This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yWjicW7yGVByixr1aOfte9obI4U.roa File: yWjicW7yGVByixr1aOfte9obI4U.roa (raw, json) Hash identifier: iBk77BDRaqHm+ZEjxvrrQPFj7AIc9j1Bk1GZuagtU+U= Subject key identifier: C9:68:E2:71:6E:F2:19:50:72:8B:1A:F5:68:E7:ED:7B:DA:1B:23:85 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68DA3528A8E795EC62743A7718228 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yWjicW7yGVByixr1aOfte9obI4U.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199380 IP address blocks: 84.232.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8d:a3:52:8a:8e:79:5e:c6:27:43:a7:71:82:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c968e2716ef21950728b1af568e7ed7bda1b2385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:e2:d2:34:c0:ba:ab:38:74:63:68:b5:e1: a7:c0:cc:fd:10:d1:8e:9b:8d:b8:69:f2:6f:8a:85: 22:f9:ec:67:02:27:04:c2:d6:7a:91:9e:94:59:31: 44:23:f6:00:5b:a8:3c:f1:f7:0d:29:b8:a3:ef:80: 03:83:83:7f:c1:4e:28:c9:43:a3:41:f2:f2:3b:4a: f0:b1:ad:24:24:f1:a7:f8:12:3c:11:e5:52:9f:a9: 04:ee:73:ba:06:a6:1a:b5:98:6a:dc:a7:c3:46:93: bd:0e:1f:39:b9:52:10:5c:57:35:9f:6f:0c:e6:22: ec:8d:68:4c:52:83:ec:f3:42:c3:96:d0:12:d9:3f: 2e:c3:1c:82:c6:c6:73:6e:9a:fe:27:0d:89:f9:fe: df:3d:23:80:28:ac:84:8a:97:c4:1c:85:e2:bc:22: e8:ae:cf:9a:a1:59:71:31:49:dd:38:af:d1:64:00: d9:66:ff:16:ce:5b:76:96:5b:72:02:4a:b6:6a:e9: bc:5b:25:be:55:2f:92:f6:d2:ef:45:38:33:39:01: cc:66:e5:19:a9:1d:1e:99:e0:7f:40:ea:69:9f:c5: a4:68:cb:11:e7:dd:a0:00:26:ff:03:73:d4:df:14: 3c:2e:1f:ee:14:e8:36:8e:9e:12:7d:27:34:59:d6: ef:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:68:E2:71:6E:F2:19:50:72:8B:1A:F5:68:E7:ED:7B:DA:1B:23:85 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yWjicW7yGVByixr1aOfte9obI4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.98.0/24 Signature Algorithm: sha256WithRSAEncryption 88:7e:7b:38:81:40:3f:f3:a7:a7:00:c4:7c:97:3b:45:6f:7a: b7:af:37:00:78:7c:4a:0b:b3:f9:43:03:73:61:38:76:70:bf: 0a:03:54:c5:18:e4:4d:eb:63:fd:79:5f:17:0d:1a:6c:01:8a: 84:65:87:6f:fa:69:3c:b6:11:25:ac:df:70:f2:b6:d2:3d:f3: 6b:ca:df:7b:fb:e8:2b:e1:4d:7f:f6:fc:ad:ab:04:ab:10:c0: b7:2c:6f:dd:6b:1c:20:9c:e1:ca:19:6e:aa:2d:c3:85:23:3e: fa:ea:80:44:6a:7c:e7:ce:6f:27:11:39:88:1f:fc:ca:fe:8d: c2:26:8f:0d:34:43:04:25:41:7e:53:5d:04:58:8c:82:be:62: e3:90:f5:12:d7:82:d6:42:38:df:bf:5f:a0:e8:b0:33:86:81: 42:dd:19:4a:a2:57:71:5d:b8:42:23:52:9b:8a:4d:92:8f:df: ab:c6:dd:d4:d3:47:31:0e:e7:8c:a8:b1:59:eb:19:e7:56:8b: 48:65:9c:64:19:69:bc:02:3f:8e:cf:e9:84:f6:71:82:16:ef: 09:64:58:08:e0:1c:ce:b6:40:8a:b2:98:38:c5:93:f5:5b:76: d8:49:8a:6a:b4:04:db:7e:90:d6:2b:33:f3:5a:1e:9f:c5:39: c4:97:7b:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xo2jUoqOeV7GJ0OncYIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTY4ZTI3MTZlZjIxOTUwNzI4YjFhZjU2OGU3ZWQ3YmRhMWIyMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDXi0jTAuqs4dGNoteGnwMz9ENGO m424afJvioUi+exnAicEwtZ6kZ6UWTFEI/YAW6g88fcNKbij74ADg4N/wU4oyUOj QfLyO0rwsa0kJPGn+BI8EeVSn6kE7nO6BqYatZhq3KfDRpO9Dh85uVIQXFc1n28M 5iLsjWhMUoPs80LDltAS2T8uwxyCxsZzbpr+Jw2J+f7fPSOAKKyEipfEHIXivCLo rs+aoVlxMUndOK/RZADZZv8Wzlt2lltyAkq2aum8WyW+VS+S9tLvRTgzOQHMZuUZ qR0emeB/QOppn8WkaMsR592gACb/A3PU3xQ8Lh/uFOg2jp4SfSc0WdbvOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMlo4nFu8hlQcosa9Wjn7XvaGyOFMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEveVdqaWNXN3lHVkJ5aXhyMWFPZnRlOW9iSTRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOhiMA0G CSqGSIb3DQEBCwUAA4IBAQCIfns4gUA/86enAMR8lztFb3q3rzcAeHxKC7P5QwNz YTh2cL8KA1TFGORN62P9eV8XDRpsAYqEZYdv+mk8thElrN9w8rbSPfNryt97++gr 4U1/9vytqwSrEMC3LG/daxwgnOHKGW6qLcOFIz766oBEanznzm8nETmIH/zK/o3C Jo8NNEMEJUF+U10EWIyCvmLjkPUS14LWQjjfv1+g6LAzhoFC3RlKoldxXbhCI1Kb ik2Sj9+rxt3U00cxDueMqLFZ6xnnVotIZZxkGWm8Aj+Oz+mE9nGCFu8JZFgI4BzO tkCKspg4xZP1W3bYSYpqtATbfpDWKzPzWh6fxTnEl3uP -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:09 2026 by rpki-client