This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/yZd-e1Cgfg54_wRXQGztzANFdXA.roa File: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (raw, json) Hash identifier: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4= Subject key identifier: C9:97:7E:7B:50:A0:7E:0E:78:FF:04:57:40:6C:ED:CC:03:45:75:70 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBD986337DCC2E7B23711DDAF5F0A1 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/yZd-e1Cgfg54_wRXQGztzANFdXA.roa Signing time: Thu 01 Jan 2026 14:17:38 +0000 ROA not before: Thu 01 Jan 2026 14:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29085 IP address blocks: 212.183.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d9:86:33:7d:cc:2e:7b:23:71:1d:da:f5:f0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9977e7b50a07e0e78ff0457406cedcc03457570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:a4:ef:fb:5f:6c:2b:41:c4:f3:e3:a4:9a: 11:57:48:97:b0:1b:a5:30:da:db:76:62:af:f5:bd: b4:6d:05:2c:76:b7:6b:b4:3d:2e:5e:67:0f:8a:d6: c9:31:2b:de:4c:10:2f:60:14:a9:2a:e5:e9:53:d1: af:a6:24:77:64:d9:01:cb:5f:ad:15:93:de:c2:ef: 66:4f:e2:da:f9:d1:bb:bf:11:c5:51:f0:d3:11:3b: 37:c8:67:82:68:d4:50:88:c9:8b:35:cb:39:bc:b3: d0:3d:d3:bc:e2:5a:ea:75:22:f6:67:fb:b3:73:01: 1e:0a:c2:be:35:79:01:7b:82:d3:3c:c4:dc:05:e7: 76:12:82:07:21:c7:28:84:2e:c9:ac:92:98:5c:a0: 6b:62:be:9c:10:03:48:d0:fd:06:1a:01:20:4e:a3: 5b:60:8b:5d:1e:71:9a:c3:69:08:58:ff:c1:4c:bd: 40:2b:a6:fb:72:75:8c:3e:2a:ff:55:2b:0d:e2:66: 26:c7:0a:7d:24:28:63:ab:85:c5:d7:eb:86:a6:24: 25:52:dc:4a:64:2c:38:7a:d5:e5:aa:fe:8f:5c:68: 37:bc:77:7e:83:23:27:49:78:d5:2a:20:20:e5:b3: dc:42:8e:3b:5e:c7:91:02:ec:3d:e4:3b:4d:57:63: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:7E:7B:50:A0:7E:0E:78:FF:04:57:40:6C:ED:CC:03:45:75:70 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/yZd-e1Cgfg54_wRXQGztzANFdXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.183.88.0/24 Signature Algorithm: sha256WithRSAEncryption 01:28:69:9a:c0:b1:a8:93:1b:bf:8c:65:bd:e9:a0:f3:44:0a: 20:6a:27:6d:94:5b:6d:19:e9:47:3b:77:99:a9:d3:f8:c3:9c: 95:34:fc:9c:51:95:c7:32:f8:91:e1:bc:73:9f:79:5d:df:c1: d2:f6:f0:27:1f:a7:af:8b:c9:f9:d6:0d:de:da:96:de:3a:9c: a6:9e:45:fe:82:eb:0c:db:cf:4a:30:ae:42:a5:e1:b2:55:50: 4e:60:38:0c:e4:1d:9b:97:08:71:1f:ea:16:83:c9:8c:d2:6f: d6:89:56:60:52:d9:45:44:85:af:61:6c:b1:31:ae:46:19:81: fd:b7:d5:43:74:26:46:f1:d6:d6:ca:a7:86:7d:29:71:0e:47: fc:87:f5:f8:38:73:1b:eb:ef:29:6c:20:70:3f:6f:f2:37:df: 2f:e3:23:dc:29:cf:8d:b8:71:19:a4:a7:89:dc:01:85:f7:48: 58:e2:bc:42:a2:70:40:9f:af:d3:6b:56:b1:57:7d:3b:28:70: 61:03:61:ae:3e:d1:c8:94:75:83:c6:30:ff:07:af:a1:a7:c3: 13:d6:b6:b5:5e:32:cb:32:8e:1e:4c:19:df:a8:83:0e:25:10: b6:ce:1d:27:de:3d:bc:50:73:73:7b:e4:88:f4:38:73:cc:96: 28:99:0a:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt569mGM33MLnsjcR3a9fChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTk3N2U3YjUwYTA3ZTBlNzhmZjA0NTc0MDZjZWRjYzAzNDU3NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxek7/tfbCtBxPPjpJoRV0iXsBul MNrbdmKv9b20bQUsdrdrtD0uXmcPitbJMSveTBAvYBSpKuXpU9GvpiR3ZNkBy1+t FZPewu9mT+La+dG7vxHFUfDTETs3yGeCaNRQiMmLNcs5vLPQPdO84lrqdSL2Z/uz cwEeCsK+NXkBe4LTPMTcBed2EoIHIccohC7JrJKYXKBrYr6cEANI0P0GGgEgTqNb YItdHnGaw2kIWP/BTL1AK6b7cnWMPir/VSsN4mYmxwp9JChjq4XF1+uGpiQlUtxK ZCw4etXlqv6PXGg3vHd+gyMnSXjVKiAg5bPcQo47XseRAuw95DtNV2P1XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmXfntQoH4OeP8EV0Bs7cwDRXVwMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEveVpkLWUxQ2dmZzU0X3dSWFFHenR6QU5GZFhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LdYMA0G CSqGSIb3DQEBCwUAA4IBAQABKGmawLGokxu/jGW96aDzRAogaidtlFttGelHO3eZ qdP4w5yVNPycUZXHMviR4bxzn3ld38HS9vAnH6evi8n51g3e2pbeOpymnkX+gusM 289KMK5CpeGyVVBOYDgM5B2blwhxH+oWg8mM0m/WiVZgUtlFRIWvYWyxMa5GGYH9 t9VDdCZG8dbWyqeGfSlxDkf8h/X4OHMb6+8pbCBwP2/yN98v4yPcKc+NuHEZpKeJ 3AGF90hY4rxConBAn6/Ta1axV307KHBhA2GuPtHIlHWDxjD/B6+hp8MT1ra1XjLL Mo4eTBnfqIMOJRC2zh0n3j28UHNze+SI9DhzzJYomQpd -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:24 2026 by rpki-client