This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/yN-B2V0Dka04y-vFp5uchumgtKY.roa File: yN-B2V0Dka04y-vFp5uchumgtKY.roa (raw, json) Hash identifier: HJDoxjycVkfIV6zIX1nmMl83dxZXyYJ/bjTRUSF4UQk= Subject key identifier: C8:DF:81:D9:5D:03:91:AD:38:CB:EB:C5:A7:9B:9C:86:E9:A0:B4:A6 Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Certificate serial: 019B7EA6426073F5C33373852B92B61AF0D1 Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/yN-B2V0Dka04y-vFp5uchumgtKY.roa Signing time: Fri 02 Jan 2026 12:19:43 +0000 ROA not before: Fri 02 Jan 2026 12:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 132.74.1.0/24 maxlen: 24 132.74.6.0/24 maxlen: 24 132.74.8.0/24 maxlen: 24 132.74.10.0/24 maxlen: 24 132.74.60.0/24 maxlen: 24 132.74.95.0/24 maxlen: 24 132.74.189.0/24 maxlen: 24 132.75.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:42:60:73:f5:c3:33:73:85:2b:92:b6:1a:f0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Validity Not Before: Jan 2 12:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8df81d95d0391ad38cbebc5a79b9c86e9a0b4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:fe:7f:c3:30:5d:c0:e4:c3:24:b0:30:d2: 42:b6:4f:07:60:04:25:e1:4a:d0:19:42:d2:92:44: 40:f4:b1:d6:de:58:cc:22:04:ba:e4:2a:18:5c:c0: 38:6f:a2:cc:b2:a1:fb:2b:89:2e:7d:73:de:e2:f0: 7a:31:7d:0a:d6:b6:c5:44:26:56:02:1b:a6:81:51: 5e:cc:f6:f7:a4:ad:3d:13:9f:2b:22:eb:e7:6c:48: c8:39:0a:6b:d8:db:a6:be:0f:aa:5a:a9:b0:39:ad: 3f:f7:bd:9e:3d:a7:ce:f9:42:44:42:2c:69:97:1b: e4:e6:67:14:66:d9:8e:b4:6f:86:01:53:cf:e0:b6: 73:7c:cf:d7:a9:20:02:e3:f3:5a:ed:bc:2c:ab:7d: c7:36:13:03:39:41:21:16:55:60:b9:24:86:25:ce: 38:a6:be:20:5c:99:63:7a:74:a7:99:ef:fa:2e:3b: 3e:bd:08:8b:8f:69:9e:28:06:10:0c:73:b3:b4:2a: eb:88:b3:f8:02:88:3b:ab:55:27:7f:08:43:ff:8f: b9:8f:46:d9:a1:e3:d6:ac:74:c7:45:15:7a:d0:98: e1:fe:cf:5c:2a:4a:fb:8e:99:65:b8:33:f3:41:aa: ae:57:5b:68:4f:1c:2f:1b:0b:1b:95:f8:53:10:d1: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DF:81:D9:5D:03:91:AD:38:CB:EB:C5:A7:9B:9C:86:E9:A0:B4:A6 X509v3 Authority Key Identifier: keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/yN-B2V0Dka04y-vFp5uchumgtKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.74.1.0/24 132.74.6.0/24 132.74.8.0/24 132.74.10.0/24 132.74.60.0/24 132.74.95.0/24 132.74.189.0/24 132.75.251.0/24 Signature Algorithm: sha256WithRSAEncryption 98:db:bc:fc:87:a7:e5:96:f7:13:08:62:0d:12:48:50:ba:b0: 95:14:26:a3:a6:3a:34:fe:04:29:90:79:6d:66:6e:f3:d8:f5: 7d:a6:45:09:45:c8:9d:1e:e3:da:43:a0:c2:c4:74:93:6b:1a: 6e:48:c5:7b:bb:98:03:81:c0:3e:ca:0a:43:77:8c:f0:f7:c9: 05:f9:e2:47:5b:a4:7f:fd:79:a0:d9:50:5a:17:90:7b:d1:b4: 91:da:77:b2:4d:a2:26:23:91:a3:6b:68:7e:0f:55:0d:c1:40: 63:02:8f:23:3a:32:40:53:a8:a4:6f:07:24:eb:ce:c0:bf:8d: 50:09:e3:48:74:dd:e5:96:50:5f:b4:4b:0b:c9:63:e0:35:a8: 1f:ad:e9:8d:1d:87:85:8e:35:ee:cd:c1:81:26:20:e9:a5:ce: 6a:9f:93:0b:ca:9e:47:30:f4:e6:06:20:fb:00:90:97:1c:16: 85:b6:f2:81:28:e8:ac:80:26:38:83:6f:ab:77:e7:15:c6:9f: 41:1f:8c:f6:08:14:0f:c7:e6:07:92:f6:b6:12:0a:37:fb:51: 03:08:c0:6a:5b:d4:e9:8a:94:e6:96:7e:5e:01:8b:15:d6:d4: d8:eb:bb:4d:74:aa:fa:74:70:33:1a:8a:fa:92:b1:a9:31:fe: 5b:39:c4:1a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+pkJgc/XDM3OFK5K2GvDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5 MjUxMTcwHhcNMjYwMTAyMTIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGRmODFkOTVkMDM5MWFkMzhjYmViYzVhNzliOWM4NmU5YTBiNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWb+f8MwXcDkwySwMNJCtk8HYAQl 4UrQGULSkkRA9LHW3ljMIgS65CoYXMA4b6LMsqH7K4kufXPe4vB6MX0K1rbFRCZW AhumgVFezPb3pK09E58rIuvnbEjIOQpr2Numvg+qWqmwOa0/972ePafO+UJEQixp lxvk5mcUZtmOtG+GAVPP4LZzfM/XqSAC4/Na7bwsq33HNhMDOUEhFlVguSSGJc44 pr4gXJljenSnme/6Ljs+vQiLj2meKAYQDHOztCrriLP4Aog7q1UnfwhD/4+5j0bZ oePWrHTHRRV60Jjh/s9cKkr7jplluDPzQaquV1toTxwvGwsblfhTENHnSwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFMjfgdldA5GtOMvrxaebnIbpoLSmMB8GA1UdIwQY MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt NDJiM2Q2OGI1Njc2LzEveU4tQjJWMERrYTA0eS12RnA1dWNodW1ndEtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2 LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAhEoBAwQA hEoGAwQAhEoIAwQAhEoKAwQAhEo8AwQAhEpfAwQAhEq9AwQAhEv7MA0GCSqGSIb3 DQEBCwUAA4IBAQCY27z8h6fllvcTCGINEkhQurCVFCajpjo0/gQpkHltZm7z2PV9 pkUJRcidHuPaQ6DCxHSTaxpuSMV7u5gDgcA+ygpDd4zw98kF+eJHW6R//Xmg2VBa F5B70bSR2neyTaImI5Gja2h+D1UNwUBjAo8jOjJAU6ikbwck687Av41QCeNIdN3l llBftEsLyWPgNagfremNHYeFjjXuzcGBJiDppc5qn5MLyp5HMPTmBiD7AJCXHBaF tvKBKOisgCY4g2+rd+cVxp9BH4z2CBQPx+YHkva2Ego3+1EDCMBqW9TpipTmln5e AYsV1tTY67tNdKr6dHAzGor6krGpMf5bOcQa -----END CERTIFICATE-----Generated at Tue Jan 20 14:15:34 2026 by rpki-client