This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/Yp5EzvNAptv0FF3dq0dG-qbNXDE.roa File: Yp5EzvNAptv0FF3dq0dG-qbNXDE.roa (raw, json) Hash identifier: rEVjSa04WTwHqfNGkpfReSocSUSeb47hyl6D9pld43I= Subject key identifier: 62:9E:44:CE:F3:40:A6:DB:F4:14:5D:DD:AB:47:46:FA:A6:CD:5C:31 Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6 Certificate serial: 019B7CEE1D7439CAFEA853C1D6659AE53E64 Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/Yp5EzvNAptv0FF3dq0dG-qbNXDE.roa Signing time: Fri 02 Jan 2026 04:18:58 +0000 ROA not before: Fri 02 Jan 2026 04:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39067 IP address blocks: 94.232.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1d:74:39:ca:fe:a8:53:c1:d6:65:9a:e5:3e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=629e44cef340a6dbf4145dddab4746faa6cd5c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:95:00:f3:10:57:d8:55:9c:3a:a1:22:14: 59:0b:7e:1e:ff:6e:ae:5e:94:e5:eb:15:d2:9b:58: d4:20:a5:27:78:bf:14:38:66:44:73:7e:24:1a:d2: ed:15:c7:15:98:26:e9:e6:a4:26:db:7a:0c:80:0d: f7:29:5e:4d:51:6b:a7:26:7a:2f:ce:03:a2:db:57: 6b:91:78:4e:45:cf:52:1a:1f:23:55:df:52:64:c3: 27:51:5f:62:e7:3b:f0:96:ff:83:f5:e8:ee:b6:06: 33:bd:c5:ac:89:47:03:db:c8:5f:64:84:97:a2:93: dc:18:4d:44:16:65:96:fe:dd:9a:4f:b5:9f:0e:62: 0b:3d:f5:e8:20:42:fc:91:67:e1:21:30:ac:b3:a8: b6:8f:ab:0b:5f:ea:7d:d2:48:5e:99:40:ad:95:bc: 13:9f:b7:66:40:79:91:d2:d8:09:6f:8b:8a:5e:34: be:18:fd:5a:d8:38:bb:af:e6:8b:78:3c:9a:34:6e: ba:58:e4:40:b6:d6:11:64:39:2f:a1:44:1d:6b:a2: d4:47:dc:fc:61:22:a9:2b:aa:00:14:f5:b9:99:d9: 6d:87:ad:43:c0:dd:ac:e3:0d:33:65:e9:90:dd:a5: 73:b2:76:b0:cc:ac:56:fd:d0:8c:68:cf:f8:1c:8a: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9E:44:CE:F3:40:A6:DB:F4:14:5D:DD:AB:47:46:FA:A6:CD:5C:31 X509v3 Authority Key Identifier: keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/Yp5EzvNAptv0FF3dq0dG-qbNXDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.224.0/21 Signature Algorithm: sha256WithRSAEncryption 84:f3:dd:65:67:17:cb:a4:30:f2:ed:4e:b2:5a:85:3a:fe:02: 14:d4:30:50:15:04:c1:0d:78:6c:e8:97:44:95:e2:bf:65:20: bf:dc:eb:24:f1:b9:20:9c:69:fb:b0:20:3b:20:30:01:36:a5: 77:ce:93:f1:33:80:cf:a4:f0:a3:ff:8e:6a:31:5d:f3:25:01: 64:59:cc:21:ab:33:39:b8:d9:e3:7c:07:04:96:76:dd:9e:09: bb:26:28:e7:38:ba:24:0f:6b:c4:58:ed:75:24:e2:cd:50:19: a1:07:6e:fb:36:4a:a4:00:ca:a8:d9:8c:64:89:22:f4:bf:42: 65:94:17:f8:20:8f:6e:70:7f:27:0a:31:5c:c2:f5:1b:66:21: f4:2c:2e:7a:db:e4:c0:b9:21:3e:81:7c:02:5c:c8:48:ed:68: b7:ee:e1:b7:cd:42:22:f7:15:c7:c7:2d:da:b6:47:43:23:c9: 9f:03:24:77:c8:6a:63:8a:cb:43:7e:f9:3c:72:22:2e:d3:2d: f0:93:ec:56:51:88:82:ff:8a:be:55:f6:01:15:fd:39:06:02: 18:7b:10:2c:94:b0:92:da:75:4c:62:34:27:04:3b:47:b5:7b: 72:c6:eb:09:41:88:b9:4f:f9:9d:07:2c:94:90:13:4c:fa:b7: 68:06:54:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87h10Ocr+qFPB1mWa5T5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjE0YjhhMDhjYjVmODA1N2Q0OGIwM2U1M2Y0NThiOGUx ZmVlZDYwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjllNDRjZWYzNDBhNmRiZjQxNDVkZGRhYjQ3NDZmYWE2Y2Q1YzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwGVAPMQV9hVnDqhIhRZC34e/26u XpTl6xXSm1jUIKUneL8UOGZEc34kGtLtFccVmCbp5qQm23oMgA33KV5NUWunJnov zgOi21drkXhORc9SGh8jVd9SZMMnUV9i5zvwlv+D9ejutgYzvcWsiUcD28hfZISX opPcGE1EFmWW/t2aT7WfDmILPfXoIEL8kWfhITCss6i2j6sLX+p90khemUCtlbwT n7dmQHmR0tgJb4uKXjS+GP1a2Di7r+aLeDyaNG66WORAttYRZDkvoUQda6LUR9z8 YSKpK6oAFPW5mdlth61DwN2s4w0zZemQ3aVzsnawzKxW/dCMaM/4HIoUPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKeRM7zQKbb9BRd3atHRvqmzVwxMB8GA1UdIwQY MBaAFNDxS4oIy1+AV9SLA+U/RYuOH+7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDkt MDY2ZGRmMzJiZmNjLzEvWXA1RXp2TkFwdHYwRkYzZHEwZEctcWJOWERFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDktMDY2ZGRmMzJiZmNj LzEvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXujgMA0G CSqGSIb3DQEBCwUAA4IBAQCE891lZxfLpDDy7U6yWoU6/gIU1DBQFQTBDXhs6JdE leK/ZSC/3Osk8bkgnGn7sCA7IDABNqV3zpPxM4DPpPCj/45qMV3zJQFkWcwhqzM5 uNnjfAcElnbdngm7JijnOLokD2vEWO11JOLNUBmhB277NkqkAMqo2YxkiSL0v0Jl lBf4II9ucH8nCjFcwvUbZiH0LC562+TAuSE+gXwCXMhI7Wi37uG3zUIi9xXHxy3a tkdDI8mfAyR3yGpjistDfvk8ciIu0y3wk+xWUYiC/4q+VfYBFf05BgIYexAslLCS 2nVMYjQnBDtHtXtyxusJQYi5T/mdByyUkBNM+rdoBlRG -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:01 2026 by rpki-client