This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yB2YXXdBiiRrLkc9LpNmPuTT0Q0.roa File: yB2YXXdBiiRrLkc9LpNmPuTT0Q0.roa (raw, json) Hash identifier: 1z+NvWbKhF0rKB9EjzJpGP06+3Or+lAsQpWXyNvFpUU= Subject key identifier: C8:1D:98:5D:77:41:8A:24:6B:2E:47:3D:2E:93:66:3E:E4:D3:D1:0D Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7752FB0945B765BAC64BEFEEDC0D6 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yB2YXXdBiiRrLkc9LpNmPuTT0Q0.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42877 IP address blocks: 82.177.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:75:2f:b0:94:5b:76:5b:ac:64:be:fe:ed:c0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c81d985d77418a246b2e473d2e93663ee4d3d10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:81:5c:00:be:65:55:f9:55:de:3d:f1:28: 0e:38:c3:74:b8:47:55:cd:ce:30:a6:1e:e1:6b:02: 7c:54:e2:72:1b:d6:88:d8:ac:8b:0f:72:cb:88:44: 8e:9f:75:85:87:aa:e5:60:90:6b:ef:d1:82:f6:4c: 0d:4a:e5:d5:b9:98:ff:4c:b4:e5:3b:1d:4e:f6:86: ed:42:c6:2a:2c:34:2b:75:3b:45:91:a3:86:4b:eb: 31:80:02:d8:68:88:94:55:67:8d:fa:de:47:10:01: 44:b8:a0:dc:4c:2e:b0:1b:2a:dd:93:a8:45:1b:7d: ec:f2:c3:73:78:dd:af:aa:8c:60:78:15:ba:20:29: cd:29:c0:50:ed:e2:b0:d0:53:7e:0a:29:11:7d:6e: 7b:1b:1f:a4:89:ce:fe:8b:f4:ce:49:fd:20:76:80: a5:5f:bc:5c:58:ac:f9:45:1a:96:c2:e4:cc:a1:e7: 9c:fb:17:15:ac:4e:c1:01:d5:65:0d:ee:47:89:b2: d3:7e:4e:9c:58:2f:8a:18:85:6d:c5:0a:3c:2f:13: b8:6a:f0:13:75:87:bf:6c:10:35:85:73:18:62:e2: ba:ed:81:1d:65:4b:ae:da:5f:4c:27:ce:8e:94:44: 9b:63:b4:2c:9e:00:0d:df:cd:36:18:3b:6e:2a:ab: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1D:98:5D:77:41:8A:24:6B:2E:47:3D:2E:93:66:3E:E4:D3:D1:0D X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yB2YXXdBiiRrLkc9LpNmPuTT0Q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.242.0/23 Signature Algorithm: sha256WithRSAEncryption b0:b4:19:f8:71:09:a7:a4:6a:44:50:d4:17:a2:b5:12:c0:f1: cc:8a:4f:5e:eb:5f:bd:93:79:11:33:1b:06:65:46:9f:63:09: 63:40:c1:1f:ab:fd:70:24:ee:c7:b2:1e:84:3b:0a:b3:34:7f: 8e:fa:ed:aa:64:97:69:da:6e:31:21:e8:db:e6:c9:b6:34:b2: 97:3c:05:91:3b:b4:e9:c6:45:19:6e:df:cf:a6:33:3b:84:14: b6:59:cf:ed:17:3d:b5:fd:94:4d:f1:ee:46:89:4e:70:16:b6: 56:a5:25:08:5f:d6:70:66:91:13:2f:fa:e6:e6:f7:a4:bf:71: 83:8d:4c:7c:67:3b:8c:de:c8:a6:88:28:da:47:ae:76:8a:97: cd:47:bf:d1:66:81:07:5f:29:03:83:06:2d:a0:09:8a:01:44: f2:87:a4:16:0f:e0:fd:3c:fe:0a:ef:91:0e:8b:5f:11:4f:65: 1b:0e:97:79:2a:b8:21:07:a6:89:80:33:39:a7:30:d6:7d:b3: c8:c7:36:ee:64:65:29:b2:8d:26:44:23:7d:de:cc:c7:02:e3: e8:51:82:20:0e:0d:6c:72:a4:80:3f:79:fa:0b:06:06:e5:31: 87:6f:38:b6:59:bc:42:fe:97:1a:19:b7:f6:d7:71:47:85:8c: f3:cd:ed:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3UvsJRbdlusZL7+7cDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODFkOTg1ZDc3NDE4YTI0NmIyZTQ3M2QyZTkzNjYzZWU0ZDNkMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkuBXAC+ZVX5Vd498SgOOMN0uEdV zc4wph7hawJ8VOJyG9aI2KyLD3LLiESOn3WFh6rlYJBr79GC9kwNSuXVuZj/TLTl Ox1O9obtQsYqLDQrdTtFkaOGS+sxgALYaIiUVWeN+t5HEAFEuKDcTC6wGyrdk6hF G33s8sNzeN2vqoxgeBW6ICnNKcBQ7eKw0FN+CikRfW57Gx+kic7+i/TOSf0gdoCl X7xcWKz5RRqWwuTMoeec+xcVrE7BAdVlDe5HibLTfk6cWC+KGIVtxQo8LxO4avAT dYe/bBA1hXMYYuK67YEdZUuu2l9MJ86OlESbY7QsngAN3802GDtuKqv7eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgdmF13QYokay5HPS6TZj7k09ENMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEveUIyWVhYZEJpaVJyTGtjOUxwTm1QdVRUMFEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUrHyMA0G CSqGSIb3DQEBCwUAA4IBAQCwtBn4cQmnpGpEUNQXorUSwPHMik9e61+9k3kRMxsG ZUafYwljQMEfq/1wJO7Hsh6EOwqzNH+O+u2qZJdp2m4xIejb5sm2NLKXPAWRO7Tp xkUZbt/PpjM7hBS2Wc/tFz21/ZRN8e5GiU5wFrZWpSUIX9ZwZpETL/rm5vekv3GD jUx8ZzuM3simiCjaR652ipfNR7/RZoEHXykDgwYtoAmKAUTyh6QWD+D9PP4K75EO i18RT2UbDpd5KrghB6aJgDM5pzDWfbPIxzbuZGUpso0mRCN93szHAuPoUYIgDg1s cqSAP3n6CwYG5TGHbzi2WbxC/pcaGbf213FHhYzzze2a -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:46 2026 by rpki-client