This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/YqH5ViRSiucJOkvTwawjBZ6eu8U.roa File: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (raw, json) Hash identifier: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E= Subject key identifier: 62:A1:F9:56:24:52:8A:E7:09:3A:4B:D3:C1:AC:23:05:9E:9E:BB:C5 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBD9237241A40A0FF866142C3CD573 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/YqH5ViRSiucJOkvTwawjBZ6eu8U.roa Signing time: Thu 01 Jan 2026 14:17:38 +0000 ROA not before: Thu 01 Jan 2026 14:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15824 IP address blocks: 195.3.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d9:23:72:41:a4:0a:0f:f8:66:14:2c:3c:d5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62a1f95624528ae7093a4bd3c1ac23059e9ebbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:5d:8b:04:3d:82:26:2e:47:6b:c2:ab:dc: 7f:97:5a:bc:b5:0d:ed:ab:f1:bc:13:90:7f:77:27: 4b:ec:f1:1a:8d:44:8d:c2:15:be:b4:69:78:f5:37: be:ea:c1:50:b8:76:8e:98:6e:43:9c:bb:82:8a:11: 5a:54:8b:e1:eb:b1:9c:26:80:f6:1c:54:6e:ac:6b: d6:21:4e:c5:52:58:2c:33:33:66:b1:91:04:86:e5: 06:dc:0a:6d:2a:4d:6c:0a:28:dd:4b:e6:8d:37:4b: e0:1c:7b:9a:cd:75:60:96:5b:ee:47:ad:15:df:ee: 99:fe:50:b8:c8:ad:ff:d3:0f:d4:54:4c:2a:01:64: 68:3c:c8:ea:ab:ca:a1:05:65:d8:3d:11:5e:bc:27: 79:36:ce:b0:3a:6f:68:b6:61:38:96:82:13:ef:a6: 89:7d:a8:e2:3e:c3:1a:b2:54:dc:7e:a3:2b:71:dc: 91:96:81:e5:01:04:7e:3b:99:67:7b:4d:d4:6b:db: fd:00:21:d8:81:e7:f4:dd:47:2e:63:dd:30:2c:72: 0b:19:b8:e6:5d:61:37:62:fa:07:a1:41:c8:d1:55: 82:6f:02:3d:bd:f1:0d:b9:5f:d8:8f:64:d2:88:a4: 55:92:bf:61:3a:b1:b2:ff:73:ef:6f:b1:8f:fa:c1: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A1:F9:56:24:52:8A:E7:09:3A:4B:D3:C1:AC:23:05:9E:9E:BB:C5 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/YqH5ViRSiucJOkvTwawjBZ6eu8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.3.108.0/23 Signature Algorithm: sha256WithRSAEncryption 48:da:e7:a3:2b:18:f1:66:40:b1:12:b6:4f:ab:90:5b:18:4a: 87:b0:87:23:79:75:3f:ed:d5:01:cb:73:bc:07:d2:4d:19:7f: 27:b4:7c:b7:15:30:bd:f0:33:d8:a0:b2:dd:8e:e5:46:2e:7f: 78:35:5e:8e:94:5c:20:77:34:c3:b8:03:c2:b1:9f:06:dd:ab: 22:5c:dc:15:99:80:55:3f:d7:c8:0e:f1:1b:20:75:1b:c3:80: 8f:ea:92:03:e0:e0:85:41:3e:ba:89:96:16:31:a2:84:6c:88: 56:d3:c8:49:21:14:fc:a5:b5:c0:32:84:89:8b:3f:7f:df:79: 0b:74:f5:4f:7a:27:0f:8e:43:f2:30:af:85:4d:b9:07:02:6c: 76:2d:c7:84:77:e5:7b:92:67:ff:80:04:d4:f9:35:70:82:73: 3b:32:c7:01:00:9c:e3:3c:12:11:17:15:aa:38:f7:ec:1e:16: 1b:d3:eb:d0:36:e8:17:8c:60:fd:7a:61:7e:0e:fe:51:83:f8: 6d:87:16:77:61:e1:36:dc:59:0d:0f:5f:b6:29:8b:f6:65:10: dd:0d:2b:e3:79:aa:3a:14:48:6d:13:61:d0:11:23:a1:e0:7a: 61:b9:a1:bb:f7:c2:63:ec:5c:a8:18:3d:98:3f:f5:09:83:c1: 62:38:dd:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt569kjckGkCg/4ZhQsPNVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmExZjk1NjI0NTI4YWU3MDkzYTRiZDNjMWFjMjMwNTllOWViYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWxdiwQ9giYuR2vCq9x/l1q8tQ3t q/G8E5B/dydL7PEajUSNwhW+tGl49Te+6sFQuHaOmG5DnLuCihFaVIvh67GcJoD2 HFRurGvWIU7FUlgsMzNmsZEEhuUG3AptKk1sCijdS+aNN0vgHHuazXVgllvuR60V 3+6Z/lC4yK3/0w/UVEwqAWRoPMjqq8qhBWXYPRFevCd5Ns6wOm9otmE4loIT76aJ fajiPsMaslTcfqMrcdyRloHlAQR+O5lne03Ua9v9ACHYgef03UcuY90wLHILGbjm XWE3YvoHoUHI0VWCbwI9vfENuV/Yj2TSiKRVkr9hOrGy/3Pvb7GP+sEgfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKh+VYkUornCTpL08GsIwWenrvFMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvWXFINVZpUlNpdWNKT2t2VHdhd2pCWjZldThVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwwNsMA0G CSqGSIb3DQEBCwUAA4IBAQBI2uejKxjxZkCxErZPq5BbGEqHsIcjeXU/7dUBy3O8 B9JNGX8ntHy3FTC98DPYoLLdjuVGLn94NV6OlFwgdzTDuAPCsZ8G3asiXNwVmYBV P9fIDvEbIHUbw4CP6pID4OCFQT66iZYWMaKEbIhW08hJIRT8pbXAMoSJiz9/33kL dPVPeicPjkPyMK+FTbkHAmx2LceEd+V7kmf/gATU+TVwgnM7MscBAJzjPBIRFxWq OPfsHhYb0+vQNugXjGD9emF+Dv5Rg/hthxZ3YeE23FkND1+2KYv2ZRDdDSvjeao6 FEhtE2HQESOh4HphuaG798Jj7FyoGD2YP/UJg8FiON0e -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:23 2026 by rpki-client