This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/YpnM6PbWSIHO9aECWc9SJfnp9yw.roa File: YpnM6PbWSIHO9aECWc9SJfnp9yw.roa (raw, json) Hash identifier: EG1jvjfKohnwhgtv5pMIeo8VzKbqw8g3sXsKpUT/PTI= Subject key identifier: 62:99:CC:E8:F6:D6:48:81:CE:F5:A1:02:59:CF:52:25:F9:E9:F7:2C Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101FEB3C3A0DF2387B97CC65A2F3E2 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/YpnM6PbWSIHO9aECWc9SJfnp9yw.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206275 IP address blocks: 46.37.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1f:eb:3c:3a:0d:f2:38:7b:97:cc:65:a2:f3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6299cce8f6d64881cef5a10259cf5225f9e9f72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:27:cc:f1:de:f8:e3:bf:2f:e1:9d:41:42: 5e:b0:fe:cf:63:5c:fa:4a:65:ac:2a:0a:a3:5d:cf: 23:c0:b1:f2:50:10:e3:7b:09:53:28:1e:51:6a:85: 62:50:b8:21:16:fb:96:b5:d4:4c:c4:9d:76:d0:0c: 5e:29:7b:c6:b7:53:b1:77:ae:09:3c:55:ed:e5:3c: 36:5f:a2:38:39:2f:b1:d2:57:f3:23:e6:cc:70:fb: 4f:4e:4d:c5:22:26:00:bb:1b:16:8b:e2:5b:40:05: d5:20:ec:17:f2:56:68:39:33:70:40:9a:c4:d9:72: fe:90:68:32:64:54:28:0e:70:f4:25:62:27:48:18: 5d:4c:ae:83:70:84:0b:0a:65:d3:04:34:b8:4a:55: ef:ee:47:32:5a:15:74:5c:36:0c:88:20:a3:6f:8a: 82:b8:e5:41:71:d1:87:d4:09:ce:1a:6e:ce:bc:bd: e9:21:00:a2:df:a3:85:cd:a1:9a:7c:da:ca:a4:d5: 6c:49:55:c7:67:38:19:71:3b:5d:2c:c9:0f:57:71: 4d:65:69:59:40:52:e5:8f:07:7b:d6:8d:50:0c:80: 1c:2c:04:3e:8a:1d:aa:73:00:3f:0e:06:af:8b:cf: 3c:36:b8:fc:7a:90:03:82:a8:8b:0f:68:5f:f4:43: 55:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:99:CC:E8:F6:D6:48:81:CE:F5:A1:02:59:CF:52:25:F9:E9:F7:2C X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/YpnM6PbWSIHO9aECWc9SJfnp9yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.113.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:6f:5a:aa:f4:53:c9:e0:43:42:f5:1d:9a:4f:24:56:a5:f7: c0:b5:4a:2a:1a:18:c8:98:ed:3c:eb:6e:fc:da:86:0f:6d:31: ae:cc:80:9a:a7:42:2f:f7:23:aa:3d:c5:fd:0a:4f:ae:6c:c6: 39:0c:3e:65:d9:2d:b7:7c:dc:d4:74:63:f8:29:57:fb:51:87: 61:5c:ae:67:35:1a:fe:9d:0a:9b:c7:9a:8f:8c:60:e4:41:ea: df:0e:79:99:e1:c9:4e:a0:f0:6b:40:3a:a6:d5:44:ed:ca:56: f7:1a:31:2a:6a:b2:57:b6:97:1d:df:50:9f:41:bc:2b:d5:cb: d8:26:c3:2c:f6:ff:ec:0c:42:c2:18:79:2a:7e:5f:a4:b5:90: 63:db:5e:16:23:4e:56:2c:74:dd:31:b7:12:3f:50:d8:13:9c: 7c:de:94:ab:43:b9:28:fa:e0:b7:73:ad:30:b5:38:3b:eb:bc: fb:ed:53:38:5a:f1:c5:7b:5d:f1:6d:71:57:a5:98:0b:5c:8a: 31:07:58:4d:95:33:68:af:34:20:8e:4b:8e:9c:b2:48:55:9c: c6:51:95:6d:da:21:5c:e7:20:84:f0:9c:39:8c:6b:ff:9c:ee: 33:e9:f3:a9:05:3a:78:99:a8:b5:f4:21:a1:bc:30:d8:2c:e6: 8b:da:fb:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EB/rPDoN8jh7l8xlovPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjk5Y2NlOGY2ZDY0ODgxY2VmNWExMDI1OWNmNTIyNWY5ZTlmNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+QnzPHe+OO/L+GdQUJesP7PY1z6 SmWsKgqjXc8jwLHyUBDjewlTKB5RaoViULghFvuWtdRMxJ120AxeKXvGt1Oxd64J PFXt5Tw2X6I4OS+x0lfzI+bMcPtPTk3FIiYAuxsWi+JbQAXVIOwX8lZoOTNwQJrE 2XL+kGgyZFQoDnD0JWInSBhdTK6DcIQLCmXTBDS4SlXv7kcyWhV0XDYMiCCjb4qC uOVBcdGH1AnOGm7OvL3pIQCi36OFzaGafNrKpNVsSVXHZzgZcTtdLMkPV3FNZWlZ QFLljwd71o1QDIAcLAQ+ih2qcwA/Dgavi888Nrj8epADgqiLD2hf9ENVWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKZzOj21kiBzvWhAlnPUiX56fcsMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvWXBuTTZQYldTSUhPOWFFQ1djOVNKZm5wOXl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVxMA0G CSqGSIb3DQEBCwUAA4IBAQBeb1qq9FPJ4ENC9R2aTyRWpffAtUoqGhjImO086278 2oYPbTGuzICap0Iv9yOqPcX9Ck+ubMY5DD5l2S23fNzUdGP4KVf7UYdhXK5nNRr+ nQqbx5qPjGDkQerfDnmZ4clOoPBrQDqm1UTtylb3GjEqarJXtpcd31CfQbwr1cvY JsMs9v/sDELCGHkqfl+ktZBj214WI05WLHTdMbcSP1DYE5x83pSrQ7ko+uC3c60w tTg767z77VM4WvHFe13xbXFXpZgLXIoxB1hNlTNorzQgjkuOnLJIVZzGUZVt2iFc 5yCE8Jw5jGv/nO4z6fOpBTp4mai19CGhvDDYLOaL2vsB -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:46 2026 by rpki-client