This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa File: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (raw, json) Hash identifier: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so= Subject key identifier: 60:F8:73:CC:15:00:00:3F:16:E8:FC:5D:43:C1:28:E8:9F:F5:5E:5A Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019B7A5B342A993D07DCCBE38BEAE9189FA9 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49101 IP address blocks: 82.144.128.0/19 maxlen: 19 2a02:d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:34:2a:99:3d:07:dc:cb:e3:8b:ea:e9:18:9f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60f873cc1500003f16e8fc5d43c128e89ff55e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:9c:eb:ef:f4:f6:76:dd:10:da:22:ce:f0: ce:da:08:89:11:de:68:a1:0c:f9:c0:3f:bd:10:1a: 9a:17:92:48:b3:ec:42:27:21:d9:0b:c9:6d:8c:53: 2f:94:a9:7a:2b:e3:18:1d:04:63:76:bd:42:1c:bf: c0:f7:16:0b:b7:bb:7a:c4:58:5a:94:3e:3d:9b:da: 7f:de:3d:0a:2d:7c:24:45:ad:9f:88:9b:e6:5a:4b: b8:84:78:cb:b8:77:e9:60:8d:f5:31:3d:df:16:eb: 22:f4:65:43:c7:a4:5b:c5:70:a1:94:47:fa:29:45: 03:f9:8a:f1:36:0f:91:ef:d5:fd:8e:2a:13:cb:e2: 0f:bd:ab:16:31:1a:33:f2:b5:58:c5:85:9e:ce:d4: ca:4c:d3:5f:ae:16:07:88:90:b4:9c:d8:cd:18:e0: fb:fb:65:b2:3d:86:0b:f3:22:a8:8e:c3:2b:30:8f: 09:3e:86:45:ef:81:12:2e:6c:99:44:4c:66:c5:c6: 58:cb:0d:91:a4:ce:3c:0b:0e:47:20:c0:6e:e7:d7: f9:e7:0a:bb:96:ac:33:f8:20:19:c4:07:4b:69:56: dc:9a:77:4a:62:9b:20:78:c7:5a:fa:1b:6c:2d:3a: 3e:48:1d:c2:63:ea:d5:45:10:e6:46:2c:46:68:e8: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F8:73:CC:15:00:00:3F:16:E8:FC:5D:43:C1:28:E8:9F:F5:5E:5A X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.144.128.0/19 IPv6: 2a02:d00::/32 Signature Algorithm: sha256WithRSAEncryption 6f:ee:9d:13:44:7a:fa:2e:03:98:b9:41:57:f0:a9:34:d9:62: 71:5b:15:e8:98:e4:c3:1f:f0:5e:96:c6:6a:00:38:ff:21:ec: 86:ae:fe:d6:a1:a9:9f:65:1f:3a:7d:30:b1:82:d0:97:bd:3f: 21:58:63:9e:e7:dc:da:c2:ad:40:48:66:e5:41:f9:1c:6b:ae: de:74:1f:b1:b1:e9:e6:b3:c1:23:c5:a6:51:ec:96:01:41:00: a7:fe:c0:45:5f:75:7b:f2:f5:8e:02:4b:a8:4e:49:56:31:62: 72:62:76:04:68:32:b0:25:49:9b:c8:b4:ed:6d:f1:1a:c2:1c: 6d:c7:97:76:d1:9e:d3:6f:c2:92:94:92:78:09:b3:74:82:7a: d9:74:34:b5:d2:c1:b0:24:8d:5d:23:0a:3b:f7:e8:d6:97:23: b1:70:82:1b:9d:f1:5c:e9:4c:cf:ff:0d:8b:4e:27:a0:f9:9d: b0:ab:86:79:ba:a6:21:ef:bc:38:72:67:d3:a8:f0:0f:47:8e: 53:97:fc:52:3e:70:c1:e9:99:12:2b:3b:24:f7:77:59:fb:dc: c4:c4:4d:47:7f:53:36:19:a3:d2:82:4c:48:53:41:99:ba:0e: c8:1c:20:0c:98:eb:e1:a7:6f:03:f1:15:37:3b:20:ae:f8:be: 0b:06:54:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WzQqmT0H3Mvji+rpGJ+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGY4NzNjYzE1MDAwMDNmMTZlOGZjNWQ0M2MxMjhlODlmZjU1ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTGc6+/09nbdENoizvDO2giJEd5o oQz5wD+9EBqaF5JIs+xCJyHZC8ltjFMvlKl6K+MYHQRjdr1CHL/A9xYLt7t6xFha lD49m9p/3j0KLXwkRa2fiJvmWku4hHjLuHfpYI31MT3fFusi9GVDx6RbxXChlEf6 KUUD+YrxNg+R79X9jioTy+IPvasWMRoz8rVYxYWeztTKTNNfrhYHiJC0nNjNGOD7 +2WyPYYL8yKojsMrMI8JPoZF74ESLmyZRExmxcZYyw2RpM48Cw5HIMBu59f55wq7 lqwz+CAZxAdLaVbcmndKYpsgeMda+htsLTo+SB3CY+rVRRDmRixGaOgzGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGD4c8wVAAA/Fuj8XUPBKOif9V5aMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvWVBoenpCVUFBRDhXNlB4ZFE4RW82Sl8xWGxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFUpCAMA0E AgACMAcDBQAqAg0AMA0GCSqGSIb3DQEBCwUAA4IBAQBv7p0TRHr6LgOYuUFX8Kk0 2WJxWxXomOTDH/BelsZqADj/IeyGrv7WoamfZR86fTCxgtCXvT8hWGOe59zawq1A SGblQfkca67edB+xsenms8EjxaZR7JYBQQCn/sBFX3V78vWOAkuoTklWMWJyYnYE aDKwJUmbyLTtbfEawhxtx5d20Z7Tb8KSlJJ4CbN0gnrZdDS10sGwJI1dIwo79+jW lyOxcIIbnfFc6UzP/w2LTieg+Z2wq4Z5uqYh77w4cmfTqPAPR45Tl/xSPnDB6ZkS Kzsk93dZ+9zExE1Hf1M2GaPSgkxIU0GZug7IHCAMmOvhp28D8RU3OyCu+L4LBlSR -----END CERTIFICATE-----Generated at Mon Jan 26 11:28:12 2026 by rpki-client