This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/yko62gQUpDznk6pbTXdM7BFWgrg.roa File: yko62gQUpDznk6pbTXdM7BFWgrg.roa (raw, json) Hash identifier: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA= Subject key identifier: CA:4A:3A:DA:04:14:A4:3C:E7:93:AA:5B:4D:77:4C:EC:11:56:82:B8 Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6 Certificate serial: 019B7E38FEF3AAE8E818239A4284929DD29D Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/yko62gQUpDznk6pbTXdM7BFWgrg.roa Signing time: Fri 02 Jan 2026 10:20:23 +0000 ROA not before: Fri 02 Jan 2026 10:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 5.180.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:fe:f3:aa:e8:e8:18:23:9a:42:84:92:9d:d2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca4a3ada0414a43ce793aa5b4d774cec115682b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:f6:bb:0a:b4:a3:b5:2c:16:75:0e:5f:7a: 19:43:b2:20:1e:56:06:da:65:26:88:b0:4b:3f:7c: 9a:83:83:b7:5a:3f:f9:85:c9:f1:64:2b:72:81:e3: 3d:6f:2f:cd:a8:d9:7b:40:1f:af:7b:c3:c6:9e:ba: 9c:f1:c6:37:a1:56:37:d3:29:aa:d6:2b:83:4c:dc: ba:f8:4e:72:2a:72:6f:b9:40:ca:c9:17:d2:85:62: c9:9e:4d:ba:50:92:0a:fe:ad:a1:f5:7b:48:a8:9a: d9:75:46:87:b5:c6:0f:ab:e5:eb:30:25:ea:1f:ed: 17:3f:c3:a7:19:0e:03:ff:fc:4a:5a:1e:95:0d:d7: e4:58:14:99:35:25:86:a3:21:96:41:0d:dc:de:28: d3:0e:98:96:dc:22:14:00:a1:58:ac:7a:cf:cc:2f: f5:20:1a:19:86:c0:40:b5:26:7c:7f:25:7f:97:47: f5:c9:c7:ec:1b:20:78:7f:94:6e:39:c3:4f:84:c9: b6:ae:58:e2:2a:93:ac:06:3c:70:76:d5:14:f4:b2: 73:e5:29:ff:7a:50:34:1b:ba:17:e0:8f:24:20:a8: 0a:2d:87:79:55:35:41:c0:7e:3a:b6:ac:5a:d0:ef: 2a:18:66:60:5f:b9:b4:06:f2:08:ef:97:7f:a1:7e: c8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4A:3A:DA:04:14:A4:3C:E7:93:AA:5B:4D:77:4C:EC:11:56:82:B8 X509v3 Authority Key Identifier: keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/yko62gQUpDznk6pbTXdM7BFWgrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.132.0/22 Signature Algorithm: sha256WithRSAEncryption 70:36:aa:3d:9f:87:c6:0d:2b:a3:ae:cf:40:bc:68:f7:07:6e: 55:aa:61:bb:b3:e6:58:a6:fb:f0:6a:59:22:be:84:90:50:07: 93:08:fd:df:b5:24:43:2e:cd:7f:38:ac:4d:95:ff:9c:9d:66: 96:1c:6b:fa:80:b6:5f:8d:48:51:52:3a:ed:31:67:35:c0:27: fd:01:74:50:0a:93:05:76:77:bf:0d:96:f4:8f:97:fb:a5:6f: 13:b2:5b:c3:8b:f5:7e:b6:86:40:83:26:36:cd:a3:2c:ee:78: c1:28:9f:de:ed:e2:b1:3b:5b:2a:df:0a:7c:bb:e2:0d:bf:a1: 83:d9:01:8d:c8:f2:55:49:ed:58:dd:8e:48:e7:91:42:04:f4: 54:43:f5:84:69:2f:8e:da:d2:9d:e2:42:60:ee:34:bd:7d:6d: e0:a0:ce:84:7f:97:6b:91:88:89:a0:d0:eb:b0:89:44:c4:b3: 64:21:8a:9c:04:c3:6a:3e:5d:63:73:5f:6e:79:2f:85:4c:6e: ae:7b:92:8f:7f:7f:58:23:01:10:1a:75:04:a3:03:25:6c:aa: 66:23:94:e5:41:41:92:ba:8d:1a:56:c5:7c:4e:37:a7:99:87: 15:cb:7c:64:d7:3f:68:07:1e:ec:95:a8:1b:62:af:d0:f0:fa: ad:a5:23:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OP7zqujoGCOaQoSSndKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NWM5ZmVkYjViNTQ0ZjY5NmVkNGRhZjEzNWIwMmRlZTZk OTdhZjYwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTRhM2FkYTA0MTRhNDNjZTc5M2FhNWI0ZDc3NGNlYzExNTY4MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9r2uwq0o7UsFnUOX3oZQ7IgHlYG 2mUmiLBLP3yag4O3Wj/5hcnxZCtygeM9by/NqNl7QB+ve8PGnrqc8cY3oVY30ymq 1iuDTNy6+E5yKnJvuUDKyRfShWLJnk26UJIK/q2h9XtIqJrZdUaHtcYPq+XrMCXq H+0XP8OnGQ4D//xKWh6VDdfkWBSZNSWGoyGWQQ3c3ijTDpiW3CIUAKFYrHrPzC/1 IBoZhsBAtSZ8fyV/l0f1ycfsGyB4f5RuOcNPhMm2rljiKpOsBjxwdtUU9LJz5Sn/ elA0G7oX4I8kIKgKLYd5VTVBwH46tqxa0O8qGGZgX7m0BvII75d/oX7I0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMpKOtoEFKQ855OqW013TOwRVoK4MB8GA1UdIwQY MBaAFAZcn+21tUT2lu1NrxNbAt7m2Xr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTkt MThkNjkwMzY3NTNiLzEveWtvNjJnUVVwRHpuazZwYlRYZE03QkZXZ3JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTktMThkNjkwMzY3NTNi LzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbSEMA0G CSqGSIb3DQEBCwUAA4IBAQBwNqo9n4fGDSujrs9AvGj3B25VqmG7s+ZYpvvwalki voSQUAeTCP3ftSRDLs1/OKxNlf+cnWaWHGv6gLZfjUhRUjrtMWc1wCf9AXRQCpMF dne/DZb0j5f7pW8TslvDi/V+toZAgyY2zaMs7njBKJ/e7eKxO1sq3wp8u+INv6GD 2QGNyPJVSe1Y3Y5I55FCBPRUQ/WEaS+O2tKd4kJg7jS9fW3goM6Ef5drkYiJoNDr sIlExLNkIYqcBMNqPl1jc19ueS+FTG6ue5KPf39YIwEQGnUEowMlbKpmI5TlQUGS uo0aVsV8TjenmYcVy3xk1z9oBx7slagbYq/Q8PqtpSMI -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:52 2026 by rpki-client