This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/YmAPmIteqgYsBAyM1CVqXmNMk7E.roa File: YmAPmIteqgYsBAyM1CVqXmNMk7E.roa (raw, json) Hash identifier: OMpMk4oWOZj1cBBGqThC74fHKcaQk6cl+Iwfrq1pigE= Subject key identifier: 62:60:0F:98:8B:5E:AA:06:2C:04:0C:8C:D4:25:6A:5E:63:4C:93:B1 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C807C6B8512CD5B8BC62AC5F471FA4D Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/YmAPmIteqgYsBAyM1CVqXmNMk7E.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39308 IP address blocks: 95.81.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7c:6b:85:12:cd:5b:8b:c6:2a:c5:f4:71:fa:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62600f988b5eaa062c040c8cd4256a5e634c93b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:b0:3e:46:ee:3f:68:9d:d7:3f:fc:5c:b5: 04:03:72:23:70:3f:ab:03:ea:b2:bc:69:ae:50:5d: 35:48:1f:1d:ec:94:aa:1e:2a:d5:03:73:73:0a:2e: 5e:9d:e2:52:6d:46:a5:5f:63:26:c0:62:66:83:8a: c1:25:b1:64:86:f4:77:28:69:c2:c7:69:5e:65:20: 94:37:14:bd:52:6c:fa:66:2d:3c:3f:e5:53:5e:e2: 3f:00:c9:1c:cd:0a:d1:a7:10:1c:16:b2:8b:d9:e4: 3a:86:31:34:00:2e:4d:7d:6c:3b:54:43:3b:68:a9: 32:e6:7a:85:64:d2:07:a5:59:53:e4:8a:af:07:c8: 3c:6d:e0:73:aa:2e:dd:aa:6d:1e:4b:fe:ce:ff:ee: 2b:d5:53:f9:23:3b:b7:9f:51:58:56:aa:f0:ac:3a: 87:ad:65:cd:0b:eb:2a:e4:28:8c:ec:50:9f:dd:ba: 3e:d7:65:76:70:db:27:5d:d9:3e:73:07:a9:ee:2b: 33:15:13:f5:85:fe:77:75:a9:54:70:de:21:ec:c1: 21:b6:84:c6:1b:6a:42:2d:d0:2b:05:31:da:61:ac: a1:7d:71:81:31:4e:ec:97:dc:e5:2e:6e:3c:36:64: da:7e:4d:bf:b1:99:f7:30:9d:c0:15:c1:6d:61:c9: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:60:0F:98:8B:5E:AA:06:2C:04:0C:8C:D4:25:6A:5E:63:4C:93:B1 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/YmAPmIteqgYsBAyM1CVqXmNMk7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.81.76.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:57:59:17:4d:b1:dc:3d:96:45:a1:59:40:86:80:b1:6e:c1: 58:cb:60:9f:49:5e:e1:e6:6e:db:73:d7:fb:9f:d7:7f:87:5d: c0:53:ff:c0:8a:60:2f:38:96:26:85:33:77:fe:3c:e9:c6:86: 6d:82:af:48:c4:de:3c:15:84:a3:0c:4f:44:5a:81:49:6b:84: 34:f8:7f:b9:14:91:c7:bc:9f:08:b0:7d:14:55:1e:6f:ee:94: ed:5e:f3:d9:6f:c7:b5:e1:89:8e:66:09:6c:da:e3:69:14:fa: f6:d5:fa:80:c5:54:6f:05:9c:0a:68:4a:be:9c:86:8d:67:51: cb:7d:95:4c:13:f1:28:d6:b9:cf:5e:fd:c9:72:ad:0e:8d:7d: a2:f7:cd:ab:b5:5c:cc:6c:6d:78:c7:fa:f6:81:a0:17:75:ef: 02:b6:61:95:ae:ce:6c:06:a4:c2:ba:90:91:74:89:c5:fc:24: db:e5:86:11:6d:46:4c:73:9b:03:37:8e:f6:ae:1b:f1:a0:15: a2:ef:59:63:8e:f5:ab:45:31:ab:88:52:4c:e3:7b:8e:dc:e8: d3:e3:96:25:2b:22:80:58:87:dc:60:21:77:0c:d0:49:52:ae: 6d:e4:ca:e4:cd:85:ba:a6:f1:71:35:a9:19:83:b9:89:1d:4b: 26:59:2b:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHxrhRLNW4vGKsX0cfpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjYwMGY5ODhiNWVhYTA2MmMwNDBjOGNkNDI1NmE1ZTYzNGM5M2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEGwPkbuP2id1z/8XLUEA3IjcD+r A+qyvGmuUF01SB8d7JSqHirVA3NzCi5eneJSbUalX2MmwGJmg4rBJbFkhvR3KGnC x2leZSCUNxS9Umz6Zi08P+VTXuI/AMkczQrRpxAcFrKL2eQ6hjE0AC5NfWw7VEM7 aKky5nqFZNIHpVlT5IqvB8g8beBzqi7dqm0eS/7O/+4r1VP5Izu3n1FYVqrwrDqH rWXNC+sq5CiM7FCf3bo+12V2cNsnXdk+cwep7iszFRP1hf53dalUcN4h7MEhtoTG G2pCLdArBTHaYayhfXGBMU7sl9zlLm48NmTafk2/sZn3MJ3AFcFtYcmTPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGJgD5iLXqoGLAQMjNQlal5jTJOxMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvWW1BUG1JdGVxZ1lzQkF5TTFDVnFYbU5NazdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX1FMMA0G CSqGSIb3DQEBCwUAA4IBAQBaV1kXTbHcPZZFoVlAhoCxbsFYy2CfSV7h5m7bc9f7 n9d/h13AU//AimAvOJYmhTN3/jzpxoZtgq9IxN48FYSjDE9EWoFJa4Q0+H+5FJHH vJ8IsH0UVR5v7pTtXvPZb8e14YmOZgls2uNpFPr21fqAxVRvBZwKaEq+nIaNZ1HL fZVME/Eo1rnPXv3Jcq0OjX2i982rtVzMbG14x/r2gaAXde8CtmGVrs5sBqTCupCR dInF/CTb5YYRbUZMc5sDN472rhvxoBWi71ljjvWrRTGriFJM43uO3OjT45YlKyKA WIfcYCF3DNBJUq5t5MrkzYW6pvFxNakZg7mJHUsmWStX -----END CERTIFICATE-----Generated at Wed Jan 21 08:03:57 2026 by rpki-client