This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/yfUyf4-g2EcMW9GZbYdXqTofXxA.roa File: yfUyf4-g2EcMW9GZbYdXqTofXxA.roa (raw, json) Hash identifier: BCrDbPU3WanC5O4AuPfiQjpjPPzZcvzn9YNORvio0rc= Subject key identifier: C9:F5:32:7F:8F:A0:D8:47:0C:5B:D1:99:6D:87:57:A9:3A:1F:5F:10 Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a Certificate serial: 019B7C805E945AE1B3A872C510D32E50C490 Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/yfUyf4-g2EcMW9GZbYdXqTofXxA.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34288 IP address blocks: 46.234.32.0/19 maxlen: 19 81.94.112.0/20 maxlen: 20 85.158.24.0/21 maxlen: 21 109.233.176.0/21 maxlen: 21 2001:4b20::/29 maxlen: 29 2001:4b20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5e:94:5a:e1:b3:a8:72:c5:10:d3:2e:50:c4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9f5327f8fa0d8470c5bd1996d8757a93a1f5f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:ea:ba:c8:bd:c0:86:a3:43:b1:e1:c9:06: 6b:4e:a5:9b:fb:90:3e:7b:2d:11:5d:08:d4:c7:94: eb:d2:41:93:35:0b:79:99:88:fe:95:8b:0b:98:46: 8a:26:95:de:f1:f3:fe:55:35:c3:4d:4e:6c:ce:9c: 22:be:db:a8:ec:e4:ea:20:89:62:45:59:11:5c:ed: 95:b8:05:de:a3:f2:7b:e7:4b:27:da:62:94:59:11: b0:55:44:43:13:1b:8b:48:d1:21:5e:45:e7:2a:ac: 45:5d:de:5b:be:1c:83:de:05:3d:26:29:79:4f:ee: 2e:56:91:73:b1:27:e0:81:1c:86:8a:a2:33:a4:be: a6:c3:d1:91:1f:92:88:95:4c:72:21:55:13:16:d8: 03:98:8c:83:92:ea:2c:ea:7f:ed:a7:43:0a:43:9e: c2:f4:df:f3:f4:1c:0f:3a:4f:77:e7:1d:11:d8:59: f7:dd:94:5e:ef:47:1d:5b:fb:83:77:4b:49:47:ca: ce:ca:82:9d:bc:e7:92:07:4b:da:75:01:d9:ad:17: f8:58:70:55:76:2c:77:bf:a3:fb:f8:b4:84:60:05: 9e:b3:2c:87:bd:71:9b:7f:3a:53:18:bb:42:d9:68: f4:85:61:1f:c8:99:19:7d:94:3e:71:82:c5:95:1f: ca:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F5:32:7F:8F:A0:D8:47:0C:5B:D1:99:6D:87:57:A9:3A:1F:5F:10 X509v3 Authority Key Identifier: keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/yfUyf4-g2EcMW9GZbYdXqTofXxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.234.32.0/19 81.94.112.0/20 85.158.24.0/21 109.233.176.0/21 IPv6: 2001:4b20::/29 Signature Algorithm: sha256WithRSAEncryption 7d:80:d6:7e:ba:06:bc:be:da:19:ac:f6:df:ad:6a:62:50:09: 11:c7:78:90:5d:50:5a:70:2b:0d:27:bb:ad:7c:06:d8:8c:70: ad:f7:c2:00:3c:eb:0a:a8:07:7f:57:bb:bd:ef:78:21:70:6f: a3:6c:7c:bb:94:4a:3d:da:d9:dc:0d:53:53:f3:82:06:0c:ca: 25:7d:92:9f:fb:b9:fa:2a:a0:b0:c2:70:cf:0a:95:cc:69:99: 03:4a:f4:1f:eb:dd:9e:42:96:ec:9e:6a:7e:8d:cb:7e:b3:7d: 6b:16:5d:6b:c6:4e:08:ac:47:68:6b:4a:06:7e:19:78:fb:87: 54:ec:e6:4f:44:9b:36:3c:ec:70:f8:a5:0b:bd:ce:11:43:69: ec:46:37:81:c7:b5:95:97:63:3b:56:2e:23:2a:9d:b3:cc:3c: 8c:e1:8c:b3:b7:a6:a6:48:82:6d:5f:fb:b7:c1:54:96:66:19: 6a:bb:6f:38:b5:65:d4:02:c7:29:46:e3:8c:65:d0:4d:c5:df: cd:b6:0d:ea:e1:b9:ae:46:89:c3:d8:c3:de:dd:09:b8:a9:8c: 95:52:10:e1:6e:ca:38:2f:b3:b5:8e:38:39:90:25:a5:2b:e9: 9b:52:66:75:b6:12:41:e3:cd:dc:78:c2:da:86:b3:e5:63:26: 95:f7:bd:6e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8gF6UWuGzqHLFENMuUMSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Y2M2ZDczNDQ5MmU0MTA2NjA4YTI0ZmExYjk1ZWZhYTg3 OWM0NWEwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWY1MzI3ZjhmYTBkODQ3MGM1YmQxOTk2ZDg3NTdhOTNhMWY1ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsvqusi9wIajQ7HhyQZrTqWb+5A+ ey0RXQjUx5Tr0kGTNQt5mYj+lYsLmEaKJpXe8fP+VTXDTU5szpwivtuo7OTqIIli RVkRXO2VuAXeo/J750sn2mKUWRGwVURDExuLSNEhXkXnKqxFXd5bvhyD3gU9Jil5 T+4uVpFzsSfggRyGiqIzpL6mw9GRH5KIlUxyIVUTFtgDmIyDkuos6n/tp0MKQ57C 9N/z9BwPOk935x0R2Fn33ZRe70cdW/uDd0tJR8rOyoKdvOeSB0vadQHZrRf4WHBV dix3v6P7+LSEYAWesyyHvXGbfzpTGLtC2Wj0hWEfyJkZfZQ+cYLFlR/KyQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMn1Mn+PoNhHDFvRmW2HV6k6H18QMB8GA1UdIwQY MBaAFLnMbXNEkuQQZgiiT6G5XvqoecRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYt ODIwZDVmYzQ0ZTM1LzEveWZVeWY0LWcyRWNNVzlHWmJZZFhxVG9mWHhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYtODIwZDVmYzQ0ZTM1 LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFLuogAwQE UV5wAwQDVZ4YAwQDbemwMA0EAgACMAcDBQMgAUsgMA0GCSqGSIb3DQEBCwUAA4IB AQB9gNZ+uga8vtoZrPbfrWpiUAkRx3iQXVBacCsNJ7utfAbYjHCt98IAPOsKqAd/ V7u973ghcG+jbHy7lEo92tncDVNT84IGDMolfZKf+7n6KqCwwnDPCpXMaZkDSvQf 692eQpbsnmp+jct+s31rFl1rxk4IrEdoa0oGfhl4+4dU7OZPRJs2POxw+KULvc4R Q2nsRjeBx7WVl2M7Vi4jKp2zzDyM4Yyzt6amSIJtX/u3wVSWZhlqu284tWXUAscp RuOMZdBNxd/Ntg3q4bmuRonD2MPe3Qm4qYyVUhDhbso4L7O1jjg5kCWlK+mbUmZ1 thJB483ceMLahrPlYyaV971u -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:40 2026 by rpki-client