This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/YwocQkhypaVEzUUMQQTfmq3kIaE.roa File: YwocQkhypaVEzUUMQQTfmq3kIaE.roa (raw, json) Hash identifier: PkkoCWOQW1HK4Xv8HLD1aN+5hGMaG5JlGssQDX6NJ8s= Subject key identifier: 63:0A:1C:42:48:72:A5:A5:44:CD:45:0C:41:04:DF:9A:AD:E4:21:A1 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA421A2927990EC3398904842E239F6 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/YwocQkhypaVEzUUMQQTfmq3kIaE.roa Signing time: Thu 01 Jan 2026 22:18:32 +0000 ROA not before: Thu 01 Jan 2026 22:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 185.125.50.0/24 maxlen: 24 2a0e:d600::/32 maxlen: 32 2a0e:d604:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:21:a2:92:79:90:ec:33:98:90:48:42:e2:39:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=630a1c424872a5a544cd450c4104df9aade421a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:f5:d7:bb:a3:d4:85:56:5a:5a:9c:a5:e4: 3d:27:88:4e:e6:30:80:0c:17:46:60:41:a1:b8:fd: ec:06:f8:97:d4:a7:b2:4d:f5:0b:ca:5c:a4:48:24: b8:48:57:cb:40:3f:80:95:db:d3:08:24:3c:49:0d: 7c:05:b8:af:d3:90:82:85:74:5e:a7:d9:d1:30:49: 04:2a:34:b2:90:20:31:e5:be:38:6d:85:78:f4:62: 41:6d:e7:03:be:b3:24:6a:b4:28:f4:75:15:50:fc: e0:3b:16:3b:8f:0e:43:4e:5f:a4:dd:66:8e:a5:19: 27:72:19:57:fb:83:74:f3:58:75:94:e0:9b:7b:aa: b8:12:66:32:20:71:32:c6:91:e0:30:ed:f3:04:27: 95:58:c3:c8:a4:86:a0:c2:a7:d9:55:fa:e5:7a:dd: 85:e3:d6:76:ab:8a:dd:89:c6:93:7f:90:be:2d:d8: 73:3a:cd:96:40:38:97:a2:7a:8a:8d:04:b0:de:c7: ed:54:fe:c3:41:17:fb:d7:59:ac:2c:cb:10:7f:06: f0:56:24:69:5e:1a:30:54:13:aa:c2:bc:7a:61:ed: 32:ca:df:35:19:4e:71:53:de:12:a7:c5:e0:43:b8: 4c:5c:80:a6:be:ba:04:2d:53:e3:58:7a:ce:b1:41: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0A:1C:42:48:72:A5:A5:44:CD:45:0C:41:04:DF:9A:AD:E4:21:A1 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/YwocQkhypaVEzUUMQQTfmq3kIaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.50.0/24 IPv6: 2a0e:d600::/32 2a0e:d604:1::/48 Signature Algorithm: sha256WithRSAEncryption 33:f3:86:83:ae:e1:a4:22:e4:71:46:2e:3e:7e:23:31:2c:f8: 75:73:3e:cd:36:d5:60:42:9c:d1:9b:bf:da:04:4a:de:bf:e8: 32:c0:f7:d6:6c:5e:87:be:45:5c:af:c6:1b:9b:a4:08:7a:a2: db:62:62:5a:ee:0a:15:50:02:ca:6e:a1:61:70:5b:13:2c:86: 95:de:ec:c0:10:27:3a:c2:81:3e:6a:30:05:1d:aa:1b:c5:85: 34:29:17:f5:f9:f4:d9:c7:48:47:b3:c9:b8:e3:29:13:d6:6d: 1b:0f:ea:a6:36:92:04:a6:26:df:5e:26:4a:9f:bb:b3:29:a5: 68:67:72:14:b0:ef:f0:57:4d:08:81:8e:2a:b1:47:45:21:7b: a3:4b:4e:c2:14:42:24:4c:15:93:0c:1d:37:60:e5:7e:e8:59: eb:3a:1d:fd:f4:37:3b:46:c3:fc:38:98:e9:f5:a3:1f:9d:d0: 11:b0:00:8b:3f:30:f3:96:b8:8f:e6:fb:d7:5e:00:a2:19:c5: 4d:aa:9b:04:a1:62:46:a5:c4:dd:3f:db:98:8b:bb:39:b8:0a: 9e:1c:6d:b7:66:76:18:81:18:4e:c0:0b:15:4c:7b:77:e0:9f: 1b:bd:44:5a:8f:4b:2f:d3:9d:ac:09:e2:e9:28:43:b7:25:2f: 55:55:4f:92 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7pCGiknmQ7DOYkEhC4jn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzBhMWM0MjQ4NzJhNWE1NDRjZDQ1MGM0MTA0ZGY5YWFkZTQyMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb3117uj1IVWWlqcpeQ9J4hO5jCA DBdGYEGhuP3sBviX1KeyTfULylykSCS4SFfLQD+AldvTCCQ8SQ18Bbiv05CChXRe p9nRMEkEKjSykCAx5b44bYV49GJBbecDvrMkarQo9HUVUPzgOxY7jw5DTl+k3WaO pRknchlX+4N081h1lOCbe6q4EmYyIHEyxpHgMO3zBCeVWMPIpIagwqfZVfrlet2F 49Z2q4rdicaTf5C+LdhzOs2WQDiXonqKjQSw3sftVP7DQRf711msLMsQfwbwViRp XhowVBOqwrx6Ye0yyt81GU5xU94Sp8XgQ7hMXICmvroELVPjWHrOsUHJZwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGMKHEJIcqWlRM1FDEEE35qt5CGhMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvWXdvY1FraHlwYVZFelVVTVFRVGZtcTNrSWFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAuX0yMBYE AgACMBADBQAqDtYAAwcAKg7WBAABMA0GCSqGSIb3DQEBCwUAA4IBAQAz84aDruGk IuRxRi4+fiMxLPh1cz7NNtVgQpzRm7/aBErev+gywPfWbF6HvkVcr8Ybm6QIeqLb YmJa7goVUALKbqFhcFsTLIaV3uzAECc6woE+ajAFHaobxYU0KRf1+fTZx0hHs8m4 4ykT1m0bD+qmNpIEpibfXiZKn7uzKaVoZ3IUsO/wV00IgY4qsUdFIXujS07CFEIk TBWTDB03YOV+6FnrOh399Dc7RsP8OJjp9aMfndARsACLPzDzlriP5vvXXgCiGcVN qpsEoWJGpcTdP9uYi7s5uAqeHG23ZnYYgRhOwAsVTHt34J8bvURaj0sv052sCeLp KEO3JS9VVU+S -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:41 2026 by rpki-client