This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa File: yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa (raw, json) Hash identifier: WORw69SpG7o5LnNs7NnksxUfsDlM6lj3W399eRGTTp0= Subject key identifier: CA:8A:17:58:0C:D7:A5:F7:38:22:CD:92:CE:2F:BF:B0:A3:59:D4:3C Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37 Certificate serial: 019B7758ACF405E9F19A352465BB9826FE34 Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa Signing time: Thu 01 Jan 2026 02:17:38 +0000 ROA not before: Thu 01 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 51.4.0.0/15 maxlen: 15 51.8.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ac:f4:05:e9:f1:9a:35:24:65:bb:98:26:fe:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37 Validity Not Before: Jan 1 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca8a17580cd7a5f73822cd92ce2fbfb0a359d43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:11:68:ea:98:39:d2:f3:02:cd:e6:1f:8e: 36:c8:12:81:b3:f4:f9:f1:a0:60:94:db:c3:fe:4f: 1c:55:fb:70:40:a0:80:b4:33:7d:88:71:c4:7d:3d: ea:3b:25:4c:b7:d0:e4:63:23:30:60:3b:52:46:3e: 9c:39:68:f6:27:1a:aa:9b:d2:d2:ab:70:05:30:f8: 08:d6:45:b2:35:ef:78:92:a6:ed:bc:8c:84:c5:45: ab:cd:bd:7b:32:f7:b8:46:51:9f:f9:65:50:30:e0: 7c:59:ae:4c:19:6a:86:47:93:d2:d5:63:9e:68:7a: af:96:c3:bd:9c:1f:69:42:4a:5d:d1:2c:e3:72:84: 4d:9c:26:4e:0e:94:cb:71:cc:eb:c1:f2:a5:59:3e: 26:bf:31:1d:de:60:07:88:b0:0a:ed:29:8f:25:87: 3f:0b:9b:0c:f1:b9:fc:5d:0f:1e:3f:7c:66:af:18: 65:01:80:ef:18:b4:0c:8e:d2:9d:83:e3:c6:ee:c0: 2f:e6:e6:d0:3a:69:73:7b:30:9a:b6:b2:0a:ae:a4: f6:38:02:f8:25:e7:74:9f:44:1f:b6:3f:50:cd:37: 39:87:94:2c:13:ad:52:36:38:64:9e:c1:1a:91:ad: 52:61:a3:17:f7:3a:58:1c:f6:ce:90:9d:c5:b6:1a: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:17:58:0C:D7:A5:F7:38:22:CD:92:CE:2F:BF:B0:A3:59:D4:3C X509v3 Authority Key Identifier: keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.4.0.0/15 51.8.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:b4:6f:75:37:26:5a:c8:79:69:f5:b9:4c:07:d9:7a:a7:b3: c7:5f:23:31:74:5f:65:38:41:ae:82:cd:dd:00:83:cb:a7:0f: 29:ed:45:f5:b4:cb:16:0e:81:6c:34:19:9c:a4:d8:33:86:f4: 1a:ed:28:2f:04:d6:bb:55:0f:9c:d4:6b:24:0d:4e:31:eb:a0: 25:b0:47:db:dc:09:ce:54:1b:02:3a:af:d6:52:36:72:da:53: 31:03:62:7f:e7:0d:70:d1:ef:db:db:91:79:87:6e:70:61:98: cd:8b:57:3d:08:e1:3f:27:d6:c2:89:5a:e1:a5:60:30:ae:fc: 08:47:d9:34:31:3c:b1:ad:6b:da:1a:52:03:eb:3e:aa:d7:d8: b5:19:41:9a:ef:22:14:bf:a3:93:17:44:b9:b7:f2:1a:4d:b1: c0:cd:f0:ea:59:d7:39:bb:c5:a8:cf:b0:2a:49:08:e4:8d:b4: a0:be:59:92:69:93:43:bd:dd:27:17:20:5e:c7:06:f9:87:7a: c9:d2:28:6d:6e:8d:98:47:56:ef:e8:df:e1:74:7c:12:05:ca: 00:e3:cc:69:e7:e1:b6:d2:61:53:26:89:66:9a:9c:09:74:fe: 50:f3:2d:e7:94:68:51:58:7e:a4:87:32:f4:b5:72:b1:80:96: 9a:f8:9f:3f -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt3WKz0BenxmjUkZbuYJv40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MjQyM2VkOTA1MDAwZjY5YWQ5M2VlZmM2NjZiYjliMWFk ZGNiMzcwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYThhMTc1ODBjZDdhNWY3MzgyMmNkOTJjZTJmYmZiMGEzNTlkNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA290RaOqYOdLzAs3mH442yBKBs/T5 8aBglNvD/k8cVftwQKCAtDN9iHHEfT3qOyVMt9DkYyMwYDtSRj6cOWj2Jxqqm9LS q3AFMPgI1kWyNe94kqbtvIyExUWrzb17Mve4RlGf+WVQMOB8Wa5MGWqGR5PS1WOe aHqvlsO9nB9pQkpd0SzjcoRNnCZODpTLcczrwfKlWT4mvzEd3mAHiLAK7SmPJYc/ C5sM8bn8XQ8eP3xmrxhlAYDvGLQMjtKdg+PG7sAv5ubQOmlzezCatrIKrqT2OAL4 Jed0n0Qftj9QzTc5h5QsE61SNjhknsEaka1SYaMX9zpYHPbOkJ3FthpICwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFMqKF1gM16X3OCLNks4vv7CjWdQ8MB8GA1UdIwQY MBaAFFUkI+2QUAD2mtk+78Zmu5sa3cs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUt ZTk1MWE3NDM0NmY5LzEveW9vWFdBelhwZmM0SXMyU3ppLV9zS05aMUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUtZTk1MWE3NDM0NmY5 LzEvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMBMwQDAwAz CDANBgkqhkiG9w0BAQsFAAOCAQEAj7RvdTcmWsh5afW5TAfZeqezx18jMXRfZThB roLN3QCDy6cPKe1F9bTLFg6BbDQZnKTYM4b0Gu0oLwTWu1UPnNRrJA1OMeugJbBH 29wJzlQbAjqv1lI2ctpTMQNif+cNcNHv29uReYducGGYzYtXPQjhPyfWwola4aVg MK78CEfZNDE8sa1r2hpSA+s+qtfYtRlBmu8iFL+jkxdEubfyGk2xwM3w6lnXObvF qM+wKkkI5I20oL5ZkmmTQ73dJxcgXscG+Yd6ydIobW6NmEdW7+jf4XR8EgXKAOPM aefhttJhUyaJZpqcCXT+UPMt55RoUVh+pIcy9LVysYCWmvifPw== -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:23 2026 by rpki-client