This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa File: wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa (raw, json) Hash identifier: AXtKns2L29E7O2LJbqOlS/TDRuIr5Nqsln0B0SyiTUY= Subject key identifier: C1:8C:AB:51:81:9C:A4:C8:E0:70:B4:BE:A9:4E:EE:5A:A5:CC:C5:90 Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1 Certificate serial: 019B783481BC1130A5DA624FDF3AF3E1DC52 Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 131.211.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:81:bc:11:30:a5:da:62:4f:df:3a:f3:e1:dc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c18cab51819ca4c8e070b4bea94eee5aa5ccc590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:b5:31:20:06:3a:3a:a6:32:8e:6f:ee:0f: e4:99:a3:2a:0a:c0:45:4d:91:6c:e5:70:37:9f:6a: ff:86:64:40:19:bd:ba:e7:c8:90:52:73:48:2f:43: ce:e6:79:af:1e:8a:f6:7a:98:3b:26:9b:57:48:eb: 4c:a8:89:5f:94:43:1b:dc:a9:e3:dc:4c:60:1c:bd: 91:f8:68:64:cb:ff:4b:56:4f:b9:e3:3f:0e:f0:34: d6:00:02:82:ae:22:53:03:80:9a:d6:49:08:70:f6: 79:42:a9:04:7c:bb:9e:2a:79:3c:35:5d:47:47:47: bc:91:06:0f:de:99:b8:f5:52:83:c1:da:dc:9f:4b: a1:98:3b:a6:e2:36:25:58:15:39:bb:a7:60:0b:53: bd:be:00:4e:92:53:46:1c:12:b6:66:b6:a8:70:bd: cf:b8:f5:3d:ab:3b:3b:f1:66:15:63:69:c3:ff:1d: ba:ba:ac:0e:23:a4:e2:6d:18:f8:65:25:b5:3f:e1: dd:f7:91:df:92:88:12:a7:cb:0e:4c:e4:7f:0d:98: 5c:12:6b:da:89:3b:c3:04:8c:ba:68:3f:50:a9:52: 5a:dd:ec:c6:42:1c:21:2d:08:a2:46:71:2b:2b:be: 33:3d:00:d3:f9:a9:e4:a7:c7:24:6c:ec:fc:6e:08: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:AB:51:81:9C:A4:C8:E0:70:B4:BE:A9:4E:EE:5A:A5:CC:C5:90 X509v3 Authority Key Identifier: keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.211.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:2e:2d:86:c8:dc:fe:7e:e1:d7:47:ef:53:f0:73:91:32:5e: 1c:78:a8:50:cf:ef:b0:4b:47:0c:57:bb:ab:93:53:cb:d5:e6: 4d:18:29:48:e0:47:03:f1:95:fd:3c:69:b7:ec:c8:b9:0b:50: 95:5f:3c:b7:95:f9:78:bc:2c:5d:33:c8:69:22:87:aa:85:98: ed:0e:fb:f9:25:aa:a0:3f:32:62:ac:2a:d3:58:26:a2:fc:ad: c7:02:ca:f9:ed:5b:03:28:b9:f7:83:11:ea:ff:db:ad:87:01: b4:e8:50:6d:6c:f4:91:c2:87:fe:bf:98:d4:08:fb:6e:28:ab: e0:1c:f1:7a:da:63:0e:5f:e5:cb:50:04:9a:cb:26:8b:7e:2b: 48:d9:a7:05:4d:f5:b1:c7:98:09:13:e8:0c:23:f9:1e:a3:9c: 37:fb:7e:e3:73:fa:12:fe:cb:56:74:44:2b:c7:e6:f4:09:38: 32:90:a3:eb:53:07:05:06:07:52:d7:08:4c:a6:d8:bb:55:26: 9e:37:30:62:14:3d:af:17:16:1f:76:b8:3c:43:ca:f8:00:38: b1:38:df:54:ea:f9:53:7b:e4:45:7d:a9:a0:31:39:d7:45:f5: aa:60:6b:1b:11:a2:d5:00:aa:2f:b6:ba:e1:cb:ff:18:b1:fa: ee:55:0c:d7 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt4NIG8ETCl2mJP3zrz4dxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNmU2ZjM5MjI3MTk1MWIzNTM0N2ZhY2Q1MTNmOTMyZmU2 N2EwYzEwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMThjYWI1MTgxOWNhNGM4ZTA3MGI0YmVhOTRlZWU1YWE1Y2NjNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtay1MSAGOjqmMo5v7g/kmaMqCsBF TZFs5XA3n2r/hmRAGb2658iQUnNIL0PO5nmvHor2epg7JptXSOtMqIlflEMb3Knj 3ExgHL2R+Ghky/9LVk+54z8O8DTWAAKCriJTA4Ca1kkIcPZ5QqkEfLueKnk8NV1H R0e8kQYP3pm49VKDwdrcn0uhmDum4jYlWBU5u6dgC1O9vgBOklNGHBK2ZraocL3P uPU9qzs78WYVY2nD/x26uqwOI6TibRj4ZSW1P+Hd95HfkogSp8sOTOR/DZhcEmva iTvDBIy6aD9QqVJa3ezGQhwhLQiiRnErK74zPQDT+ankp8ckbOz8bgiA3wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMGMq1GBnKTI4HC0vqlO7lqlzMWQMB8GA1UdIwQY MBaAFNpubzkicZUbNTR/rNUT+TL+Z6DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAt Mjc2NDdiY2VmNGIwLzEvd1l5clVZR2NwTWpnY0xTLXFVN3VXcVhNeFpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAtMjc2NDdiY2VmNGIw LzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg9MwDQYJ KoZIhvcNAQELBQADggEBACAuLYbI3P5+4ddH71Pwc5EyXhx4qFDP77BLRwxXu6uT U8vV5k0YKUjgRwPxlf08abfsyLkLUJVfPLeV+Xi8LF0zyGkih6qFmO0O+/klqqA/ MmKsKtNYJqL8rccCyvntWwMoufeDEer/262HAbToUG1s9JHCh/6/mNQI+24oq+Ac 8XraYw5f5ctQBJrLJot+K0jZpwVN9bHHmAkT6Awj+R6jnDf7fuNz+hL+y1Z0RCvH 5vQJODKQo+tTBwUGB1LXCEym2LtVJp43MGIUPa8XFh92uDxDyvgAOLE431Tq+VN7 5EV9qaAxOddF9apgaxsRotUAqi+2uuHL/xix+u5VDNc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:04 2026 by rpki-client