This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/YE43DFlSdGIi5Y5V0q6Dcu3R1jo.roa File: YE43DFlSdGIi5Y5V0q6Dcu3R1jo.roa (raw, json) Hash identifier: 7y13WjFIQev9f7bZV98y9KEB0ps1yt+8qhRlRU3ZvPA= Subject key identifier: 60:4E:37:0C:59:52:74:62:22:E5:8E:55:D2:AE:83:72:ED:D1:D6:3A Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019B7F812C91853DE14BE6FCAC61D3C62FBB Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/YE43DFlSdGIi5Y5V0q6Dcu3R1jo.roa Signing time: Fri 02 Jan 2026 16:18:50 +0000 ROA not before: Fri 02 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33438 IP address blocks: 94.31.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 22:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:2c:91:85:3d:e1:4b:e6:fc:ac:61:d3:c6:2f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 2 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=604e370c5952746222e58e55d2ae8372edd1d63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:76:d6:91:ef:18:87:58:de:69:ea:95:bb: 91:6d:1d:ca:ca:e4:80:b2:44:f2:f6:2a:20:37:bf: 0d:bf:2c:da:bc:ad:2b:81:9c:ce:48:da:ad:75:9e: 54:5d:18:52:a4:23:2f:84:1b:bf:f0:56:20:ec:80: f5:e0:77:5f:04:75:77:8f:e9:46:8c:11:14:24:c1: d4:3e:b6:1c:fa:7a:10:56:f0:54:99:9b:cd:c3:95: dc:ed:d6:a3:c0:8c:50:53:8f:cb:28:f6:a0:b1:85: f6:ab:f8:07:93:cd:c1:cf:6a:53:74:ad:05:0c:b5: 66:b9:24:e3:b6:94:e2:e5:b3:c3:87:0f:8f:39:54: 6f:22:b0:ca:1d:4d:91:b2:85:74:bf:1c:8a:76:cb: e9:14:d1:a5:5e:a2:f6:07:89:a0:9c:f6:14:11:4e: 5f:64:78:53:13:fe:14:61:50:07:3f:6a:e9:6b:9e: ac:3f:de:1b:56:eb:3f:2a:34:e3:49:34:cf:33:4e: 05:09:ca:ba:fa:cd:b9:d9:0e:90:a3:b8:0b:4b:0f: 2e:4e:13:59:92:13:39:82:79:0a:5f:48:8c:24:fa: d1:f1:51:42:7e:99:be:c6:7f:75:79:94:c4:85:28: 5e:43:36:ab:63:59:00:59:fa:58:ad:aa:a5:54:e2: 78:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4E:37:0C:59:52:74:62:22:E5:8E:55:D2:AE:83:72:ED:D1:D6:3A X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/YE43DFlSdGIi5Y5V0q6Dcu3R1jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.31.29.0/24 Signature Algorithm: sha256WithRSAEncryption c3:c7:f4:f4:f7:34:a5:c1:82:a0:f2:d2:47:c0:be:1e:13:eb: ff:91:33:38:36:bf:ff:b6:c6:53:ef:1a:6b:e2:c5:08:1c:88: 81:c6:38:3c:24:57:87:32:91:f5:aa:03:02:89:c8:c6:85:aa: 3e:d8:5d:88:e3:ca:06:9d:87:93:87:8b:5a:4b:db:82:c0:ce: d2:60:e6:25:6a:18:89:71:bc:48:f1:32:64:78:92:1e:40:23: e1:62:5d:64:66:6b:f6:bf:0a:f8:1d:a2:1d:fb:f0:cd:4a:80: 48:ca:61:c5:9b:8e:13:6e:a3:f4:6a:8d:0c:7a:34:5e:43:ef: 68:83:a6:91:4a:dc:7e:12:c2:cc:e3:fc:14:e1:0a:a9:c8:94: 8b:e0:b8:bd:d8:ae:2b:f9:2d:8a:8a:db:40:64:42:d7:be:6b: da:1e:92:59:79:30:6f:a8:3b:63:37:ea:be:6a:b0:53:8f:80: 0c:4c:13:03:21:4a:7f:db:66:6e:cc:e9:fa:d9:b1:da:7d:4e: c0:c2:b5:c8:0d:cb:15:2b:be:29:0b:61:e1:0b:67:2f:83:10: 68:e9:6f:47:44:e0:d3:c4:81:e7:32:aa:9f:a6:6c:6e:63:25: 01:c9:7d:6e:b5:91:4e:9a:0e:2d:47:db:bf:9d:b7:98:9e:10: 7f:92:26:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gSyRhT3hS+b8rGHTxi+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTAyMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDRlMzcwYzU5NTI3NDYyMjJlNThlNTVkMmFlODM3MmVkZDFkNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zl21pHvGIdY3mnqlbuRbR3KyuSA skTy9iogN78NvyzavK0rgZzOSNqtdZ5UXRhSpCMvhBu/8FYg7ID14HdfBHV3j+lG jBEUJMHUPrYc+noQVvBUmZvNw5Xc7dajwIxQU4/LKPagsYX2q/gHk83Bz2pTdK0F DLVmuSTjtpTi5bPDhw+POVRvIrDKHU2RsoV0vxyKdsvpFNGlXqL2B4mgnPYUEU5f ZHhTE/4UYVAHP2rpa56sP94bVus/KjTjSTTPM04FCcq6+s252Q6Qo7gLSw8uThNZ khM5gnkKX0iMJPrR8VFCfpm+xn91eZTEhSheQzarY1kAWfpYraqlVOJ4vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBONwxZUnRiIuWOVdKug3Lt0dY6MB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvWUU0M0RGbFNkR0lpNVk1VjBxNkRjdTNSMWpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXh8dMA0G CSqGSIb3DQEBCwUAA4IBAQDDx/T09zSlwYKg8tJHwL4eE+v/kTM4Nr//tsZT7xpr 4sUIHIiBxjg8JFeHMpH1qgMCicjGhao+2F2I48oGnYeTh4taS9uCwM7SYOYlahiJ cbxI8TJkeJIeQCPhYl1kZmv2vwr4HaId+/DNSoBIymHFm44TbqP0ao0MejReQ+9o g6aRStx+EsLM4/wU4QqpyJSL4Li92K4r+S2KittAZELXvmvaHpJZeTBvqDtjN+q+ arBTj4AMTBMDIUp/22ZuzOn62bHafU7AwrXIDcsVK74pC2HhC2cvgxBo6W9HRODT xIHnMqqfpmxuYyUByX1utZFOmg4tR9u/nbeYnhB/kial -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:15 2026 by rpki-client