This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/yy7RjY9VjJxpv75GhAQEnVx8t8k.roa File: yy7RjY9VjJxpv75GhAQEnVx8t8k.roa (raw, json) Hash identifier: KHt8fJdWAUNtqMOeAAHu9NRYtOwOJC7Y60cmxx721z4= Subject key identifier: CB:2E:D1:8D:8F:55:8C:9C:69:BF:BE:46:84:04:04:9D:5C:7C:B7:C9 Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2 Certificate serial: 019B7BA42B190D237766E73A529BEE8BA735 Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/yy7RjY9VjJxpv75GhAQEnVx8t8k.roa Signing time: Thu 01 Jan 2026 22:18:35 +0000 ROA not before: Thu 01 Jan 2026 22:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198291 IP address blocks: 46.232.136.0/21 maxlen: 24 46.232.136.0/24 maxlen: 24 46.232.137.0/24 maxlen: 24 46.232.138.0/24 maxlen: 24 46.232.139.0/24 maxlen: 24 46.232.140.0/24 maxlen: 24 46.232.141.0/24 maxlen: 24 46.232.142.0/24 maxlen: 24 46.232.143.0/24 maxlen: 24 185.124.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:2b:19:0d:23:77:66:e7:3a:52:9b:ee:8b:a7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2 Validity Not Before: Jan 1 22:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb2ed18d8f558c9c69bfbe468404049d5c7cb7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:41:46:14:75:8d:2b:3b:0b:83:6f:5a:08: b1:f7:43:0e:7f:14:b0:8a:17:8f:09:d6:fc:d1:99: 98:49:cb:01:8e:9c:bc:12:ca:b1:74:84:0e:d1:6c: a8:96:1b:d2:40:5b:c2:c1:3d:ea:c7:b6:4d:46:87: 71:e3:e8:20:02:52:27:55:7a:52:15:6a:1f:15:54: 22:c5:8d:93:a3:72:e1:b1:03:74:62:c9:87:e9:8f: 23:08:6c:f2:f9:24:70:e2:0f:80:e0:54:fa:f2:5d: c9:fe:57:65:b9:bb:0c:0c:d0:34:a9:ec:db:33:b4: 9d:2d:25:1b:92:a1:6f:ce:7d:eb:f1:27:ef:5b:b4: 36:c9:25:da:a5:a1:37:76:29:59:4f:27:50:f4:8d: 58:3d:65:e0:8a:3b:ff:d8:c1:60:48:7f:2d:1f:b3: 96:07:d7:ab:b7:a6:f8:1b:7f:50:22:ed:c8:51:d2: e5:c6:98:fb:90:eb:0c:ca:38:ef:ca:18:af:ad:26: ce:b9:79:40:70:b0:c6:3e:6e:68:73:c6:f0:6c:f5: 79:0b:1c:a6:6b:ba:92:d7:73:d8:88:d1:7e:ef:bd: 37:0e:be:d2:5f:a2:07:c0:02:9e:b2:f6:38:25:d1: f0:6a:98:0e:86:9c:ca:56:2a:7c:0d:c7:57:d3:53: c6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2E:D1:8D:8F:55:8C:9C:69:BF:BE:46:84:04:04:9D:5C:7C:B7:C9 X509v3 Authority Key Identifier: keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/yy7RjY9VjJxpv75GhAQEnVx8t8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.136.0/21 185.124.44.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:cc:6b:38:7b:9a:11:b1:da:6e:40:5d:03:7e:56:b4:29:d5: f7:a5:95:ee:f5:93:e6:d3:77:35:e2:69:68:f8:8d:64:96:41: cf:71:6d:c7:5b:a0:aa:11:dc:e6:dc:5e:e5:9a:46:6e:03:25: 8c:10:4a:38:d7:f1:e4:9f:0e:05:48:04:44:d0:68:b1:f7:15: d1:31:8b:c1:e6:a9:72:dc:d2:e1:b5:b2:6c:47:21:a7:d4:4d: 3c:aa:9d:8c:2a:9c:34:65:7d:b5:33:c7:8c:ed:f3:e9:fb:29: f3:a8:b9:42:16:32:8e:8d:00:b7:90:ab:26:8f:34:a3:1f:4f: 32:04:e2:94:1f:0f:2c:91:23:49:e9:cc:e0:99:9b:36:f5:7f: 12:19:23:80:73:72:7a:58:ec:e9:d6:40:31:c2:56:1e:4b:df: 7e:2e:86:a6:b3:77:20:76:da:a8:90:65:96:00:d8:a2:81:b2: e3:36:51:2b:e8:79:02:4a:ab:95:3c:c0:1a:6a:a0:e1:6d:ec: 4e:2f:99:5d:39:62:e3:fe:57:c8:3b:98:16:7b:f6:b1:ff:0c: a6:e6:56:cd:61:21:1c:83:d6:85:e1:ad:7c:d6:e6:12:24:54: 50:e2:5f:09:87:0d:93:e9:b8:c3:56:62:71:a6:3c:ce:ff:9d: ba:e3:6b:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pCsZDSN3Zuc6Upvui6c1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNmQyYWM5YjY4YzMyNzExZjdlODdmZGU1MjM0NTg0ZjVi Y2Y0ZjIwHhcNMjYwMTAxMjIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjJlZDE4ZDhmNTU4YzljNjliZmJlNDY4NDA0MDQ5ZDVjN2NiN2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbBBRhR1jSs7C4NvWgix90MOfxSw ihePCdb80ZmYScsBjpy8EsqxdIQO0WyolhvSQFvCwT3qx7ZNRodx4+ggAlInVXpS FWofFVQixY2To3LhsQN0YsmH6Y8jCGzy+SRw4g+A4FT68l3J/ldlubsMDNA0qezb M7SdLSUbkqFvzn3r8SfvW7Q2ySXapaE3dilZTydQ9I1YPWXgijv/2MFgSH8tH7OW B9ert6b4G39QIu3IUdLlxpj7kOsMyjjvyhivrSbOuXlAcLDGPm5oc8bwbPV5Cxym a7qS13PYiNF+7703Dr7SX6IHwAKesvY4JdHwapgOhpzKVip8DcdX01PGHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMsu0Y2PVYycab++RoQEBJ1cfLfJMB8GA1UdIwQY MBaAFI9tKsm2jDJxH36H/eUjRYT1vPTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lNzhlZTEtMGEyYS00NmM5LTk3Njkt Zjk0ZjA4NGIxZWU3LzEveXk3UmpZOVZqSnhwdjc1R2hBUUVuVng4dDhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9lNzhlZTEtMGEyYS00NmM5LTk3NjktZjk0ZjA4NGIxZWU3 LzEvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLuiIAwQC uXwsMA0GCSqGSIb3DQEBCwUAA4IBAQCazGs4e5oRsdpuQF0Dfla0KdX3pZXu9ZPm 03c14mlo+I1klkHPcW3HW6CqEdzm3F7lmkZuAyWMEEo41/Hknw4FSARE0Gix9xXR MYvB5qly3NLhtbJsRyGn1E08qp2MKpw0ZX21M8eM7fPp+ynzqLlCFjKOjQC3kKsm jzSjH08yBOKUHw8skSNJ6czgmZs29X8SGSOAc3J6WOzp1kAxwlYeS99+Loams3cg dtqokGWWANiigbLjNlEr6HkCSquVPMAaaqDhbexOL5ldOWLj/lfIO5gWe/ax/wym 5lbNYSEcg9aF4a181uYSJFRQ4l8Jhw2T6bjDVmJxpjzO/52642sx -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:48 2026 by rpki-client