This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/_CYFplyxe0M8AGr1RbZtWaBJCec.roa File: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (raw, json) Hash identifier: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw= Subject key identifier: FC:26:05:A6:5C:B1:7B:43:3C:00:6A:F5:45:B6:6D:59:A0:49:09:E7 Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019B797EF0A0F3ADE980B0701A4AEE342936 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/_CYFplyxe0M8AGr1RbZtWaBJCec.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57633 IP address blocks: 37.25.72.0/21 maxlen: 21 45.9.244.0/22 maxlen: 22 46.182.208.0/21 maxlen: 21 77.240.192.0/20 maxlen: 20 185.79.220.0/22 maxlen: 22 195.49.132.0/22 maxlen: 22 2a00:1ab0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f0:a0:f3:ad:e9:80:b0:70:1a:4a:ee:34:29:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc2605a65cb17b433c006af545b66d59a04909e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:ac:d4:94:ab:79:14:09:4b:ea:71:4c:a5: f0:fb:53:da:52:15:3c:78:82:7a:ea:be:27:87:85: d5:f3:27:1b:ef:b3:b0:c9:2d:a7:80:35:15:b8:52: 27:6d:90:68:b1:7c:cb:96:de:52:4f:f1:d5:18:12: 07:a2:31:42:88:60:6e:0e:04:bf:d7:14:dc:f4:1f: 63:ce:67:e3:88:95:f0:0b:92:c6:0e:6b:06:f8:f4: 2e:fc:03:1e:ab:af:31:2c:99:a2:00:37:86:19:4a: ba:72:09:5f:37:87:5c:d0:ac:43:10:86:22:13:13: 78:c3:3a:ae:a4:50:f1:ad:02:5d:71:aa:b0:56:06: 38:91:93:46:b2:61:f9:11:35:e9:29:7b:42:3a:75: cc:eb:d4:4d:67:f9:d8:d4:8f:dc:1d:37:64:b4:a4: e8:37:6d:cc:8e:bf:81:e0:17:c9:80:c2:f0:48:5d: 1f:da:53:fb:aa:28:1a:ae:77:67:7c:61:e0:1a:e0: e7:81:30:19:ce:e4:7a:1a:8f:14:a5:b4:97:86:a4: 4c:84:71:5a:6f:a5:6d:e7:72:15:15:ff:33:ee:09: c4:a6:15:43:fe:cd:88:23:dd:49:62:aa:d3:9a:dd: e6:7b:47:46:44:e9:51:cd:66:88:8c:a3:2d:68:e6: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:26:05:A6:5C:B1:7B:43:3C:00:6A:F5:45:B6:6D:59:A0:49:09:E7 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/_CYFplyxe0M8AGr1RbZtWaBJCec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.25.72.0/21 45.9.244.0/22 46.182.208.0/21 77.240.192.0/20 185.79.220.0/22 195.49.132.0/22 IPv6: 2a00:1ab0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:bb:78:1a:80:af:a0:fd:ff:85:57:3a:be:6a:bc:60:40:3c: 23:c5:fc:45:c9:28:d6:d4:0c:72:4f:a4:0d:fd:39:20:0c:19: 42:13:94:96:a0:30:55:ca:b5:0a:db:e5:93:da:f3:e2:74:70: 7e:ce:c6:34:be:3d:1e:77:c0:b2:cb:8c:15:6e:a9:3f:18:c1: 8b:eb:6b:31:e8:7a:ed:ca:0c:c5:fd:19:a8:0a:6f:5f:c0:b6: f8:f7:7d:9d:cf:83:63:e1:5b:b2:c3:71:12:c4:d8:e3:80:8a: d9:3f:ed:7c:47:d3:35:dd:f3:af:f2:ba:9c:fe:af:f6:69:58: 86:8f:b1:4a:46:62:cd:e5:85:36:90:07:25:3f:fd:ea:e5:68: ed:9e:58:10:f3:98:5c:37:d0:dd:6e:8e:18:f2:83:ab:54:8f: 30:04:76:91:be:9d:ef:5d:1d:d4:34:3a:48:5c:5a:4c:ce:fa: 8d:85:3b:59:24:5e:d5:5e:2b:0d:00:11:57:d8:4d:96:81:e9: 94:f8:83:ca:5e:4c:ea:6e:63:fc:1d:2d:63:fe:e4:8c:fe:53: f5:a3:ea:90:d2:96:aa:b8:8d:a3:72:b7:d2:e4:48:e6:cd:1d: f0:d0:d9:43:38:5c:c4:44:d2:c3:78:46:3d:15:5e:02:58:d1: 50:39:c3:0b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt5fvCg863pgLBwGkruNCk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzI2MDVhNjVjYjE3YjQzM2MwMDZhZjU0NWI2NmQ1OWEwNDkwOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvys1JSreRQJS+pxTKXw+1PaUhU8 eIJ66r4nh4XV8ycb77OwyS2ngDUVuFInbZBosXzLlt5ST/HVGBIHojFCiGBuDgS/ 1xTc9B9jzmfjiJXwC5LGDmsG+PQu/AMeq68xLJmiADeGGUq6cglfN4dc0KxDEIYi ExN4wzqupFDxrQJdcaqwVgY4kZNGsmH5ETXpKXtCOnXM69RNZ/nY1I/cHTdktKTo N23Mjr+B4BfJgMLwSF0f2lP7qigarndnfGHgGuDngTAZzuR6Go8UpbSXhqRMhHFa b6Vt53IVFf8z7gnEphVD/s2II91JYqrTmt3me0dGROlRzWaIjKMtaOYGhwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFPwmBaZcsXtDPABq9UW2bVmgSQnnMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvX0NZRnBseXhlME04QUdyMVJiWnRXYUJKQ2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDJRlIAwQC LQn0AwQDLrbQAwQETfDAAwQCuU/cAwQCwzGEMA0EAgACMAcDBQAqABqwMA0GCSqG SIb3DQEBCwUAA4IBAQBtu3gagK+g/f+FVzq+arxgQDwjxfxFySjW1AxyT6QN/Tkg DBlCE5SWoDBVyrUK2+WT2vPidHB+zsY0vj0ed8Cyy4wVbqk/GMGL62sx6HrtygzF /RmoCm9fwLb4932dz4Nj4Vuyw3ESxNjjgIrZP+18R9M13fOv8rqc/q/2aViGj7FK RmLN5YU2kAclP/3q5WjtnlgQ85hcN9Ddbo4Y8oOrVI8wBHaRvp3vXR3UNDpIXFpM zvqNhTtZJF7VXisNABFX2E2WgemU+IPKXkzqbmP8HS1j/uSM/lP1o+qQ0paquI2j crfS5EjmzR3w0NlDOFzERNLDeEY9FV4CWNFQOcML -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:45 2026 by rpki-client