This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa File: yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa (raw, json) Hash identifier: hNsr3+1Zh+bCK1vX9YSv52aqxq01DCYHfc2YnV/y8Ec= Subject key identifier: CA:B9:AB:10:31:CB:76:1E:1D:04:61:5A:4E:92:01:0D:20:02:75:A4 Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5 Certificate serial: 019B7E37ECE73EEE16E0D5511D0C92A182E6 Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa Signing time: Fri 02 Jan 2026 10:19:12 +0000 ROA not before: Fri 02 Jan 2026 10:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 94.139.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ec:e7:3e:ee:16:e0:d5:51:1d:0c:92:a1:82:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cab9ab1031cb761e1d04615a4e92010d200275a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:39:81:d3:33:95:59:fa:5d:52:50:2c:2c: 17:8e:19:7d:48:8b:d1:38:37:fe:ee:2c:cb:35:f2: a5:e2:0a:45:79:ab:5d:f1:3d:97:02:bb:cf:5b:0e: c6:c8:85:30:5e:42:96:e9:60:e0:a5:e0:8e:8d:12: ff:09:3e:8e:f0:26:1f:a4:2a:e6:79:00:cb:9f:f3: 2b:1d:b0:1e:46:59:35:00:60:3f:95:71:0b:ff:11: 7a:a5:28:41:09:92:f7:66:19:a3:f1:74:1e:ce:df: 5c:0c:25:da:98:33:56:8a:1d:47:13:da:7a:e1:21: cf:3e:ff:65:58:5b:d0:5f:04:42:67:77:8d:5d:3e: a4:dd:c4:66:81:38:98:4d:fe:63:51:ea:55:54:5e: d1:04:cd:8a:0f:72:ad:32:03:a8:4f:04:f1:d3:97: e7:d1:f0:5f:80:6a:c5:c2:9d:a1:de:ed:f3:82:0c: 2c:b2:37:b5:3d:dc:2c:79:05:d2:37:f7:ae:0e:d1: 29:9a:f8:1f:2e:20:88:05:d3:77:73:ce:67:99:a7: d2:cf:61:b3:5f:87:f0:03:82:8e:e2:3d:63:f4:76: b5:af:94:d6:0f:77:2f:f9:38:7d:42:64:05:51:b4: 2f:a8:54:63:75:db:21:d0:8f:cb:69:9b:94:ac:d6: ee:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B9:AB:10:31:CB:76:1E:1D:04:61:5A:4E:92:01:0D:20:02:75:A4 X509v3 Authority Key Identifier: keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.139.62.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:5f:8e:85:78:30:77:6e:c2:c3:a3:a6:b9:3d:6a:1c:41:9a: ae:54:94:24:5b:e8:38:97:ad:8b:9f:f9:1a:e1:d3:6d:b2:c7: 83:84:5f:cd:ac:85:0c:7c:e9:4c:b0:34:ac:6e:a2:9f:14:50: 68:ae:c7:5b:1f:fd:5f:3e:31:02:ba:45:19:e8:1a:0c:bf:bb: eb:01:a9:37:5a:d2:a8:86:bf:3c:7b:91:24:35:90:bb:93:43: cd:08:ee:3a:30:e5:f8:6b:7d:d3:d1:15:94:d2:11:b7:43:9b: eb:c2:f8:8f:3e:2c:75:01:d3:94:83:58:9f:d0:07:ba:65:5c: cf:d8:a0:dc:66:2d:db:21:fd:7f:2e:b1:78:ed:25:3d:f9:77: da:41:8a:30:da:fa:24:97:fd:26:7c:ef:03:da:ec:be:8a:87: 6f:00:14:21:e9:df:95:93:45:4b:72:9b:96:48:c6:64:75:3d: fb:f1:e4:9b:47:e3:f1:f6:26:72:15:b4:ca:2a:3f:b9:e2:c4: b3:1b:e5:cc:71:d8:a5:8c:0e:2b:f6:80:91:a7:bc:21:8c:79: 5a:a2:31:ad:f5:7c:00:40:93:dd:87:42:94:43:e4:7c:0e:49: 41:e8:13:6f:14:be:48:ef:66:2d:b3:91:01:bb:db:8e:13:fa: f8:37:ae:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+znPu4W4NVRHQySoYLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOWRlMjYyMGQyMmZhNjljNTRjYmViYzZmMmY0ODUwNTZj ZTJmZTUwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWI5YWIxMDMxY2I3NjFlMWQwNDYxNWE0ZTkyMDEwZDIwMDI3NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxc5gdMzlVn6XVJQLCwXjhl9SIvR ODf+7izLNfKl4gpFeatd8T2XArvPWw7GyIUwXkKW6WDgpeCOjRL/CT6O8CYfpCrm eQDLn/MrHbAeRlk1AGA/lXEL/xF6pShBCZL3Zhmj8XQezt9cDCXamDNWih1HE9p6 4SHPPv9lWFvQXwRCZ3eNXT6k3cRmgTiYTf5jUepVVF7RBM2KD3KtMgOoTwTx05fn 0fBfgGrFwp2h3u3zggwssje1PdwseQXSN/euDtEpmvgfLiCIBdN3c85nmafSz2Gz X4fwA4KO4j1j9Ha1r5TWD3cv+Th9QmQFUbQvqFRjddsh0I/LaZuUrNbuIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMq5qxAxy3YeHQRhWk6SAQ0gAnWkMB8GA1UdIwQY MBaAFPCd4mINIvppxUy+vG8vSFBWzi/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTIt ZjgyZDYwMGRkNGUyLzEveXJtckVESExkaDRkQkdGYVRwSUJEU0FDZGFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTItZjgyZDYwMGRkNGUy LzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXos+MA0G CSqGSIb3DQEBCwUAA4IBAQArX46FeDB3bsLDo6a5PWocQZquVJQkW+g4l62Ln/ka 4dNtsseDhF/NrIUMfOlMsDSsbqKfFFBorsdbH/1fPjECukUZ6BoMv7vrAak3WtKo hr88e5EkNZC7k0PNCO46MOX4a33T0RWU0hG3Q5vrwviPPix1AdOUg1if0Ae6ZVzP 2KDcZi3bIf1/LrF47SU9+XfaQYow2vokl/0mfO8D2uy+iodvABQh6d+Vk0VLcpuW SMZkdT378eSbR+Px9iZyFbTKKj+54sSzG+XMcdiljA4r9oCRp7whjHlaojGt9XwA QJPdh0KUQ+R8DklB6BNvFL5I72Yts5EBu9uOE/r4N660 -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:31 2026 by rpki-client