This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/LYpO44oDt4tOlK8yUSkscCnfDII.roa File: LYpO44oDt4tOlK8yUSkscCnfDII.roa (raw, json) Hash identifier: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI= Subject key identifier: 2D:8A:4E:E3:8A:03:B7:8B:4E:94:AF:32:51:29:2C:70:29:DF:0C:82 Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Certificate serial: 019B7D5AEBB038D3E5FD0FB07F98C3F21047 Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/LYpO44oDt4tOlK8yUSkscCnfDII.roa Signing time: Fri 02 Jan 2026 06:17:49 +0000 ROA not before: Fri 02 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 134.155.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:eb:b0:38:d3:e5:fd:0f:b0:7f:98:c3:f2:10:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d8a4ee38a03b78b4e94af3251292c7029df0c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:78:39:02:ff:c9:31:e1:95:9e:a2:31:21: 8c:e9:c5:f6:c6:49:41:9a:ad:56:a4:1b:b0:4c:6d: d3:20:af:b6:4a:15:e3:2f:14:a7:2b:ab:05:71:cf: ff:ad:cc:b2:3b:40:20:d2:36:89:2e:9d:f8:c2:af: 5e:50:d3:21:b8:e9:5b:c9:bf:3e:b2:d6:a6:40:15: 6b:83:dc:6e:f8:bc:f7:0d:f9:71:3e:ef:3b:20:54: fa:6e:25:46:54:df:d0:6b:0d:73:95:3d:a7:0b:09: b0:24:3d:b8:ee:4a:52:0c:a7:8a:f9:39:3b:49:d9: 90:05:ce:c0:fe:71:fd:2c:35:aa:cc:3e:10:46:b9: 83:c4:11:0d:7f:7f:5b:e8:9b:64:1d:0d:7d:5d:d6: d0:3b:70:e5:2f:69:0f:23:67:2c:f6:de:0f:79:9f: b1:a8:e7:0d:94:4f:1c:4c:66:c0:4e:fc:f2:03:b1: d7:f2:46:51:4d:23:a0:ea:30:1f:40:83:8b:b6:40: 2f:1f:57:12:72:85:be:af:c4:c8:94:d3:46:84:30: 3c:9c:38:4c:0c:1a:1d:3e:ee:87:77:c0:d7:fe:05: 2c:9c:a6:01:f4:5c:a4:38:5b:46:9d:49:48:b5:6c: b8:42:2a:d0:7c:48:9d:c6:b2:1a:8f:78:e9:b9:78: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8A:4E:E3:8A:03:B7:8B:4E:94:AF:32:51:29:2C:70:29:DF:0C:82 X509v3 Authority Key Identifier: keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/LYpO44oDt4tOlK8yUSkscCnfDII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.155.0.0/16 Signature Algorithm: sha256WithRSAEncryption 32:9f:78:d7:0b:47:a4:41:43:7e:8b:38:98:b0:45:13:20:d9: 5a:3f:3b:b4:90:1a:75:3d:a3:c9:49:44:70:45:8c:d6:e8:55: 46:1e:92:9c:5b:7c:c6:c4:40:ae:e3:68:52:15:ab:56:41:da: b0:bc:aa:3a:79:0e:82:c0:d0:0c:a5:64:19:b0:e4:28:6b:21: ae:ee:b4:7d:d6:f6:46:89:53:b1:6b:04:a4:dd:ed:cf:58:0d: 0e:37:4d:26:1e:65:87:d4:7a:26:11:86:6f:3a:f5:72:90:ed: fd:a6:27:dc:20:3b:1d:34:bd:38:ad:68:16:76:40:9a:ac:bd: 1a:36:a5:a3:de:83:1a:d8:b5:ba:0b:4b:79:fb:d1:f8:4d:f7: 96:4e:55:6d:ae:1b:c8:6d:3f:ce:df:4e:74:85:4a:4e:8c:03: 06:e7:d6:9f:00:6e:eb:28:67:c9:a5:2b:0d:e7:ee:4d:35:a6: 94:8e:aa:91:82:b5:da:d0:32:09:cf:4b:03:2e:fc:6c:62:5e: 06:87:e2:f4:6e:9e:b6:80:a2:d4:ed:df:63:58:c1:e6:cc:f7: 4a:58:a5:50:77:52:75:fb:03:a6:b2:1b:1c:59:82:eb:9c:53: fd:ed:2b:c2:a5:82:86:1d:e8:fb:4b:cf:0a:f9:76:af:97:91: f4:cf:d0:18 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9WuuwONPl/Q+wf5jD8hBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl ZjExMDIwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDhhNGVlMzhhMDNiNzhiNGU5NGFmMzI1MTI5MmM3MDI5ZGYwYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrt4OQL/yTHhlZ6iMSGM6cX2xklB mq1WpBuwTG3TIK+2ShXjLxSnK6sFcc//rcyyO0Ag0jaJLp34wq9eUNMhuOlbyb8+ stamQBVrg9xu+Lz3DflxPu87IFT6biVGVN/Qaw1zlT2nCwmwJD247kpSDKeK+Tk7 SdmQBc7A/nH9LDWqzD4QRrmDxBENf39b6JtkHQ19XdbQO3DlL2kPI2cs9t4PeZ+x qOcNlE8cTGbATvzyA7HX8kZRTSOg6jAfQIOLtkAvH1cScoW+r8TIlNNGhDA8nDhM DBodPu6Hd8DX/gUsnKYB9FykOFtGnUlItWy4QirQfEidxrIaj3jpuXhi2wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFC2KTuOKA7eLTpSvMlEpLHAp3wyCMB8GA1UdIwQY MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt YmM3NmNhZjA3ODYwLzEvTFlwTzQ0b0R0NHRPbEs4eVVTa3NjQ25mRElJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhpswDQYJ KoZIhvcNAQELBQADggEBADKfeNcLR6RBQ36LOJiwRRMg2Vo/O7SQGnU9o8lJRHBF jNboVUYekpxbfMbEQK7jaFIVq1ZB2rC8qjp5DoLA0AylZBmw5ChrIa7utH3W9kaJ U7FrBKTd7c9YDQ43TSYeZYfUeiYRhm869XKQ7f2mJ9wgOx00vTitaBZ2QJqsvRo2 paPegxrYtboLS3n70fhN95ZOVW2uG8htP87fTnSFSk6MAwbn1p8AbusoZ8mlKw3n 7k01ppSOqpGCtdrQMgnPSwMu/GxiXgaH4vRunraAotTt32NYwebM90pYpVB3UnX7 A6ayGxxZguucU/3tK8KlgoYd6PtLzwr5dq+XkfTP0Bg= -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:16 2026 by rpki-client