This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/yYMXkwFPkhHhnq27U9C0g2iVLLU.roa File: yYMXkwFPkhHhnq27U9C0g2iVLLU.roa (raw, json) Hash identifier: pG/nzOeAPQH1MO2qwEL/sb+3+IlzWBXcFvkEbi8UJZc= Subject key identifier: C9:83:17:93:01:4F:92:11:E1:9E:AD:BB:53:D0:B4:83:68:95:2C:B5 Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13 Certificate serial: 019B7F1378233DA4EDD73B39B63A2F0E2F93 Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/yYMXkwFPkhHhnq27U9C0g2iVLLU.roa Signing time: Fri 02 Jan 2026 14:19:00 +0000 ROA not before: Fri 02 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47279 IP address blocks: 157.97.72.0/24 maxlen: 24 185.97.179.0/24 maxlen: 24 2a03:4340::/32 maxlen: 32 2a03:4340:fff1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:78:23:3d:a4:ed:d7:3b:39:b6:3a:2f:0e:2f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13 Validity Not Before: Jan 2 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9831793014f9211e19eadbb53d0b48368952cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:39:c7:34:da:20:22:c2:86:38:d8:ca:0f: a9:b1:a3:96:eb:a9:97:15:89:7a:50:54:34:b4:b2: b8:61:42:7e:e4:6b:00:bd:b8:b2:86:59:77:4e:f7: ae:fd:b3:ee:9e:5b:c6:a6:29:df:d1:61:fd:33:69: 82:8e:79:95:cb:1b:ed:cd:01:3e:00:c6:ac:f3:ad: 8c:25:8b:11:73:10:8d:73:c5:71:5e:bb:37:bf:ce: 93:fb:6d:44:59:ac:ac:d3:42:fd:1f:5d:bf:7f:7e: cb:9c:51:ba:bb:ad:f6:95:c3:5b:17:20:0b:47:93: 0c:1b:a6:b2:63:08:b8:c6:01:b6:02:e6:0d:5e:5a: 55:7c:d9:93:67:df:88:29:4d:82:f7:24:a9:e9:81: 11:d9:ad:b6:c1:c9:28:b5:e7:3d:c4:d6:1e:b0:9a: a9:45:60:89:63:95:c4:cc:c6:c3:f5:5f:a2:03:fc: f5:f5:fd:0c:70:e7:9a:91:4c:46:4d:2f:27:a3:53: 44:64:65:57:09:dc:4d:7c:4a:6e:63:16:6a:ab:96: 58:0e:3a:dc:b0:d4:b0:75:a7:04:a9:e8:9f:6f:ea: 6c:4c:54:67:91:57:13:5d:ff:83:07:23:b4:2f:91: 90:68:48:d4:22:aa:fa:a3:6d:ba:2d:2a:3d:84:36: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:83:17:93:01:4F:92:11:E1:9E:AD:BB:53:D0:B4:83:68:95:2C:B5 X509v3 Authority Key Identifier: keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/yYMXkwFPkhHhnq27U9C0g2iVLLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.72.0/24 185.97.179.0/24 IPv6: 2a03:4340::/32 Signature Algorithm: sha256WithRSAEncryption 78:14:ed:66:4e:ad:88:37:24:9a:26:8a:2a:6f:e3:0a:61:4c: 03:53:af:16:4b:58:28:d7:d1:2b:37:ad:c3:c5:15:e9:33:44: 73:1a:26:f2:53:19:e2:15:99:a6:d5:86:39:2f:61:80:cc:ec: b8:12:18:06:c6:f3:7b:96:c8:3a:f2:1f:d1:66:a1:60:7a:a1: 7b:03:a3:d3:1d:e4:9d:2f:fb:f0:fe:25:e5:6d:65:32:38:67: 3f:1e:ff:4e:91:ea:39:5a:3c:b3:33:82:4f:45:c4:bf:e5:01: ca:9a:a2:57:b3:24:61:aa:86:df:55:c3:8f:b8:d0:aa:40:90: 39:fe:ce:16:2b:de:c2:3a:c1:f9:c0:bd:d8:de:83:d0:36:04: 79:29:96:15:f9:75:fb:84:8e:fe:84:a0:c7:7c:0f:ae:04:31: 2d:e6:ce:d3:23:2d:61:66:43:3d:04:52:d9:fe:86:ce:da:f3: 1a:d4:52:ef:0d:5a:e8:ad:ba:f2:be:d5:f3:56:98:c1:80:2e: 26:58:1f:40:fb:01:5b:a7:19:33:e1:0b:ed:d2:0d:e4:96:d2: cd:da:20:d4:7f:ec:7d:79:c1:d3:11:02:20:75:fd:65:11:ee: 34:b2:6b:f5:e2:0d:e7:1b:3b:06:8a:ea:aa:26:58:41:dd:9b: a6:42:2b:2d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/E3gjPaTt1zs5tjovDi+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGNiZWU1MTk5MGYxZTA1YTlkMWRjMGMyZjJmM2E4YTM0 NzBjMTMwHhcNMjYwMTAyMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTgzMTc5MzAxNGY5MjExZTE5ZWFkYmI1M2QwYjQ4MzY4OTUyY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX05xzTaICLChjjYyg+psaOW66mX FYl6UFQ0tLK4YUJ+5GsAvbiyhll3Tveu/bPunlvGpinf0WH9M2mCjnmVyxvtzQE+ AMas862MJYsRcxCNc8VxXrs3v86T+21EWays00L9H12/f37LnFG6u632lcNbFyAL R5MMG6ayYwi4xgG2AuYNXlpVfNmTZ9+IKU2C9ySp6YER2a22wckotec9xNYesJqp RWCJY5XEzMbD9V+iA/z19f0McOeakUxGTS8no1NEZGVXCdxNfEpuYxZqq5ZYDjrc sNSwdacEqeifb+psTFRnkVcTXf+DByO0L5GQaEjUIqr6o226LSo9hDbRLQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMmDF5MBT5IR4Z6tu1PQtINolSy1MB8GA1UdIwQY MBaAFA2MvuUZkPHgWp0dwMLy86ijRwwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWIt MWIxZTc4Y2JiYjA5LzEveVlNWGt3RlBraEhobnEyN1U5QzBnMmlWTExVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWItMWIxZTc4Y2JiYjA5 LzEvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAnWFIAwQA uWGzMA0EAgACMAcDBQAqA0NAMA0GCSqGSIb3DQEBCwUAA4IBAQB4FO1mTq2INySa Jooqb+MKYUwDU68WS1go19ErN63DxRXpM0RzGibyUxniFZmm1YY5L2GAzOy4EhgG xvN7lsg68h/RZqFgeqF7A6PTHeSdL/vw/iXlbWUyOGc/Hv9Okeo5WjyzM4JPRcS/ 5QHKmqJXsyRhqobfVcOPuNCqQJA5/s4WK97COsH5wL3Y3oPQNgR5KZYV+XX7hI7+ hKDHfA+uBDEt5s7TIy1hZkM9BFLZ/obO2vMa1FLvDVrorbryvtXzVpjBgC4mWB9A +wFbpxkz4Qvt0g3kltLN2iDUf+x9ecHTEQIgdf1lEe40smv14g3nGzsGiuqqJlhB 3ZumQist -----END CERTIFICATE-----Generated at Mon Jan 19 20:57:05 2026 by rpki-client