This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ypPsYdz2SbWvNH77QQl1wDRnDA8.roa File: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (raw, json) Hash identifier: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE= Subject key identifier: CA:93:EC:61:DC:F6:49:B5:AF:34:7E:FB:41:09:75:C0:34:67:0C:0F Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791020E9A369CC0CF2CCB88F62E58D31 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ypPsYdz2SbWvNH77QQl1wDRnDA8.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 46.37.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:20:e9:a3:69:cc:0c:f2:cc:b8:8f:62:e5:8d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca93ec61dcf649b5af347efb410975c034670c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dc:8f:ba:6e:33:5d:9c:1e:41:16:a0:90:94: aa:c9:bd:ef:d6:98:33:06:c5:47:d7:27:ad:11:2e: 78:d8:e0:67:59:36:52:06:bb:73:07:ac:9f:ac:5e: 64:5d:80:4e:97:66:96:55:bf:7f:15:13:d0:5b:12: 2e:5a:d5:44:93:86:b4:af:00:f4:84:7a:8c:0c:a0: ad:cf:fb:bb:23:ca:22:13:b7:7d:0d:f2:8f:8c:32: 84:fa:59:a2:d6:bd:90:ba:5b:19:3f:43:b3:1a:82: 86:77:d3:14:2e:1e:db:c4:27:71:65:00:10:dd:89: f7:33:4a:52:8b:5b:07:63:18:00:42:34:b7:4b:78: df:06:1f:83:89:b3:52:87:46:ad:c6:63:99:61:16: 6d:4c:e0:bc:0a:f0:d3:40:82:78:80:de:a4:8a:4b: 5d:1b:7f:d1:3c:65:f8:cc:5a:c3:5b:6c:04:ad:63: 90:f4:3c:cc:fd:f2:26:61:e0:70:91:c1:1f:f4:43: be:4f:bb:b8:33:35:c4:54:01:c2:ea:e8:2b:4b:cb: ee:99:c1:f9:30:37:bf:be:ad:22:6a:8e:56:f3:2f: 95:a6:64:0e:c8:0e:09:84:55:2f:29:43:cf:b3:69: 43:e0:da:c8:31:f5:a7:33:74:1f:1b:0c:ec:c5:49: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:93:EC:61:DC:F6:49:B5:AF:34:7E:FB:41:09:75:C0:34:67:0C:0F X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ypPsYdz2SbWvNH77QQl1wDRnDA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.103.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:f2:18:af:8b:f9:99:08:2c:31:15:4e:66:86:d3:6e:52:fe: e2:6c:f4:ad:3b:b5:bb:21:44:2c:33:29:3e:a5:3a:ff:7e:65: c4:9d:fc:d4:be:d4:df:40:01:0b:c8:d1:dc:bb:4a:80:ff:ec: b4:b7:12:53:b9:66:a3:7d:77:ed:e6:79:58:27:de:76:f6:41: ed:97:31:53:ce:53:07:9f:28:a5:33:98:26:28:dc:97:8e:0f: 96:1b:14:4b:21:08:a2:ed:90:59:4c:c4:da:c6:0c:56:33:c8: b8:f9:74:30:32:59:b0:a7:67:9b:c1:3c:c3:5f:96:a0:89:88: e8:cc:02:68:1e:fe:ca:bf:33:ed:38:8e:d9:52:4f:7f:bb:54: 5d:8b:5f:71:00:cd:2a:38:2b:3d:95:0b:5a:4a:3b:99:a7:20: 6d:80:33:3c:e6:e9:54:07:7a:2c:c2:cb:4a:0e:37:1e:ba:dc: ba:98:3d:31:7a:a4:03:53:f5:e6:3c:74:67:b4:f5:42:b9:0b: 21:70:f0:cf:2e:bb:36:e5:26:cb:50:f2:6f:0d:03:58:aa:a1: e9:00:b4:ef:72:3a:01:68:01:bf:99:9a:4b:e2:15:51:7a:1e: 4d:5d:0a:7c:c9:57:87:65:41:fb:2b:9b:3d:2f:31:d6:09:aa: 5f:78:33:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECDpo2nMDPLMuI9i5Y0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTkzZWM2MWRjZjY0OWI1YWYzNDdlZmI0MTA5NzVjMDM0NjcwYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdyPum4zXZweQRagkJSqyb3v1pgz BsVH1yetES542OBnWTZSBrtzB6yfrF5kXYBOl2aWVb9/FRPQWxIuWtVEk4a0rwD0 hHqMDKCtz/u7I8oiE7d9DfKPjDKE+lmi1r2QulsZP0OzGoKGd9MULh7bxCdxZQAQ 3Yn3M0pSi1sHYxgAQjS3S3jfBh+DibNSh0atxmOZYRZtTOC8CvDTQIJ4gN6kiktd G3/RPGX4zFrDW2wErWOQ9DzM/fImYeBwkcEf9EO+T7u4MzXEVAHC6ugrS8vumcH5 MDe/vq0iao5W8y+VpmQOyA4JhFUvKUPPs2lD4NrIMfWnM3QfGwzsxUksQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMqT7GHc9km1rzR++0EJdcA0ZwwPMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEveXBQc1lkejJTYld2Tkg3N1FRbDF3RFJuREE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVnMA0G CSqGSIb3DQEBCwUAA4IBAQCb8hivi/mZCCwxFU5mhtNuUv7ibPStO7W7IUQsMyk+ pTr/fmXEnfzUvtTfQAELyNHcu0qA/+y0txJTuWajfXft5nlYJ9529kHtlzFTzlMH nyilM5gmKNyXjg+WGxRLIQii7ZBZTMTaxgxWM8i4+XQwMlmwp2ebwTzDX5agiYjo zAJoHv7KvzPtOI7ZUk9/u1Rdi19xAM0qOCs9lQtaSjuZpyBtgDM85ulUB3oswstK Djceuty6mD0xeqQDU/XmPHRntPVCuQshcPDPLrs25SbLUPJvDQNYqqHpALTvcjoB aAG/mZpL4hVReh5NXQp8yVeHZUH7K5s9LzHWCapfeDO4 -----END CERTIFICATE-----Generated at Fri Jan 2 14:45:39 2026 by rpki-client