This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/YlIgNG5zvh6s1BC507yEDE5b12M.roa File: YlIgNG5zvh6s1BC507yEDE5b12M.roa (raw, json) Hash identifier: 9Jxgl9sdOKliXdLsBeBxACGlpLlkp4sR317xnNXazAk= Subject key identifier: 62:52:20:34:6E:73:BE:1E:AC:D4:10:B9:D3:BC:84:0C:4E:5B:D7:63 Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4 Certificate serial: 019B7DC9F31B0F3FD5ADC27A83D001535D7D Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/YlIgNG5zvh6s1BC507yEDE5b12M.roa Signing time: Fri 02 Jan 2026 08:19:05 +0000 ROA not before: Fri 02 Jan 2026 08:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44381 IP address blocks: 5.145.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f3:1b:0f:3f:d5:ad:c2:7a:83:d0:01:53:5d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4 Validity Not Before: Jan 2 08:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=625220346e73be1eacd410b9d3bc840c4e5bd763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:b8:10:f5:33:f0:cb:9a:28:86:14:ea:a3: f5:0c:71:b4:ab:55:89:52:17:14:64:e0:f5:da:c8: 21:13:f9:5a:74:c9:6d:92:44:8a:89:fb:27:8d:e2: 79:a7:47:ae:76:e3:8b:83:d9:1c:68:10:db:92:ee: 48:46:88:9f:43:3f:d9:02:d9:8f:e4:d6:6e:35:46: a6:2b:3f:9c:d4:09:6d:b5:4f:4c:a6:af:e1:44:7e: e6:97:34:5a:d8:68:21:4c:ce:50:4b:ce:a7:1d:5f: 11:e8:d6:ca:66:0f:d6:fb:b7:2e:2f:36:e4:5a:b5: 93:87:17:6d:b3:be:2e:68:4d:2c:b4:7c:9e:3b:dc: ae:03:19:a4:9b:58:93:de:ea:a4:c6:c6:21:e9:a3: 29:19:e8:e3:af:39:e0:b8:69:0f:82:4a:da:8f:83: 8c:16:11:ea:cc:e3:1e:81:8e:a2:2e:e3:61:f2:9a: 86:cf:47:d7:80:c4:fc:b5:a1:46:92:87:4b:9c:ff: fb:05:43:6a:dc:19:5a:7e:1a:86:a7:cb:cd:b8:52: cb:55:fa:45:f8:dc:14:77:53:e1:f1:fe:36:99:96: 36:62:13:6e:a5:74:58:74:f1:8e:b2:92:32:dd:1d: 98:f4:1e:fe:fe:c6:7f:70:84:d6:f2:aa:d7:64:5d: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:52:20:34:6E:73:BE:1E:AC:D4:10:B9:D3:BC:84:0C:4E:5B:D7:63 X509v3 Authority Key Identifier: keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/YlIgNG5zvh6s1BC507yEDE5b12M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.152.0/21 Signature Algorithm: sha256WithRSAEncryption 26:32:e8:b9:00:03:37:75:68:77:f4:ce:73:81:1d:2e:b7:cc: f2:32:da:40:44:a1:2b:9c:31:a5:1e:04:41:31:27:e3:17:79: 0e:04:7b:99:c0:26:79:80:e4:3c:ba:52:0e:15:46:9a:24:c4: 6f:fe:1b:25:ef:d0:b3:0d:20:ce:ab:1b:e6:9b:61:18:66:e9: 1a:bb:46:11:e9:ce:6a:2e:64:d4:35:17:bd:57:80:b4:da:ae: 14:3d:c0:25:d3:0f:35:8c:c3:d8:f3:44:b6:8e:b9:97:a4:00: 63:3d:88:b5:fe:82:07:7a:8f:e9:0c:4c:65:9a:e6:67:4f:21: a0:8c:49:bd:47:b8:a0:6b:16:33:17:12:4c:32:55:54:8a:cd: e1:b6:fb:e1:5d:39:7b:b2:5a:c1:de:58:14:09:60:d3:47:90: b8:f3:a7:11:ef:b4:28:91:ec:91:62:96:71:7d:60:88:63:78: 52:bd:2a:19:e6:cd:51:5d:27:fa:01:d7:12:0b:b4:93:bb:33: 23:be:29:e4:31:87:a6:f0:d2:24:f6:8e:2c:f4:c8:0d:4b:dd: 66:19:6b:94:bd:92:d2:cb:19:c9:d2:b4:6b:13:c0:4b:62:e2: 2b:13:e0:99:92:f9:bf:13:76:0f:fc:f6:3c:84:77:90:2a:19: c5:27:a3:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yfMbDz/VrcJ6g9ABU119MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZjQ3NTM5ZjE5ZjBmNWExM2IwYjY5YmM3OTYyNzhmMGJm NGFlYTQwHhcNMjYwMTAyMDgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjUyMjAzNDZlNzNiZTFlYWNkNDEwYjlkM2JjODQwYzRlNWJkNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyde4EPUz8MuaKIYU6qP1DHG0q1WJ UhcUZOD12sghE/ladMltkkSKifsnjeJ5p0euduOLg9kcaBDbku5IRoifQz/ZAtmP 5NZuNUamKz+c1AlttU9Mpq/hRH7mlzRa2GghTM5QS86nHV8R6NbKZg/W+7cuLzbk WrWThxdts74uaE0stHyeO9yuAxmkm1iT3uqkxsYh6aMpGejjrznguGkPgkraj4OM FhHqzOMegY6iLuNh8pqGz0fXgMT8taFGkodLnP/7BUNq3BlafhqGp8vNuFLLVfpF +NwUd1Ph8f42mZY2YhNupXRYdPGOspIy3R2Y9B7+/sZ/cITW8qrXZF3ZdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGJSIDRuc74erNQQudO8hAxOW9djMB8GA1UdIwQY MBaAFHL0dTnxnw9aE7C2m8eWJ48L9K6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMt MmVhNmVjMjg1YTE1LzEvWWxJZ05HNXp2aDZzMUJDNTA3eUVERTViMTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMtMmVhNmVjMjg1YTE1 LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBZGYMA0G CSqGSIb3DQEBCwUAA4IBAQAmMui5AAM3dWh39M5zgR0ut8zyMtpARKErnDGlHgRB MSfjF3kOBHuZwCZ5gOQ8ulIOFUaaJMRv/hsl79CzDSDOqxvmm2EYZukau0YR6c5q LmTUNRe9V4C02q4UPcAl0w81jMPY80S2jrmXpABjPYi1/oIHeo/pDExlmuZnTyGg jEm9R7igaxYzFxJMMlVUis3htvvhXTl7slrB3lgUCWDTR5C486cR77QokeyRYpZx fWCIY3hSvSoZ5s1RXSf6AdcSC7STuzMjvinkMYem8NIk9o4s9MgNS91mGWuUvZLS yxnJ0rRrE8BLYuIrE+CZkvm/E3YP/PY8hHeQKhnFJ6N1 -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:10 2026 by rpki-client