This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/ydJMToJ5B1bUDi2lNS_iW7lmLpE.roa File: ydJMToJ5B1bUDi2lNS_iW7lmLpE.roa (raw, json) Hash identifier: BRax3SkiLH5mAWfBlAoIZAGF7JI9kbofyKrquNfm0Rg= Subject key identifier: C9:D2:4C:4E:82:79:07:56:D4:0E:2D:A5:35:2F:E2:5B:B9:66:2E:91 Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40 Certificate serial: 019B7E38A5F8FFF7208FCE1D55EFBB92C93B Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/ydJMToJ5B1bUDi2lNS_iW7lmLpE.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12810 IP address blocks: 78.40.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a5:f8:ff:f7:20:8f:ce:1d:55:ef:bb:92:c9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9d24c4e82790756d40e2da5352fe25bb9662e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8d:3d:c9:92:68:9f:2b:a1:1f:a9:b9:d7:22: 26:5f:12:4d:b0:01:6b:62:fb:d1:2f:c1:58:4c:5e: 9d:8f:7f:a0:2d:29:86:99:01:53:86:5e:8f:00:4b: 63:4c:77:09:44:73:5e:2a:f9:64:8e:ee:81:af:9a: 32:2a:f4:4b:8d:97:16:8f:81:85:21:1e:4b:3a:11: e3:d5:c9:b2:1c:d0:74:2e:65:3d:43:72:13:54:df: 19:7a:4d:0e:6e:42:a1:da:eb:3c:3e:9b:7a:8e:0a: bc:eb:6a:ff:df:81:05:f6:ee:f4:3a:14:da:ed:16: 08:c4:f1:60:4b:7c:d9:b9:57:1d:86:e0:64:4a:90: 06:71:da:63:14:b5:8c:2f:62:3b:c7:d6:90:b1:e5: b2:91:4f:5a:d2:31:5d:01:fd:b9:93:1c:66:ca:ee: 4d:ec:e4:aa:d8:a2:6d:82:3c:c1:ee:97:4b:8b:23: ec:d9:fb:5a:0b:b2:68:13:1b:e2:44:c6:c8:b0:0f: d2:32:4f:47:09:5f:b5:7f:f6:1a:db:40:fe:fa:ef: 69:0f:74:3f:57:49:eb:f4:2c:b0:fe:b5:df:e0:79: ce:cc:fa:d8:bf:c2:78:6d:f5:42:1a:d1:18:b5:e3: 0a:fc:80:68:1e:c1:bd:07:ea:13:b9:f7:e3:12:a4: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D2:4C:4E:82:79:07:56:D4:0E:2D:A5:35:2F:E2:5B:B9:66:2E:91 X509v3 Authority Key Identifier: keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/ydJMToJ5B1bUDi2lNS_iW7lmLpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.0.0/23 Signature Algorithm: sha256WithRSAEncryption 75:81:49:46:d4:23:2c:91:3d:17:56:cf:39:8f:45:65:2a:8b: 11:de:0b:04:ff:c7:09:ea:19:0e:33:92:7d:7a:e1:b2:fb:84: 0b:89:e0:a8:01:28:de:4e:3a:e2:33:88:4b:9a:d7:77:6d:86: eb:61:53:dd:c9:d9:c9:35:1a:23:00:57:18:eb:fb:43:38:e9: 7d:33:2a:eb:3e:95:fb:40:a4:1d:b4:19:04:64:a9:64:3c:61: 49:42:5a:64:bb:8c:a7:49:b1:dc:e2:47:ae:66:47:d9:a8:e4: e8:9c:77:5c:55:99:b1:58:34:82:20:af:dd:65:cc:f7:00:f9: b5:65:11:f4:87:2e:be:42:73:1f:c2:e8:76:6e:60:4d:de:7a: 2d:5a:82:4e:22:dd:30:03:c6:d7:90:3c:7d:09:ed:35:30:3b: 5c:15:46:e0:de:d7:5c:16:b3:a2:f2:df:4f:53:51:cc:32:45: 7a:04:15:80:2e:94:09:0f:bf:84:04:ad:fb:c8:82:a8:5c:47: 89:61:e2:68:16:c1:75:82:f8:08:66:89:90:e3:81:09:4e:5a: c2:9d:1f:b7:d5:fa:76:7c:d2:ad:44:1a:1a:88:ab:39:ac:e4: 02:50:7d:62:d1:45:98:80:bb:9f:9e:d9:6c:90:fa:74:3b:2e: b6:4a:21:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKX4//cgj84dVe+7ksk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm YzJjNDAwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWQyNGM0ZTgyNzkwNzU2ZDQwZTJkYTUzNTJmZTI1YmI5NjYyZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk409yZJonyuhH6m51yImXxJNsAFr YvvRL8FYTF6dj3+gLSmGmQFThl6PAEtjTHcJRHNeKvlkju6Br5oyKvRLjZcWj4GF IR5LOhHj1cmyHNB0LmU9Q3ITVN8Zek0ObkKh2us8Ppt6jgq862r/34EF9u70OhTa 7RYIxPFgS3zZuVcdhuBkSpAGcdpjFLWML2I7x9aQseWykU9a0jFdAf25kxxmyu5N 7OSq2KJtgjzB7pdLiyPs2ftaC7JoExviRMbIsA/SMk9HCV+1f/Ya20D++u9pD3Q/ V0nr9Cyw/rXf4HnOzPrYv8J4bfVCGtEYteMK/IBoHsG9B+oTuffjEqRWkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnSTE6CeQdW1A4tpTUv4lu5Zi6RMB8GA1UdIwQY MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt YjJkY2MxODYzZThiLzEveWRKTVRvSjVCMWJVRGkybE5TX2lXN2xtTHBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTigAMA0G CSqGSIb3DQEBCwUAA4IBAQB1gUlG1CMskT0XVs85j0VlKosR3gsE/8cJ6hkOM5J9 euGy+4QLieCoASjeTjriM4hLmtd3bYbrYVPdydnJNRojAFcY6/tDOOl9MyrrPpX7 QKQdtBkEZKlkPGFJQlpku4ynSbHc4keuZkfZqOTonHdcVZmxWDSCIK/dZcz3APm1 ZRH0hy6+QnMfwuh2bmBN3notWoJOIt0wA8bXkDx9Ce01MDtcFUbg3tdcFrOi8t9P U1HMMkV6BBWALpQJD7+EBK37yIKoXEeJYeJoFsF1gvgIZomQ44EJTlrCnR+31fp2 fNKtRBoaiKs5rOQCUH1i0UWYgLufntlskPp0Oy62SiFj -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:26 2026 by rpki-client