This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/ypwxETyZdloPXHbGn8CEus0D4c4.roa File: ypwxETyZdloPXHbGn8CEus0D4c4.roa (raw, json) Hash identifier: 7QyOW+9NQ3XhqMdU+D9M2fSGw2Trjpkp8kr5Lbld/5I= Subject key identifier: CA:9C:31:11:3C:99:76:5A:0F:5C:76:C6:9F:C0:84:BA:CD:03:E1:CE Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae Certificate serial: 019B78A2FD6AC5DC0C6952E0AD1689EC5D5A Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/ypwxETyZdloPXHbGn8CEus0D4c4.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49892 IP address blocks: 94.143.128.0/21 maxlen: 21 94.143.128.0/24 maxlen: 24 94.143.129.0/24 maxlen: 24 94.143.130.0/24 maxlen: 24 94.143.131.0/24 maxlen: 24 94.143.132.0/24 maxlen: 24 94.143.133.0/24 maxlen: 24 94.143.134.0/24 maxlen: 24 94.143.135.0/24 maxlen: 24 185.169.216.0/22 maxlen: 22 185.169.216.0/24 maxlen: 24 185.169.217.0/24 maxlen: 24 185.169.218.0/24 maxlen: 24 185.169.219.0/24 maxlen: 24 2a04:6a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fd:6a:c5:dc:0c:69:52:e0:ad:16:89:ec:5d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca9c31113c99765a0f5c76c69fc084bacd03e1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:73:bf:d1:99:a6:8d:28:bb:1e:3a:f5:ad: 0d:43:ca:86:c6:4b:a4:86:4a:49:c4:a6:09:2e:ef: 4c:ed:52:a7:28:47:5b:b9:76:3a:9a:6d:fa:02:85: 4d:d7:4c:0c:2a:4a:4b:bd:bc:0b:8f:3f:68:b6:f8: 84:ec:69:85:fa:82:1e:6d:76:f9:1e:29:e1:f5:d0: 86:50:5e:06:99:b7:d3:61:a3:c3:8a:58:43:5f:e8: 19:83:7c:27:0c:d1:d0:6c:16:03:23:48:e3:b4:46: 00:f2:ef:de:7d:47:e1:50:42:45:90:81:c4:6d:5b: fe:b0:76:6a:d6:49:f4:65:05:de:d1:35:c3:d3:7e: d3:48:bf:7a:77:f4:62:d0:a9:e9:ed:8d:8f:4d:53: 7c:07:ba:68:1a:d7:ae:ba:bb:b5:13:f4:f3:6c:24: 9f:93:3d:b5:3d:89:7f:05:b0:b8:78:b0:40:8a:e2: bd:1c:61:b6:9e:7c:79:7c:86:ef:2d:8e:01:35:0c: 3a:c3:90:c7:b3:8f:99:3d:d0:9f:68:a3:98:38:24: 43:d8:3f:63:08:96:fe:fb:df:15:3c:b8:c3:60:fc: f7:60:27:c6:94:b2:09:d1:d5:ff:ac:80:6e:13:eb: eb:72:8c:d8:55:2a:7e:a3:64:96:ba:e6:7a:01:e9: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9C:31:11:3C:99:76:5A:0F:5C:76:C6:9F:C0:84:BA:CD:03:E1:CE X509v3 Authority Key Identifier: keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/ypwxETyZdloPXHbGn8CEus0D4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.143.128.0/21 185.169.216.0/22 IPv6: 2a04:6a40::/29 Signature Algorithm: sha256WithRSAEncryption 