This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/YgBe7NidCuhBJDoY20do8_9nElw.roa File: YgBe7NidCuhBJDoY20do8_9nElw.roa (raw, json) Hash identifier: ecBnWEQVtbA0KAJWO5J4k2Zn61yGu2c/SabXyONIBqI= Subject key identifier: 62:00:5E:EC:D8:9D:0A:E8:41:24:3A:18:DB:47:68:F3:FF:67:12:5C Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb Certificate serial: 019B7F14CF4C25B84EE718C5EAC69FFD2D46 Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/YgBe7NidCuhBJDoY20do8_9nElw.roa Signing time: Fri 02 Jan 2026 14:20:28 +0000 ROA not before: Fri 02 Jan 2026 14:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48441 IP address blocks: 94.247.56.0/21 maxlen: 21 185.33.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:cf:4c:25:b8:4e:e7:18:c5:ea:c6:9f:fd:2d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb Validity Not Before: Jan 2 14:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62005eecd89d0ae841243a18db4768f3ff67125c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:94:89:41:91:1d:9b:1a:0a:d5:ef:06:da: 6c:25:d6:f0:a1:12:5d:29:f2:57:8d:77:54:53:fc: cf:3b:06:92:c3:20:fe:ea:db:89:94:e8:f8:c3:aa: 7d:62:9c:2a:45:4f:20:ea:0f:00:ac:a4:7c:5c:70: ab:55:ab:1f:32:ec:4a:d9:dd:42:6f:17:c7:5c:76: 26:3e:3c:0a:6c:e1:89:86:26:40:73:33:a7:08:22: b8:01:0b:69:32:02:58:66:ea:a1:69:cd:9b:74:9d: 52:f7:93:04:4f:ce:be:d2:3a:c7:3b:0b:20:8f:53: 0d:1f:84:26:a7:1b:86:29:47:a5:94:f7:2f:fe:3b: f1:9b:c0:bf:6a:6c:be:a1:5f:25:0c:54:2a:71:7f: 40:23:55:80:c1:73:32:f4:81:4f:5b:07:4a:1a:03: a5:01:4d:59:87:bd:dc:c5:c6:e6:18:d0:f3:3d:e3: c2:fb:91:c2:48:a1:22:b1:36:e2:19:5d:0e:94:26: da:bf:84:20:f6:ba:72:36:5c:a0:86:2d:6f:38:37: fc:2b:c1:32:22:86:ca:55:6a:72:03:38:35:66:29: c6:0b:8f:62:6c:ef:29:0e:ac:20:ec:57:bf:5e:b4: 36:b6:e4:ce:f9:f3:60:d4:54:ac:74:36:1c:56:04: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:00:5E:EC:D8:9D:0A:E8:41:24:3A:18:DB:47:68:F3:FF:67:12:5C X509v3 Authority Key Identifier: keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/YgBe7NidCuhBJDoY20do8_9nElw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.56.0/21 185.33.236.0/22 Signature Algorithm: sha256WithRSAEncryption c4:5f:2d:39:f0:64:e1:dd:c4:a1:99:47:93:6b:21:f7:cb:c7: d3:f5:06:71:88:72:e0:54:31:91:41:f6:55:07:23:cf:7b:81: 33:50:23:a1:2b:10:c1:f3:ed:dc:52:15:cf:25:1e:13:43:4f: 7e:d9:4d:54:dc:6b:c2:c5:17:ba:b9:04:90:00:4c:b6:e1:58: c8:43:78:d5:79:90:10:34:ac:ad:00:ef:de:f3:8b:09:6d:21: b5:dd:f5:cd:68:b4:8c:2e:47:44:0b:e4:88:83:46:71:71:0d: 1a:67:96:82:c4:c8:b6:0b:21:4c:f4:4d:6e:84:3b:7a:22:81: c4:7a:53:84:e3:dc:8a:69:80:8a:24:22:6d:1e:6f:62:59:03: bb:f0:5a:40:64:4f:21:4f:07:4f:81:13:22:20:6a:0d:ed:13: 97:a4:7c:43:fa:d9:6d:4b:e8:40:d1:38:1d:bb:16:80:63:39: 47:1a:6e:f5:3c:f3:e3:98:f7:d6:5e:73:1b:25:4f:cc:ea:7f: ce:bf:da:9e:73:74:9b:ef:e8:f3:0d:b0:1d:4d:b2:a8:15:18: 48:90:5e:a2:85:4c:5e:82:c0:aa:70:78:a8:9c:1a:2a:1e:e2: 9e:19:b1:60:2d:b0:9d:6e:49:c1:94:3f:88:fc:38:1e:2d:ab: d3:b4:30:87 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FM9MJbhO5xjF6saf/S1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzE0OGQ3NWJkYzM5Y2U5ZGQyZTNiZGFhNzU4NDdiMTdi MzRlY2IwHhcNMjYwMTAyMTQyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjAwNWVlY2Q4OWQwYWU4NDEyNDNhMThkYjQ3NjhmM2ZmNjcxMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7iUiUGRHZsaCtXvBtpsJdbwoRJd KfJXjXdUU/zPOwaSwyD+6tuJlOj4w6p9YpwqRU8g6g8ArKR8XHCrVasfMuxK2d1C bxfHXHYmPjwKbOGJhiZAczOnCCK4AQtpMgJYZuqhac2bdJ1S95MET86+0jrHOwsg j1MNH4QmpxuGKUellPcv/jvxm8C/amy+oV8lDFQqcX9AI1WAwXMy9IFPWwdKGgOl AU1Zh73cxcbmGNDzPePC+5HCSKEisTbiGV0OlCbav4Qg9rpyNlyghi1vODf8K8Ey IobKVWpyAzg1ZinGC49ibO8pDqwg7Fe/XrQ2tuTO+fNg1FSsdDYcVgQfOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGIAXuzYnQroQSQ6GNtHaPP/ZxJcMB8GA1UdIwQY MBaAFNpxSNdb3DnOndLjvap1hHsXs07LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUt ZGVmMGNjMzRlMDA4LzEvWWdCZTdOaWRDdWhCSkRvWTIwZG84XzluRWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUtZGVmMGNjMzRlMDA4 LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXvc4AwQC uSHsMA0GCSqGSIb3DQEBCwUAA4IBAQDEXy058GTh3cShmUeTayH3y8fT9QZxiHLg VDGRQfZVByPPe4EzUCOhKxDB8+3cUhXPJR4TQ09+2U1U3GvCxRe6uQSQAEy24VjI Q3jVeZAQNKytAO/e84sJbSG13fXNaLSMLkdEC+SIg0ZxcQ0aZ5aCxMi2CyFM9E1u hDt6IoHEelOE49yKaYCKJCJtHm9iWQO78FpAZE8hTwdPgRMiIGoN7ROXpHxD+tlt S+hA0TgduxaAYzlHGm71PPPjmPfWXnMbJU/M6n/Ov9qec3Sb7+jzDbAdTbKoFRhI kF6ihUxegsCqcHionBoqHuKeGbFgLbCdbknBlD+I/DgeLavTtDCH -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:19 2026 by rpki-client