This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/yiLVsbADVDXui_boxoqOjd-MYts.roa File: yiLVsbADVDXui_boxoqOjd-MYts.roa (raw, json) Hash identifier: ldOTvOuRJ82dkbygN6dHc/4TIF5bK0Nko09kMPj8TWU= Subject key identifier: CA:22:D5:B1:B0:03:54:35:EE:8B:F6:E8:C6:8A:8E:8D:DF:8C:62:DB Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019C0A7959170E8E90C1B4FD7838B7153AAB Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/yiLVsbADVDXui_boxoqOjd-MYts.roa Signing time: Thu 29 Jan 2026 15:57:30 +0000 ROA not before: Thu 29 Jan 2026 15:57:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 81.22.142.0/23 maxlen: 24 89.185.0.0/22 maxlen: 22 109.72.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:79:59:17:0e:8e:90:c1:b4:fd:78:38:b7:15:3a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 29 15:57:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca22d5b1b0035435ee8bf6e8c68a8e8ddf8c62db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:eb:01:32:8f:38:c7:1d:75:38:6c:17:dc: c8:89:ed:26:66:13:c5:7e:82:6b:50:c1:b5:b6:a4: be:58:c0:e1:08:49:e9:52:f4:c0:ab:04:62:57:79: de:84:7e:6d:62:f3:bd:40:14:c1:b0:3e:d0:73:46: 15:f9:e5:51:a1:77:7f:d4:8e:64:ca:cc:ec:bb:57: b5:64:79:a4:55:ca:1c:45:fd:d7:61:c6:06:f0:f6: eb:91:77:03:90:d7:93:37:b5:fa:2c:ef:5f:3c:48: 60:2c:ae:94:a4:37:5f:4c:a0:0d:91:b6:67:36:38: 40:f0:bf:a9:5e:88:bb:fb:1d:9b:01:1a:dc:84:56: dc:55:47:67:24:b4:3f:89:98:c3:ca:b1:09:71:1e: 3f:93:07:93:00:18:a3:2b:1a:6d:03:a6:bc:8c:f5: 12:0e:f0:07:4b:ca:26:82:50:f2:a4:10:f0:f0:3f: 91:d0:48:d0:3e:42:84:5a:a3:73:46:a7:0c:e7:53: 6d:77:13:4b:65:b2:eb:8d:20:60:4c:3e:7f:a7:b1: 53:13:d2:d0:a7:bf:09:b7:e0:a6:68:a7:40:58:48: 0e:37:d7:f4:6f:94:74:d3:c4:46:25:3c:31:c0:b3: 52:4a:45:32:db:7e:ee:f5:f7:0b:b0:78:bd:2e:b7: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:22:D5:B1:B0:03:54:35:EE:8B:F6:E8:C6:8A:8E:8D:DF:8C:62:DB X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/yiLVsbADVDXui_boxoqOjd-MYts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.142.0/23 89.185.0.0/22 109.72.116.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:8c:cf:31:6a:8c:45:11:ca:91:69:51:1c:df:20:37:53:ad: 11:38:65:23:b6:2a:e3:59:63:f4:1a:12:14:ba:c2:ae:bd:f1: 5d:4e:a8:31:e7:da:e4:63:56:2e:36:57:89:39:55:5d:ad:7d: 56:e6:b9:33:c2:e3:87:59:60:fc:39:80:88:da:07:f2:ae:11: 88:fd:9f:d4:51:40:50:88:4a:b8:0c:34:ba:16:db:26:3e:f4: be:5a:57:37:df:b7:91:03:9e:9b:46:d4:7d:73:da:4e:78:bc: 18:11:46:8c:64:4a:2d:0b:ea:26:91:2a:3a:65:b0:93:3e:25: 20:6d:54:80:bd:44:1a:8c:68:c4:f9:d7:e2:71:e9:5b:4a:70: 16:28:83:95:d8:4f:0e:ff:bb:34:06:65:6d:50:08:ef:e4:6c: 5f:5b:da:bc:02:ac:c9:12:f8:69:fe:28:59:a0:41:46:9a:68: 70:bc:ed:50:8c:c2:a6:db:99:12:19:b6:07:6e:a0:42:af:59: 3e:7c:98:2b:3d:2d:5d:69:97:ff:91:e4:4e:5c:cc:80:36:c1: 21:3e:19:ca:ba:6e:6a:cc:95:2c:61:f5:98:01:e2:a9:5f:78: a0:83:89:d0:e3:2a:e8:83:2c:2f:ef:6c:f6:11:fc:03:a1:7f: c5:0e:f9:11 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwKeVkXDo6QwbT9eDi3FTqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTI5MTU1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTIyZDViMWIwMDM1NDM1ZWU4YmY2ZThjNjhhOGU4ZGRmOGM2MmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypLrATKPOMcddThsF9zIie0mZhPF foJrUMG1tqS+WMDhCEnpUvTAqwRiV3nehH5tYvO9QBTBsD7Qc0YV+eVRoXd/1I5k yszsu1e1ZHmkVcocRf3XYcYG8PbrkXcDkNeTN7X6LO9fPEhgLK6UpDdfTKANkbZn NjhA8L+pXoi7+x2bARrchFbcVUdnJLQ/iZjDyrEJcR4/kweTABijKxptA6a8jPUS DvAHS8omglDypBDw8D+R0EjQPkKEWqNzRqcM51NtdxNLZbLrjSBgTD5/p7FTE9LQ p78Jt+CmaKdAWEgON9f0b5R008RGJTwxwLNSSkUy237u9fcLsHi9LrdoOQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMoi1bGwA1Q17ov26MaKjo3fjGLbMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEveWlMVnNiQURWRFh1aV9ib3hvcU9qZC1NWXRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBURaOAwQC WbkAAwQCbUh0MA0GCSqGSIb3DQEBCwUAA4IBAQA9jM8xaoxFEcqRaVEc3yA3U60R OGUjtirjWWP0GhIUusKuvfFdTqgx59rkY1YuNleJOVVdrX1W5rkzwuOHWWD8OYCI 2gfyrhGI/Z/UUUBQiEq4DDS6FtsmPvS+Wlc337eRA56bRtR9c9pOeLwYEUaMZEot C+omkSo6ZbCTPiUgbVSAvUQajGjE+dficelbSnAWKIOV2E8O/7s0BmVtUAjv5Gxf W9q8AqzJEvhp/ihZoEFGmmhwvO1QjMKm25kSGbYHbqBCr1k+fJgrPS1daZf/keRO XMyANsEhPhnKum5qzJUsYfWYAeKpX3igg4nQ4yrogywv72z2EfwDoX/FDvkR -----END CERTIFICATE-----Generated at Thu Jan 29 20:57:48 2026 by rpki-client