This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/YpzL7xrF0dIqaxjKKmFd_QnzOiQ.roa File: YpzL7xrF0dIqaxjKKmFd_QnzOiQ.roa (raw, json) Hash identifier: Shositwz7oGoRnr0DWHzQSqq+ccsryBZJdt4q3rcze0= Subject key identifier: 62:9C:CB:EF:1A:C5:D1:D2:2A:6B:18:CA:2A:61:5D:FD:09:F3:3A:24 Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270 Certificate serial: 019B79ED351958A80A025D14466B6FA72FEC Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/YpzL7xrF0dIqaxjKKmFd_QnzOiQ.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201596 IP address blocks: 141.195.32.0/19 maxlen: 23 185.47.248.0/22 maxlen: 24 185.58.136.0/22 maxlen: 24 2a02:6420::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:19:58:a8:0a:02:5d:14:46:6b:6f:a7:2f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=629ccbef1ac5d1d22a6b18ca2a615dfd09f33a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:6c:53:3a:2b:8a:a4:d8:71:cf:03:37:da: 5f:93:13:b4:21:6e:f5:d4:43:1a:e4:0c:fb:2b:b9: ca:2c:ce:ce:1d:0b:12:5c:f2:cf:54:58:d4:ac:11: 4b:2b:eb:2b:20:e1:98:24:d3:b6:d0:1b:a7:c3:aa: 59:cc:a5:6b:cc:8d:9c:0c:a2:d4:3e:b4:04:7c:af: 66:bc:bc:32:ee:77:05:c9:c3:18:eb:bc:c7:9e:16: 5b:48:62:8e:86:b3:7a:fd:d6:bb:ac:3a:55:6b:86: 87:93:bb:e7:1d:6b:3a:6f:e3:a8:d8:bf:19:27:8e: c7:da:e8:79:ac:b7:f9:9e:f0:f6:5e:f8:15:dd:fb: 45:0a:9c:a8:7b:26:b7:e3:6d:7a:60:0a:6e:be:88: c6:d0:ed:02:fd:f0:a6:19:01:01:af:9b:7a:6a:a1: 6d:fd:93:8a:24:84:48:9c:22:5e:b3:28:43:82:0d: 25:e0:72:96:ef:a5:d9:98:fe:08:11:9d:8d:b3:47: f1:0f:e2:57:fb:df:45:83:4e:6c:d3:00:d0:23:a9: 69:92:96:3e:cd:94:60:d0:16:c2:03:4a:9b:c5:65: 99:dd:73:36:02:ab:45:6b:99:17:7a:3b:65:0f:3c: 40:2d:08:07:f8:db:15:6b:dd:8d:f2:0f:a3:34:e8: 14:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9C:CB:EF:1A:C5:D1:D2:2A:6B:18:CA:2A:61:5D:FD:09:F3:3A:24 X509v3 Authority Key Identifier: keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/YpzL7xrF0dIqaxjKKmFd_QnzOiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.195.32.0/19 185.47.248.0/22 185.58.136.0/22 IPv6: 2a02:6420::/32 Signature Algorithm: sha256WithRSAEncryption 7e:bb:c6:1c:5a:74:3a:09:4a:d9:e0:ab:c7:92:d7:22:39:1e: 4c:3c:3e:8d:d4:f5:a2:2a:04:51:49:08:bf:c2:08:d8:64:73: a9:c2:c5:98:d9:e9:fc:4f:be:7a:b8:80:38:8a:06:1f:6b:97: e7:8c:b0:22:23:ac:10:82:bf:9c:0e:ce:2a:01:13:79:75:64: bd:68:a4:ee:15:38:00:7a:51:a8:f4:b0:cb:02:50:50:34:89: 8a:d7:16:96:0d:cf:36:61:b6:ff:f1:7b:b1:16:27:52:03:5f: 11:7d:d1:7f:bb:fe:da:b8:f8:09:60:28:dd:18:22:86:be:8e: cf:fe:a7:a6:d0:a5:c0:90:ae:a6:07:df:5c:f6:c2:61:22:c0: 35:3c:19:12:22:c1:27:a5:13:0b:ee:b4:e0:0c:21:e9:54:f8: 94:35:e7:35:4a:d5:48:27:d0:58:b3:0d:93:fc:10:cb:56:c2: 6d:5d:21:41:14:39:63:2d:88:63:92:4c:7a:f3:8d:d9:0a:7e: 8c:99:df:81:5c:7a:dd:26:e3:0a:2d:8a:0f:5a:6b:a3:f7:43: d7:01:9f:a7:3d:bc:de:2f:12:c6:61:0b:3a:73:73:9f:94:8d: cb:48:37:0d:78:1c:12:f7:e4:0d:3d:92:ad:24:34:6b:32:1f: 33:d2:74:0a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57TUZWKgKAl0URmtvpy/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDE4ZDJhNTFmZWYyZDc2YzYyNjAwNTU2YzY2ZDU3Y2I3 ZTkyNzAwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjljY2JlZjFhYzVkMWQyMmE2YjE4Y2EyYTYxNWRmZDA5ZjMzYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HJsUzoriqTYcc8DN9pfkxO0IW71 1EMa5Az7K7nKLM7OHQsSXPLPVFjUrBFLK+srIOGYJNO20Bunw6pZzKVrzI2cDKLU PrQEfK9mvLwy7ncFycMY67zHnhZbSGKOhrN6/da7rDpVa4aHk7vnHWs6b+Oo2L8Z J47H2uh5rLf5nvD2XvgV3ftFCpyoeya34216YApuvojG0O0C/fCmGQEBr5t6aqFt /ZOKJIRInCJesyhDgg0l4HKW76XZmP4IEZ2Ns0fxD+JX+99Fg05s0wDQI6lpkpY+ zZRg0BbCA0qbxWWZ3XM2AqtFa5kXejtlDzxALQgH+NsVa92N8g+jNOgUmQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGKcy+8axdHSKmsYyiphXf0J8zokMB8GA1UdIwQY MBaAFHsBjSpR/vLXbGJgBVbGbVfLfpJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdHTktsSC04dGRzWW1BRlZzWnRWOHQta25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNmZkMGQtYTAyYi00OWMyLTlhMmMt NGRjMmRkNTZkNTdmLzEvWXB6TDd4ckYwZElxYXhqS0ttRmRfUW56T2lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lNmZkMGQtYTAyYi00OWMyLTlhMmMtNGRjMmRkNTZkNTdm LzEvZXdHTktsSC04dGRzWW1BRlZzWnRWOHQta25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFjcMgAwQC uS/4AwQCuTqIMA0EAgACMAcDBQAqAmQgMA0GCSqGSIb3DQEBCwUAA4IBAQB+u8Yc WnQ6CUrZ4KvHktciOR5MPD6N1PWiKgRRSQi/wgjYZHOpwsWY2en8T756uIA4igYf a5fnjLAiI6wQgr+cDs4qARN5dWS9aKTuFTgAelGo9LDLAlBQNImK1xaWDc82Ybb/ 8XuxFidSA18RfdF/u/7auPgJYCjdGCKGvo7P/qem0KXAkK6mB99c9sJhIsA1PBkS IsEnpRML7rTgDCHpVPiUNec1StVIJ9BYsw2T/BDLVsJtXSFBFDljLYhjkkx6843Z Cn6Mmd+BXHrdJuMKLYoPWmuj90PXAZ+nPbzeLxLGYQs6c3OflI3LSDcNeBwS9+QN PZKtJDRrMh8z0nQK -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:42 2026 by rpki-client