This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/YlUOJaq43NpuLvhyIjdUpjtIh5k.roa File: YlUOJaq43NpuLvhyIjdUpjtIh5k.roa (raw, json) Hash identifier: CQMT/ddbiL7hLzG2QkDs7berkHQrguNEVB/e2zlXUlk= Subject key identifier: 62:55:0E:25:AA:B8:DC:DA:6E:2E:F8:72:22:37:54:A6:3B:48:87:99 Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Certificate serial: 019B7EA4E92BF364FBC31783AB7694923706 Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/YlUOJaq43NpuLvhyIjdUpjtIh5k.roa Signing time: Fri 02 Jan 2026 12:18:15 +0000 ROA not before: Fri 02 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15704 IP address blocks: 185.140.64.0/22 maxlen: 24 213.194.128.0/18 maxlen: 24 213.195.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:e9:2b:f3:64:fb:c3:17:83:ab:76:94:92:37:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Validity Not Before: Jan 2 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62550e25aab8dcda6e2ef872223754a63b488799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:bc:41:f0:bf:5e:a0:a9:ef:20:f4:bc:21: 05:93:76:65:55:c9:fb:ce:c0:54:9e:0b:0e:00:0e: 2e:45:a4:34:18:be:6c:15:37:36:aa:ce:9b:e4:72: d3:99:e6:dd:d5:73:ba:21:83:21:52:3d:87:52:c0: df:0a:36:88:7d:76:e7:4a:23:2d:a6:31:da:ac:99: 6d:0c:d0:07:f9:d3:5c:df:78:de:6a:e6:92:f2:6e: bb:e9:ca:7e:47:1e:b7:dd:82:8c:85:c5:97:ea:5f: 6d:6b:88:a9:d6:58:fb:81:e2:18:21:ab:6b:88:0c: cb:93:5d:77:98:3e:ae:b0:ff:c1:d8:87:dd:bb:2d: 9f:62:9f:ed:2f:09:e3:7b:50:47:43:6b:c0:b1:05: aa:2a:b3:dd:c3:22:9e:0d:5c:68:7c:94:ce:d0:11: b7:ec:3b:d5:06:4d:5c:e7:53:a0:32:8f:e7:e2:aa: 66:42:42:05:07:3a:56:50:79:ff:cd:33:3b:3c:d5: 87:74:22:8f:64:74:51:92:fe:b9:ed:66:22:4b:28: a2:67:51:62:27:1d:86:3e:fc:2b:60:bc:f3:34:39: 35:8a:80:20:9a:ec:cd:0b:c5:0f:91:1d:48:18:61: c2:56:04:46:28:67:12:2b:c4:3c:b8:4a:24:56:38: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:55:0E:25:AA:B8:DC:DA:6E:2E:F8:72:22:37:54:A6:3B:48:87:99 X509v3 Authority Key Identifier: keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/YlUOJaq43NpuLvhyIjdUpjtIh5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.64.0/22 213.194.128.0/18 213.195.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7e:17:c0:53:35:6e:be:4d:0a:01:44:8c:b0:89:15:e1:7f:8c: 63:b3:a2:9c:e3:07:46:b8:44:1e:df:51:30:a2:ba:c5:35:9e: 08:f9:9f:ab:95:eb:19:05:9b:8b:7f:5d:7f:6a:79:77:a2:37: 07:dc:ca:0a:8f:c4:16:fe:d7:5d:62:64:b4:1d:a9:09:32:31: f2:c2:22:66:32:6c:87:e0:f2:22:18:fa:3b:80:a6:a1:47:55: ae:e1:fb:14:d5:56:f1:27:23:e5:04:a2:30:c5:cb:e9:57:b1: 84:51:ab:db:8f:6d:3e:b5:d5:0a:d9:ef:e9:9b:5e:57:35:b1: 32:0c:54:44:0b:d5:5f:f7:36:fc:4b:be:eb:e3:62:41:0d:ef: b6:0a:6a:84:01:c3:46:53:ef:10:71:34:7b:48:96:a7:2c:23: a4:f6:83:9b:76:18:67:fb:f7:78:25:e5:5e:a3:20:1d:dd:a6: be:f4:11:66:15:ea:98:57:f1:35:99:ea:e7:0c:75:96:62:41: 0d:e7:9c:dd:8c:6b:55:0a:0c:48:ca:09:62:3f:25:96:3b:2b: 17:5f:32:8d:95:a0:da:60:52:e7:6c:f2:ba:e6:37:e1:f2:38: a9:6c:1a:1b:b8:20:cf:6e:39:7f:ac:c6:49:13:cb:b1:ad:bc: 75:ab:58:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pOkr82T7wxeDq3aUkjcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz NGMzNGEwHhcNMjYwMTAyMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjU1MGUyNWFhYjhkY2RhNmUyZWY4NzIyMjM3NTRhNjNiNDg4Nzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqO8QfC/XqCp7yD0vCEFk3ZlVcn7 zsBUngsOAA4uRaQ0GL5sFTc2qs6b5HLTmebd1XO6IYMhUj2HUsDfCjaIfXbnSiMt pjHarJltDNAH+dNc33jeauaS8m676cp+Rx633YKMhcWX6l9ta4ip1lj7geIYIatr iAzLk113mD6usP/B2Ifduy2fYp/tLwnje1BHQ2vAsQWqKrPdwyKeDVxofJTO0BG3 7DvVBk1c51OgMo/n4qpmQkIFBzpWUHn/zTM7PNWHdCKPZHRRkv657WYiSyiiZ1Fi Jx2GPvwrYLzzNDk1ioAgmuzNC8UPkR1IGGHCVgRGKGcSK8Q8uEokVjiWfQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGJVDiWquNzabi74ciI3VKY7SIeZMB8GA1UdIwQY MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt NmFkMjBhMmVhY2I4LzEvWWxVT0phcTQzTnB1THZoeUlqZFVwanRJaDVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4 LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuYxAAwQG 1cKAAwQG1cNAMA0GCSqGSIb3DQEBCwUAA4IBAQB+F8BTNW6+TQoBRIywiRXhf4xj s6Kc4wdGuEQe31EworrFNZ4I+Z+rlesZBZuLf11/anl3ojcH3MoKj8QW/tddYmS0 HakJMjHywiJmMmyH4PIiGPo7gKahR1Wu4fsU1VbxJyPlBKIwxcvpV7GEUavbj20+ tdUK2e/pm15XNbEyDFREC9Vf9zb8S77r42JBDe+2CmqEAcNGU+8QcTR7SJanLCOk 9oObdhhn+/d4JeVeoyAd3aa+9BFmFeqYV/E1mernDHWWYkEN55zdjGtVCgxIygli PyWWOysXXzKNlaDaYFLnbPK65jfh8jipbBobuCDPbjl/rMZJE8uxrbx1q1iv -----END CERTIFICATE-----Generated at Mon Jan 26 23:45:51 2026 by rpki-client