This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/ynB9BnMOzLQWkJYT8Yx3TzBkQGU.roa File: ynB9BnMOzLQWkJYT8Yx3TzBkQGU.roa (raw, json) Hash identifier: yOnugz5IMt/r/ItObFdGYTlUVT1M5hQ/rMrPgRDzlRk= Subject key identifier: CA:70:7D:06:73:0E:CC:B4:16:90:96:13:F1:8C:77:4F:30:64:40:65 Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627 Certificate serial: 019B7A5B70898497A05EEC1083F16FC2EC74 Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/ynB9BnMOzLQWkJYT8Yx3TzBkQGU.roa Signing time: Thu 01 Jan 2026 16:19:31 +0000 ROA not before: Thu 01 Jan 2026 16:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215457 IP address blocks: 31.128.56.0/22 maxlen: 22 31.128.56.0/24 maxlen: 24 31.128.57.0/24 maxlen: 24 31.128.58.0/24 maxlen: 24 31.128.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:70:89:84:97:a0:5e:ec:10:83:f1:6f:c2:ec:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca707d06730eccb416909613f18c774f30644065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:11:df:e7:71:84:e6:f5:d8:ef:ad:a4:59:98: 6f:69:4a:18:fb:5c:0e:c0:b3:93:8e:0b:46:ef:84: 45:43:85:de:02:f1:d4:4c:c6:54:81:b5:c4:06:87: 90:4a:59:42:f9:51:93:a4:6a:41:9b:c6:a5:83:e6: 0d:a7:8a:63:4e:43:6d:10:1c:5f:69:13:3a:6e:15: 87:3e:7b:1a:4e:1e:04:0f:20:c4:99:48:fd:1b:21: 78:7d:e4:31:7e:ad:ae:fd:09:3e:e7:fa:1a:62:93: a3:11:31:b7:19:c7:46:52:af:cd:b1:6a:82:1a:f9: b4:00:7b:6c:93:e8:b0:f3:a3:1a:ee:f4:1e:21:c3: bc:90:bb:a5:ff:de:ff:d8:57:ed:95:dd:4c:1c:c4: da:e3:15:b5:c2:c3:1a:d5:21:86:23:7e:3e:0f:79: 71:2c:89:ff:62:2b:bb:dc:2b:8c:eb:74:ec:c2:7d: 30:81:fd:c5:23:e7:fb:29:08:09:e3:31:af:d5:8d: 8f:b3:11:0c:2c:9d:b6:24:52:c8:5d:00:a7:8e:be: 06:6d:01:fe:0b:b1:34:ed:fd:24:44:c7:f8:f4:e1: 09:eb:5c:f9:aa:fa:fd:0b:5e:27:ae:56:01:29:0b: 9a:de:6c:b8:27:d1:34:8d:f6:37:d3:bf:d8:9a:f8: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:70:7D:06:73:0E:CC:B4:16:90:96:13:F1:8C:77:4F:30:64:40:65 X509v3 Authority Key Identifier: keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/ynB9BnMOzLQWkJYT8Yx3TzBkQGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.56.0/22 Signature Algorithm: sha256WithRSAEncryption 36:33:80:23:6a:87:26:81:74:4a:a5:b4:7c:ee:6e:46:38:44: db:a0:25:90:c6:14:7d:74:d2:3d:c5:27:b7:6d:dc:74:e6:b9: 85:0b:ea:6b:bc:a7:ec:e1:45:15:66:93:44:f9:e2:2e:04:3e: 6d:a2:e1:76:46:ae:36:29:4f:41:ca:3e:79:15:6b:0f:cf:c8: 86:c5:73:7d:bc:fa:00:2c:e3:e8:0e:c8:a7:03:30:6c:57:a7: cb:77:5c:36:39:3b:e9:d1:f1:33:3b:16:0f:21:0b:82:7b:02: 67:5b:32:57:e4:9f:7c:9c:e2:53:11:2e:ee:24:75:9b:b5:60: ce:b4:f3:0b:d9:31:24:3c:fa:8b:28:60:74:4d:45:14:b9:28: 86:91:30:db:23:eb:d0:06:4b:4d:d0:84:ac:78:7a:ff:0a:81: dd:db:c7:3b:60:b8:3e:42:a6:69:01:ae:35:21:ea:1b:ea:12: 87:58:7e:0c:3e:67:90:83:77:9f:80:de:c0:53:7b:0c:1c:c7: e2:60:4d:eb:d3:1f:5a:bb:00:1a:d9:b8:93:b8:0b:55:19:70: bf:ca:47:1a:d4:76:a6:78:df:10:87:a5:d5:bb:12:66:0f:84: ca:20:57:15:cc:9c:4b:05:d1:55:b1:f4:5e:c0:44:a1:6a:0e: 77:02:a0:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3CJhJegXuwQg/Fvwux0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTg0MTQwY2QxYTIyM2Y2MzhiNzk5NmY1NDg5ZjQ4NWQ4 ZWU2MjcwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTcwN2QwNjczMGVjY2I0MTY5MDk2MTNmMThjNzc0ZjMwNjQ0MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhHf53GE5vXY762kWZhvaUoY+1wO wLOTjgtG74RFQ4XeAvHUTMZUgbXEBoeQSllC+VGTpGpBm8alg+YNp4pjTkNtEBxf aRM6bhWHPnsaTh4EDyDEmUj9GyF4feQxfq2u/Qk+5/oaYpOjETG3GcdGUq/NsWqC Gvm0AHtsk+iw86Ma7vQeIcO8kLul/97/2Fftld1MHMTa4xW1wsMa1SGGI34+D3lx LIn/Yiu73CuM63Tswn0wgf3FI+f7KQgJ4zGv1Y2PsxEMLJ22JFLIXQCnjr4GbQH+ C7E07f0kRMf49OEJ61z5qvr9C14nrlYBKQua3my4J9E0jfY307/YmvgHnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMpwfQZzDsy0FpCWE/GMd08wZEBlMB8GA1UdIwQY MBaAFM8YQUDNGiI/Y4t5lvVIn0hdjuYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhoQlFNMGFJajlqaTNtVzlVaWZTRjJPNWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wN2JmMjktMDdkMS00ZGFmLWIzYmIt Y2JmYjJjN2ZiYWRkLzEveW5COUJuTU96TFFXa0pZVDhZeDNUekJrUUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wN2JmMjktMDdkMS00ZGFmLWIzYmItY2JmYjJjN2ZiYWRk LzEvenhoQlFNMGFJajlqaTNtVzlVaWZTRjJPNWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH4A4MA0G CSqGSIb3DQEBCwUAA4IBAQA2M4AjaocmgXRKpbR87m5GOETboCWQxhR9dNI9xSe3 bdx05rmFC+prvKfs4UUVZpNE+eIuBD5touF2Rq42KU9Byj55FWsPz8iGxXN9vPoA LOPoDsinAzBsV6fLd1w2OTvp0fEzOxYPIQuCewJnWzJX5J98nOJTES7uJHWbtWDO tPML2TEkPPqLKGB0TUUUuSiGkTDbI+vQBktN0ISseHr/CoHd28c7YLg+QqZpAa41 Ieob6hKHWH4MPmeQg3efgN7AU3sMHMfiYE3r0x9auwAa2biTuAtVGXC/ykca1Ham eN8Qh6XVuxJmD4TKIFcVzJxLBdFVsfRewEShag53AqDj -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:30 2026 by rpki-client