This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/ynuNLafz9LbBB3yzoCWMv9fdVAw.roa File: ynuNLafz9LbBB3yzoCWMv9fdVAw.roa (raw, json) Hash identifier: ggLRVHISQxu3PXeYplz4bZPnG+60dpFC8ZQ4LkB5T9g= Subject key identifier: CA:7B:8D:2D:A7:F3:F4:B6:C1:07:7C:B3:A0:25:8C:BF:D7:DD:54:0C Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Certificate serial: 019B7BA513359C5CC6C8EB84B8E818D360BA Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/ynuNLafz9LbBB3yzoCWMv9fdVAw.roa Signing time: Thu 01 Jan 2026 22:19:34 +0000 ROA not before: Thu 01 Jan 2026 22:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202693 IP address blocks: 80.75.220.0/24 maxlen: 24 2a06:c640::/32 maxlen: 32 2a06:c641::/32 maxlen: 32 2a06:c642::/32 maxlen: 32 2a06:c643::/32 maxlen: 32 2a06:c644::/32 maxlen: 32 2a06:c645::/32 maxlen: 32 2a06:c646::/32 maxlen: 32 2a06:c647::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:13:35:9c:5c:c6:c8:eb:84:b8:e8:18:d3:60:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca7b8d2da7f3f4b6c1077cb3a0258cbfd7dd540c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a2:ee:35:50:75:d4:cb:e3:c7:eb:71:2e:ab: ca:85:2e:da:bc:72:c6:85:1e:35:2b:53:5d:8a:41: fb:b8:d4:6c:00:a8:1e:53:de:39:20:49:63:56:35: 2b:14:f6:b6:18:82:37:d6:93:3b:2f:dc:7e:9a:83: 7d:27:2c:73:66:1f:f1:ab:e7:bb:bb:f5:6b:21:38: 47:d5:dd:2d:cf:40:c1:7c:26:56:6a:e7:75:6e:b4: 51:ab:50:a1:66:f9:bd:93:19:dd:ec:94:fa:63:1b: a2:b0:7b:76:d2:bf:68:90:06:0a:bf:d4:95:75:d7: 36:45:40:70:06:99:97:45:a4:ca:71:e5:44:33:e8: 88:8d:02:69:a5:f5:f7:42:57:11:71:ff:ac:ec:aa: 40:99:18:a0:09:cf:04:28:eb:2a:d2:cc:0f:ce:4f: 13:58:53:75:fc:0d:60:06:d0:fb:2b:75:4e:8d:ac: 9f:68:fc:03:13:c7:7a:be:1f:46:99:57:00:2d:a7: b8:d8:f5:96:62:8b:2f:47:6d:7d:1b:aa:d9:c6:3e: ee:68:6d:5e:06:72:8e:92:99:4e:9a:03:a2:90:29: de:80:3c:a4:93:a7:23:cc:1c:36:02:5b:f8:e9:44: 94:a8:93:cd:95:aa:d9:84:90:62:ce:db:d1:37:b8: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7B:8D:2D:A7:F3:F4:B6:C1:07:7C:B3:A0:25:8C:BF:D7:DD:54:0C X509v3 Authority Key Identifier: keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/ynuNLafz9LbBB3yzoCWMv9fdVAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.220.0/24 IPv6: 2a06:c640::/29 Signature Algorithm: sha256WithRSAEncryption 10:0c:97:41:f3:ed:5e:5d:fb:fa:20:73:2b:09:7d:c2:f0:1e: 64:f7:9b:f6:80:df:84:89:3d:b5:6a:92:b8:09:53:c9:1a:1a: 6a:16:54:3e:e6:6f:c6:84:ba:95:f2:5a:df:41:2a:95:86:6d: 85:c6:52:3f:e7:4c:ef:08:b8:1b:7b:1d:d0:96:df:58:e8:ad: 16:36:85:f9:3f:6d:ee:48:19:97:f0:d2:ee:fc:b2:6a:d0:63: 1b:6d:30:32:ce:b6:09:5c:18:50:35:41:8e:47:41:2a:2a:9f: 7c:3f:d2:7e:91:db:a8:49:6c:3b:bb:33:f1:91:df:80:ac:39: da:13:f8:56:8a:96:f0:0e:f1:74:9a:68:18:0f:2b:25:8d:f3: d0:1a:b5:51:8b:be:f0:0c:0c:54:16:24:b0:8c:57:4b:b5:e9: ea:46:fd:b3:94:07:7d:e7:93:b3:44:c3:ee:84:05:52:00:f7: 71:b9:6e:4c:f3:db:af:6f:23:72:8f:c7:e9:de:0d:78:0d:97: 75:6c:e6:32:19:2b:ab:aa:94:78:b6:7f:79:69:00:c5:63:e1: b3:f4:90:b0:8e:83:c9:15:cc:cf:e8:8d:9a:dd:a4:02:16:b5: ac:52:d9:11:41:84:73:ce:df:3c:3b:03:99:55:ba:2d:4b:e9: 72:83:3d:1c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pRM1nFzGyOuEuOgY02C6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWE4MTMxMzljMDZiMWRjZjFiZmU4MzMyYjliODAxYWIz ZWIzMDIwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTdiOGQyZGE3ZjNmNGI2YzEwNzdjYjNhMDI1OGNiZmQ3ZGQ1NDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaLuNVB11Mvjx+txLqvKhS7avHLG hR41K1NdikH7uNRsAKgeU945IEljVjUrFPa2GII31pM7L9x+moN9JyxzZh/xq+e7 u/VrIThH1d0tz0DBfCZWaud1brRRq1ChZvm9kxnd7JT6YxuisHt20r9okAYKv9SV ddc2RUBwBpmXRaTKceVEM+iIjQJppfX3QlcRcf+s7KpAmRigCc8EKOsq0swPzk8T WFN1/A1gBtD7K3VOjayfaPwDE8d6vh9GmVcALae42PWWYosvR219G6rZxj7uaG1e BnKOkplOmgOikCnegDykk6cjzBw2Alv46USUqJPNlarZhJBiztvRN7jwTQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMp7jS2n8/S2wQd8s6AljL/X3VQMMB8GA1UdIwQY MBaAFESqgTE5wGsdzxv+gzK5uAGrPrMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUt NDFkZDdmM2VhN2E0LzEveW51TkxhZno5TGJCQjN5em9DV012OWZkVkF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUtNDFkZDdmM2VhN2E0 LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUEvcMA0E AgACMAcDBQMqBsZAMA0GCSqGSIb3DQEBCwUAA4IBAQAQDJdB8+1eXfv6IHMrCX3C 8B5k95v2gN+EiT21apK4CVPJGhpqFlQ+5m/GhLqV8lrfQSqVhm2FxlI/50zvCLgb ex3Qlt9Y6K0WNoX5P23uSBmX8NLu/LJq0GMbbTAyzrYJXBhQNUGOR0EqKp98P9J+ kduoSWw7uzPxkd+ArDnaE/hWipbwDvF0mmgYDysljfPQGrVRi77wDAxUFiSwjFdL tenqRv2zlAd955OzRMPuhAVSAPdxuW5M89uvbyNyj8fp3g14DZd1bOYyGSurqpR4 tn95aQDFY+Gz9JCwjoPJFczP6I2a3aQCFrWsUtkRQYRzzt88OwOZVbotS+lygz0c -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:19 2026 by rpki-client