This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yFutfiYHWVTAC40LNdtTi0TLpyE.roa File: yFutfiYHWVTAC40LNdtTi0TLpyE.roa (raw, json) Hash identifier: 6tm0Um8w8pSdFRvLTqTUehP6X14B4074YSAkVZ6Lnlw= Subject key identifier: C8:5B:AD:7E:26:07:59:54:C0:0B:8D:0B:35:DB:53:8B:44:CB:A7:21 Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Certificate serial: 019B7C80AEDBE0892341BC7F9811080E9C30 Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yFutfiYHWVTAC40LNdtTi0TLpyE.roa Signing time: Fri 02 Jan 2026 02:19:26 +0000 ROA not before: Fri 02 Jan 2026 02:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62254 IP address blocks: 185.41.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ae:db:e0:89:23:41:bc:7f:98:11:08:0e:9c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Validity Not Before: Jan 2 02:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c85bad7e26075954c00b8d0b35db538b44cba721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:9e:02:02:d9:71:aa:30:19:b4:56:ef:76: c1:51:26:0d:4d:a3:5d:d0:b2:2a:ee:d2:9e:14:51: 3f:16:c7:55:d9:0c:f0:f7:0b:43:81:87:c7:e5:f0: 79:2c:1c:db:99:6b:ab:49:05:4c:6e:12:77:33:26: 4f:49:d7:f8:e0:3e:8f:81:e4:e9:0e:31:0a:db:d6: 3a:37:c4:18:93:43:01:a6:48:46:7f:fb:76:f7:1d: 43:95:06:e8:45:b8:68:dc:07:2e:6f:38:3d:39:37: 44:bc:ee:c7:c1:d2:88:fd:c1:09:2b:0e:6b:65:ac: 86:66:6e:1a:03:29:49:7d:31:b4:b2:ce:96:ee:44: 0e:b7:44:44:9a:ad:6a:ec:61:2a:2b:0a:31:b7:e6: 45:ae:3e:9c:e4:1b:54:79:5c:98:a9:62:e5:cb:be: fb:8b:fe:48:d0:24:c9:10:8b:ff:f2:7d:f0:c8:9e: 0d:c0:9d:e4:52:d5:e4:0f:af:ea:66:7a:bf:e1:cf: cd:90:49:2a:ab:5f:6e:58:91:34:e9:6f:84:c3:c3: 90:0f:b3:d8:f7:c1:cc:3d:0e:31:5b:43:dc:94:9c: 17:1a:dd:5d:6b:2e:0e:0e:5e:71:46:e9:4c:97:d2: 7e:ac:6f:f4:69:d7:02:09:57:bd:21:78:80:d7:04: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5B:AD:7E:26:07:59:54:C0:0B:8D:0B:35:DB:53:8B:44:CB:A7:21 X509v3 Authority Key Identifier: keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yFutfiYHWVTAC40LNdtTi0TLpyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.148.0/22 Signature Algorithm: sha256WithRSAEncryption 71:7e:4c:31:8c:b6:c4:65:1c:0b:83:a4:0e:41:2f:ba:89:0e: fa:d1:33:c2:5e:fe:fc:13:94:88:f8:b8:ba:dd:45:52:56:3b: a7:d0:82:e3:e4:73:dc:d0:2f:dd:32:e8:f6:72:7d:6c:75:61: 7d:b5:1a:af:30:f7:11:f3:79:29:1d:01:a0:dc:ed:97:b5:c8: 00:6b:32:64:79:ac:33:36:bd:eb:ba:62:8f:8f:b9:91:5a:f2: 61:8c:60:c6:f7:05:74:ef:49:0d:85:11:d2:79:84:a6:62:ad: 48:17:1e:88:b6:e7:e4:42:67:65:ec:02:75:d8:87:3c:4a:ac: 63:00:1b:4b:a8:26:86:0c:21:34:3b:87:c9:7f:26:64:d9:fd: ff:9c:61:fb:af:43:fb:40:a9:de:8a:f9:b3:b9:17:ee:a8:d4: 7b:b4:85:b0:2e:47:ee:75:df:cd:7e:aa:a4:e2:1f:18:ca:c8: 01:f9:89:ad:d4:96:c8:47:f0:ae:1f:ed:a9:dc:15:b3:40:51: e4:7e:57:60:18:fd:9d:41:b2:05:66:b5:6f:a3:b1:d3:ce:df: 00:9e:97:24:fd:53:8c:c5:3e:8a:cc:cc:ce:d9:d0:ce:11:e4: cc:e2:83:ef:57:a4:50:aa:f7:e5:e8:17:8e:ed:a7:c4:41:85: 6c:03:05:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gK7b4IkjQbx/mBEIDpwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz ZWM1YzIwHhcNMjYwMTAyMDIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODViYWQ3ZTI2MDc1OTU0YzAwYjhkMGIzNWRiNTM4YjQ0Y2JhNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmKeAgLZcaowGbRW73bBUSYNTaNd 0LIq7tKeFFE/FsdV2Qzw9wtDgYfH5fB5LBzbmWurSQVMbhJ3MyZPSdf44D6PgeTp DjEK29Y6N8QYk0MBpkhGf/t29x1DlQboRbho3Acubzg9OTdEvO7HwdKI/cEJKw5r ZayGZm4aAylJfTG0ss6W7kQOt0REmq1q7GEqKwoxt+ZFrj6c5BtUeVyYqWLly777 i/5I0CTJEIv/8n3wyJ4NwJ3kUtXkD6/qZnq/4c/NkEkqq19uWJE06W+Ew8OQD7PY 98HMPQ4xW0PclJwXGt1day4ODl5xRulMl9J+rG/0adcCCVe9IXiA1wTMXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMhbrX4mB1lUwAuNCzXbU4tEy6chMB8GA1UdIwQY MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt MzA1NjU4ZjkxNjM1LzEveUZ1dGZpWUhXVlRBQzQwTE5kdFRpMFRMcHlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1 LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSmUMA0G CSqGSIb3DQEBCwUAA4IBAQBxfkwxjLbEZRwLg6QOQS+6iQ760TPCXv78E5SI+Li6 3UVSVjun0ILj5HPc0C/dMuj2cn1sdWF9tRqvMPcR83kpHQGg3O2XtcgAazJkeawz Nr3rumKPj7mRWvJhjGDG9wV070kNhRHSeYSmYq1IFx6ItufkQmdl7AJ12Ic8Sqxj ABtLqCaGDCE0O4fJfyZk2f3/nGH7r0P7QKneivmzuRfuqNR7tIWwLkfudd/Nfqqk 4h8YysgB+Ymt1JbIR/CuH+2p3BWzQFHkfldgGP2dQbIFZrVvo7HTzt8Anpck/VOM xT6KzMzO2dDOEeTM4oPvV6RQqvfl6BeO7afEQYVsAwV5 -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:33 2026 by rpki-client