This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/YwvqSqlFZLqH6kfDjCp-PcZpr-U.roa File: YwvqSqlFZLqH6kfDjCp-PcZpr-U.roa (raw, json) Hash identifier: 3MA5H5rXcZa5UjWD5jwcqof14gFEZdryF4wVH0d9824= Subject key identifier: 63:0B:EA:4A:A9:45:64:BA:87:EA:47:C3:8C:2A:7E:3D:C6:69:AF:E5 Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5 Certificate serial: 019B7C7F6EAFFF8E4A1F20A96E0068372176 Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/YwvqSqlFZLqH6kfDjCp-PcZpr-U.roa Signing time: Fri 02 Jan 2026 02:18:04 +0000 ROA not before: Fri 02 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 185.139.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:6e:af:ff:8e:4a:1f:20:a9:6e:00:68:37:21:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5 Validity Not Before: Jan 2 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=630bea4aa94564ba87ea47c38c2a7e3dc669afe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:77:8d:5a:09:06:84:1b:ee:7e:0f:13:5b: dc:f8:fc:9c:38:bb:df:db:3b:7f:81:b6:2c:29:d3: 56:81:cc:72:e6:86:49:c2:c7:46:e4:57:7d:77:83: 0a:78:2b:e1:75:b1:90:e0:28:ee:81:28:76:5b:73: df:79:2d:c7:ee:cb:f5:c7:96:87:96:49:31:8f:5c: c4:b8:38:2f:bf:c4:b9:38:90:a6:c4:5f:58:6b:c4: 83:70:3e:89:16:02:12:dd:97:14:c1:31:9d:98:09: 11:e3:76:1a:47:8c:b2:58:35:eb:a8:4c:ea:7c:64: a6:26:77:e2:30:ca:b1:13:b8:db:0e:1a:a2:c0:13: 7e:37:fc:35:9b:a0:8f:f3:4b:bd:75:b2:74:4c:1f: 3a:ba:73:19:21:6f:08:bf:f0:f1:cf:57:d7:c0:b1: a1:48:da:61:9b:11:b6:bb:0a:a4:0e:61:d8:d7:d8: b6:5c:33:78:2a:7d:42:b9:5e:f0:e9:db:8e:c9:4c: 19:7b:a1:f0:40:95:54:01:35:81:1d:22:74:84:72: 37:bc:50:ed:37:0b:29:8b:89:42:de:d0:2e:aa:64: cf:89:ae:09:82:26:7f:3f:40:cb:3b:44:01:a2:7c: 07:7f:e0:cf:9c:74:34:0d:6b:53:48:ad:19:40:fc: 79:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0B:EA:4A:A9:45:64:BA:87:EA:47:C3:8C:2A:7E:3D:C6:69:AF:E5 X509v3 Authority Key Identifier: keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/YwvqSqlFZLqH6kfDjCp-PcZpr-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.34.0/24 Signature Algorithm: sha256WithRSAEncryption 06:aa:af:84:10:68:df:52:d4:b8:05:66:38:b4:e1:ca:db:09: 81:ed:a3:53:48:57:e6:27:a7:63:f0:04:18:0f:b5:09:13:04: be:08:08:2b:0b:e2:bc:df:0a:2c:85:01:1e:59:04:3a:7c:18: a3:4d:52:df:c4:ee:53:e0:66:f5:71:bf:9d:84:8c:e2:38:5a: bb:df:ab:b3:b1:a5:7d:d2:52:78:a2:88:cf:85:b9:fe:71:82: 85:ff:4d:fd:43:7e:6f:8c:4b:b1:0f:43:16:77:11:e3:1b:08: 7c:48:ac:e7:2c:85:d9:c8:bb:e8:49:a6:65:26:c7:b3:c6:62: 94:58:ea:2e:c8:5a:cc:d4:50:e4:72:82:1d:c2:1c:1c:47:ea: 98:a3:d5:ec:b8:28:a5:d8:80:0c:e4:8d:3f:09:29:3c:2e:c4: dc:b1:bf:e1:37:8e:1a:b1:ce:c3:63:9d:5a:d8:6d:9a:a0:79: 56:ce:a5:a4:bb:76:23:15:f2:2e:e6:88:a7:a6:d8:66:01:69: 97:67:52:89:a5:92:56:7e:cb:c7:c0:82:22:c7:b7:13:04:a9: 40:6c:85:f5:a8:5a:c5:f7:c5:19:53:ee:9f:72:38:41:ee:cd: cb:61:af:c0:9d:c1:51:8e:78:ff:1d:6b:97:68:39:8d:bc:17: 65:09:bd:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f26v/45KHyCpbgBoNyF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NzYyZGIxMjgyZmZkMDg0NzYxMjMyMDM4ZjgxZjVkMjll NjQwZDUwHhcNMjYwMTAyMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzBiZWE0YWE5NDU2NGJhODdlYTQ3YzM4YzJhN2UzZGM2NjlhZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQl3jVoJBoQb7n4PE1vc+PycOLvf 2zt/gbYsKdNWgcxy5oZJwsdG5Fd9d4MKeCvhdbGQ4CjugSh2W3PfeS3H7sv1x5aH lkkxj1zEuDgvv8S5OJCmxF9Ya8SDcD6JFgIS3ZcUwTGdmAkR43YaR4yyWDXrqEzq fGSmJnfiMMqxE7jbDhqiwBN+N/w1m6CP80u9dbJ0TB86unMZIW8Iv/Dxz1fXwLGh SNphmxG2uwqkDmHY19i2XDN4Kn1CuV7w6duOyUwZe6HwQJVUATWBHSJ0hHI3vFDt Nwspi4lC3tAuqmTPia4JgiZ/P0DLO0QBonwHf+DPnHQ0DWtTSK0ZQPx5GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGML6kqpRWS6h+pHw4wqfj3Gaa/lMB8GA1UdIwQY MBaAFLl2LbEoL/0IR2EjIDj4H10p5kDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQt NzBhNTU2YmE4YTExLzEvWXd2cVNxbEZaTHFINmtmRGpDcC1QY1pwci1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQtNzBhNTU2YmE4YTEx LzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYsiMA0G CSqGSIb3DQEBCwUAA4IBAQAGqq+EEGjfUtS4BWY4tOHK2wmB7aNTSFfmJ6dj8AQY D7UJEwS+CAgrC+K83woshQEeWQQ6fBijTVLfxO5T4Gb1cb+dhIziOFq736uzsaV9 0lJ4oojPhbn+cYKF/039Q35vjEuxD0MWdxHjGwh8SKznLIXZyLvoSaZlJsezxmKU WOouyFrM1FDkcoIdwhwcR+qYo9XsuCil2IAM5I0/CSk8LsTcsb/hN44asc7DY51a 2G2aoHlWzqWku3YjFfIu5oinpthmAWmXZ1KJpZJWfsvHwIIix7cTBKlAbIX1qFrF 98UZU+6fcjhB7s3LYa/AncFRjnj/HWuXaDmNvBdlCb3U -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:53 2026 by rpki-client