This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/pYLH_zSZV0273TNEBYT79f1lmcg.roa File: pYLH_zSZV0273TNEBYT79f1lmcg.roa (raw, json) Hash identifier: k3iAoFqBBNaSN0iQRFo4OKQZqr7mC8NP7hdAPA1B80I= Subject key identifier: A5:82:C7:FF:34:99:57:4D:BB:DD:33:44:05:84:FB:F5:FD:65:99:C8 Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6 Certificate serial: 019B7758E5CD88800C51FF3BE237E6F92A30 Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/pYLH_zSZV0273TNEBYT79f1lmcg.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51908 IP address blocks: 46.22.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e5:cd:88:80:0c:51:ff:3b:e2:37:e6:f9:2a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a582c7ff3499574dbbdd33440584fbf5fd6599c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:84:92:27:43:2a:0e:53:ed:63:3a:66:7d: fd:e0:06:b4:51:f8:a2:cf:fd:fa:0a:7b:c4:81:56: 2d:59:50:44:57:93:bb:3c:81:1b:c5:d0:8c:01:54: ec:55:f3:ca:62:3a:f2:c5:b8:96:17:c3:5c:0b:7e: 48:18:a8:47:ab:64:11:9e:c6:93:06:b4:40:73:9a: 8c:27:b2:bf:eb:e0:e7:26:71:57:27:5f:b5:97:2d: 56:d9:b6:81:9e:52:4b:b7:ef:4a:99:8f:a4:a1:3b: 72:2a:fe:f9:fe:9e:a2:7f:71:c5:a9:a0:dd:09:c5: 33:0d:bc:ec:4d:dd:1e:9f:c9:ec:b4:6c:82:7d:7f: 4f:63:28:71:de:47:56:e1:f0:c5:bb:0b:94:2b:0e: 88:12:e7:5b:a0:86:a4:c4:f1:75:6c:5a:77:d3:0a: 7f:de:31:f5:eb:68:2d:14:dd:91:8e:f7:14:3a:cc: c4:fd:85:6a:1f:b3:f1:e1:5f:cf:ca:71:17:c6:64: 10:71:73:23:46:6f:ef:8a:c0:e2:05:2e:b0:6e:78: 40:3a:0a:a0:89:38:a9:4b:06:5a:76:d6:7b:a7:dc: 53:df:a5:19:0d:48:51:76:40:57:d8:83:28:3d:64: 23:d3:0b:e8:8d:02:08:70:f0:ba:d9:c7:67:2e:25: c2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:82:C7:FF:34:99:57:4D:BB:DD:33:44:05:84:FB:F5:FD:65:99:C8 X509v3 Authority Key Identifier: keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/pYLH_zSZV0273TNEBYT79f1lmcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.144.0/22 Signature Algorithm: sha256WithRSAEncryption 64:98:60:ca:8f:6f:c5:ea:81:20:1c:fb:ca:37:8d:3e:4e:77: 85:ea:94:5e:ae:0b:f4:86:08:b4:50:b6:84:61:60:28:20:94: 47:1f:e8:50:ae:5b:90:fe:79:9c:ae:2a:86:43:bb:a1:bf:94: 18:9b:b2:c6:10:c0:ed:76:b8:8c:a4:cc:67:10:8f:13:b7:ae: 8f:6a:c2:94:8e:c5:a9:82:c8:5e:6c:92:76:13:f8:e9:ce:99: 79:44:1d:f2:2e:67:fa:ec:f9:c0:da:2b:b0:e4:c8:ea:0d:d5: 2d:e1:87:82:06:0e:68:c4:e8:ed:a0:4b:06:4c:db:95:ff:03: a6:13:6c:7f:8a:da:40:31:03:bc:c9:bb:d1:a3:a7:94:33:ad: 7b:08:22:a6:1f:34:ca:ea:60:05:93:c6:10:85:ec:89:5f:c7: 2c:08:dc:5d:09:2e:09:a9:a1:6f:a1:b0:5e:35:a7:7f:42:c8: 2a:9a:71:db:cc:38:3c:fe:49:fc:8c:c8:c2:29:88:73:91:05: b7:ed:40:88:f9:f6:55:40:06:e0:01:55:3d:cc:64:33:5f:59: 15:00:da:a7:36:c2:c8:39:ce:fe:7c:ee:e2:8b:c8:b2:ee:af: 35:e4:ff:54:51:68:37:53:2b:77:8e:63:c4:56:a3:bd:ef:0a: 99:b2:63:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOXNiIAMUf874jfm+SowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMDRkMGY4OTFkYzQ3NWVhNzAzZTZkZWYzZDZlYWQxZThm N2MyZDYwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTgyYzdmZjM0OTk1NzRkYmJkZDMzNDQwNTg0ZmJmNWZkNjU5OWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrOEkidDKg5T7WM6Zn394Aa0Ufii z/36CnvEgVYtWVBEV5O7PIEbxdCMAVTsVfPKYjryxbiWF8NcC35IGKhHq2QRnsaT BrRAc5qMJ7K/6+DnJnFXJ1+1ly1W2baBnlJLt+9KmY+koTtyKv75/p6if3HFqaDd CcUzDbzsTd0en8nstGyCfX9PYyhx3kdW4fDFuwuUKw6IEudboIakxPF1bFp30wp/ 3jH162gtFN2RjvcUOszE/YVqH7Px4V/PynEXxmQQcXMjRm/visDiBS6wbnhAOgqg iTipSwZadtZ7p9xT36UZDUhRdkBX2IMoPWQj0wvojQIIcPC62cdnLiXChwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKWCx/80mVdNu90zRAWE+/X9ZZnIMB8GA1UdIwQY MBaAFGIE0PiR3EdepwPm3vPW6tHo98LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEt NGQ4OGZjZTMyMzk5LzEvcFlMSF96U1pWMDI3M1RORUJZVDc5ZjFsbWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEtNGQ4OGZjZTMyMzk5 LzEvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLhaQMA0G CSqGSIb3DQEBCwUAA4IBAQBkmGDKj2/F6oEgHPvKN40+TneF6pRergv0hgi0ULaE YWAoIJRHH+hQrluQ/nmcriqGQ7uhv5QYm7LGEMDtdriMpMxnEI8Tt66PasKUjsWp gshebJJ2E/jpzpl5RB3yLmf67PnA2iuw5MjqDdUt4YeCBg5oxOjtoEsGTNuV/wOm E2x/itpAMQO8ybvRo6eUM617CCKmHzTK6mAFk8YQheyJX8csCNxdCS4JqaFvobBe Nad/QsgqmnHbzDg8/kn8jMjCKYhzkQW37UCI+fZVQAbgAVU9zGQzX1kVANqnNsLI Oc7+fO7ii8iy7q815P9UUWg3Uyt3jmPEVqO97wqZsmME -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:21 2026 by rpki-client