This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa File: yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa (raw, json) Hash identifier: Mu3AswMCG2U7NEViX0UJQTVg05J0CMB40dFTF5KkWro= Subject key identifier: C9:99:58:6A:F5:1A:17:96:64:A5:03:C9:3B:23:65:04:05:70:ED:76 Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24 Certificate serial: 019B797ECBB46C41D62FC71D5AD5FBE8835A Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140079 IP address blocks: 5.145.180.0/23 maxlen: 23 5.145.180.0/24 maxlen: 24 5.145.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cb:b4:6c:41:d6:2f:c7:1d:5a:d5:fb:e8:83:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c999586af51a179664a503c93b2365040570ed76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:e2:84:ea:cd:0d:0d:9d:eb:5d:47:ec:8a: 6f:50:35:69:2a:54:49:fd:4b:8a:16:4a:a5:55:4e: 38:6e:39:91:69:90:25:a1:8c:c0:9c:a7:ce:9b:cc: f5:f5:6c:1b:5a:36:ad:72:43:74:4e:11:35:17:cd: 32:91:cf:b3:05:40:7a:32:dd:e5:f4:a8:b7:ac:8e: b3:17:23:c0:40:10:55:d2:5a:3a:f6:37:17:9f:66: 11:44:76:f8:ae:f5:9d:1a:56:8b:52:11:cf:bc:79: f2:44:66:31:0d:e6:bb:48:22:61:97:d5:76:7f:65: 88:8a:5a:19:83:03:39:34:2e:9c:5e:ed:e6:26:2c: 11:29:a6:14:7f:2f:44:49:d4:42:ff:e5:19:96:90: ef:be:ff:ff:6d:03:cf:e3:f3:28:e5:e8:e9:2c:f4: b1:50:cb:19:be:6a:a5:b7:21:36:35:84:b5:4d:f8: ca:a3:8f:d7:fa:c0:74:b0:b4:6c:9c:2f:b9:7e:4d: 3a:7f:5f:f5:dd:dd:5a:38:2a:b4:9f:e5:c1:60:ea: f1:80:72:c1:3e:9b:19:44:50:ae:41:cc:c2:dd:f5: 0e:6c:3a:90:73:e0:54:f9:21:8b:4a:13:db:ef:87: b1:5d:95:e3:82:0a:29:9b:8a:a4:a2:26:43:2f:07: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:99:58:6A:F5:1A:17:96:64:A5:03:C9:3B:23:65:04:05:70:ED:76 X509v3 Authority Key Identifier: keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.180.0/23 Signature Algorithm: sha256WithRSAEncryption 47:3c:a5:a2:0c:ff:4a:1b:a1:2d:56:ef:bc:e9:54:31:b2:ab: 1c:e7:75:bc:01:38:7b:97:1a:df:c3:65:85:eb:71:41:03:c7: 18:db:1f:57:c9:9d:26:7c:e3:32:2f:bc:b9:d3:34:c9:fe:2f: 64:e9:09:5b:1d:0c:3d:18:a4:1d:d5:ca:00:0f:aa:3b:86:d3: 9b:44:63:46:52:7c:e7:d1:72:6f:c7:0d:9a:5d:0a:13:2f:5b: 06:45:8c:1f:f0:b9:0f:a2:5a:fa:e7:88:64:77:d9:45:92:8c: e7:30:ef:62:24:56:d8:2a:29:91:e9:8c:b0:b4:2d:90:47:ee: 31:2f:50:f6:b8:4a:cc:ee:c2:c3:d1:bf:28:ac:03:7b:31:89: b1:43:fb:10:04:66:ae:19:67:d7:7b:ba:3b:86:39:0a:d8:f8: f9:48:70:9b:b4:dd:3b:4c:21:c6:ea:f4:7e:bf:ba:db:6b:bb: 63:78:c4:84:87:1f:e0:1f:33:c2:0e:87:d6:fa:b8:ca:e0:32: b6:74:70:2c:cc:56:be:86:8a:84:2d:46:62:1c:bc:1c:6d:da: e5:36:62:d2:f9:d4:b0:e0:0e:e8:8f:d9:bb:68:a8:67:62:e9: 83:2f:a5:13:0a:88:28:e9:06:16:f4:84:4a:b2:bc:97:6a:8f: 52:d5:97:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsu0bEHWL8cdWtX76INaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwODIwZjc5NjQ4MWFjMGU5NjM3Yzk2MjQxNDU5N2IxZmUy MjdjMjQwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTk5NTg2YWY1MWExNzk2NjRhNTAzYzkzYjIzNjUwNDA1NzBlZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAvihOrNDQ2d611H7IpvUDVpKlRJ /UuKFkqlVU44bjmRaZAloYzAnKfOm8z19WwbWjatckN0ThE1F80ykc+zBUB6Mt3l 9Ki3rI6zFyPAQBBV0lo69jcXn2YRRHb4rvWdGlaLUhHPvHnyRGYxDea7SCJhl9V2 f2WIiloZgwM5NC6cXu3mJiwRKaYUfy9ESdRC/+UZlpDvvv//bQPP4/Mo5ejpLPSx UMsZvmqltyE2NYS1TfjKo4/X+sB0sLRsnC+5fk06f1/13d1aOCq0n+XBYOrxgHLB PpsZRFCuQczC3fUObDqQc+BU+SGLShPb74exXZXjggopm4qkoiZDLwfBGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmZWGr1GheWZKUDyTsjZQQFcO12MB8GA1UdIwQY MBaAFCCCD3lkgawOljfJYkFFl7H+InwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEt OTg3ZDg2OTU2NmY2LzEveVpsWWF2VWFGNVprcFFQSk95TmxCQVZ3N1hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEtOTg3ZDg2OTU2NmY2 LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBZG0MA0G CSqGSIb3DQEBCwUAA4IBAQBHPKWiDP9KG6EtVu+86VQxsqsc53W8ATh7lxrfw2WF 63FBA8cY2x9XyZ0mfOMyL7y50zTJ/i9k6QlbHQw9GKQd1coAD6o7htObRGNGUnzn 0XJvxw2aXQoTL1sGRYwf8LkPolr654hkd9lFkoznMO9iJFbYKimR6YywtC2QR+4x L1D2uErM7sLD0b8orAN7MYmxQ/sQBGauGWfXe7o7hjkK2Pj5SHCbtN07TCHG6vR+ v7rba7tjeMSEhx/gHzPCDofW+rjK4DK2dHAszFa+hoqELUZiHLwcbdrlNmLS+dSw 4A7oj9m7aKhnYumDL6UTCogo6QYW9IRKsryXao9S1Zdu -----END CERTIFICATE-----Generated at Thu Jan 22 22:15:42 2026 by rpki-client