This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa File: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (raw, json) Hash identifier: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws= Subject key identifier: 63:95:7C:06:66:41:38:57:B6:64:A2:12:44:EE:AC:49:34:3C:08:2C Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Certificate serial: 019B7E3810137AD30D59EDF6CA921B83D701 Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 157.84.32.0/23 maxlen: 23 157.84.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:10:13:7a:d3:0d:59:ed:f6:ca:92:1b:83:d7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63957c0666413857b664a21244eeac49343c082c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9c:f0:c2:92:4c:37:aa:b1:6e:11:df:ed:19: 61:b3:d4:52:47:4d:c0:81:9d:f8:77:69:e3:6e:db: 0b:ce:82:38:88:c2:6e:0e:f3:86:c1:d7:a1:ef:93: 4f:39:c3:8a:62:7d:2a:19:97:5e:7e:06:87:9f:c0: 84:5c:12:05:3d:e4:cd:ab:e5:7e:15:2f:4e:21:0b: 2d:f1:26:f4:77:62:ee:a1:89:69:72:ba:5e:85:52: 6e:57:ad:e9:94:8a:1d:1e:07:68:36:e4:ca:86:59: a2:40:13:14:cc:73:ce:d3:f7:4f:16:97:a6:14:3c: 23:89:d3:8b:5c:a3:8f:25:6f:a1:d7:2e:89:f7:2b: 4e:2e:8d:10:42:99:88:dc:8e:c8:54:26:ed:9f:50: b4:92:67:31:da:fe:1a:26:80:e9:81:f6:42:65:53: aa:54:55:ea:99:ea:f2:bd:e5:ff:19:be:db:48:b5: 97:05:3a:e2:3c:0d:0c:02:bc:17:56:d7:42:d7:f8: ff:a3:d2:3a:70:9b:ce:45:46:c6:98:9f:2d:9d:9c: e7:3d:7b:78:b1:f2:bc:e7:d5:1c:f9:64:ac:08:23: 70:0f:6a:3c:8c:f5:68:93:49:c1:6f:6d:43:3d:9e: 0d:70:a9:28:37:eb:3f:a5:33:72:9f:0f:d8:7f:e3: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:95:7C:06:66:41:38:57:B6:64:A2:12:44:EE:AC:49:34:3C:08:2C X509v3 Authority Key Identifier: keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.84.32.0/23 157.84.40.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:da:b5:41:24:49:33:a7:cc:21:f3:46:ba:e7:22:85:f4:68: 3a:9d:43:bb:33:10:95:c8:3d:e5:ba:c2:ad:17:fc:da:59:c8: 48:46:43:85:32:05:34:3e:56:66:23:bc:4f:8e:ff:13:66:99: 34:c9:52:ca:7d:97:b0:ab:16:70:cc:98:b0:d3:36:d1:a3:e2: 51:d9:af:ea:64:93:ff:47:e2:c4:2d:83:2d:9c:93:71:87:b6: ac:57:03:40:00:24:ce:10:5c:8c:a3:d7:bd:76:2c:b4:7c:76: ac:6a:7b:f4:6a:35:c5:ed:cc:b0:bc:8d:0d:0d:18:6f:82:00: b5:a0:a9:5e:3b:94:99:02:91:8f:b3:db:fb:a7:b3:04:82:4e: 9c:6f:0a:66:a8:f6:52:be:28:9c:69:00:ce:9f:a6:35:29:39: 7c:aa:85:bb:78:19:08:cc:b6:f3:8c:f7:50:c6:0f:b1:61:e4: 49:19:da:e9:b2:8a:97:bd:bc:fb:8e:28:86:97:6f:3d:f8:5f: 5c:48:e9:7a:bd:15:89:2b:b1:3c:d6:59:f6:78:03:a9:c5:d4: b6:c7:ce:83:83:a6:ed:bf:17:b9:bf:98:d0:18:98:37:4f:1d: 14:fe:8b:53:37:96:6f:0b:a0:32:7f:52:7b:99:db:69:28:3d: cb:df:61:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OBATetMNWe32ypIbg9cBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz ZjMxMmEwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzk1N2MwNjY2NDEzODU3YjY2NGEyMTI0NGVlYWM0OTM0M2MwODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JzwwpJMN6qxbhHf7Rlhs9RSR03A gZ34d2njbtsLzoI4iMJuDvOGwdeh75NPOcOKYn0qGZdefgaHn8CEXBIFPeTNq+V+ FS9OIQst8Sb0d2LuoYlpcrpehVJuV63plIodHgdoNuTKhlmiQBMUzHPO0/dPFpem FDwjidOLXKOPJW+h1y6J9ytOLo0QQpmI3I7IVCbtn1C0kmcx2v4aJoDpgfZCZVOq VFXqmeryveX/Gb7bSLWXBTriPA0MArwXVtdC1/j/o9I6cJvORUbGmJ8tnZznPXt4 sfK859Uc+WSsCCNwD2o8jPVok0nBb21DPZ4NcKkoN+s/pTNynw/Yf+OfoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGOVfAZmQThXtmSiEkTurEk0PAgsMB8GA1UdIwQY MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt YTk5YTIxMDE1OTM3LzEvWTVWOEJtWkJPRmUyWktJU1JPNnNTVFE4Q0N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3 LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnVQgAwQB nVQoMA0GCSqGSIb3DQEBCwUAA4IBAQAe2rVBJEkzp8wh80a65yKF9Gg6nUO7MxCV yD3lusKtF/zaWchIRkOFMgU0PlZmI7xPjv8TZpk0yVLKfZewqxZwzJiw0zbRo+JR 2a/qZJP/R+LELYMtnJNxh7asVwNAACTOEFyMo9e9diy0fHasanv0ajXF7cywvI0N DRhvggC1oKleO5SZApGPs9v7p7MEgk6cbwpmqPZSviicaQDOn6Y1KTl8qoW7eBkI zLbzjPdQxg+xYeRJGdrpsoqXvbz7jiiGl289+F9cSOl6vRWJK7E81ln2eAOpxdS2 x86Dg6btvxe5v5jQGJg3Tx0U/otTN5ZvC6Ayf1J7mdtpKD3L32Hl -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:57 2026 by rpki-client