5pnbo+aji4Du7E1WvuGN tbTLiv4ZlfdYe+qE+t5/FNeGTIPG8I+H8f0ugjXkFmUeQ2rqDXrM+9M0cSiHBBcX V0/EWeFfIcicd4y2CV0zQaYoE4N3iUSIfnx1rGB3oTqWJsydUY+55vxjjm9orqkE Ufs9r3fkHhYRB3eznuoKkLUuPvMMtnQSj78RHkdiIRMTp/wgdX7XvO45+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgJO6U0M6Q+dTia3P0uuuyJnruPMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEveUFrN3BUUXpwRDUxT0pyY19TNjY3SW1ldTQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6uMA0G CSqGSIb3DQEBCwUAA4IBAQBBHPnv5ym1WRAC6sZVtekGiYKGB8o/UorRNWKuFo5c f2Y3Fpvrq1INXWHbMERBFZy7HrcYByWOrIezw2fQQSAz2D/GQNEbOCsajwKXFtcJ 4zHwjXm1GgBB70t4CcuJjHDNLsv5IoK24MD3LAcywgHLlpfRMHfxNjy1SLMx4sSH SYjTPZaMueivinUatVwSbuxBguCxEnBOVDkAgiHdt5dxbbcHDSh0W9lmLvtkCTiL YMM/MOOBC3OncWS/wEcMASn0tSRqLvcxZg/4h+nkLlvfuDal+SSWnckyhSgK1UXQ TBaQKTb4SYNJPWozpUhZkDtCFCzCFy5LGsSwq97rIAIR -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:11 2026 by rpki-client