This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/yvC5GCH-pTygTs-vRowkL00kGjE.roa File: yvC5GCH-pTygTs-vRowkL00kGjE.roa (raw, json) Hash identifier: hEhRSBD6guGphEmbPVAtRhayR3mku9QTkifvmPQwCHc= Subject key identifier: CA:F0:B9:18:21:FE:A5:3C:A0:4E:CF:AF:46:8C:24:2F:4D:24:1A:31 Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Certificate serial: 019B7AC88EAD4B761ACACC36B0F663016EFA Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/yvC5GCH-pTygTs-vRowkL00kGjE.roa Signing time: Thu 01 Jan 2026 18:18:42 +0000 ROA not before: Thu 01 Jan 2026 18:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203501 IP address blocks: 45.86.116.0/22 maxlen: 24 45.87.196.0/24 maxlen: 24 45.87.197.0/24 maxlen: 24 45.87.198.0/24 maxlen: 24 45.87.199.0/24 maxlen: 24 45.91.44.0/22 maxlen: 24 45.91.45.0/24 maxlen: 24 89.37.88.0/22 maxlen: 24 194.113.26.0/23 maxlen: 23 194.113.26.0/24 maxlen: 24 194.113.27.0/24 maxlen: 24 2a02:7040:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8e:ad:4b:76:1a:ca:cc:36:b0:f6:63:01:6e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caf0b91821fea53ca04ecfaf468c242f4d241a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:a9:55:c9:11:9c:10:bf:d1:dc:9c:d0:72: 7e:9f:1e:48:5a:ae:4e:8d:88:7f:48:45:6f:12:90: 7b:86:f8:fd:d3:c1:16:af:e0:4e:81:e7:3e:f6:2e: 09:61:a4:80:22:a2:99:46:b9:1d:4b:72:32:c7:c4: a7:61:9d:52:96:a2:9a:5c:b5:db:d7:04:c8:21:90: ee:1a:35:48:8c:c7:a4:64:b9:ae:dc:6e:20:37:3c: 60:78:52:50:66:63:85:d6:05:76:f7:c3:51:85:27: b9:27:35:e0:8e:76:e8:13:1f:11:66:df:1f:54:90: b4:2a:d8:81:16:0b:13:70:4c:c6:cb:ec:58:97:57: e7:dc:28:14:de:f4:25:54:87:b8:a5:3c:78:41:80: fb:1b:62:91:1d:72:72:46:f5:45:b1:9b:29:83:c3: 26:33:1d:ae:f1:8f:41:c0:96:c4:de:a1:be:f7:7c: da:13:f5:5c:7e:c7:d0:7c:2a:56:86:03:c7:20:5c: 88:01:92:d2:24:be:35:33:7a:eb:ed:87:3a:ae:49: 6e:70:99:68:8f:69:42:e8:cd:a7:33:85:8b:33:83: 93:37:9c:24:35:f0:a1:68:e4:96:74:1e:9d:15:87: 7d:00:9f:aa:0a:55:f8:0e:b4:46:bb:13:a4:e2:d1: 7e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F0:B9:18:21:FE:A5:3C:A0:4E:CF:AF:46:8C:24:2F:4D:24:1A:31 X509v3 Authority Key Identifier: keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/yvC5GCH-pTygTs-vRowkL00kGjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.116.0/22 45.87.196.0/22 45.91.44.0/22 89.37.88.0/22 194.113.26.0/23 IPv6: 2a02:7040:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 54:50:d7:30:89:f8:fd:68:d0:c2:48:75:7a:ef:1d:16:47:cf: 22:6e:ee:3a:d6:1e:92:ba:07:03:b8:37:e8:40:bb:4c:35:58: be:68:9e:c1:84:4e:08:6d:bf:18:8b:26:2d:81:47:93:c2:43: e5:27:8b:13:2f:33:62:ef:c1:15:ac:27:3c:6c:11:6d:e1:ec: 21:61:00:55:50:51:dd:69:9b:a4:d6:8e:08:3b:33:cb:59:1d: 47:2f:2a:eb:02:bf:3c:56:d5:21:b5:40:14:b1:5b:3d:9e:b8: cb:3e:03:33:08:7a:9f:ed:40:7f:25:39:7e:29:da:8d:f6:9a: 64:13:0e:22:77:d3:71:8d:c1:24:f1:54:26:83:03:94:49:7f: 17:d9:3b:99:57:ac:c6:34:c9:c2:96:e3:ae:21:40:82:c6:a3: 1c:c7:bc:d2:5b:21:0c:8a:18:ff:2f:f6:8c:88:81:2b:49:55: e4:39:ca:2d:0a:23:7c:73:1f:e1:d8:ee:55:ea:0b:f6:17:68: 0a:b6:ad:dd:8e:1a:f0:52:67:0f:b5:cc:e2:d9:6a:4a:dd:34: 91:8b:9a:93:3e:12:d1:6a:a2:6a:5e:0b:ae:5a:97:10:43:93: c8:2b:c6:4a:ad:1f:b2:91:0f:1d:e0:b0:f4:6e:a1:2c:9f:2e: 76:7c:b0:48 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt6yI6tS3Yaysw2sPZjAW76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3 NWY0YTYwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWYwYjkxODIxZmVhNTNjYTA0ZWNmYWY0NjhjMjQyZjRkMjQxYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLSpVckRnBC/0dyc0HJ+nx5IWq5O jYh/SEVvEpB7hvj908EWr+BOgec+9i4JYaSAIqKZRrkdS3Iyx8SnYZ1SlqKaXLXb 1wTIIZDuGjVIjMekZLmu3G4gNzxgeFJQZmOF1gV298NRhSe5JzXgjnboEx8RZt8f VJC0KtiBFgsTcEzGy+xYl1fn3CgU3vQlVIe4pTx4QYD7G2KRHXJyRvVFsZspg8Mm Mx2u8Y9BwJbE3qG+93zaE/VcfsfQfCpWhgPHIFyIAZLSJL41M3rr7Yc6rklucJlo j2lC6M2nM4WLM4OTN5wkNfChaOSWdB6dFYd9AJ+qClX4DrRGuxOk4tF+lwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFMrwuRgh/qU8oE7Pr0aMJC9NJBoxMB8GA1UdIwQY MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt ZjJmNDI2ZWZlMDM5LzEveXZDNUdDSC1wVHlnVHMtdlJvd2tMMDBrR2pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5 LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQCLVZ0AwQC LVfEAwQCLVssAwQCWSVYAwQBwnEaMA4EAgACMAgDBgAqAnBA/zANBgkqhkiG9w0B AQsFAAOCAQEAVFDXMIn4/WjQwkh1eu8dFkfPIm7uOtYekroHA7g36EC7TDVYvmie wYROCG2/GIsmLYFHk8JD5SeLEy8zYu/BFawnPGwRbeHsIWEAVVBR3WmbpNaOCDsz y1kdRy8q6wK/PFbVIbVAFLFbPZ64yz4DMwh6n+1AfyU5finajfaaZBMOInfTcY3B JPFUJoMDlEl/F9k7mVesxjTJwpbjriFAgsajHMe80lshDIoY/y/2jIiBK0lV5DnK LQojfHMf4djuVeoL9hdoCrat3Y4a8FJnD7XM4tlqSt00kYuakz4S0Wqial4LrlqX EEOTyCvGSq0fspEPHeCw9G6hLJ8udnywSA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:33 2026 by rpki-client