This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/ymjEj-AVl-jhoYqun7KK_jww1EY.roa File: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (raw, json) Hash identifier: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0= Subject key identifier: CA:68:C4:8F:E0:15:97:E8:E1:A1:8A:AE:9F:B2:8A:FE:3C:30:D4:46 Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756 Certificate serial: 019B7A5A8D6BD0CD2222C6E6A96F8621F207 Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/ymjEj-AVl-jhoYqun7KK_jww1EY.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213967 IP address blocks: 69.5.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8d:6b:d0:cd:22:22:c6:e6:a9:6f:86:21:f2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca68c48fe01597e8e1a18aae9fb28afe3c30d446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:3b:36:00:3b:0e:0d:c6:76:ea:e7:a7:dc: 3a:74:4a:d4:28:55:31:45:9e:2d:10:94:f8:02:c1: 62:53:a4:de:de:ec:d8:56:60:53:f1:85:c0:22:cf: 87:4d:8d:5c:d6:9d:c8:e9:4f:d1:5e:25:50:d4:77: 8a:0d:9f:4b:47:07:67:8a:1b:73:df:dd:bc:71:6f: 2d:50:b2:ee:4c:02:a4:bd:8e:21:90:e7:80:bf:ca: f5:3b:a4:5e:fb:0b:55:c1:ce:55:ec:ee:85:6a:dd: c0:6b:7e:eb:ec:b7:63:e7:4d:d3:e7:e5:79:66:e3: fa:88:66:f3:fa:52:3e:8e:60:8b:50:72:6f:5b:dd: e9:0f:75:61:77:91:29:de:b5:35:52:26:6d:01:04: eb:9b:fe:4d:0f:1b:f1:da:82:2c:6a:a2:21:ae:32: c3:f3:40:f3:53:5d:04:4a:fa:fe:88:27:fb:3e:fd: 3c:df:59:8d:5b:6e:1b:30:20:6d:b0:af:7d:66:32: cb:83:6c:08:da:cc:2a:3d:12:bf:bf:7e:77:d3:e4: 2c:a8:0b:39:db:54:57:5e:e5:ea:67:58:55:41:0b: 7d:b3:bd:7e:88:0a:f1:5a:bf:0a:75:b6:4c:2b:06: 92:5e:d9:d5:7c:d3:c2:ab:26:db:c9:20:9c:59:05: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:68:C4:8F:E0:15:97:E8:E1:A1:8A:AE:9F:B2:8A:FE:3C:30:D4:46 X509v3 Authority Key Identifier: keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/ymjEj-AVl-jhoYqun7KK_jww1EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.5.184.0/24 Signature Algorithm: sha256WithRSAEncryption 52:15:fd:6e:c5:8d:3a:e1:0d:34:6e:b2:f8:ea:ba:1b:cd:53: 6f:c3:2b:dd:38:75:af:65:57:ea:99:ec:c6:09:44:67:eb:75: 9f:43:4d:2a:b4:26:d7:cd:cd:de:bf:99:06:02:a3:1b:63:1b: 2b:6e:bd:93:35:c8:41:c3:a5:78:16:1f:33:04:0a:6d:e5:cd: 92:03:80:07:0f:f2:13:aa:d2:72:14:ee:8f:57:36:a6:21:4d: 80:66:05:50:55:26:12:d3:e2:93:e9:9f:a3:c1:41:93:47:63: de:47:5b:4f:6f:65:90:53:87:34:0c:ea:43:62:3a:d2:70:ca: 63:3f:da:d4:af:88:c1:a6:8d:16:ba:e9:f4:13:9d:2e:3d:79: a7:38:49:03:10:12:81:f7:25:bd:53:2c:ce:19:28:d7:99:98: e8:ae:ac:15:f3:91:15:a8:e5:62:88:3c:d5:e6:d9:ee:2c:e7: 3e:37:df:56:78:c1:df:17:8d:77:c2:7b:4f:1c:3d:04:25:ed: 58:82:92:46:b9:ba:72:eb:dd:fd:a4:ec:da:7e:e1:4e:5b:e9: 10:b6:89:7d:89:d6:45:71:67:8e:de:19:9a:a7:dc:9a:6d:68: 74:dd:eb:2a:69:7b:a8:6e:d3:3c:93:28:f3:1d:1d:8d:44:36: 6c:d6:c5:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wo1r0M0iIsbmqW+GIfIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmM2FkY2UzNjY0YmYwZTdmNjg4ZmY0MTIyNTUxNzM0YzRk MTQ3NTYwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTY4YzQ4ZmUwMTU5N2U4ZTFhMThhYWU5ZmIyOGFmZTNjMzBkNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+w7NgA7Dg3Gdurnp9w6dErUKFUx RZ4tEJT4AsFiU6Te3uzYVmBT8YXAIs+HTY1c1p3I6U/RXiVQ1HeKDZ9LRwdnihtz 3928cW8tULLuTAKkvY4hkOeAv8r1O6Re+wtVwc5V7O6Fat3Aa37r7Ldj503T5+V5 ZuP6iGbz+lI+jmCLUHJvW93pD3Vhd5Ep3rU1UiZtAQTrm/5NDxvx2oIsaqIhrjLD 80DzU10ESvr+iCf7Pv0831mNW24bMCBtsK99ZjLLg2wI2swqPRK/v3530+QsqAs5 21RXXuXqZ1hVQQt9s71+iArxWr8KdbZMKwaSXtnVfNPCqybbySCcWQXJ9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMpoxI/gFZfo4aGKrp+yiv48MNRGMB8GA1UdIwQY MBaAFK863ONmS/Dn9oj/QSJVFzTE0UdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjkt MzM1ODgyZGI5YTI1LzEveW1qRWotQVZsLWpob1lxdW43S0tfand3MUVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjktMzM1ODgyZGI5YTI1 LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQW4MA0G CSqGSIb3DQEBCwUAA4IBAQBSFf1uxY064Q00brL46robzVNvwyvdOHWvZVfqmezG CURn63WfQ00qtCbXzc3ev5kGAqMbYxsrbr2TNchBw6V4Fh8zBApt5c2SA4AHD/IT qtJyFO6PVzamIU2AZgVQVSYS0+KT6Z+jwUGTR2PeR1tPb2WQU4c0DOpDYjrScMpj P9rUr4jBpo0Wuun0E50uPXmnOEkDEBKB9yW9UyzOGSjXmZjorqwV85EVqOViiDzV 5tnuLOc+N99WeMHfF413wntPHD0EJe1YgpJGubpy6939pOzafuFOW+kQtol9idZF cWeO3hmap9yabWh03esqaXuobtM8kyjzHR2NRDZs1sXb -----END CERTIFICATE-----Generated at Wed Jan 21 19:35:13 2026 by rpki-client