This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/YeLaacDEqyOHodEKhBUtu92hvRw.roa File: YeLaacDEqyOHodEKhBUtu92hvRw.roa (raw, json) Hash identifier: Ji1cHzcmwBaizYoDGG5KY1yTxLM1jIXJ3gtR7NQt17s= Subject key identifier: 61:E2:DA:69:C0:C4:AB:23:87:A1:D1:0A:84:15:2D:BB:DD:A1:BD:1C Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06 Certificate serial: 019B7AC7ADAB487EA59A383B91F236D69EF8 Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/YeLaacDEqyOHodEKhBUtu92hvRw.roa Signing time: Thu 01 Jan 2026 18:17:45 +0000 ROA not before: Thu 01 Jan 2026 18:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 132.252.0.0/16 maxlen: 16 134.91.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ad:ab:48:7e:a5:9a:38:3b:91:f2:36:d6:9e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06 Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61e2da69c0c4ab2387a1d10a84152dbbdda1bd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:76:28:c1:ad:37:1f:13:96:a2:81:62:31:4f: 83:4a:c3:4f:0c:43:94:f5:bd:bc:e3:b3:1e:f9:4a: 2f:5e:1b:89:db:93:5e:9a:f5:bd:ff:6a:29:b7:46: 7e:ed:fb:26:6b:f3:65:16:2c:5c:05:77:bd:c1:58: 20:00:62:58:3d:b4:59:19:a1:95:49:78:fd:84:29: 84:8d:03:39:7d:3f:3e:4e:a7:57:91:78:19:36:1e: ab:27:67:83:ab:17:35:77:4a:7d:62:f5:00:f5:53: e9:a4:4d:d6:d0:77:bb:30:92:d7:63:f2:46:e8:71: 31:a1:7a:f3:80:9e:05:f8:14:c4:07:b3:17:e9:3c: 74:49:73:d9:c8:87:f3:5e:54:d6:48:9a:fc:3d:5c: 44:29:03:6b:57:af:10:6f:bd:ed:e5:a6:59:fa:31: 15:86:a6:22:22:4e:37:b2:e1:ff:28:e6:6a:ae:35: b7:54:df:15:2d:34:1a:80:7a:a2:26:2c:15:c1:05: f4:8d:50:3e:90:36:ac:f6:60:14:fc:fb:03:b6:ec: 3f:de:cc:44:0c:5e:e7:91:4f:7f:5d:b6:d0:9f:7f: a5:ba:35:3b:22:d1:4d:9c:a1:bc:d4:38:3c:4f:e2: 95:09:7d:7b:a4:57:2a:8d:69:02:2b:9e:4b:0c:b9: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E2:DA:69:C0:C4:AB:23:87:A1:D1:0A:84:15:2D:BB:DD:A1:BD:1C X509v3 Authority Key Identifier: keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/YeLaacDEqyOHodEKhBUtu92hvRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.252.0.0/16 134.91.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3a:e4:be:50:13:d2:48:53:30:e3:65:cf:72:68:5b:07:dc:68: f3:f6:8f:31:7e:07:17:21:d2:0f:32:c9:04:c7:17:fd:1a:58: 59:07:9a:32:65:d0:27:09:d9:3b:b2:c8:61:a6:30:91:b5:a3: 09:dc:48:54:fb:28:0b:99:ae:00:00:89:db:a7:1e:f3:bb:3b: 11:31:a1:01:bf:13:35:0c:79:d6:4a:9d:7c:d4:79:ef:57:72: 7f:c3:a9:29:83:8e:15:19:97:22:7a:ae:a4:e4:26:20:3a:a2: 95:29:72:e3:a8:3e:e8:ea:77:eb:d2:ab:0c:34:8b:22:dd:57: b1:47:b6:7a:f7:2c:4c:1d:b2:9c:71:97:a5:e4:dc:0e:54:b9: 90:bc:45:b6:24:3f:1f:fa:f8:c2:15:ef:e1:6d:d8:ff:73:46: e2:7d:2d:02:c1:b8:b2:16:53:3b:4c:65:b9:8f:ef:79:d4:f4: a0:f4:6f:24:35:d9:03:d5:07:a9:98:94:de:71:d2:1d:60:0d: 3a:ef:bc:45:48:f2:be:92:fb:29:d0:b2:50:07:88:1a:14:0d: 1a:10:26:95:d2:b4:fa:5a:e6:43:98:07:b8:a1:c6:fc:55:47: dc:d7:2a:9e:9b:4c:7c:1d:be:2a:ff:bd:20:25:42:44:f8:8b: 7f:c9:fc:6d -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt6x62rSH6lmjg7kfI21p74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZGJlYTA3NTNkZjA4M2U1NzgyYmI5ZjM4MGI1ZDc5OWNi NzhhMDYwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWUyZGE2OWMwYzRhYjIzODdhMWQxMGE4NDE1MmRiYmRkYTFiZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HYowa03HxOWooFiMU+DSsNPDEOU 9b2847Me+UovXhuJ25NemvW9/2opt0Z+7fsma/NlFixcBXe9wVggAGJYPbRZGaGV SXj9hCmEjQM5fT8+TqdXkXgZNh6rJ2eDqxc1d0p9YvUA9VPppE3W0He7MJLXY/JG 6HExoXrzgJ4F+BTEB7MX6Tx0SXPZyIfzXlTWSJr8PVxEKQNrV68Qb73t5aZZ+jEV hqYiIk43suH/KOZqrjW3VN8VLTQagHqiJiwVwQX0jVA+kDas9mAU/PsDtuw/3sxE DF7nkU9/XbbQn3+lujU7ItFNnKG81Dg8T+KVCX17pFcqjWkCK55LDLkMbwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFGHi2mnAxKsjh6HRCoQVLbvdob0cMB8GA1UdIwQY MBaAFHDb6gdT3wg+V4K7nzgLXXmct4oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjkt MmEwY2YxMzE3M2Q4LzEvWWVMYWFjREVxeU9Ib2RFS2hCVXR1OTJodlJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjktMmEwY2YxMzE3M2Q4 LzEvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAhPwDAwCG WzANBgkqhkiG9w0BAQsFAAOCAQEAOuS+UBPSSFMw42XPcmhbB9xo8/aPMX4HFyHS DzLJBMcX/RpYWQeaMmXQJwnZO7LIYaYwkbWjCdxIVPsoC5muAACJ26ce87s7ETGh Ab8TNQx51kqdfNR571dyf8OpKYOOFRmXInqupOQmIDqilSly46g+6Op369KrDDSL It1XsUe2evcsTB2ynHGXpeTcDlS5kLxFtiQ/H/r4whXv4W3Y/3NG4n0tAsG4shZT O0xluY/vedT0oPRvJDXZA9UHqZiU3nHSHWANOu+8RUjyvpL7KdCyUAeIGhQNGhAm ldK0+lrmQ5gHuKHG/FVH3NcqnptMfB2+Kv+9ICVCRPiLf8n8bQ== -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:51 2026 by rpki-client