This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/yhKLA-zj5RYqslwnm0r4BHqEBp8.roa File: yhKLA-zj5RYqslwnm0r4BHqEBp8.roa (raw, json) Hash identifier: C0KzN07Jv0LIBUlVIHkwge6s/WRiluSVLDaqXcoFYBw= Subject key identifier: CA:12:8B:03:EC:E3:E5:16:2A:B2:5C:27:9B:4A:F8:04:7A:84:06:9F Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77593A6C843ADB6185EB490774009897 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/yhKLA-zj5RYqslwnm0r4BHqEBp8.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2614 IP address blocks: 94.176.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3a:6c:84:3a:db:61:85:eb:49:07:74:00:98:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca128b03ece3e5162ab25c279b4af8047a84069f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:30:87:5a:98:ef:64:89:ea:a6:99:d0:29:88: fa:ee:72:0d:b6:df:34:2c:9c:42:98:7f:11:81:fb: dc:e0:bf:dd:4d:35:f5:50:5d:40:a5:62:d4:7e:ca: b1:d6:e9:17:61:70:79:94:04:62:3f:7d:7a:02:ae: 90:b2:72:3f:07:f9:c7:33:b7:f5:82:07:10:f0:1b: 5e:9a:74:69:5d:1a:3c:bd:d8:ce:76:06:1e:2e:2e: e3:71:e1:c8:19:c3:b1:9c:aa:cb:16:fe:94:b1:c4: cc:f1:f5:35:d9:25:77:84:3f:73:83:4e:2b:d6:70: f9:8b:13:86:bd:a1:05:e4:e2:00:52:6a:91:24:8e: ba:cb:97:14:90:2e:fc:59:a0:9a:86:cb:77:b6:6c: 44:1d:c2:32:35:5e:02:96:c5:08:a8:3d:6b:38:f8: 57:d5:50:a4:ba:e1:35:96:c9:67:40:ec:75:75:a8: b7:e8:a4:e0:59:ff:59:73:5c:fa:9d:ce:6c:c4:fe: 58:24:d5:e7:1a:64:a8:c5:67:bb:cb:55:2c:1a:69: 17:6b:83:20:65:0d:93:60:90:19:eb:f7:f9:c7:53: 22:4e:c9:de:f0:85:30:f6:18:f1:76:c2:60:39:e5: 12:54:93:7a:e3:6e:93:ea:77:60:70:09:b3:ca:04: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:12:8B:03:EC:E3:E5:16:2A:B2:5C:27:9B:4A:F8:04:7A:84:06:9F X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/yhKLA-zj5RYqslwnm0r4BHqEBp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.176.135.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:84:c2:b5:8d:d3:3f:8f:17:2f:b2:a9:51:05:7d:88:3e:e7: 43:f0:d2:14:ad:1f:7f:e3:e4:73:70:38:05:b5:7f:2d:62:3b: b9:86:a9:d2:a4:b2:64:a1:95:34:6e:87:76:c6:d2:72:06:31: 1e:54:50:a5:c1:b3:f1:c2:53:99:08:9e:14:57:3d:78:ff:bb: 81:f5:83:95:92:11:d8:a0:b7:c0:0a:d5:60:c4:6d:fd:8b:52: 50:79:8c:d6:b6:0b:ee:f6:6a:7d:8a:36:15:f4:49:1b:69:e2: 2f:91:0e:9c:32:bf:62:3b:ec:d9:a2:8e:8f:17:c7:92:2b:ae: bb:4f:f6:15:26:ac:da:a6:44:5c:ba:81:2d:cc:2a:93:39:90: 74:06:4b:a9:18:35:4d:8b:5b:c9:fd:d4:c4:da:96:45:8e:f7: d7:9e:4d:27:ac:51:0b:b2:9e:f2:75:35:52:7d:c0:fe:da:09: 84:55:35:da:22:ae:02:79:e0:0a:0a:9f:1e:51:05:a2:5d:91: 90:3b:e2:7c:25:f9:e5:42:56:07:57:02:0e:93:9d:d0:10:c0: 9c:d2:6d:57:82:38:69:21:56:58:10:6d:8d:b3:11:4c:8c:ba: 2e:99:5f:94:fb:ff:ef:16:a9:71:40:d2:d0:4e:98:aa:e0:02: b3:7d:b2:d1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WTpshDrbYYXrSQd0AJiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTEyOGIwM2VjZTNlNTE2MmFiMjVjMjc5YjRhZjgwNDdhODQwNjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTCHWpjvZInqppnQKYj67nINtt80 LJxCmH8Rgfvc4L/dTTX1UF1ApWLUfsqx1ukXYXB5lARiP316Aq6QsnI/B/nHM7f1 ggcQ8BtemnRpXRo8vdjOdgYeLi7jceHIGcOxnKrLFv6UscTM8fU12SV3hD9zg04r 1nD5ixOGvaEF5OIAUmqRJI66y5cUkC78WaCahst3tmxEHcIyNV4ClsUIqD1rOPhX 1VCkuuE1lslnQOx1dai36KTgWf9Zc1z6nc5sxP5YJNXnGmSoxWe7y1UsGmkXa4Mg ZQ2TYJAZ6/f5x1MiTsne8IUw9hjxdsJgOeUSVJN6426T6ndgcAmzygSjkwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMoSiwPs4+UWKrJcJ5tK+AR6hAafMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL3loS0xBLXpqNVJZcXNsd25tMHI0QkhxRUJwOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABesIcw DQYJKoZIhvcNAQELBQADggEBAE+EwrWN0z+PFy+yqVEFfYg+50Pw0hStH3/j5HNw OAW1fy1iO7mGqdKksmShlTRuh3bG0nIGMR5UUKXBs/HCU5kInhRXPXj/u4H1g5WS Edigt8AK1WDEbf2LUlB5jNa2C+72an2KNhX0SRtp4i+RDpwyv2I77Nmijo8Xx5Ir rrtP9hUmrNqmRFy6gS3MKpM5kHQGS6kYNU2LW8n91MTalkWO99eeTSesUQuynvJ1 NVJ9wP7aCYRVNdoirgJ54AoKnx5RBaJdkZA74nwl+eVCVgdXAg6TndAQwJzSbVeC OGkhVlgQbY2zEUyMui6ZX5T7/+8WqXFA0tBOmKrgArN9stE= -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:04 2026 by rpki-client