This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/yC5B0rT7Xy5HWb6b20HYfHMmPII.roa File: yC5B0rT7Xy5HWb6b20HYfHMmPII.roa (raw, json) Hash identifier: cd94rZ6SfXF3OCGPrP9y3o8F1w3N6nSTo6a88BEpspE= Subject key identifier: C8:2E:41:D2:B4:FB:5F:2E:47:59:BE:9B:DB:41:D8:7C:73:26:3C:82 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8EDAAB1F9E600B28B9652453627E Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/yC5B0rT7Xy5HWb6b20HYfHMmPII.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204554 IP address blocks: 151.237.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8e:da:ab:1f:9e:60:0b:28:b9:65:24:53:62:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c82e41d2b4fb5f2e4759be9bdb41d87c73263c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:5a:7c:e0:84:a4:c4:46:6a:ec:97:52:36: 46:d3:97:b2:f7:75:b8:fd:b0:5d:72:f3:6e:ad:8b: 64:20:90:37:8c:b0:97:c6:31:ca:e9:d3:41:d7:16: a6:a6:71:a3:ad:c2:0a:f2:fd:44:0b:e6:91:28:19: 17:87:6d:58:ee:6d:3b:3d:e0:30:4d:30:a8:ff:13: 09:22:2d:53:59:6f:dc:cc:0d:15:2f:55:1e:b4:9f: 0d:99:9c:65:12:aa:44:6e:94:26:68:ba:e4:05:8b: b5:10:70:8e:fe:8c:08:09:66:3b:ca:7e:9f:05:63: fb:4f:59:38:a7:7f:d0:e6:cf:22:a5:c4:f9:67:a4: b6:4b:0a:38:51:73:2c:22:61:23:e5:64:cc:87:be: 8d:5b:5f:9b:0e:9e:8a:cc:45:a0:98:4b:a2:ba:ce: 24:5f:2b:e3:c1:80:0b:8b:90:ed:8c:27:52:49:c9: 61:0c:19:6c:67:75:e8:f2:3b:0d:29:e6:0d:12:42: 60:af:40:ec:dd:db:0c:00:74:3b:39:41:00:33:17: 7e:c8:4e:d5:c7:ab:6f:30:c1:e0:c0:7b:f5:a2:8c: 06:75:be:01:24:d5:cc:e7:0a:cc:45:9c:ce:bc:bb: 5f:fd:48:61:a4:15:d2:9c:cd:86:8c:7d:99:0e:f2: 56:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2E:41:D2:B4:FB:5F:2E:47:59:BE:9B:DB:41:D8:7C:73:26:3C:82 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/yC5B0rT7Xy5HWb6b20HYfHMmPII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.28.0/24 Signature Algorithm: sha256WithRSAEncryption 85:bb:b0:c2:c2:23:0a:f0:09:a1:9b:f9:f3:43:9a:0f:f8:df: c0:cf:50:30:49:b1:5f:b6:ec:af:0e:b9:2e:ee:f1:cb:61:c5: c8:2b:75:76:e7:40:dd:10:dc:5b:2d:9b:d6:02:4f:60:b8:40: b7:d1:bf:fd:54:8f:78:69:6e:39:b1:cf:8d:b0:d6:7c:3b:0f: 17:9d:52:86:10:16:4f:c3:c5:d2:40:e7:60:aa:67:2e:c2:d7: 3c:9d:57:cc:83:72:6f:18:4c:57:04:82:40:1f:5d:b1:72:ca: c8:ea:76:36:20:84:8f:47:53:97:6a:6b:de:82:74:b5:24:2e: f0:b2:3c:fd:d3:79:71:b6:2f:30:7f:19:27:e1:ff:02:f8:e8: 05:e5:57:6d:b8:e9:ad:9d:cd:4e:22:4f:dc:f4:a8:29:c5:7f: 31:f3:4a:62:fc:64:a4:36:5b:bd:4c:70:ed:11:a4:55:db:c0: 85:26:e1:66:58:05:a5:bb:9e:d7:63:45:6c:dd:c5:92:66:96: b1:4d:ce:4b:6e:37:61:e6:2f:e8:66:44:e6:5d:e8:4c:9e:9a: 01:29:ac:97:ec:ce:bb:4f:9d:64:65:45:9d:e8:42:7b:f7:03: dd:d1:99:a2:e2:33:70:3d:f8:2e:11:d3:8c:39:25:a9:df:06: fa:8c:33:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Y7aqx+eYAsouWUkU2J+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODJlNDFkMmI0ZmI1ZjJlNDc1OWJlOWJkYjQxZDg3YzczMjYzYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVpafOCEpMRGauyXUjZG05ey93W4 /bBdcvNurYtkIJA3jLCXxjHK6dNB1xampnGjrcIK8v1EC+aRKBkXh21Y7m07PeAw TTCo/xMJIi1TWW/czA0VL1UetJ8NmZxlEqpEbpQmaLrkBYu1EHCO/owICWY7yn6f BWP7T1k4p3/Q5s8ipcT5Z6S2Swo4UXMsImEj5WTMh76NW1+bDp6KzEWgmEuius4k XyvjwYALi5DtjCdSSclhDBlsZ3Xo8jsNKeYNEkJgr0Ds3dsMAHQ7OUEAMxd+yE7V x6tvMMHgwHv1oowGdb4BJNXM5wrMRZzOvLtf/UhhpBXSnM2GjH2ZDvJWJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMguQdK0+18uR1m+m9tB2HxzJjyCMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEveUM1QjByVDdYeTVIV2I2YjIwSFlmSE1tUElJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+0cMA0G CSqGSIb3DQEBCwUAA4IBAQCFu7DCwiMK8Amhm/nzQ5oP+N/Az1AwSbFftuyvDrku 7vHLYcXIK3V250DdENxbLZvWAk9guEC30b/9VI94aW45sc+NsNZ8Ow8XnVKGEBZP w8XSQOdgqmcuwtc8nVfMg3JvGExXBIJAH12xcsrI6nY2IISPR1OXamvegnS1JC7w sjz903lxti8wfxkn4f8C+OgF5VdtuOmtnc1OIk/c9KgpxX8x80pi/GSkNlu9THDt EaRV28CFJuFmWAWlu57XY0Vs3cWSZpaxTc5Lbjdh5i/oZkTmXehMnpoBKayX7M67 T51kZUWd6EJ79wPd0Zmi4jNwPfguEdOMOSWp3wb6jDP+ -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:50 2026 by rpki-client