This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa File: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (raw, json) Hash identifier: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY= Subject key identifier: C9:37:4F:B0:0E:92:66:74:37:5C:CB:68:58:62:CA:89:48:20:AC:45 Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56 Certificate serial: 019B7AC906D96364CE7CA4217CE6757508DF Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa Signing time: Thu 01 Jan 2026 18:19:13 +0000 ROA not before: Thu 01 Jan 2026 18:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200548 IP address blocks: 84.39.96.0/21 maxlen: 24 2a01:b1c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:06:d9:63:64:ce:7c:a4:21:7c:e6:75:75:08:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56 Validity Not Before: Jan 1 18:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9374fb00e926674375ccb685862ca894820ac45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:87:3f:25:7b:ef:15:20:38:b4:c9:cc:46: bc:07:96:f9:bf:fc:fc:b1:65:f0:96:f5:94:19:c1: ab:3d:90:61:e5:a0:47:02:f4:31:fc:ef:c1:85:bf: fe:1f:9c:5c:ea:93:f4:cb:62:61:c8:a2:3a:50:60: 25:c1:27:ec:a7:c8:ca:82:fc:d7:e0:f0:e7:50:82: 68:3a:3a:a1:30:00:3b:45:40:77:5c:20:04:11:cb: 83:76:fa:9b:88:e3:0c:ed:05:84:2f:98:23:6a:30: e3:3e:67:e2:fe:02:87:e5:a3:f1:20:a7:ee:65:51: a9:a3:e8:cc:a6:08:11:a5:1f:40:4a:53:71:dd:47: 37:b6:61:5b:8d:b7:96:80:11:09:d1:10:e6:bb:a8: a7:8b:3a:7a:b9:30:13:eb:7f:72:b0:8d:21:e5:7f: e6:81:bf:19:3f:63:fd:71:b7:61:2f:72:70:bc:d2: 00:38:57:84:f5:dd:0e:18:84:58:1f:f0:18:57:84: 86:ac:64:97:0a:d9:d8:91:85:3f:2b:59:45:b5:56: a8:d8:10:f7:d6:1c:7f:72:ff:9d:b4:c1:a7:8d:fe: ba:8e:04:34:a8:10:74:e9:23:3f:61:e1:b3:05:47: 9b:a5:fe:76:cd:0f:f7:f6:26:42:4d:f3:8e:af:15: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:37:4F:B0:0E:92:66:74:37:5C:CB:68:58:62:CA:89:48:20:AC:45 X509v3 Authority Key Identifier: keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.39.96.0/21 IPv6: 2a01:b1c1::/32 Signature Algorithm: sha256WithRSAEncryption 96:bb:20:33:4c:b6:12:7b:f0:e2:9b:62:4e:d9:0a:a1:8d:9a: 8e:c2:38:90:36:01:42:a8:b7:67:a5:1a:0e:12:2a:26:81:ce: a0:6e:58:dd:29:a8:a2:ed:79:6e:d1:a2:00:8e:20:33:45:00: 4d:33:91:81:58:b4:4a:5c:28:0d:8f:e9:c2:63:22:33:24:a0: b6:82:cc:08:3a:e6:36:bf:81:47:c9:79:a3:3a:01:c2:f5:44: e5:bd:53:d3:7e:05:16:6a:49:c3:d6:f6:0c:c7:37:be:12:74: 47:18:bd:b1:e5:e5:7c:cf:41:1e:9e:e6:00:0e:1f:cd:1f:4e: 0d:b8:ac:c8:20:6c:c9:0e:f7:3f:25:62:eb:d0:e8:7d:c5:b5: d8:68:c1:4f:0b:19:9e:60:0f:1f:06:38:51:43:38:95:6e:0d: b4:c0:bc:ef:26:1c:32:4c:0a:72:5c:75:e6:e0:d5:68:f6:16: 24:e6:1f:ee:66:c3:7f:5b:dc:02:4b:cc:09:2f:07:55:c1:0d: 8a:12:06:25:cd:60:cc:6a:aa:5e:4c:bb:d2:1e:70:10:42:60: 5d:ea:d1:7e:02:6c:ad:b6:59:53:0b:83:10:98:95:da:fb:07: 9d:0b:4f:9f:db:ef:3f:85:74:e1:af:74:9e:18:cc:35:b8:3a: ed:b0:07:37 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yQbZY2TOfKQhfOZ1dQjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx NDlkNTYwHhcNMjYwMTAxMTgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTM3NGZiMDBlOTI2Njc0Mzc1Y2NiNjg1ODYyY2E4OTQ4MjBhYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviCHPyV77xUgOLTJzEa8B5b5v/z8 sWXwlvWUGcGrPZBh5aBHAvQx/O/Bhb/+H5xc6pP0y2JhyKI6UGAlwSfsp8jKgvzX 4PDnUIJoOjqhMAA7RUB3XCAEEcuDdvqbiOMM7QWEL5gjajDjPmfi/gKH5aPxIKfu ZVGpo+jMpggRpR9ASlNx3Uc3tmFbjbeWgBEJ0RDmu6inizp6uTAT639ysI0h5X/m gb8ZP2P9cbdhL3JwvNIAOFeE9d0OGIRYH/AYV4SGrGSXCtnYkYU/K1lFtVao2BD3 1hx/cv+dtMGnjf66jgQ0qBB06SM/YeGzBUebpf52zQ/39iZCTfOOrxVGZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMk3T7AOkmZ0N1zLaFhiyolIIKxFMB8GA1UdIwQY MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt MGZlYjY2ZTdmMjhhLzEveVRkUHNBNlNablEzWE10b1dHTEtpVWdnckVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDVCdgMA0E AgACMAcDBQAqAbHBMA0GCSqGSIb3DQEBCwUAA4IBAQCWuyAzTLYSe/Dim2JO2Qqh jZqOwjiQNgFCqLdnpRoOEiomgc6gbljdKaii7Xlu0aIAjiAzRQBNM5GBWLRKXCgN j+nCYyIzJKC2gswIOuY2v4FHyXmjOgHC9UTlvVPTfgUWaknD1vYMxze+EnRHGL2x 5eV8z0EenuYADh/NH04NuKzIIGzJDvc/JWLr0Oh9xbXYaMFPCxmeYA8fBjhRQziV bg20wLzvJhwyTApyXHXm4NVo9hYk5h/uZsN/W9wCS8wJLwdVwQ2KEgYlzWDMaqpe TLvSHnAQQmBd6tF+AmyttllTC4MQmJXa+wedC0+f2+8/hXThr3SeGMw1uDrtsAc3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:52 2026 by rpki-client