This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/yYRNMp4_8tPWVd55Ov35Q5FSlnI.roa File: yYRNMp4_8tPWVd55Ov35Q5FSlnI.roa (raw, json) Hash identifier: 0/ssvW/ngUlJqY3PbldVkn5N/q0lSB25o7gaAX3Yo8w= Subject key identifier: C9:84:4D:32:9E:3F:F2:D3:D6:55:DE:79:3A:FD:F9:43:91:52:96:72 Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59 Certificate serial: 019B7C7FFBF33A0FEB878A0D57680C8E3843 Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/yYRNMp4_8tPWVd55Ov35Q5FSlnI.roa Signing time: Fri 02 Jan 2026 02:18:40 +0000 ROA not before: Fri 02 Jan 2026 02:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 185.77.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fb:f3:3a:0f:eb:87:8a:0d:57:68:0c:8e:38:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59 Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9844d329e3ff2d3d655de793afdf94391529672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:0d:d4:50:8c:ac:ad:7a:a7:d7:7e:b7:f5: 59:37:33:da:2c:7b:2d:9a:df:4b:40:2c:e2:6c:8f: 97:37:46:7b:9c:fd:36:99:fc:16:2c:1d:77:62:dd: f7:9a:54:68:0f:95:2c:4d:dc:2f:4e:e7:1e:a6:43: 69:6f:22:f0:7c:1d:97:7c:00:4b:4c:34:8a:49:41: 92:1e:27:06:09:94:27:ac:bb:22:cb:65:08:b8:2c: 49:81:55:7c:47:ee:ce:52:3a:c7:0e:24:2d:de:aa: bf:32:ad:25:a7:dd:5c:d6:9d:ec:29:47:4e:c5:d6: 32:f0:7c:6d:b3:4d:8d:11:ad:74:87:98:e5:fd:ce: 9a:46:b9:75:29:b6:7c:5d:fe:fb:55:bc:0f:6d:10: 5a:40:c5:ea:93:83:c6:b0:86:18:26:d3:40:1f:e6: ad:52:fd:64:68:2c:4e:75:19:d8:c4:d2:91:42:fb: 8f:ed:35:73:33:10:33:4a:60:70:43:e4:75:de:08: f5:9a:3c:90:2c:90:e0:03:1b:70:2b:2d:df:12:a6: f2:f4:27:44:d9:b1:59:86:1a:1f:50:a5:12:b4:e9: 53:91:2e:40:04:00:11:8a:f1:df:3c:33:be:2f:68: 93:f6:c3:ff:38:e0:dd:03:56:a6:f1:35:1f:2a:51: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:84:4D:32:9E:3F:F2:D3:D6:55:DE:79:3A:FD:F9:43:91:52:96:72 X509v3 Authority Key Identifier: keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/yYRNMp4_8tPWVd55Ov35Q5FSlnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.0.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:df:48:42:ae:de:c2:a1:73:1b:de:31:23:62:82:f9:21:c3: bc:cf:b4:aa:a3:41:b9:0e:87:ac:db:e0:3d:32:8d:41:2a:e8: 50:3c:53:56:b9:4a:82:3f:c1:a4:9e:8e:9a:17:a1:dd:8c:f8: 5b:f0:bf:06:01:23:97:e1:97:6f:2c:06:e7:33:27:a9:cc:7a: 0b:47:1b:d4:ec:bd:ac:d7:1c:5d:e8:67:31:99:05:2a:99:0c: d4:81:c1:8f:e5:ff:61:a8:d1:3b:62:d2:58:bd:89:8d:cf:c2: 8a:eb:00:a2:82:42:a9:fb:1e:08:ae:ac:e0:18:0c:10:34:94: 6b:f9:c9:11:ae:8b:20:e5:f0:ff:8c:1c:d1:5a:eb:f9:66:34: 95:3b:c3:e5:b9:e1:12:fb:2b:29:b7:68:2e:25:4d:cd:11:8e: fc:1d:78:0c:a1:27:3d:e4:cb:c3:54:46:ad:a0:76:76:d0:5b: 04:ac:1b:8a:67:81:3c:71:f5:8e:61:59:5b:d5:b5:cb:a6:b7: c8:0a:1b:b1:a5:c4:1d:2a:48:82:f5:6a:37:28:c1:8f:c3:e5: 06:92:31:41:3b:94:27:8d:ff:65:d8:8c:59:6c:01:15:4c:6b: 14:f8:14:da:73:7a:61:85:37:1d:4a:d8:c2:7b:3b:f7:6c:f2: bd:22:5e:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/vzOg/rh4oNV2gMjjhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj ZWVkNTkwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTg0NGQzMjllM2ZmMmQzZDY1NWRlNzkzYWZkZjk0MzkxNTI5NjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwewN1FCMrK16p9d+t/VZNzPaLHst mt9LQCzibI+XN0Z7nP02mfwWLB13Yt33mlRoD5UsTdwvTucepkNpbyLwfB2XfABL TDSKSUGSHicGCZQnrLsiy2UIuCxJgVV8R+7OUjrHDiQt3qq/Mq0lp91c1p3sKUdO xdYy8Hxts02NEa10h5jl/c6aRrl1KbZ8Xf77VbwPbRBaQMXqk4PGsIYYJtNAH+at Uv1kaCxOdRnYxNKRQvuP7TVzMxAzSmBwQ+R13gj1mjyQLJDgAxtwKy3fEqby9CdE 2bFZhhofUKUStOlTkS5ABAARivHfPDO+L2iT9sP/OODdA1am8TUfKlEpLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmETTKeP/LT1lXeeTr9+UORUpZyMB8GA1UdIwQY MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt MjczOGJjYjQzZDZkLzEveVlSTk1wNF84dFBXVmQ1NU92MzVRNUZTbG5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU0AMA0G CSqGSIb3DQEBCwUAA4IBAQA730hCrt7CoXMb3jEjYoL5IcO8z7Sqo0G5Does2+A9 Mo1BKuhQPFNWuUqCP8Gkno6aF6HdjPhb8L8GASOX4ZdvLAbnMyepzHoLRxvU7L2s 1xxd6GcxmQUqmQzUgcGP5f9hqNE7YtJYvYmNz8KK6wCigkKp+x4IrqzgGAwQNJRr +ckRrosg5fD/jBzRWuv5ZjSVO8PlueES+yspt2guJU3NEY78HXgMoSc95MvDVEat oHZ20FsErBuKZ4E8cfWOYVlb1bXLprfIChuxpcQdKkiC9Wo3KMGPw+UGkjFBO5Qn jf9l2IxZbAEVTGsU+BTac3phhTcdStjCezv3bPK9Il6x -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:34 2026 by rpki-client