This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa File: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (raw, json) Hash identifier: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA= Subject key identifier: 62:A0:39:35:CD:4A:03:9A:C0:27:BF:3F:E4:C1:69:DE:EA:95:13:2A Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019C0053FDED5369DB6F560E392B37DBD838 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa Signing time: Tue 27 Jan 2026 16:40:30 +0000 ROA not before: Tue 27 Jan 2026 16:40:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57972 IP address blocks: 5.34.242.0/24 maxlen: 24 104.160.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:53:fd:ed:53:69:db:6f:56:0e:39:2b:37:db:d8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 27 16:40:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62a03935cd4a039ac027bf3fe4c169deea95132a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:eb:0a:f5:a6:fb:01:4f:40:7a:3c:65:67: d1:4f:ec:8a:d5:ce:14:ed:ec:1c:ff:4e:77:a1:7e: 52:3c:3e:54:af:b2:83:26:37:ce:40:85:c8:05:0d: 30:fe:9c:cc:1a:a5:e9:82:0a:9b:c2:a7:77:46:36: 81:c2:06:7b:00:3a:45:02:88:8d:ad:34:3a:85:1e: 6e:7e:f2:76:e0:24:3a:39:a8:8c:0c:33:03:77:4d: 44:6b:0e:0c:08:32:c9:5b:ff:63:08:f8:1d:69:50: 36:b3:bd:1c:51:6f:4a:9d:5f:08:4e:c8:e0:bc:99: 8d:d6:27:78:83:2e:48:f9:43:ff:af:e2:63:d1:74: 38:76:e7:c2:45:79:46:21:17:46:a4:38:9d:7c:0f: e2:a6:21:cb:7e:6e:94:3a:b6:05:15:83:22:6c:bc: cf:62:65:16:53:56:c8:a7:15:d1:e7:f9:07:a4:dd: 0b:7f:09:27:32:19:57:f2:29:27:4e:cc:9e:8b:60: 88:95:a3:2f:b7:f3:e1:75:22:56:7b:fc:99:69:7d: b7:dc:fc:d9:b1:ab:f9:7f:3c:85:32:d3:f3:1d:c6: 85:d5:65:41:bf:69:a2:ac:e5:f9:87:89:c1:7c:ec: 3c:6d:ba:28:51:81:7a:42:10:92:74:b7:47:c3:5e: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A0:39:35:CD:4A:03:9A:C0:27:BF:3F:E4:C1:69:DE:EA:95:13:2A X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.242.0/24 104.160.15.0/24 Signature Algorithm: sha256WithRSAEncryption 00:19:1a:53:59:e6:be:26:6c:ce:3d:8a:12:c6:bd:e9:6a:17: 20:0f:c0:dc:73:fa:1b:85:86:74:15:7c:9e:35:a5:1a:00:be: ff:f6:10:10:49:1e:e3:36:3d:f7:86:03:aa:14:14:f3:1c:03: d9:96:cb:c2:91:3b:44:f9:fe:ca:07:ff:1d:79:29:1b:23:38: a1:d4:10:af:88:70:a1:ea:6d:93:7e:b1:4f:dc:2f:29:c6:2c: 49:03:82:c3:95:15:2c:ce:6e:4d:06:d9:87:1c:d1:36:d5:26: b1:71:58:a3:c9:ae:9d:a3:cd:6f:f1:66:38:fc:03:cc:f0:df: ed:c5:d2:7d:6a:1e:3e:63:c5:35:fb:ea:f9:f7:b9:d0:91:13: d0:1d:78:42:86:88:5b:48:60:68:b6:4b:cf:aa:f4:79:02:36: ac:db:33:0c:fb:83:a3:fb:4c:10:53:47:fc:3f:e4:85:dd:47: b5:87:2b:23:c8:79:35:01:cf:fb:b5:d9:63:71:66:ec:b3:cc: 30:ec:9c:26:7b:39:ff:25:4d:10:17:20:87:2f:f6:38:ed:af: 43:0a:e5:a8:cb:b4:b2:b6:bc:c2:45:34:d7:71:d5:34:64:d2: 68:c4:38:60:82:ec:5b:46:c4:c6:62:1e:e3:4f:17:27:30:c7: c7:75:83:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwAU/3tU2nbb1YOOSs329g4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTI3MTY0MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmEwMzkzNWNkNGEwMzlhYzAyN2JmM2ZlNGMxNjlkZWVhOTUxMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q3rCvWm+wFPQHo8ZWfRT+yK1c4U 7ewc/053oX5SPD5Ur7KDJjfOQIXIBQ0w/pzMGqXpggqbwqd3RjaBwgZ7ADpFAoiN rTQ6hR5ufvJ24CQ6OaiMDDMDd01Eaw4MCDLJW/9jCPgdaVA2s70cUW9KnV8ITsjg vJmN1id4gy5I+UP/r+Jj0XQ4dufCRXlGIRdGpDidfA/ipiHLfm6UOrYFFYMibLzP YmUWU1bIpxXR5/kHpN0LfwknMhlX8iknTsyei2CIlaMvt/PhdSJWe/yZaX233PzZ sav5fzyFMtPzHcaF1WVBv2mirOX5h4nBfOw8bbooUYF6QhCSdLdHw14eLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGKgOTXNSgOawCe/P+TBad7qlRMqMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvWXFBNU5jMUtBNXJBSjc4XzVNRnAzdXFWRXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABSLyAwQA aKAPMA0GCSqGSIb3DQEBCwUAA4IBAQAAGRpTWea+JmzOPYoSxr3pahcgD8Dcc/ob hYZ0FXyeNaUaAL7/9hAQSR7jNj33hgOqFBTzHAPZlsvCkTtE+f7KB/8deSkbIzih 1BCviHCh6m2TfrFP3C8pxixJA4LDlRUszm5NBtmHHNE21SaxcVijya6do81v8WY4 /APM8N/txdJ9ah4+Y8U1++r597nQkRPQHXhChohbSGBotkvPqvR5Ajas2zMM+4Oj +0wQU0f8P+SF3Ue1hysjyHk1Ac/7tdljcWbss8ww7Jwmezn/JU0QFyCHL/Y47a9D CuWoy7SytrzCRTTXcdU0ZNJoxDhgguxbRsTGYh7jTxcnMMfHdYOv -----END CERTIFICATE-----Generated at Fri Jan 30 09:13:00 2026 by rpki-client