This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/lyRZ6aaG_PNUTYMpZjK6Ka6tewI.roa File: lyRZ6aaG_PNUTYMpZjK6Ka6tewI.roa (raw, json) Hash identifier: y1+djgClVik/37jj410N7sJ7abi7QHTOhTCOqoWur98= Subject key identifier: 97:24:59:E9:A6:86:FC:F3:54:4D:83:29:66:32:BA:29:AE:AD:7B:02 Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da Certificate serial: 019B78A3684EF2BABCE0706399F7C29CD88D Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/lyRZ6aaG_PNUTYMpZjK6Ka6tewI.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58264 IP address blocks: 94.143.64.0/21 maxlen: 21 185.246.228.0/22 maxlen: 22 2a06:b140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:68:4e:f2:ba:bc:e0:70:63:99:f7:c2:9c:d8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=972459e9a686fcf3544d83296632ba29aead7b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f6:7b:1e:b4:6a:c3:ec:1a:e9:4c:0d:11:d6: dc:dd:d0:8b:a1:a5:44:d8:d6:67:99:bd:46:b0:be: 0a:5c:f8:88:93:9c:f9:2f:2e:41:5e:d0:c5:3f:67: 16:fa:50:2c:11:7d:43:65:da:2c:30:e6:92:78:35: 5a:8a:9c:f9:a7:aa:5a:d7:fb:9c:3d:d5:77:92:3c: da:11:f1:87:da:03:8c:50:8f:13:33:0d:e4:de:6f: c5:98:9f:3a:5b:83:4f:dd:08:90:51:e9:fd:2e:6f: 3a:29:e1:a4:9a:ad:c7:94:87:d5:9d:1e:5a:74:3d: 28:ba:25:0b:e9:fe:9c:13:76:fe:c7:9d:ab:6f:f5: c2:34:70:83:5d:b3:20:60:58:7e:22:f0:47:4c:b6: 4a:c1:a2:d5:2a:89:a3:63:66:c9:dd:6d:0e:92:88: 50:a9:d5:f9:15:4a:fc:c9:d0:d2:bf:ec:94:23:a9: 5b:e9:e2:7c:1a:36:c4:e9:fa:35:3b:5c:b8:58:42: 80:a0:04:e3:36:c1:c4:51:bf:11:c0:39:6b:80:a1: 6e:66:66:0b:21:40:06:66:25:4b:2c:88:5d:a7:9e: ff:b1:0f:e4:c6:c2:e0:01:56:e0:4c:19:bf:09:73: 40:57:c9:67:f5:fb:d8:14:0a:72:d0:e7:66:2f:15: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:24:59:E9:A6:86:FC:F3:54:4D:83:29:66:32:BA:29:AE:AD:7B:02 X509v3 Authority Key Identifier: keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/lyRZ6aaG_PNUTYMpZjK6Ka6tewI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.143.64.0/21 185.246.228.0/22 IPv6: 2a06:b140::/29 Signature Algorithm: sha256WithRSAEncryption c2:97:0f:8a:c0:07:1d:40:85:6c:a9:95:30:15:5b:37:da:ce: d3:47:03:32:67:de:d4:a1:95:90:47:b7:ca:b8:b2:9c:e9:07: 03:e6:27:99:a7:af:ac:bb:b1:32:93:99:b2:8e:b6:1c:09:cb: ec:41:48:c5:aa:bf:3a:59:df:39:e5:a1:06:e7:35:b8:4f:30: 8c:16:35:a3:f8:6b:a3:18:cb:a0:4b:7e:f8:e7:8d:9d:74:81: fe:f4:d3:23:07:12:73:40:76:27:a2:2c:04:84:cd:5d:56:19: 52:b4:af:a3:0a:52:16:20:8c:8d:0c:ed:33:24:cb:db:ca:44: 71:22:a5:0a:0f:90:e3:ce:4a:e7:8b:be:a3:2a:9f:d3:14:3a: 06:72:d8:67:96:26:0a:3a:94:72:77:07:78:33:6a:2f:34:9d: 02:31:1f:e4:33:e7:81:76:53:ad:94:91:69:da:6f:86:d5:9a: 2b:0c:ee:72:2d:94:48:00:0b:b0:c4:64:c0:0f:47:11:08:15: 27:0c:0d:40:ff:fc:ac:e7:c1:16:e7:cb:b8:84:0a:aa:92:c0: 0d:70:04:7e:d5:b4:38:65:1a:34:1c:2e:89:94:8c:5c:55:dc: ae:7c:ca:0b:49:34:d3:c1:a2:60:e5:e4:63:c1:1f:4e:28:5a: 9e:22:3f:14 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4o2hO8rq84HBjmffCnNiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWU2MTBiZGNkMjNiYWQyYjExOTJiZDQ1Y2E4YTk3NmQz ODU1ZGEwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzI0NTllOWE2ODZmY2YzNTQ0ZDgzMjk2NjMyYmEyOWFlYWQ3YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/Z7HrRqw+wa6UwNEdbc3dCLoaVE 2NZnmb1GsL4KXPiIk5z5Ly5BXtDFP2cW+lAsEX1DZdosMOaSeDVaipz5p6pa1/uc PdV3kjzaEfGH2gOMUI8TMw3k3m/FmJ86W4NP3QiQUen9Lm86KeGkmq3HlIfVnR5a dD0ouiUL6f6cE3b+x52rb/XCNHCDXbMgYFh+IvBHTLZKwaLVKomjY2bJ3W0OkohQ qdX5FUr8ydDSv+yUI6lb6eJ8GjbE6fo1O1y4WEKAoATjNsHEUb8RwDlrgKFuZmYL IUAGZiVLLIhdp57/sQ/kxsLgAVbgTBm/CXNAV8ln9fvYFApy0OdmLxWGUwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJckWemmhvzzVE2DKWYyuimurXsCMB8GA1UdIwQY MBaAFEDuYQvc0jutKxGSvUXKipdtOFXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ZWZhZTUtMmM5Mi00MGQwLWEzYjYt YTZjMTdjZTgyZDc3LzEvbHlSWjZhYUdfUE5VVFlNcFpqSzZLYTZ0ZXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ZWZhZTUtMmM5Mi00MGQwLWEzYjYtYTZjMTdjZTgyZDc3 LzEvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXo9AAwQC ufbkMA0EAgACMAcDBQMqBrFAMA0GCSqGSIb3DQEBCwUAA4IBAQDClw+KwAcdQIVs qZUwFVs32s7TRwMyZ97UoZWQR7fKuLKc6QcD5ieZp6+su7Eyk5myjrYcCcvsQUjF qr86Wd855aEG5zW4TzCMFjWj+GujGMugS374542ddIH+9NMjBxJzQHYnoiwEhM1d VhlStK+jClIWIIyNDO0zJMvbykRxIqUKD5Djzkrni76jKp/TFDoGcthnliYKOpRy dwd4M2ovNJ0CMR/kM+eBdlOtlJFp2m+G1ZorDO5yLZRIAAuwxGTAD0cRCBUnDA1A //ys58EW58u4hAqqksANcAR+1bQ4ZRo0HC6JlIxcVdyufMoLSTTTwaJg5eRjwR9O KFqeIj8U -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:43 2026 by rpki-client