This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/yXx8FHPUzNya9PKV0tCpDdaAx2g.roa File: yXx8FHPUzNya9PKV0tCpDdaAx2g.roa (raw, json) Hash identifier: 02pPJkqD1/DFS/uNSc/w/zq7wx7K7q0bTvkg6S2hVqQ= Subject key identifier: C9:7C:7C:14:73:D4:CC:DC:9A:F4:F2:95:D2:D0:A9:0D:D6:80:C7:68 Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F140FB1814C8F4DD35C657E79632311 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/yXx8FHPUzNya9PKV0tCpDdaAx2g.roa Signing time: Fri 02 Jan 2026 14:19:39 +0000 ROA not before: Fri 02 Jan 2026 14:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45014 IP address blocks: 212.11.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:0f:b1:81:4c:8f:4d:d3:5c:65:7e:79:63:23:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97c7c1473d4ccdc9af4f295d2d0a90dd680c768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:d8:a5:0c:a5:59:33:ef:e6:3d:75:f5:c4: 9b:bf:5a:87:9d:de:48:6a:f7:24:a3:2b:7a:9d:ea: f5:3f:ee:f1:53:b3:c5:dc:00:0d:d7:e5:c0:b4:50: dc:a0:7a:05:5d:c5:f0:c7:1b:02:52:1f:07:d8:5d: c5:e6:b3:f7:ec:53:62:1f:a0:dd:0a:11:c6:e2:b2: 86:0a:88:cc:12:b5:4d:a0:65:69:f8:5b:0c:b9:a3: b5:d8:d6:dd:c7:0e:93:53:62:9b:c8:18:38:ef:c7: 79:b0:39:50:00:69:ff:53:20:bf:54:d1:88:61:1b: 1c:08:69:4b:3c:01:f4:dd:4b:13:e6:b2:07:0a:d3: dc:e8:43:1c:33:c3:3c:aa:71:fb:48:30:27:7b:36: 6f:e1:b8:eb:50:7c:92:96:ff:c2:f0:02:26:1b:67: 40:bd:ac:f2:a8:bd:93:ce:3a:2c:1d:eb:5a:74:5a: a2:b7:f8:c6:68:c0:c6:8d:e6:56:97:05:58:ad:65: 24:b8:86:5e:c5:fe:31:31:76:77:49:12:05:36:48: cf:70:15:ea:d8:8b:73:bd:1e:78:4a:ba:0d:39:19: d9:c8:58:10:1d:2b:a4:51:0c:7f:39:ca:d3:4f:66: f8:54:2d:02:f4:23:e2:2e:ec:52:17:c1:7e:36:2e: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:7C:14:73:D4:CC:DC:9A:F4:F2:95:D2:D0:A9:0D:D6:80:C7:68 X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/yXx8FHPUzNya9PKV0tCpDdaAx2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.11.18.0/24 Signature Algorithm: sha256WithRSAEncryption 29:ac:93:d8:08:a6:2b:85:39:8d:66:68:8a:a5:cc:e9:23:aa: 49:b9:0e:2d:62:87:0c:50:c1:5d:ea:37:ef:41:12:c0:e9:ad: 86:d8:d5:43:a8:95:a1:00:d6:2a:cf:33:b3:73:36:98:b7:25: 94:f9:3d:c5:09:0f:f7:3c:0b:d4:72:14:14:fa:7b:8c:8c:70: 3e:6c:41:dd:06:5c:5a:24:d4:c5:1b:95:3a:ab:d9:4a:3c:2c: 1d:c7:7f:a6:aa:d6:e4:0a:fb:90:0f:59:ea:96:1d:76:43:3c: 52:5d:13:4b:04:01:98:b7:bb:74:3d:26:c0:26:2b:cc:86:10: 9f:bf:61:9b:86:e6:7b:68:07:5b:00:6d:62:44:9b:49:e5:c0: ed:1c:f8:e1:ba:b9:2a:af:4c:6a:9b:a8:5d:ec:fb:60:c6:62: a6:d2:c4:d4:df:bb:fd:6a:05:bb:49:cd:2f:c2:48:33:b8:37: 68:e8:ad:ff:49:ec:92:50:6b:d5:fe:4f:ab:3c:1e:28:50:92: 3f:ba:aa:35:a2:fd:91:43:b4:77:3d:d3:69:66:5e:bc:95:a8: 96:e9:4a:e3:3c:4e:4f:54:45:a4:fb:df:79:8c:30:b7:92:77: 8c:69:7a:f7:e3:98:28:d4:ca:3e:7e:12:22:66:cf:10:4b:ae: c8:90:8e:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FA+xgUyPTdNcZX55YyMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTdjN2MxNDczZDRjY2RjOWFmNGYyOTVkMmQwYTkwZGQ2ODBjNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEjYpQylWTPv5j119cSbv1qHnd5I avckoyt6ner1P+7xU7PF3AAN1+XAtFDcoHoFXcXwxxsCUh8H2F3F5rP37FNiH6Dd ChHG4rKGCojMErVNoGVp+FsMuaO12Nbdxw6TU2KbyBg478d5sDlQAGn/UyC/VNGI YRscCGlLPAH03UsT5rIHCtPc6EMcM8M8qnH7SDAnezZv4bjrUHySlv/C8AImG2dA vazyqL2TzjosHetadFqit/jGaMDGjeZWlwVYrWUkuIZexf4xMXZ3SRIFNkjPcBXq 2ItzvR54SroNORnZyFgQHSukUQx/OcrTT2b4VC0C9CPiLuxSF8F+Ni7T/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMl8fBRz1MzcmvTyldLQqQ3WgMdoMB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEveVh4OEZIUFV6TnlhOVBLVjB0Q3BEZGFBeDJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AsSMA0G CSqGSIb3DQEBCwUAA4IBAQAprJPYCKYrhTmNZmiKpczpI6pJuQ4tYocMUMFd6jfv QRLA6a2G2NVDqJWhANYqzzOzczaYtyWU+T3FCQ/3PAvUchQU+nuMjHA+bEHdBlxa JNTFG5U6q9lKPCwdx3+mqtbkCvuQD1nqlh12QzxSXRNLBAGYt7t0PSbAJivMhhCf v2GbhuZ7aAdbAG1iRJtJ5cDtHPjhurkqr0xqm6hd7PtgxmKm0sTU37v9agW7Sc0v wkgzuDdo6K3/SeySUGvV/k+rPB4oUJI/uqo1ov2RQ7R3PdNpZl68laiW6UrjPE5P VEWk+995jDC3kneMaXr345go1Mo+fhIiZs8QS67IkI5O -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:58 2026 by rpki-client