This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/y7-vDXrLqMjnhTrFIm_Q1_GinG0.roa File: y7-vDXrLqMjnhTrFIm_Q1_GinG0.roa (raw, json) Hash identifier: NpfzJpBL32LooDZs+/fN3t0x26rbFmNfH1jzdmZ+xH0= Subject key identifier: CB:BF:AF:0D:7A:CB:A8:C8:E7:85:3A:C5:22:6F:D0:D7:F1:A2:9C:6D Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c Certificate serial: 019B797F07BB4887340542B28995578FDA46 Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/y7-vDXrLqMjnhTrFIm_Q1_GinG0.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200544 IP address blocks: 159.22.0.0/16 maxlen: 16 2a07:ad00::/29 maxlen: 29 2a07:ad00::/30 maxlen: 30 2a07:ad00::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:07:bb:48:87:34:05:42:b2:89:95:57:8f:da:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbbfaf0d7acba8c8e7853ac5226fd0d7f1a29c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:01:cf:b8:0b:ae:ac:78:be:a6:7f:d6:93: 9f:68:4f:61:89:0c:45:e2:d1:58:60:59:75:ba:e1: eb:48:26:cf:80:fa:4e:7c:98:98:f3:8e:b1:af:97: a1:b5:44:4d:ba:f7:c9:89:06:84:17:f4:16:0e:d1: 07:ba:ee:0d:50:8b:7c:48:ee:09:90:7e:7a:cd:c1: 45:64:ee:a2:d7:c6:29:16:fe:a0:00:1e:da:88:81: 52:50:13:ab:30:ed:ef:ec:fa:41:8b:e3:b7:60:ae: 12:93:2e:d3:7a:3e:c4:7d:96:0d:b5:47:53:e6:92: e5:e6:d5:f3:c3:60:16:d0:df:d6:90:09:14:8a:07: e6:2f:0c:36:11:05:d8:82:d5:23:a5:b3:d1:97:f1: b2:14:22:20:57:ac:46:50:27:16:a7:ef:66:c9:f0: cc:2f:b0:fe:22:18:89:43:5d:fd:34:b1:9e:2f:8b: 31:03:96:2a:39:77:b6:a8:d1:d6:c2:2b:ed:62:1f: c2:7f:64:bf:ec:97:d3:0c:38:5a:44:a2:9c:95:e9: c3:77:1a:fa:79:64:a8:4b:a3:9a:18:e6:22:35:5e: e0:41:f6:7b:07:4d:d6:07:b9:d1:e2:8c:19:e9:cd: 01:de:8b:0e:96:30:1e:db:36:55:aa:47:2b:99:18: 74:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BF:AF:0D:7A:CB:A8:C8:E7:85:3A:C5:22:6F:D0:D7:F1:A2:9C:6D X509v3 Authority Key Identifier: keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/y7-vDXrLqMjnhTrFIm_Q1_GinG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.22.0.0/16 IPv6: 2a07:ad00::/29 Signature Algorithm: sha256WithRSAEncryption 6a:9a:28:aa:12:8d:37:9f:b8:4d:ae:b3:e0:c5:25:dc:22:0c: 23:ea:dd:2b:4e:d7:b1:94:36:9b:f8:45:c7:5c:1f:2b:e5:c3: 47:69:4d:2f:e7:2f:06:48:da:09:97:5b:34:82:b6:b0:0a:b5: 68:3f:4f:74:d2:71:8f:a4:6b:54:36:67:49:ec:d4:2b:83:07: a5:d3:f1:55:1c:8d:5f:a3:ea:f5:9c:94:6b:71:4a:ad:ab:64: f8:5d:f4:4a:7c:68:a7:99:b5:6b:e7:46:3e:d3:b7:e7:b1:f7: bc:0e:3f:eb:c0:46:1f:20:ea:b3:c8:ce:03:cc:ee:d8:4b:69: 9c:bc:52:0a:e8:ea:71:14:f8:18:20:b5:46:de:9d:24:40:a6: e4:89:92:13:7f:60:d9:24:1b:fe:14:39:7b:ab:32:05:35:ab: 78:0d:c2:a9:1c:3d:36:8e:88:ba:3f:55:6e:9e:c4:cd:3e:f5: 01:58:d3:fe:70:df:b5:c7:93:1a:af:0a:03:ee:ff:ec:e1:9c: ba:31:83:60:03:52:49:be:66:66:d2:43:e3:67:5f:62:08:f9: 90:3e:78:bf:b4:a4:6c:7a:bb:c7:2a:ea:22:5f:0a:0f:5a:19: cc:67:c2:56:76:82:ad:6b:e5:a7:95:41:7e:6b:19:b9:03:1d: fd:df:5a:b8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fwe7SIc0BUKyiZVXj9pGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTM2YmVhMWIwYzNhMjA4YWJhMjdkOGIxMGIyNzVlNDc0 ZGRlMmMwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmJmYWYwZDdhY2JhOGM4ZTc4NTNhYzUyMjZmZDBkN2YxYTI5YzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0EBz7gLrqx4vqZ/1pOfaE9hiQxF 4tFYYFl1uuHrSCbPgPpOfJiY846xr5ehtURNuvfJiQaEF/QWDtEHuu4NUIt8SO4J kH56zcFFZO6i18YpFv6gAB7aiIFSUBOrMO3v7PpBi+O3YK4Sky7Tej7EfZYNtUdT 5pLl5tXzw2AW0N/WkAkUigfmLww2EQXYgtUjpbPRl/GyFCIgV6xGUCcWp+9myfDM L7D+IhiJQ139NLGeL4sxA5YqOXe2qNHWwivtYh/Cf2S/7JfTDDhaRKKclenDdxr6 eWSoS6OaGOYiNV7gQfZ7B03WB7nR4owZ6c0B3osOljAe2zZVqkcrmRh0bQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMu/rw16y6jI54U6xSJv0NfxopxtMB8GA1UdIwQY MBaAFF6Ta+obDDogiron2LELJ15HTd4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zMjg3NmItYTgyYi00NzA0LWJhNjct OTg0NzdhODY1M2M3LzEveTctdkRYckxxTWpuaFRyRkltX1ExX0dpbkcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zMjg3NmItYTgyYi00NzA0LWJhNjctOTg0NzdhODY1M2M3 LzEvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAnxYwDQQC AAIwBwMFAyoHrQAwDQYJKoZIhvcNAQELBQADggEBAGqaKKoSjTefuE2us+DFJdwi DCPq3StO17GUNpv4RcdcHyvlw0dpTS/nLwZI2gmXWzSCtrAKtWg/T3TScY+ka1Q2 Z0ns1CuDB6XT8VUcjV+j6vWclGtxSq2rZPhd9Ep8aKeZtWvnRj7Tt+ex97wOP+vA Rh8g6rPIzgPM7thLaZy8Ugro6nEU+BggtUbenSRApuSJkhN/YNkkG/4UOXurMgU1 q3gNwqkcPTaOiLo/VW6exM0+9QFY0/5w37XHkxqvCgPu/+zhnLoxg2ADUkm+ZmbS Q+NnX2II+ZA+eL+0pGx6u8cq6iJfCg9aGcxnwlZ2gq1r5aeVQX5rGbkDHf3fWrg= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:15 2026 by rpki-client