This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/yo2ggwAD85SNNQPIQb6yRaxOrWc.roa File: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (raw, json) Hash identifier: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658= Subject key identifier: CA:8D:A0:83:00:03:F3:94:8D:35:03:C8:41:BE:B2:45:AC:4E:AD:67 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019B7DC9835380EB1050D0896AF64F9FF350 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/yo2ggwAD85SNNQPIQb6yRaxOrWc.roa Signing time: Fri 02 Jan 2026 08:18:36 +0000 ROA not before: Fri 02 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197328 IP address blocks: 178.171.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:83:53:80:eb:10:50:d0:89:6a:f6:4f:9f:f3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jan 2 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca8da0830003f3948d3503c841beb245ac4ead67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5d:ef:6c:f2:a8:f5:29:89:c9:65:6f:8b:e1: 4a:7b:cd:d0:3a:76:d6:a6:8c:96:43:66:64:5e:09: 8e:31:51:45:99:fd:67:ae:9b:f5:58:bd:07:bd:7d: 3e:93:58:21:7a:32:ca:a2:1a:01:f3:ce:6e:da:0e: 22:f1:f2:88:5f:da:2c:c0:50:fa:06:47:9a:16:0d: c9:57:63:1b:1b:08:c8:8b:88:63:93:0d:82:9c:fe: 6e:ae:9b:51:86:7f:ac:94:07:a1:ae:07:06:b9:b3: 8a:7c:ab:09:12:5d:17:9e:bf:c7:92:06:cf:b9:6c: 9c:c7:a8:ec:f7:82:c3:4a:e4:43:5b:87:ce:89:f1: 49:7f:63:26:06:d6:f9:75:54:1f:95:40:4b:3e:50: 2b:7f:6a:c4:a8:56:34:45:c9:72:46:14:ba:aa:c7: e5:2b:e2:79:fb:c5:22:41:92:6e:36:f2:f4:19:7d: 73:0f:c3:72:c8:c9:e6:70:c5:44:12:bf:78:d9:64: b6:53:bd:03:00:d5:68:89:b1:59:fb:c3:d2:cc:a5: 0b:d3:a7:2c:9e:82:50:26:21:4f:e7:95:13:65:71: 65:6d:c2:aa:97:50:6c:44:b1:d4:6a:9c:8c:5f:63: 56:3d:e0:83:01:d8:b8:b1:25:98:c3:95:98:f4:09: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8D:A0:83:00:03:F3:94:8D:35:03:C8:41:BE:B2:45:AC:4E:AD:67 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/yo2ggwAD85SNNQPIQb6yRaxOrWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.171.36.0/23 Signature Algorithm: sha256WithRSAEncryption af:5f:81:12:47:32:bb:67:3d:ae:3f:7c:a7:62:bb:75:57:d5: cf:67:d7:06:59:4a:29:a1:03:51:ce:b9:7c:a9:40:b8:58:d2: 49:24:4d:ff:ca:a5:d0:f6:90:6d:e0:ed:d4:2e:80:f1:0e:f3: fb:6d:cd:63:f8:d6:24:6f:19:21:76:53:b4:b8:92:4c:93:b6: c0:e5:ab:fa:ce:5b:35:3d:39:a8:cf:3f:9b:94:9c:3c:d9:f4: 11:3f:26:26:37:10:1c:ee:2f:d5:54:6a:9f:86:1b:55:c5:6b: 0b:29:4c:5f:e0:59:43:5a:63:1f:44:cb:e0:7e:9b:b1:23:9e: 91:72:23:15:90:f9:37:00:3c:9a:20:5d:a5:9b:34:60:7f:76: 04:d8:fe:9d:1c:00:0d:44:59:ca:64:71:97:b2:41:7d:d8:b8: 10:13:9b:25:db:45:2c:81:67:67:52:3d:dc:e6:d0:7e:c8:26: 56:b5:bc:1b:7c:05:73:36:fc:4d:f8:93:86:ec:2c:42:59:d5: ed:6b:26:b7:e0:f2:d5:af:5d:94:7d:0a:70:b2:92:9a:6a:32: a6:46:e2:a5:f2:ac:2a:d6:55:ee:4a:64:e5:a6:22:12:63:92: a7:f4:1f:ee:84:6e:57:29:40:88:57:a6:27:3c:57:8a:80:cc: bc:be:35:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yYNTgOsQUNCJavZPn/NQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwMTAyMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYThkYTA4MzAwMDNmMzk0OGQzNTAzYzg0MWJlYjI0NWFjNGVhZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V3vbPKo9SmJyWVvi+FKe83QOnbW poyWQ2ZkXgmOMVFFmf1nrpv1WL0HvX0+k1ghejLKohoB885u2g4i8fKIX9oswFD6 BkeaFg3JV2MbGwjIi4hjkw2CnP5urptRhn+slAehrgcGubOKfKsJEl0Xnr/HkgbP uWycx6js94LDSuRDW4fOifFJf2MmBtb5dVQflUBLPlArf2rEqFY0RclyRhS6qsfl K+J5+8UiQZJuNvL0GX1zD8NyyMnmcMVEEr942WS2U70DANVoibFZ+8PSzKUL06cs noJQJiFP55UTZXFlbcKql1BsRLHUapyMX2NWPeCDAdi4sSWYw5WY9Ak7mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMqNoIMAA/OUjTUDyEG+skWsTq1nMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEveW8yZ2d3QUQ4NVNOTlFQSVFiNnlSYXhPcldjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsqskMA0G CSqGSIb3DQEBCwUAA4IBAQCvX4ESRzK7Zz2uP3ynYrt1V9XPZ9cGWUopoQNRzrl8 qUC4WNJJJE3/yqXQ9pBt4O3ULoDxDvP7bc1j+NYkbxkhdlO0uJJMk7bA5av6zls1 PTmozz+blJw82fQRPyYmNxAc7i/VVGqfhhtVxWsLKUxf4FlDWmMfRMvgfpuxI56R ciMVkPk3ADyaIF2lmzRgf3YE2P6dHAANRFnKZHGXskF92LgQE5sl20UsgWdnUj3c 5tB+yCZWtbwbfAVzNvxN+JOG7CxCWdXtaya34PLVr12UfQpwspKaajKmRuKl8qwq 1lXuSmTlpiISY5Kn9B/uhG5XKUCIV6YnPFeKgMy8vjVU -----END CERTIFICATE-----Generated at Tue Jan 20 03:34:14 2026 by rpki-client