This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/yvd72ao7oZeloqF7PcjwFXQOaKg.roa File: yvd72ao7oZeloqF7PcjwFXQOaKg.roa (raw, json) Hash identifier: p8n/0jBEU3JxwNl8gzkR0TyAriDfbE7fJ2mPGP83LhU= Subject key identifier: CA:F7:7B:D9:AA:3B:A1:97:A5:A2:A1:7B:3D:C8:F0:15:74:0E:68:A8 Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Certificate serial: 019B7B3592828731D97498F2851287981DED Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/yvd72ao7oZeloqF7PcjwFXQOaKg.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20714 IP address blocks: 31.42.48.0/21 maxlen: 21 31.42.56.0/24 maxlen: 24 31.128.224.0/20 maxlen: 20 31.128.240.0/23 maxlen: 23 31.128.255.0/24 maxlen: 24 195.177.124.0/22 maxlen: 22 195.214.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:92:82:87:31:d9:74:98:f2:85:12:87:98:1d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caf77bd9aa3ba197a5a2a17b3dc8f015740e68a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:80:6a:e4:64:2f:94:a2:bf:21:de:ea:d0: d2:f5:fd:bd:b1:3a:3f:47:40:9d:74:d0:ed:0f:7a: 8a:ac:bd:6c:0f:1c:79:aa:57:86:e1:99:5d:2f:b7: 84:f8:bd:93:d5:a7:b8:39:a2:61:07:0a:6d:f1:46: 93:ef:4d:6b:a8:25:15:d3:3e:f8:ff:08:9d:59:39: a1:01:44:05:e0:9a:f2:55:93:52:eb:cb:df:a4:2c: c8:1f:73:a7:82:4e:8c:d4:32:d1:1c:ef:14:8d:4d: 9f:62:bd:e7:e3:04:db:d0:b7:9a:36:24:03:63:6e: fd:c8:93:4d:cc:91:5b:43:26:90:ca:06:09:df:ff: c6:17:5d:d5:73:08:ad:ea:6e:0e:66:37:10:1d:55: da:6f:03:12:bd:00:92:28:03:11:bf:a5:20:23:9c: ae:80:dc:b0:3b:10:ee:4d:00:aa:a2:5a:87:3e:22: fe:9a:ee:1a:8e:b7:2b:6d:8d:2c:b7:47:ec:35:9b: cb:91:ad:59:3d:dd:62:9b:57:5c:9e:4f:52:26:e2: 1d:45:75:b4:65:5a:c5:cc:33:ad:c0:7a:93:75:e0: 21:8a:ee:ac:69:01:71:87:e1:9d:d3:78:9a:62:95: dc:77:76:c2:ff:22:b4:c4:6e:26:44:dc:40:5f:c3: c2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F7:7B:D9:AA:3B:A1:97:A5:A2:A1:7B:3D:C8:F0:15:74:0E:68:A8 X509v3 Authority Key Identifier: keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/yvd72ao7oZeloqF7PcjwFXQOaKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.48.0-31.42.56.255 31.128.224.0-31.128.241.255 31.128.255.0/24 195.177.124.0/22 195.214.196.0/22 Signature Algorithm: sha256WithRSAEncryption 59:70:4e:cd:7e:8c:84:18:90:2b:a0:ea:46:07:34:1a:ab:ac: ec:d0:8a:1f:af:13:3b:3d:ad:fc:e5:d8:1a:22:51:79:7c:cf: 62:6f:69:a8:33:29:aa:53:09:c9:e1:b6:b1:41:55:34:0b:d3: 0c:c8:1d:79:92:28:2f:bb:83:0e:00:00:57:6d:ea:c0:1b:a0: 47:02:86:dd:dc:c2:28:28:a9:81:dc:14:46:c3:09:ce:b8:a7: 79:5f:db:6a:d3:4f:d2:19:f2:65:d4:b5:83:2c:8c:1b:75:e0: 9b:a8:42:b4:c7:b5:2b:2b:2c:8d:d0:63:2a:57:8c:2b:b8:ee: 31:23:e6:67:8f:26:19:9b:78:3e:60:35:7a:74:b6:5d:a0:46: e9:60:18:29:bc:9d:12:df:7f:8c:b8:99:52:0f:4e:48:bc:b5: b3:a9:1b:63:9b:51:8c:99:25:28:7a:4b:16:46:22:77:c3:89: ab:ef:15:e6:71:08:7a:21:19:7d:74:e8:af:c0:db:24:ab:65: 8f:23:2e:f4:90:f3:a6:d6:12:a9:66:39:fd:21:3e:27:e5:86: e2:4e:46:5b:4f:97:71:9d:60:28:ba:16:1b:37:27:c6:53:88: 19:14:11:25:63:b0:ea:ec:3a:43:3a:dc:62:5a:7f:78:c3:18: 66:cf:74:b7 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt7NZKChzHZdJjyhRKHmB3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3 YmM2MTYwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWY3N2JkOWFhM2JhMTk3YTVhMmExN2IzZGM4ZjAxNTc0MGU2OGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvmAauRkL5SivyHe6tDS9f29sTo/ R0CddNDtD3qKrL1sDxx5qleG4ZldL7eE+L2T1ae4OaJhBwpt8UaT701rqCUV0z74 /widWTmhAUQF4JryVZNS68vfpCzIH3Ongk6M1DLRHO8UjU2fYr3n4wTb0LeaNiQD Y279yJNNzJFbQyaQygYJ3//GF13Vcwit6m4OZjcQHVXabwMSvQCSKAMRv6UgI5yu gNywOxDuTQCqolqHPiL+mu4ajrcrbY0st0fsNZvLka1ZPd1im1dcnk9SJuIdRXW0 ZVrFzDOtwHqTdeAhiu6saQFxh+Gd03iaYpXcd3bC/yK0xG4mRNxAX8PC2wIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFMr3e9mqO6GXpaKhez3I8BV0DmioMB8GA1UdIwQY MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt YmM3YTIwOGE1ZTJlLzEveXZkNzJhbzdvWmVsb3FGN1BjandGWFFPYUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAQfKjAD BAAfKjgwDAMEBR+A4AMEAR+A8AMEAB+A/wMEAsOxfAMEAsPWxDANBgkqhkiG9w0B AQsFAAOCAQEAWXBOzX6MhBiQK6DqRgc0Gqus7NCKH68TOz2t/OXYGiJReXzPYm9p qDMpqlMJyeG2sUFVNAvTDMgdeZIoL7uDDgAAV23qwBugRwKG3dzCKCipgdwURsMJ zrineV/batNP0hnyZdS1gyyMG3Xgm6hCtMe1KyssjdBjKleMK7juMSPmZ48mGZt4 PmA1enS2XaBG6WAYKbydEt9/jLiZUg9OSLy1s6kbY5tRjJklKHpLFkYid8OJq+8V 5nEIeiEZfXTor8DbJKtljyMu9JDzptYSqWY5/SE+J+WG4k5GW0+XcZ1gKLoWGzcn xlOIGRQRJWOw6uw6QzrcYlp/eMMYZs90tw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:30 2026 by rpki-client