This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/YTl2wkQfDFdQtN71h5K-qw3EztM.roa File: YTl2wkQfDFdQtN71h5K-qw3EztM.roa (raw, json) Hash identifier: z25IOf5DaazAZ0jaAF7FfOCUfonWoXfC3l+JaU4GRgc= Subject key identifier: 61:39:76:C2:44:1F:0C:57:50:B4:DE:F5:87:92:BE:AB:0D:C4:CE:D3 Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759 Certificate serial: 019B7A5B0A41B2D08638C12A070511B1200D Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/YTl2wkQfDFdQtN71h5K-qw3EztM.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140224 IP address blocks: 185.211.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0a:41:b2:d0:86:38:c1:2a:07:05:11:b1:20:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=613976c2441f0c5750b4def58792beab0dc4ced3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:35:58:f5:d9:96:3a:ac:c0:a5:9e:6e:80: a0:64:a7:82:7c:eb:7d:f5:e9:d5:b5:96:f1:eb:a5: cb:42:28:b8:28:a2:01:46:65:d3:52:66:f6:f4:53: af:31:ef:99:c5:cd:39:81:85:b0:8d:84:f7:06:26: d2:0e:cc:bc:f3:dd:7b:22:9c:49:44:46:46:ea:4e: 22:96:bf:c5:3e:b4:e8:b4:18:e3:92:f3:f0:60:11: 4d:8c:a5:3f:1d:11:72:da:d3:96:78:da:41:18:9f: 98:50:1b:ed:41:01:27:d9:22:7d:a7:d1:0c:6b:9c: e2:f7:b2:8f:6a:17:7e:3e:fb:cc:24:ce:bc:0b:a1: 0e:5a:da:6d:a5:77:bc:f2:fe:a1:b5:36:bb:9f:7d: b5:20:0c:11:8f:54:28:76:7a:88:c0:8c:1a:1d:d3: b8:35:bf:96:e2:ce:71:f0:45:c2:53:8a:01:c5:ce: 29:48:4a:a7:b0:49:3b:1b:83:5e:51:a2:98:89:86: 08:d6:5b:95:c9:e9:6f:1d:d1:f7:50:e5:e6:07:53: 3f:c1:21:38:46:df:51:91:18:6b:47:d2:1c:e7:b4: 40:94:f0:10:91:7e:c4:e9:ab:8c:ee:84:e7:23:f8: 4a:27:05:04:ab:3a:5b:f5:33:2a:22:f2:54:52:8a: 43:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:39:76:C2:44:1F:0C:57:50:B4:DE:F5:87:92:BE:AB:0D:C4:CE:D3 X509v3 Authority Key Identifier: keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/YTl2wkQfDFdQtN71h5K-qw3EztM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.134.0/24 Signature Algorithm: sha256WithRSAEncryption 18:42:44:3a:b1:4a:ea:03:e2:75:b6:e1:c2:f7:f4:be:67:4a: 75:e4:fa:81:47:d4:77:36:96:1c:ee:06:7b:66:64:82:2b:fc: 87:42:5f:18:61:84:17:f0:38:75:13:a2:57:7a:ee:23:b6:11: 55:38:a2:53:58:a1:83:b2:2e:31:95:21:db:a2:73:11:27:5d: 3d:81:6d:54:97:c2:e0:cd:44:d1:53:de:4c:a4:74:f2:b5:7c: 80:8a:9b:2c:74:be:7a:02:9e:e9:f6:20:86:64:c2:8e:f2:a7: 52:cd:ad:7d:98:bd:86:84:0b:9d:18:83:ae:b3:14:71:ee:f7: 47:7b:71:32:84:9c:17:8f:9f:1b:18:b9:69:16:a7:b7:c6:7e: 8c:8d:10:e0:b8:6d:4f:4f:06:f7:a5:c7:9d:6f:26:68:4c:1d: 20:8f:c2:f7:da:8a:86:c8:7a:32:7c:8e:86:41:17:10:f7:fb: 55:20:ac:75:00:93:41:fc:fd:51:d2:62:bc:f3:ab:37:b4:b1: cb:08:49:e6:5f:d3:e6:af:e3:82:6b:ea:13:62:ad:0a:60:ad: 74:0f:7b:de:bc:e9:13:cc:bb:f6:5d:c6:59:a8:2f:b3:a1:60: 82:8d:29:a6:be:2e:f3:d9:35:f3:b1:31:73:03:5f:47:9e:3e: 74:7c:4d:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WwpBstCGOMEqBwURsSANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1 NzE3NTkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTM5NzZjMjQ0MWYwYzU3NTBiNGRlZjU4NzkyYmVhYjBkYzRjZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPM1WPXZljqswKWeboCgZKeCfOt9 9enVtZbx66XLQii4KKIBRmXTUmb29FOvMe+Zxc05gYWwjYT3BibSDsy88917IpxJ REZG6k4ilr/FPrTotBjjkvPwYBFNjKU/HRFy2tOWeNpBGJ+YUBvtQQEn2SJ9p9EM a5zi97KPahd+PvvMJM68C6EOWtptpXe88v6htTa7n321IAwRj1QodnqIwIwaHdO4 Nb+W4s5x8EXCU4oBxc4pSEqnsEk7G4NeUaKYiYYI1luVyelvHdH3UOXmB1M/wSE4 Rt9RkRhrR9Ic57RAlPAQkX7E6auM7oTnI/hKJwUEqzpb9TMqIvJUUopDpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGE5dsJEHwxXULTe9YeSvqsNxM7TMB8GA1UdIwQY MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt NjE1OTYxMzEyYjUyLzEvWVRsMndrUWZERmRRdE43MWg1Sy1xdzNFenRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudOGMA0G CSqGSIb3DQEBCwUAA4IBAQAYQkQ6sUrqA+J1tuHC9/S+Z0p15PqBR9R3NpYc7gZ7 ZmSCK/yHQl8YYYQX8Dh1E6JXeu4jthFVOKJTWKGDsi4xlSHbonMRJ109gW1Ul8Lg zUTRU95MpHTytXyAipssdL56Ap7p9iCGZMKO8qdSza19mL2GhAudGIOusxRx7vdH e3EyhJwXj58bGLlpFqe3xn6MjRDguG1PTwb3pcedbyZoTB0gj8L32oqGyHoyfI6G QRcQ9/tVIKx1AJNB/P1R0mK886s3tLHLCEnmX9Pmr+OCa+oTYq0KYK10D3vevOkT zLv2XcZZqC+zoWCCjSmmvi7z2TXzsTFzA19Hnj50fE2V -----END CERTIFICATE-----Generated at Mon Jan 19 11:26:17 2026 by rpki-client