This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/YH5NKMifzBmhf3nIG20jcgRcBU0.roa File: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (raw, json) Hash identifier: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc= Subject key identifier: 60:7E:4D:28:C8:9F:CC:19:A1:7F:79:C8:1B:6D:23:72:04:5C:05:4D Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Certificate serial: 019B7F1601D3B6BBF62EA470174403F91FB7 Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/YH5NKMifzBmhf3nIG20jcgRcBU0.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197297 IP address blocks: 178.19.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:01:d3:b6:bb:f6:2e:a4:70:17:44:03:f9:1f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=607e4d28c89fcc19a17f79c81b6d2372045c054d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:77:13:1f:0a:b8:89:d5:b2:a0:a3:4d:ef: 6d:1d:04:91:09:42:ce:2e:d9:1a:be:69:c8:35:93: 61:8b:f6:84:05:77:f1:69:3a:26:ba:ae:0c:32:47: 4e:98:4f:df:60:cc:fd:3e:67:15:97:f9:26:72:69: 9c:1a:55:40:53:83:95:7d:9f:23:9d:92:c1:dd:cc: ab:cd:c8:08:c6:31:19:9a:18:bc:97:84:42:34:14: 52:0c:21:a1:0a:7e:89:de:b7:f3:b1:35:43:ab:29: 09:58:dc:27:e9:8e:f8:d4:6b:82:98:58:34:85:c4: b6:bd:ec:b6:f1:2e:46:a9:92:59:af:37:60:57:c8: 4a:ba:e8:4b:6d:4f:de:cd:1b:85:30:7c:91:76:e5: a9:8b:d9:95:03:65:21:45:41:84:77:d4:de:18:f8: 23:c9:bf:5e:94:0a:17:0a:c3:c0:a4:a7:a2:c7:2f: a6:69:97:3d:f4:d5:6e:31:39:27:8b:e1:8c:4c:f3: 89:aa:98:86:97:c7:df:2c:ab:0f:62:51:5e:b2:25: c1:48:59:ae:6a:57:fe:00:c3:98:3f:86:de:44:eb: 2d:5f:63:2e:b8:c2:06:ab:ba:28:5e:6c:bd:c5:63: 29:cd:30:c5:bd:b1:d8:a7:60:48:80:a9:1f:8b:71: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7E:4D:28:C8:9F:CC:19:A1:7F:79:C8:1B:6D:23:72:04:5C:05:4D X509v3 Authority Key Identifier: keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/YH5NKMifzBmhf3nIG20jcgRcBU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.19.73.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:1c:22:54:6d:ea:31:a1:4d:c3:50:1f:ab:ad:9e:00:73:cc: 0a:1b:09:07:1b:2a:e7:cb:7d:fc:0e:fc:f1:14:49:7b:45:76: 55:21:ac:43:f1:bd:61:5e:a9:22:9e:ff:06:48:08:34:3c:e1: f0:7a:d5:6b:c6:18:83:d4:82:c2:b3:98:9a:02:eb:01:b3:eb: 41:4a:0a:e2:15:e9:b3:1e:d9:d0:dd:ea:40:4f:0d:d7:52:25: 4a:aa:14:76:da:59:1f:64:8c:bf:eb:e2:c0:ce:ee:c7:25:cd: 5a:2f:d5:39:c3:9b:c2:aa:b8:f8:1d:24:f5:d8:70:8f:bb:44: 2a:ef:9a:6c:ca:13:18:67:82:91:9f:90:ac:16:f0:ed:dd:55: 51:4a:92:0e:5b:96:8c:5b:33:1f:df:da:a3:38:42:93:34:34: 7e:fa:2b:da:08:2a:07:60:f2:23:6b:c1:1f:cd:7a:1a:1e:42: da:d0:61:fc:33:42:9a:9b:66:c0:5b:29:15:b4:a7:5b:fd:b4: 51:81:ab:63:df:03:eb:f8:95:a5:06:2b:4f:06:87:8c:eb:05: 82:80:69:f8:9d:23:94:ce:38:c1:c8:9c:24:7a:10:fa:08:d6: f4:25:f1:43:3a:be:ce:e6:6d:f8:f7:9d:34:a8:05:67:27:c5: 8d:9c:4d:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FgHTtrv2LqRwF0QD+R+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw ODc5NDcwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDdlNGQyOGM4OWZjYzE5YTE3Zjc5YzgxYjZkMjM3MjA0NWMwNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNh3Ex8KuInVsqCjTe9tHQSRCULO LtkavmnINZNhi/aEBXfxaTomuq4MMkdOmE/fYMz9PmcVl/kmcmmcGlVAU4OVfZ8j nZLB3cyrzcgIxjEZmhi8l4RCNBRSDCGhCn6J3rfzsTVDqykJWNwn6Y741GuCmFg0 hcS2vey28S5GqZJZrzdgV8hKuuhLbU/ezRuFMHyRduWpi9mVA2UhRUGEd9TeGPgj yb9elAoXCsPApKeixy+maZc99NVuMTkni+GMTPOJqpiGl8ffLKsPYlFesiXBSFmu alf+AMOYP4beROstX2MuuMIGq7ooXmy9xWMpzTDFvbHYp2BIgKkfi3EFNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGB+TSjIn8wZoX95yBttI3IEXAVNMB8GA1UdIwQY MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt NTk5NTc3ODdiMDE1LzEvWUg1TktNaWZ6Qm1oZjNuSUcyMGpjZ1JjQlUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1 LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshNJMA0G CSqGSIb3DQEBCwUAA4IBAQCaHCJUbeoxoU3DUB+rrZ4Ac8wKGwkHGyrny338Dvzx FEl7RXZVIaxD8b1hXqkinv8GSAg0POHwetVrxhiD1ILCs5iaAusBs+tBSgriFemz HtnQ3epATw3XUiVKqhR22lkfZIy/6+LAzu7HJc1aL9U5w5vCqrj4HST12HCPu0Qq 75psyhMYZ4KRn5CsFvDt3VVRSpIOW5aMWzMf39qjOEKTNDR++ivaCCoHYPIja8Ef zXoaHkLa0GH8M0Kam2bAWykVtKdb/bRRgatj3wPr+JWlBitPBoeM6wWCgGn4nSOU zjjByJwkehD6CNb0JfFDOr7O5m349500qAVnJ8WNnE1S -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:36 2026 by rpki-client