This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/yetfHN82RPE-qSnhsubabKFaiHw.roa File: yetfHN82RPE-qSnhsubabKFaiHw.roa (raw, json) Hash identifier: PtUwezoCoEJxOsaw/WTqCM9qRKqev9m65R+blxSkBk8= Subject key identifier: C9:EB:5F:1C:DF:36:44:F1:3E:A9:29:E1:B2:E6:DA:6C:A1:5A:88:7C Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B790FFE4CC4751C5961BB6BDD8E425961 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/yetfHN82RPE-qSnhsubabKFaiHw.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196943 IP address blocks: 109.205.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fe:4c:c4:75:1c:59:61:bb:6b:dd:8e:42:59:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9eb5f1cdf3644f13ea929e1b2e6da6ca15a887c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:c8:73:c8:87:92:68:5f:7a:6c:b3:47:5f: 6c:ef:6d:52:d9:ce:89:de:b0:dd:6d:3a:ee:31:c9: f8:f4:af:d9:ec:08:dd:c1:70:22:2c:c5:ff:0e:ad: 10:6c:3b:6a:64:39:69:07:24:13:87:d0:14:7d:f0: ec:cb:f1:53:eb:3a:77:c6:9f:4a:be:1a:39:97:93: 50:63:84:1a:16:5c:6c:e2:81:c4:ad:62:95:e4:4c: af:6a:fc:af:f2:0e:71:67:6b:5e:7d:02:89:3e:f8: f3:d9:d1:e2:f5:28:91:82:f8:78:bd:77:5e:ef:f8: ec:ca:ce:77:a8:a1:fe:82:b6:9f:aa:0e:e5:9d:d0: f0:55:66:35:0e:dc:9c:99:a9:ab:a9:5b:ff:8d:b0: 8e:e7:5f:29:ea:80:da:eb:e0:34:4c:61:f5:6e:3b: a4:26:26:8d:d7:69:1f:aa:20:f4:89:91:b6:a8:22: be:72:56:5c:fc:b7:4d:1b:41:c8:33:39:08:a5:05: cf:56:c3:e7:e4:a0:15:c1:15:67:73:af:80:b0:b0: 93:e8:f2:16:f3:07:13:47:d2:ec:5f:13:a6:0b:c7: 55:f4:0a:5f:b9:19:5a:78:36:87:51:47:49:1b:16: 1f:30:52:8f:39:83:07:fb:c8:4f:cf:17:f8:b4:07: 6a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EB:5F:1C:DF:36:44:F1:3E:A9:29:E1:B2:E6:DA:6C:A1:5A:88:7C X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/yetfHN82RPE-qSnhsubabKFaiHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.245.0/24 Signature Algorithm: sha256WithRSAEncryption 85:14:cf:eb:20:aa:46:cc:f9:0d:0e:19:84:aa:e4:d7:57:72: 8f:c9:d7:0b:97:20:54:6a:3a:c0:e6:b3:fb:0c:12:be:4c:d8: a0:f7:60:64:35:a4:0d:bc:52:b2:bc:5d:5b:41:08:ce:c0:e3: cb:be:80:7b:4c:17:e9:92:dd:b8:25:90:8f:b2:d5:e3:7f:2c: 89:b8:21:04:e5:b3:33:7b:fa:3d:08:88:06:91:05:09:eb:6a: 51:42:25:d1:78:0b:d1:ef:f6:04:6d:2b:9b:7e:72:ee:a9:1d: de:33:97:4b:b9:45:c3:15:a4:c3:94:e7:b0:7b:b2:43:a2:b5: 4b:50:c5:8d:31:b1:0b:f9:28:d5:43:8c:6a:ed:72:e2:80:7d: ab:e0:8f:0e:57:08:19:8f:9f:6b:77:f1:ce:05:36:d0:0d:c5: a7:2e:3a:29:74:af:70:c7:bc:94:cd:d2:76:d7:a4:07:0c:a8: 9a:94:9f:47:77:a8:e0:ac:0a:59:3a:e7:22:04:bb:5b:29:6e: 44:aa:fe:08:42:98:ed:4d:1d:50:2d:c6:a5:d1:03:40:8e:49: 87:3b:25:92:ee:67:d3:48:a0:7a:a2:e0:c8:91:ad:47:86:b9: b2:0f:a1:ca:38:c4:dc:49:77:77:09:1f:9b:81:06:17:2d:7a: f9:e6:e3:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/5MxHUcWWG7a92OQllhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWViNWYxY2RmMzY0NGYxM2VhOTI5ZTFiMmU2ZGE2Y2ExNWE4ODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9TIc8iHkmhfemyzR19s721S2c6J 3rDdbTruMcn49K/Z7AjdwXAiLMX/Dq0QbDtqZDlpByQTh9AUffDsy/FT6zp3xp9K vho5l5NQY4QaFlxs4oHErWKV5Eyvavyv8g5xZ2tefQKJPvjz2dHi9SiRgvh4vXde 7/jsys53qKH+grafqg7lndDwVWY1DtycmamrqVv/jbCO518p6oDa6+A0TGH1bjuk JiaN12kfqiD0iZG2qCK+clZc/LdNG0HIMzkIpQXPVsPn5KAVwRVnc6+AsLCT6PIW 8wcTR9LsXxOmC8dV9ApfuRlaeDaHUUdJGxYfMFKPOYMH+8hPzxf4tAdqdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnrXxzfNkTxPqkp4bLm2myhWoh8MB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEveWV0ZkhOODJSUEUtcVNuaHN1YmFiS0ZhaUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc31MA0G CSqGSIb3DQEBCwUAA4IBAQCFFM/rIKpGzPkNDhmEquTXV3KPydcLlyBUajrA5rP7 DBK+TNig92BkNaQNvFKyvF1bQQjOwOPLvoB7TBfpkt24JZCPstXjfyyJuCEE5bMz e/o9CIgGkQUJ62pRQiXReAvR7/YEbSubfnLuqR3eM5dLuUXDFaTDlOewe7JDorVL UMWNMbEL+SjVQ4xq7XLigH2r4I8OVwgZj59rd/HOBTbQDcWnLjopdK9wx7yUzdJ2 16QHDKialJ9Hd6jgrApZOuciBLtbKW5Eqv4IQpjtTR1QLcal0QNAjkmHOyWS7mfT SKB6ouDIka1HhrmyD6HKOMTcSXd3CR+bgQYXLXr55uN1 -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:11 2026 by rpki-client