This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/yoQlk7EPLkqco8JH4jKypU6v23g.roa File: yoQlk7EPLkqco8JH4jKypU6v23g.roa (raw, json) Hash identifier: 621ThCmwWv6CPqAuQxvYAjiamlbk6ns+2i1sDVoPtJM= Subject key identifier: CA:84:25:93:B1:0F:2E:4A:9C:A3:C2:47:E2:32:B2:A5:4E:AF:DB:78 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB7EA5FA80F6A62D5114160EED4002 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/yoQlk7EPLkqco8JH4jKypU6v23g.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203241 IP address blocks: 185.141.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7e:a5:fa:80:f6:a6:2d:51:14:16:0e:ed:40:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca842593b10f2e4a9ca3c247e232b2a54eafdb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:cb:bf:9f:93:39:f4:c3:db:87:c9:86:eb: 3b:d7:77:39:9b:10:16:ca:a4:67:71:46:3e:7a:8a: fe:ec:03:78:06:50:02:46:04:f7:6c:aa:2a:6e:bb: d3:f6:5c:e8:53:2d:9e:94:af:37:91:69:89:77:50: d4:9e:b6:45:52:15:30:c5:b7:a3:9c:be:05:31:1e: a8:0e:58:18:08:8e:46:fa:cc:9f:77:ae:f2:b9:1e: 8e:a5:5e:8a:33:dc:90:d6:d5:59:42:3a:80:d4:52: ae:75:47:94:25:02:75:6f:2a:c4:c9:01:2e:da:42: 9b:a7:d6:5d:7b:18:02:a2:4c:a4:d6:48:37:95:25: cf:9c:73:fe:40:4c:d1:01:eb:fd:63:f8:8c:9a:bf: 4f:47:4f:58:e4:9d:7a:76:24:5b:99:dc:1b:9e:4b: 27:40:fc:f9:93:86:da:92:7c:fe:2c:92:59:22:90: 08:6a:35:f4:e5:b5:9a:96:d5:df:f5:96:02:6c:7c: 89:72:7d:62:75:22:5d:3a:fa:7f:31:ce:05:a6:f3: c4:e6:87:a2:49:5b:ea:14:70:43:51:56:75:6e:fd: f4:28:40:b7:3b:69:79:f2:d3:ba:b9:69:a9:75:2c: 68:64:39:47:bc:5b:61:27:36:93:d7:9c:2f:0e:4d: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:84:25:93:B1:0F:2E:4A:9C:A3:C2:47:E2:32:B2:A5:4E:AF:DB:78 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/yoQlk7EPLkqco8JH4jKypU6v23g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.72.0/22 Signature Algorithm: sha256WithRSAEncryption 77:10:eb:0e:e1:27:04:2a:7f:a1:e5:31:61:42:30:43:2b:46: d9:0b:a3:8f:64:c2:a9:5d:e3:36:64:09:b7:b5:c0:db:3b:c2: 35:e6:58:27:d8:78:9c:be:45:33:4d:c1:d1:47:aa:dc:05:8c: 75:cc:fb:f2:4d:93:67:d7:11:0d:f6:8a:4f:4c:1a:ee:36:7c: 69:61:8e:9e:35:ea:43:89:0e:15:7b:cf:5b:93:c3:28:2c:23: 8a:8d:89:bf:fc:f1:11:a4:c6:d5:26:19:71:72:e4:f4:25:04: 4c:00:6e:42:ac:43:78:2d:c3:1d:46:fc:7c:c9:84:05:88:8f: df:73:1d:f4:e8:37:b2:05:01:d0:16:1c:ef:b2:3a:62:43:76: 47:ac:e7:e5:79:06:c6:6a:4a:4d:5a:0a:07:6d:10:a3:ca:2c: c8:f4:53:d8:8a:4f:9e:39:84:ff:1f:ae:4e:cd:8f:78:c1:21: 46:8c:55:ae:c7:b8:b3:44:e1:f3:95:7b:db:10:2e:f7:90:77: 83:14:f1:8a:df:5f:74:56:85:7d:61:cc:fb:27:26:43:2a:20: 71:17:c5:3e:b1:56:27:15:54:03:43:c1:99:9f:3d:65:51:f0: c2:49:e9:20:9b:6a:3f:89:98:1f:86:90:23:97:2a:c0:da:c2: 27:99:c1:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2636l+oD2pi1RFBYO7UACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTg0MjU5M2IxMGYyZTRhOWNhM2MyNDdlMjMyYjJhNTRlYWZkYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ3Lv5+TOfTD24fJhus713c5mxAW yqRncUY+eor+7AN4BlACRgT3bKoqbrvT9lzoUy2elK83kWmJd1DUnrZFUhUwxbej nL4FMR6oDlgYCI5G+syfd67yuR6OpV6KM9yQ1tVZQjqA1FKudUeUJQJ1byrEyQEu 2kKbp9ZdexgCokyk1kg3lSXPnHP+QEzRAev9Y/iMmr9PR09Y5J16diRbmdwbnksn QPz5k4baknz+LJJZIpAIajX05bWaltXf9ZYCbHyJcn1idSJdOvp/Mc4FpvPE5oei SVvqFHBDUVZ1bv30KEC3O2l58tO6uWmpdSxoZDlHvFthJzaT15wvDk34KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMqEJZOxDy5KnKPCR+IysqVOr9t4MB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEveW9RbGs3RVBMa3FjbzhKSDRqS3lwVTZ2MjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY1IMA0G CSqGSIb3DQEBCwUAA4IBAQB3EOsO4ScEKn+h5TFhQjBDK0bZC6OPZMKpXeM2ZAm3 tcDbO8I15lgn2HicvkUzTcHRR6rcBYx1zPvyTZNn1xEN9opPTBruNnxpYY6eNepD iQ4Ve89bk8MoLCOKjYm//PERpMbVJhlxcuT0JQRMAG5CrEN4LcMdRvx8yYQFiI/f cx306DeyBQHQFhzvsjpiQ3ZHrOfleQbGakpNWgoHbRCjyizI9FPYik+eOYT/H65O zY94wSFGjFWux7izROHzlXvbEC73kHeDFPGK3190VoV9Ycz7JyZDKiBxF8U+sVYn FVQDQ8GZnz1lUfDCSekgm2o/iZgfhpAjlyrA2sInmcGp -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:47 2026 by rpki-client