This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa File: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (raw, json) Hash identifier: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE= Subject key identifier: CB:93:D2:F5:42:FA:2F:52:95:CD:48:D2:16:3C:96:FC:AC:D7:23:13 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791025E6D2DEE4B897D5DAC880B0EAF7 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400040 IP address blocks: 46.37.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:25:e6:d2:de:e4:b8:97:d5:da:c8:80:b0:ea:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb93d2f542fa2f5295cd48d2163c96fcacd72313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:37:73:94:0b:d5:3e:76:6c:d0:0f:55:2f: be:f2:55:d5:31:b2:5b:75:d3:0f:42:5e:fb:f8:f1: 1e:39:df:23:99:54:1c:5f:12:b1:9c:80:da:d3:eb: 54:21:76:df:00:0c:58:f1:e2:2f:57:3d:2d:3b:40: 47:c4:93:f8:62:3e:62:ac:76:27:13:ba:d9:41:bc: d0:4d:49:8f:60:ef:42:d6:d6:de:5b:f3:63:b2:35: 31:22:9f:ea:9c:3f:5c:fa:60:12:dd:5f:f5:c6:b9: d6:d8:28:ea:c1:64:a3:bd:2a:50:52:7d:d4:bf:a7: 13:b4:4f:6c:2a:48:09:06:ac:b2:93:26:c4:86:35: c8:bb:61:12:c0:9f:7c:fc:16:3e:28:a8:99:4e:40: 9b:1e:7d:0c:61:04:d5:2d:75:bd:dc:08:1a:9c:c2: 57:a0:f9:50:40:ba:79:91:86:19:c3:5c:bb:3d:a4: 20:4f:c9:e2:b2:e9:30:9c:2a:91:21:c3:c6:07:2e: cd:c4:aa:9c:53:2d:b6:13:6c:ed:fa:d5:cd:f3:d9: 7d:ca:83:a8:91:0b:54:b6:f8:ad:4f:25:e4:3f:91: 94:c4:7d:4f:92:3b:83:97:2a:a6:0b:94:db:fb:03: db:89:71:fc:2b:ec:b0:27:70:9d:f1:82:53:ee:91: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:93:D2:F5:42:FA:2F:52:95:CD:48:D2:16:3C:96:FC:AC:D7:23:13 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.105.0/24 Signature Algorithm: sha256WithRSAEncryption 15:c5:51:f9:c7:e5:c9:3f:85:79:99:30:ba:6f:9f:59:de:3a: c1:2a:74:ac:5b:cd:65:31:a9:a8:a9:ea:e5:aa:2e:b9:90:a3: 86:e4:46:d3:e2:f9:ab:42:40:9a:5f:76:8c:b8:ae:e8:7f:cb: 15:c4:82:ca:bf:71:ea:5f:9f:bf:11:62:db:bc:80:4a:d5:0c: 9d:24:53:ad:68:6d:43:95:1e:d1:8c:be:01:73:27:30:9a:ff: e7:60:fd:5f:35:5e:b2:71:33:d7:bf:2b:f7:96:63:8e:48:43: 50:fe:f6:de:3c:d3:79:1d:1e:b7:fb:04:4b:eb:30:1c:61:77: a9:62:73:29:c6:94:b5:1c:c6:c3:3a:71:d3:2a:c5:ad:0d:e2: 88:e1:7f:1a:b0:75:79:ff:66:b5:cd:1c:16:db:5d:47:2a:43: 8c:97:5e:aa:ee:1a:2c:e3:84:eb:5a:23:c9:9c:9b:07:b8:ec: 27:d6:90:7f:64:31:ed:98:5b:3c:62:b1:f3:7e:aa:b3:c2:4e: d0:28:6d:b8:df:d8:d8:94:45:e4:4f:70:4f:40:90:b6:dc:ff: 7a:ab:56:74:ba:07:d9:44:72:a1:ef:67:b9:12:c7:67:97:4d: b1:b1:a0:ff:47:8c:cd:ac:08:9c:80:9e:be:12:64:03:6a:fb: b5:5a:a7:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECXm0t7kuJfV2siAsOr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjkzZDJmNTQyZmEyZjUyOTVjZDQ4ZDIxNjNjOTZmY2FjZDcyMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdA3c5QL1T52bNAPVS++8lXVMbJb ddMPQl77+PEeOd8jmVQcXxKxnIDa0+tUIXbfAAxY8eIvVz0tO0BHxJP4Yj5irHYn E7rZQbzQTUmPYO9C1tbeW/NjsjUxIp/qnD9c+mAS3V/1xrnW2CjqwWSjvSpQUn3U v6cTtE9sKkgJBqyykybEhjXIu2ESwJ98/BY+KKiZTkCbHn0MYQTVLXW93AganMJX oPlQQLp5kYYZw1y7PaQgT8nisukwnCqRIcPGBy7NxKqcUy22E2zt+tXN89l9yoOo kQtUtvitTyXkP5GUxH1PkjuDlyqmC5Tb+wPbiXH8K+ywJ3Cd8YJT7pH1zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMuT0vVC+i9Slc1I0hY8lvys1yMTMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEveTVQUzlVTDZMMUtWelVqU0ZqeVdfS3pYSXhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVpMA0G CSqGSIb3DQEBCwUAA4IBAQAVxVH5x+XJP4V5mTC6b59Z3jrBKnSsW81lMamoqerl qi65kKOG5EbT4vmrQkCaX3aMuK7of8sVxILKv3HqX5+/EWLbvIBK1QydJFOtaG1D lR7RjL4Bcycwmv/nYP1fNV6ycTPXvyv3lmOOSENQ/vbePNN5HR63+wRL6zAcYXep YnMpxpS1HMbDOnHTKsWtDeKI4X8asHV5/2a1zRwW211HKkOMl16q7hos44TrWiPJ nJsHuOwn1pB/ZDHtmFs8YrHzfqqzwk7QKG2439jYlEXkT3BPQJC23P96q1Z0ugfZ RHKh72e5Esdnl02xsaD/R4zNrAicgJ6+EmQDavu1Wqfa -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:51 2026 by rpki-client