This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/yP0ogUTvEW_hziCgm9-4IHiaPi8.roa File: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (raw, json) Hash identifier: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk= Subject key identifier: C8:FD:28:81:44:EF:11:6F:E1:CE:20:A0:9B:DF:B8:20:78:9A:3E:2F Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019B7EA58DDB92EB252D294BB030EBA07FD9 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/yP0ogUTvEW_hziCgm9-4IHiaPi8.roa Signing time: Fri 02 Jan 2026 12:18:57 +0000 ROA not before: Fri 02 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12722 IP address blocks: 5.45.80.0/22 maxlen: 22 37.252.0.0/23 maxlen: 23 91.193.180.0/22 maxlen: 22 185.4.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:8d:db:92:eb:25:2d:29:4b:b0:30:eb:a0:7f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jan 2 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8fd288144ef116fe1ce20a09bdfb820789a3e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:a3:cc:a2:e3:5b:e8:74:db:bc:17:d0:6c: a4:c4:fc:15:39:48:e5:32:aa:46:5a:a6:6d:cf:c8: b3:30:f8:34:a6:40:28:e9:25:df:e1:6c:45:dd:84: 91:61:3f:4b:b9:54:a5:73:a7:86:f1:bb:26:7a:ea: 08:99:2d:f7:1d:00:5f:3a:06:22:db:1e:78:6f:77: cb:6d:a4:84:bc:87:0e:ce:bf:92:c6:e0:a8:4c:8f: 64:c7:46:4d:ce:4d:de:c2:21:48:b6:47:06:29:67: 3c:57:9a:32:b6:20:a5:a1:34:e0:be:7e:88:bd:53: 45:63:6d:e0:fa:5d:15:84:c8:6f:8c:f1:cf:2b:e6: 98:9c:b4:ef:b2:ab:2a:bf:87:fb:4d:54:06:8d:6c: 66:9d:dc:7e:72:59:5f:f4:43:78:e7:72:30:7d:3e: f2:9f:5f:e6:1d:c6:41:b3:45:ac:35:33:ed:12:d8: 4b:6f:95:06:09:c5:81:0b:c6:11:60:40:d4:da:6e: b3:48:3c:51:a9:cb:31:7f:28:00:20:5e:dd:d7:b5: d8:21:f0:93:ba:2a:4d:46:f6:29:68:3b:77:44:cf: e7:7b:d1:87:33:cd:89:55:91:a6:f0:8f:da:93:a5: 22:e3:9a:1d:2a:5a:c7:b5:19:7d:a4:b8:bb:f5:96: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FD:28:81:44:EF:11:6F:E1:CE:20:A0:9B:DF:B8:20:78:9A:3E:2F X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/yP0ogUTvEW_hziCgm9-4IHiaPi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.80.0/22 37.252.0.0/23 91.193.180.0/22 185.4.64.0/22 Signature Algorithm: sha256WithRSAEncryption c3:ec:fa:2f:3f:08:bb:00:60:a0:d4:97:0e:07:dc:d3:2f:20: 57:b6:a3:50:06:1c:7d:69:fd:76:07:58:18:0b:db:2d:08:d5: d0:4b:08:4f:1e:4a:5a:76:22:ab:bf:c2:47:ae:b3:f0:bc:89: cf:92:32:82:9a:a0:bd:f1:0b:6e:5d:29:3a:11:13:ef:3a:f2: ce:fa:4b:ee:68:0b:4e:8a:5f:a8:b9:74:f7:d6:13:a5:07:8a: ff:c5:53:99:ae:98:b9:01:50:60:41:1f:86:a3:21:2a:9e:20: 1a:83:4b:5f:ca:c3:76:08:2a:58:ec:27:6d:2f:f7:16:92:70: c9:df:b6:9f:de:aa:aa:a8:1e:98:13:6d:ca:8f:d7:e5:7e:67: ee:70:31:c4:84:64:8f:1c:97:0f:7b:ab:ce:49:f3:ff:5f:da: ee:82:55:7c:7b:6a:bc:dc:57:65:50:2f:17:26:b0:60:6e:fc: 61:9f:6f:2e:96:9d:25:83:3e:0f:34:78:55:da:bc:88:35:a8: bc:c9:e7:56:02:2f:48:5e:8f:8a:00:e5:f2:96:c1:1b:fe:5f: a2:b2:5d:cb:a2:6b:b3:31:a6:0e:4d:44:21:5f:a7:b7:1c:f4: 76:1d:64:cb:4a:e6:69:b9:80:b6:ab:99:73:a5:8a:d6:05:80: e2:2b:f9:48 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+pY3bkuslLSlLsDDroH/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMTAyMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGZkMjg4MTQ0ZWYxMTZmZTFjZTIwYTA5YmRmYjgyMDc4OWEzZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4WjzKLjW+h027wX0GykxPwVOUjl MqpGWqZtz8izMPg0pkAo6SXf4WxF3YSRYT9LuVSlc6eG8bsmeuoImS33HQBfOgYi 2x54b3fLbaSEvIcOzr+SxuCoTI9kx0ZNzk3ewiFItkcGKWc8V5oytiCloTTgvn6I vVNFY23g+l0VhMhvjPHPK+aYnLTvsqsqv4f7TVQGjWxmndx+cllf9EN453IwfT7y n1/mHcZBs0WsNTPtEthLb5UGCcWBC8YRYEDU2m6zSDxRqcsxfygAIF7d17XYIfCT uipNRvYpaDt3RM/ne9GHM82JVZGm8I/ak6Ui45odKlrHtRl9pLi79ZYxwwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMj9KIFE7xFv4c4goJvfuCB4mj4vMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEveVAwb2dVVHZFV19oemlDZ205LTRJSGlhUGk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBS1QAwQB JfwAAwQCW8G0AwQCuQRAMA0GCSqGSIb3DQEBCwUAA4IBAQDD7PovPwi7AGCg1JcO B9zTLyBXtqNQBhx9af12B1gYC9stCNXQSwhPHkpadiKrv8JHrrPwvInPkjKCmqC9 8QtuXSk6ERPvOvLO+kvuaAtOil+ouXT31hOlB4r/xVOZrpi5AVBgQR+GoyEqniAa g0tfysN2CCpY7CdtL/cWknDJ37af3qqqqB6YE23Kj9flfmfucDHEhGSPHJcPe6vO SfP/X9ruglV8e2q83FdlUC8XJrBgbvxhn28ulp0lgz4PNHhV2ryINai8yedWAi9I Xo+KAOXylsEb/l+isl3LomuzMaYOTUQhX6e3HPR2HWTLSuZpuYC2q5lzpYrWBYDi K/lI -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:12 2026 by rpki-client