This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yntVMp4zz6zQkTWkoJXmlZtW6Yc.roa File: yntVMp4zz6zQkTWkoJXmlZtW6Yc.roa (raw, json) Hash identifier: A5Ic+DP6eEPzXWPcbhmqxT5v5dwjVcdtHkBDyrAb2DI= Subject key identifier: CA:7B:55:32:9E:33:CF:AC:D0:91:35:A4:A0:95:E6:95:9B:56:E9:87 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C42CA6A8267698F1051DF84F9574 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yntVMp4zz6zQkTWkoJXmlZtW6Yc.roa Signing time: Fri 02 Jan 2026 16:22:46 +0000 ROA not before: Fri 02 Jan 2026 16:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51962 IP address blocks: 31.148.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c4:2c:a6:a8:26:76:98:f1:05:1d:f8:4f:95:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca7b55329e33cfacd09135a4a095e6959b56e987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:7c:4e:ea:67:15:cd:59:56:2f:72:c0:45: 0f:02:92:cc:d1:c0:e1:44:3e:3b:03:ec:c1:f6:92: 7e:50:66:b0:72:a0:56:ea:be:8f:5d:48:35:b9:db: 07:d8:0b:5a:75:31:c3:2a:51:c4:46:e8:b8:f6:fd: 80:2f:d7:7c:de:e3:bb:53:32:5d:0c:2a:52:9c:50: f2:2c:7c:84:6b:6e:a3:96:cd:d6:2f:ad:60:41:8a: f1:65:9d:41:e3:d8:6a:45:6d:e6:0d:aa:09:26:84: 20:a2:e8:ee:f3:d2:71:90:dc:48:20:1a:01:39:f6: a5:4a:21:ce:d3:13:f4:f7:4c:77:e7:f8:ae:2b:31: 1b:b1:f5:01:32:3e:51:99:05:e2:62:64:b9:c1:5c: 18:33:4f:0d:7e:6b:28:8e:8e:3f:83:3f:1d:b7:2d: 4c:1d:88:b4:1c:2a:d1:a7:ac:42:6e:29:81:df:ff: 9e:ee:e1:f4:24:94:e6:80:0b:6f:bd:a7:d4:b1:85: f7:18:1b:ca:a1:dd:26:5b:35:88:ea:22:62:6e:1e: ac:99:4d:5c:3e:27:2b:6e:97:12:5f:35:41:f2:18: 2e:82:f5:4e:02:ee:62:d7:e6:6f:d1:a7:21:53:cf: af:b0:18:ad:d4:50:1c:db:b2:00:8f:a7:ed:e0:87: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7B:55:32:9E:33:CF:AC:D0:91:35:A4:A0:95:E6:95:9B:56:E9:87 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yntVMp4zz6zQkTWkoJXmlZtW6Yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.221.0/24 Signature Algorithm: sha256WithRSAEncryption 99:e7:1f:24:54:ab:30:68:0d:e3:d6:d1:92:5f:68:4a:0e:d3: 72:8e:00:d2:a2:b8:0a:52:73:47:ae:53:29:28:a6:24:3a:11: cf:4d:d8:40:54:26:4f:e0:ea:48:52:24:fc:56:dc:67:6a:d1: 37:7e:18:45:de:e9:00:25:32:2e:99:07:9a:b0:4d:6b:db:f9: 59:bb:82:ae:c5:76:13:30:81:7e:38:43:25:bc:87:7c:f3:55: 55:7b:9e:85:01:52:9f:64:9c:bb:0c:82:1e:f8:b1:c7:8c:06: bc:1d:1b:9e:29:ba:77:d8:56:46:5f:f4:ed:53:1a:97:09:24: 86:46:56:b2:e9:d5:63:91:c7:8a:89:96:00:fa:79:28:bc:ad: e3:a7:3e:00:3e:bc:01:7d:cf:43:73:d4:3f:94:68:dc:59:f9: 01:d7:92:ef:1a:d8:7f:1b:c8:56:99:6e:ad:b7:3c:6d:1e:49: 81:8c:42:4a:ab:38:7e:5f:fa:77:d3:88:b7:15:94:d5:ad:2f: 55:0d:67:be:6b:9b:8a:5d:ba:11:1e:eb:34:15:8f:36:7f:71: 41:3b:09:1e:44:1a:2c:e0:65:3c:2f:e0:60:1d:52:99:b4:c1: e9:df:7b:95:5f:82:ac:60:b7:a7:ea:16:1b:49:16:ec:f8:02: 72:aa:6e:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMQspqgmdpjxBR34T5V0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTdiNTUzMjllMzNjZmFjZDA5MTM1YTRhMDk1ZTY5NTliNTZlOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvad8TupnFc1ZVi9ywEUPApLM0cDh RD47A+zB9pJ+UGawcqBW6r6PXUg1udsH2AtadTHDKlHERui49v2AL9d83uO7UzJd DCpSnFDyLHyEa26jls3WL61gQYrxZZ1B49hqRW3mDaoJJoQgouju89JxkNxIIBoB OfalSiHO0xP090x35/iuKzEbsfUBMj5RmQXiYmS5wVwYM08Nfmsojo4/gz8dty1M HYi0HCrRp6xCbimB3/+e7uH0JJTmgAtvvafUsYX3GBvKod0mWzWI6iJibh6smU1c PicrbpcSXzVB8hgugvVOAu5i1+Zv0achU8+vsBit1FAc27IAj6ft4Ie+9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMp7VTKeM8+s0JE1pKCV5pWbVumHMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEveW50Vk1wNHp6NnpRa1RXa29KWG1sWnRXNlljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5TdMA0G CSqGSIb3DQEBCwUAA4IBAQCZ5x8kVKswaA3j1tGSX2hKDtNyjgDSorgKUnNHrlMp KKYkOhHPTdhAVCZP4OpIUiT8VtxnatE3fhhF3ukAJTIumQeasE1r2/lZu4KuxXYT MIF+OEMlvId881VVe56FAVKfZJy7DIIe+LHHjAa8HRueKbp32FZGX/TtUxqXCSSG Rlay6dVjkceKiZYA+nkovK3jpz4APrwBfc9Dc9Q/lGjcWfkB15LvGth/G8hWmW6t tzxtHkmBjEJKqzh+X/p304i3FZTVrS9VDWe+a5uKXboRHus0FY82f3FBOwkeRBos 4GU8L+BgHVKZtMHp33uVX4KsYLen6hYbSRbs+AJyqm4A -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:39 2026 by rpki-client