This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/yhnnUlHPho1nYO-dZwOKzIeaEJk.roa File: yhnnUlHPho1nYO-dZwOKzIeaEJk.roa (raw, json) Hash identifier: rmW7wcZhu2IUsjlBMz6pwL3ALA5wovd1jow+J3zxFQ8= Subject key identifier: CA:19:E7:52:51:CF:86:8D:67:60:EF:9D:67:03:8A:CC:87:9A:10:99 Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b Certificate serial: 019B7DC89C75A614C300812AF2FF5C4832EE Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/yhnnUlHPho1nYO-dZwOKzIeaEJk.roa Signing time: Fri 02 Jan 2026 08:17:37 +0000 ROA not before: Fri 02 Jan 2026 08:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44667 IP address blocks: 158.41.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 02:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:9c:75:a6:14:c3:00:81:2a:f2:ff:5c:48:32:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b Validity Not Before: Jan 2 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca19e75251cf868d6760ef9d67038acc879a1099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:04:c3:64:cf:71:4c:f5:8b:a6:fd:54:2e: 6b:8c:85:97:18:75:60:4b:99:57:99:5c:22:a0:1f: bf:f7:05:ab:cb:2d:44:10:c6:96:da:4a:03:b0:4a: b9:9a:e2:9a:c2:5a:bf:80:33:50:78:1e:23:a6:e0: 1b:99:b0:c3:3b:9a:1d:36:d4:12:7e:75:09:c1:e8: 06:4d:4a:5d:19:a5:de:7f:40:6e:1e:0f:fc:85:23: e1:60:7e:d8:49:ae:3a:4b:a0:c5:42:88:77:d5:7e: c4:ea:a2:c8:d8:cd:6b:a1:a4:c3:ff:8c:f3:14:1e: 7a:e0:64:d2:f5:c6:90:e2:e6:51:25:b0:70:a2:f3: e9:25:34:c9:b4:66:b1:16:db:f6:f1:29:40:08:95: 78:d3:3e:26:b2:7f:ca:17:b3:02:03:d3:b7:52:52: 6b:7c:5c:01:e5:4c:0c:c6:3b:54:bb:dd:e1:ce:0c: b1:a3:3c:24:e1:fe:17:a1:03:70:af:9b:19:86:a9: 54:b3:72:ff:41:42:54:56:ba:50:e4:20:d2:b3:70: bf:c4:24:2e:c6:f9:6b:ae:df:f8:76:4f:1d:7d:81: f3:c4:d0:5f:cb:87:72:af:58:25:00:94:22:bb:b1: 93:6e:20:c0:85:74:2e:05:ee:7a:a0:4a:a2:5a:8c: 06:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:19:E7:52:51:CF:86:8D:67:60:EF:9D:67:03:8A:CC:87:9A:10:99 X509v3 Authority Key Identifier: keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/yhnnUlHPho1nYO-dZwOKzIeaEJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.41.0.0/20 Signature Algorithm: sha256WithRSAEncryption 43:30:60:e3:af:41:6b:e7:d3:8a:24:71:64:49:49:15:88:dc: 51:7c:1b:d7:b5:c5:4d:b5:eb:14:c9:d8:44:3b:52:6a:11:40: 05:68:cb:c3:f7:90:d9:d4:e5:e4:0d:d0:a1:b1:79:77:06:ac: 3b:e6:c7:e6:03:26:64:3e:47:1b:76:78:53:e9:45:51:bf:c5: 32:0d:22:2a:b1:a7:7e:72:3b:e1:c4:42:7b:e5:ac:a3:8a:8e: 28:0c:70:65:e9:25:60:20:fd:c9:de:7c:99:38:f9:71:bf:d7: 0b:46:43:f4:ef:78:d1:94:c2:a1:32:c6:cf:fa:9a:2f:57:04: e8:72:02:8f:f6:3c:b6:17:88:bf:b7:39:91:01:60:a1:af:fe: 8c:1c:73:7f:f8:45:5a:9e:25:36:ee:a9:72:1e:e5:3a:03:c5: f3:f8:ef:c5:5b:be:d7:f7:b3:e0:67:96:b2:54:69:80:85:cd: ea:d5:4c:e8:77:4b:03:f2:f3:ea:7b:06:f5:4e:d1:19:71:bd: a6:c5:97:10:e1:51:d8:10:2f:8d:0b:a6:86:bc:be:13:a6:aa: 47:b6:1c:29:1e:53:07:18:95:78:aa:c6:ce:58:54:92:ba:77: 26:93:fa:92:e0:b9:95:f8:d7:32:f6:62:91:39:80:7e:d0:a4: ab:d6:c5:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yJx1phTDAIEq8v9cSDLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw NDEzMmIwHhcNMjYwMTAyMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTE5ZTc1MjUxY2Y4NjhkNjc2MGVmOWQ2NzAzOGFjYzg3OWExMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7YEw2TPcUz1i6b9VC5rjIWXGHVg S5lXmVwioB+/9wWryy1EEMaW2koDsEq5muKawlq/gDNQeB4jpuAbmbDDO5odNtQS fnUJwegGTUpdGaXef0BuHg/8hSPhYH7YSa46S6DFQoh31X7E6qLI2M1roaTD/4zz FB564GTS9caQ4uZRJbBwovPpJTTJtGaxFtv28SlACJV40z4msn/KF7MCA9O3UlJr fFwB5UwMxjtUu93hzgyxozwk4f4XoQNwr5sZhqlUs3L/QUJUVrpQ5CDSs3C/xCQu xvlrrt/4dk8dfYHzxNBfy4dyr1glAJQiu7GTbiDAhXQuBe56oEqiWowGawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMoZ51JRz4aNZ2DvnWcDisyHmhCZMB8GA1UdIwQY MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt MzM4OTQ5MTNkY2I3LzEveWhublVsSFBobzFuWU8tZFp3T0t6SWVhRUprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3 LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnikAMA0G CSqGSIb3DQEBCwUAA4IBAQBDMGDjr0Fr59OKJHFkSUkViNxRfBvXtcVNtesUydhE O1JqEUAFaMvD95DZ1OXkDdChsXl3Bqw75sfmAyZkPkcbdnhT6UVRv8UyDSIqsad+ cjvhxEJ75ayjio4oDHBl6SVgIP3J3nyZOPlxv9cLRkP073jRlMKhMsbP+povVwTo cgKP9jy2F4i/tzmRAWChr/6MHHN/+EVaniU27qlyHuU6A8Xz+O/FW77X97PgZ5ay VGmAhc3q1Uzod0sD8vPqewb1TtEZcb2mxZcQ4VHYEC+NC6aGvL4TpqpHthwpHlMH GJV4qsbOWFSSuncmk/qS4LmV+Ncy9mKROYB+0KSr1sXL -----END CERTIFICATE-----Generated at Sat Feb 7 12:15:19 2026 by rpki-client