0d:71:cf:4f:a1:7a:30:73:ff:03:7e:30:bb:11:45:ef:16:ff: c2:8c:ae:54:38:54:93:eb:47:08:fa:e5:25:6d:75:60:b0:3e: 2f:3c:3f:b8:46:6f:b0:4e:35:80:46:8c:53:e4:17:7a:42:d1: 0c:77:a0:91:bd:91:b4:8b:b1:58:15:a2:53:d2:07:23:21:9a: b7:92:5d:ee:5d:9d:20:88:f3:ff:ca:0e:08:e8:8c:1a:3b:ef: 85:31:2a:a3:b4:37:f0:d4:00:de:a1:cc:fb:73:79:f5:07:3a: ed:fe:de:9e:fa:74:16:dc:ec:da:4d:cd:d1:61:7b:87:9d:6b: 36:12:77:a7:ee:64:ef:17:8d:93:a5:06:5f:52:f3:a1:2c:ba: 85:c1:97:14:6a:c8:7b:a8:e9:27:35:dc:11:c7:f8:25:b5:5b: 15:f9:b2:5e:fe:51:fa:73:25:01:1c:d9:57:29:c6:24:cd:f7: 5a:bf:de:da:06:6a:42:bb:b9:aa:42:cc:e5:e6:28:67:3f:cf: 32:20:af:48:d5:5d:57:f4:05:ed:03:2f:ab:d0:b2:bc:dc:13: 4f:7a:ca:12:a9:54:c3:8c:95:a9:38:fd:e4:f0:cf:ec:c6:dc: af:dd:10:53:57:0e:bc:c9:29:bb:2c:19:03:3e:3c:99:55:5d: 4d:0d:82:8e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4ov1qxdwMaVLgrRaJ7F1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxY2VkZTkwNzQ5MmU1MGM5NTEyNjM5NTc4ODFiYzNjYzVj ZTMwYWUwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTljMzExMTNjOTk3NjVhMGY1Yzc2YzY5ZmMwODRiYWNkMDNlMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArudzv9GZpo0oux469a0NQ8qGxkuk hkpJxKYJLu9M7VKnKEdbuXY6mm36AoVN10wMKkpLvbwLjz9otviE7GmF+oIebXb5 Hinh9dCGUF4GmbfTYaPDilhDX+gZg3wnDNHQbBYDI0jjtEYA8u/efUfhUEJFkIHE bVv+sHZq1kn0ZQXe0TXD037TSL96d/Ri0Knp7Y2PTVN8B7poGteuuru1E/TzbCSf kz21PYl/BbC4eLBAiuK9HGG2nnx5fIbvLY4BNQw6w5DHs4+ZPdCfaKOYOCRD2D9j CJb++98VPLjDYPz3YCfGlLIJ0dX/rIBuE+vrcozYVSp+o2SWuuZ6Aem9rQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMqcMRE8mXZaD1x2xp/AhLrNA+HOMB8GA1UdIwQY MBaAFEHO3pB0kuUMlRJjlXiBvDzFzjCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgt NzBhZjVmNjU3M2I1LzEveXB3eEVUeVpkbG9QWEhiR244Q0V1czBENGM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgtNzBhZjVmNjU3M2I1 LzEvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXo+AAwQC uanYMA0EAgACMAcDBQMqBGpAMA0GCSqGSIb3DQEBCwUAA4IBAQANcc9PoXowc/8D fjC7EUXvFv/CjK5UOFST60cI+uUlbXVgsD4vPD+4Rm+wTjWARoxT5Bd6QtEMd6CR vZG0i7FYFaJT0gcjIZq3kl3uXZ0giPP/yg4I6IwaO++FMSqjtDfw1ADeocz7c3n1 Bzrt/t6e+nQW3OzaTc3RYXuHnWs2Enen7mTvF42TpQZfUvOhLLqFwZcUash7qOkn NdwRx/gltVsV+bJe/lH6cyUBHNlXKcYkzfdav97aBmpCu7mqQszl5ihnP88yIK9I 1V1X9AXtAy+r0LK83BNPesoSqVTDjJWpOP3k8M/sxtyv3RBTVw68ySm7LBkDPjyZ VV1NDYKO -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:11 2026 by rpki-client