This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/yNIYxMnUO5naybwPyNyh5ewSWWc.roa File: yNIYxMnUO5naybwPyNyh5ewSWWc.roa (raw, json) Hash identifier: JUSRTIxpmqX2Md1pS2aFTtzHv44wRgNWsPuej9W1PDw= Subject key identifier: C8:D2:18:C4:C9:D4:3B:99:DA:C9:BC:0F:C8:DC:A1:E5:EC:12:59:67 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B6464487A2D139E32A7C0AAF2D5A8 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/yNIYxMnUO5naybwPyNyh5ewSWWc.roa Signing time: Thu 01 Jan 2026 16:19:28 +0000 ROA not before: Thu 01 Jan 2026 16:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214218 IP address blocks: 31.41.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:64:64:48:7a:2d:13:9e:32:a7:c0:aa:f2:d5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8d218c4c9d43b99dac9bc0fc8dca1e5ec125967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:34:7f:18:8b:73:7e:1c:c8:58:96:cd:84:33: 55:43:22:c7:44:63:0a:ed:4d:d1:62:74:d0:5c:45: b4:1d:0b:74:24:cd:d8:cb:6a:22:d6:2f:38:ae:c1: d7:56:4b:bd:db:7a:43:a8:1c:4b:c8:9a:68:5f:57: 5a:e0:78:c6:04:9b:86:99:f2:94:de:03:d9:5a:24: 31:b9:6d:fd:a7:36:e8:48:10:1d:e8:d8:04:6c:4f: cb:c6:e6:b8:98:c2:c4:97:c9:85:4c:cd:0c:7c:21: 8d:f4:47:cc:15:79:a4:de:df:6f:22:22:58:c7:1b: 02:12:db:84:bf:2a:67:69:32:52:dd:7e:cb:b4:b5: 8a:e2:7a:df:6f:c3:0c:7b:8f:52:3c:79:90:c0:3b: 46:b1:4a:e6:6f:48:c3:97:53:dc:e8:5c:7b:23:ed: 1c:31:6d:98:17:ab:d0:72:c1:2c:5e:15:3f:a0:e1: fa:4b:71:24:14:2c:10:fd:21:4a:07:2d:de:10:d3: 70:de:52:07:c3:79:9c:0e:a3:b5:7e:46:51:d8:0e: db:77:4a:d0:bc:6f:70:0a:0f:35:23:d2:ad:04:dc: b2:f0:70:7f:3e:14:4b:68:34:f7:31:3e:a3:cd:35: 5e:92:2c:2c:3e:c5:a0:83:d6:2a:a3:78:12:dc:82: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D2:18:C4:C9:D4:3B:99:DA:C9:BC:0F:C8:DC:A1:E5:EC:12:59:67 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/yNIYxMnUO5naybwPyNyh5ewSWWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.14.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:36:df:71:e5:bb:32:24:95:11:97:de:ed:28:9a:7a:e5:4c: 2f:31:7d:d9:f9:1c:62:f1:2b:cd:49:83:43:f3:84:bc:4a:d4: 60:4c:92:f7:02:3c:ad:50:8f:1c:cb:d9:48:a9:6b:a9:8c:9e: 10:5b:b0:5b:cc:08:65:7b:4a:ff:8b:ab:0a:8a:51:82:7d:bf: 0f:21:04:04:0c:4d:af:b3:03:9a:3a:0a:41:df:a6:5b:25:26: b2:45:3c:25:b5:6a:e1:a6:4e:00:ff:3c:c6:66:5b:38:d6:cf: b9:9c:cf:37:1d:96:06:c2:5e:ca:2d:e0:50:f8:22:dc:48:a8: 80:3a:bd:e7:f8:b1:70:08:45:3a:0a:f8:91:f8:8c:96:16:bc: 76:10:7b:6a:17:2c:4e:69:ea:ee:21:61:b8:cd:4b:fd:b4:d6: 23:b0:5a:21:45:71:76:4f:96:8b:28:3a:5c:42:3c:19:60:f0: 05:84:ee:b4:d0:64:80:08:d0:20:6c:1f:60:0e:01:36:56:a4: f2:0b:fc:2d:cc:c4:b6:97:92:58:51:51:ba:36:fc:78:d5:bf: ff:d1:a7:77:01:0c:5a:99:50:29:2a:ab:42:b4:8b:4f:4d:a9: 90:56:7b:2c:f1:e1:df:a6:a0:02:ba:1e:7c:b9:15:09:b0:cf: 8a:8d:f8:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2RkSHotE54yp8Cq8tWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGQyMThjNGM5ZDQzYjk5ZGFjOWJjMGZjOGRjYTFlNWVjMTI1OTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTR/GItzfhzIWJbNhDNVQyLHRGMK 7U3RYnTQXEW0HQt0JM3Yy2oi1i84rsHXVku923pDqBxLyJpoX1da4HjGBJuGmfKU 3gPZWiQxuW39pzboSBAd6NgEbE/Lxua4mMLEl8mFTM0MfCGN9EfMFXmk3t9vIiJY xxsCEtuEvypnaTJS3X7LtLWK4nrfb8MMe49SPHmQwDtGsUrmb0jDl1Pc6Fx7I+0c MW2YF6vQcsEsXhU/oOH6S3EkFCwQ/SFKBy3eENNw3lIHw3mcDqO1fkZR2A7bd0rQ vG9wCg81I9KtBNyy8HB/PhRLaDT3MT6jzTVekiwsPsWgg9Yqo3gS3IIL6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMjSGMTJ1DuZ2sm8D8jcoeXsEllnMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEveU5JWXhNblVPNW5heWJ3UHlOeWg1ZXdTV1djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHykOMA0G CSqGSIb3DQEBCwUAA4IBAQBeNt9x5bsyJJURl97tKJp65UwvMX3Z+Rxi8SvNSYND 84S8StRgTJL3AjytUI8cy9lIqWupjJ4QW7BbzAhle0r/i6sKilGCfb8PIQQEDE2v swOaOgpB36ZbJSayRTwltWrhpk4A/zzGZls41s+5nM83HZYGwl7KLeBQ+CLcSKiA Or3n+LFwCEU6CviR+IyWFrx2EHtqFyxOaeruIWG4zUv9tNYjsFohRXF2T5aLKDpc QjwZYPAFhO600GSACNAgbB9gDgE2VqTyC/wtzMS2l5JYUVG6Nvx41b//0ad3AQxa mVApKqtCtItPTamQVnss8eHfpqACuh58uRUJsM+Kjfgl -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:33 2026 by rpki-client