This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/yCvmwsKKiip8bEouGuhwIlqx4x0.roa File: yCvmwsKKiip8bEouGuhwIlqx4x0.roa (raw, json) Hash identifier: JXxhAAfc1PlPlW98SC1i46Nu8V8VAZ0bjC9S0xXehPE= Subject key identifier: C8:2B:E6:C2:C2:8A:8A:2A:7C:6C:4A:2E:1A:E8:70:22:5A:B1:E3:1D Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53 Certificate serial: 019B791021C86545CC1EA1B7513B7BC8425D Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/yCvmwsKKiip8bEouGuhwIlqx4x0.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.64.0.0/16 maxlen: 16 2a12:e140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:21:c8:65:45:cc:1e:a1:b7:51:3b:7b:c8:42:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c82be6c2c28a8a2a7c6c4a2e1ae870225ab1e31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:fb:ed:4c:56:7e:42:1f:a4:53:05:8e:c3: df:35:6d:96:7e:2c:35:fd:08:73:79:bd:0d:9c:80: 83:35:b6:d3:c2:79:1c:ff:b8:69:9a:7a:d2:a2:64: e0:ce:6b:98:4e:c6:0c:a7:20:49:69:f5:01:1e:a5: 29:3a:3e:45:ff:ff:53:7f:e0:2a:92:6c:72:d0:f9: 6e:fb:56:bf:a9:da:64:ec:af:47:c2:0b:8c:25:8a: b4:e9:a7:04:85:24:4a:1f:33:e5:df:bc:65:10:1c: 90:fb:7d:fc:ac:29:45:de:65:56:4f:16:5e:c5:a3: f6:f0:e7:cc:09:0c:6f:bd:28:8a:a7:35:8e:b8:e3: 91:98:5f:2b:45:4e:1f:fb:a5:7d:52:7c:77:71:d0: c8:38:77:51:7b:23:ec:7e:3b:30:3a:68:d5:93:56: b7:f7:b6:b6:a6:c0:5a:de:26:34:19:00:f2:8d:33: 41:35:dd:ad:f9:87:73:ac:55:a8:07:f4:5a:fc:49: eb:18:d2:92:1d:52:7e:0b:e0:49:81:d7:00:dc:b5: b5:3d:f4:01:c5:61:d7:ee:e0:04:63:1d:18:28:97: ff:43:71:55:a1:c8:a5:f9:46:f0:da:d1:69:30:af: 44:a4:db:95:76:ee:14:6c:f5:4e:8a:9f:95:7a:56: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2B:E6:C2:C2:8A:8A:2A:7C:6C:4A:2E:1A:E8:70:22:5A:B1:E3:1D X509v3 Authority Key Identifier: keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/yCvmwsKKiip8bEouGuhwIlqx4x0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.64.0.0/16 IPv6: 2a12:e140::/29 Signature Algorithm: sha256WithRSAEncryption 64:5b:9b:3d:9b:46:bc:85:72:36:3a:51:bf:bb:6e:80:d1:09: fb:12:5c:70:be:c0:cd:f5:54:87:1b:69:c1:38:85:42:20:ee: 26:a9:06:55:5d:ba:82:8b:6c:97:e1:cb:66:f8:38:f2:0e:b5: 61:eb:2a:6a:a3:ee:60:a9:af:4b:5e:fc:ad:02:39:23:63:79: 1d:fc:32:cd:db:99:47:79:e8:31:13:af:ef:27:01:a6:7c:03: 88:5f:63:f1:cf:3a:db:68:3a:38:59:1a:56:52:08:97:4f:fb: 23:06:31:3e:7d:0c:79:6b:fe:e4:ac:84:c6:07:0a:a0:8d:82: 1d:4d:74:45:d2:b1:ad:a9:8b:87:7f:07:ae:a8:c2:2d:1c:c9: 16:8e:1e:1e:02:45:3b:23:5c:89:cc:86:9f:af:f6:91:55:70: ad:79:f4:f7:08:14:40:9d:d6:2c:b3:f9:10:80:f7:d4:88:1d: 67:a6:7e:b2:f0:72:70:8b:b8:67:1b:6b:b7:49:d1:0e:4e:f7: f5:f8:d6:50:a1:90:d6:b9:00:ca:93:7f:0e:65:0f:8d:fd:41: a5:9b:63:7b:98:bb:df:20:10:45:09:7a:b7:2d:e5:ac:02:0e: d2:86:37:ba:83:d7:d0:94:65:3f:17:2b:0e:7f:b1:b5:4b:e6: 5a:34:52:fb -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5ECHIZUXMHqG3UTt7yEJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZWQxMTE2MzBlMDUyOTc3OTVkZGRkMjk4ZWExZmIyOWU2 OTVjNTMwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODJiZTZjMmMyOGE4YTJhN2M2YzRhMmUxYWU4NzAyMjVhYjFlMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAv77UxWfkIfpFMFjsPfNW2Wfiw1 /Qhzeb0NnICDNbbTwnkc/7hpmnrSomTgzmuYTsYMpyBJafUBHqUpOj5F//9Tf+Aq kmxy0Plu+1a/qdpk7K9HwguMJYq06acEhSRKHzPl37xlEByQ+338rClF3mVWTxZe xaP28OfMCQxvvSiKpzWOuOORmF8rRU4f+6V9Unx3cdDIOHdReyPsfjswOmjVk1a3 97a2psBa3iY0GQDyjTNBNd2t+YdzrFWoB/Ra/EnrGNKSHVJ+C+BJgdcA3LW1PfQB xWHX7uAEYx0YKJf/Q3FVocil+Ubw2tFpMK9EpNuVdu4UbPVOip+VelbUBwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMgr5sLCiooqfGxKLhrocCJaseMdMB8GA1UdIwQY MBaAFEXtERYw4FKXeV3d0pjqH7KeaVxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQt YTAzOGVmMWVmZjM5LzEveUN2bXdzS0tpaXA4YkVvdUd1aHdJbHF4NHgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQtYTAzOGVmMWVmZjM5 LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAjUAwDQQC AAIwBwMFAyoS4UAwDQYJKoZIhvcNAQELBQADggEBAGRbmz2bRryFcjY6Ub+7boDR CfsSXHC+wM31VIcbacE4hUIg7iapBlVduoKLbJfhy2b4OPIOtWHrKmqj7mCpr0te /K0COSNjeR38Ms3bmUd56DETr+8nAaZ8A4hfY/HPOttoOjhZGlZSCJdP+yMGMT59 DHlr/uSshMYHCqCNgh1NdEXSsa2pi4d/B66owi0cyRaOHh4CRTsjXInMhp+v9pFV cK159PcIFECd1iyz+RCA99SIHWemfrLwcnCLuGcba7dJ0Q5O9/X41lChkNa5AMqT fw5lD439QaWbY3uYu98gEEUJerct5awCDtKGN7qD19CUZT8XKw5/sbVL5lo0Uvs= -----END CERTIFICATE-----Generated at Tue Jan 27 11:27:36 2026 by rpki-client