This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yYaEWi_vX7jb_UhHG5e6GwzuVlU.roa File: yYaEWi_vX7jb_UhHG5e6GwzuVlU.roa (raw, json) Hash identifier: YveKS8IMSLsiziCbIKBQ1OE3v9YmzqP0rqq8vyNwlMw= Subject key identifier: C9:86:84:5A:2F:EF:5F:B8:DB:FD:48:47:1B:97:BA:1B:0C:EE:56:55 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7896F9B0373145F442CD2380812B3 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yYaEWi_vX7jb_UhHG5e6GwzuVlU.roa Signing time: Thu 01 Jan 2026 04:18:44 +0000 ROA not before: Thu 01 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201893 IP address blocks: 82.177.134.0/23 maxlen: 23 195.136.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:89:6f:9b:03:73:14:5f:44:2c:d2:38:08:12:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c986845a2fef5fb8dbfd48471b97ba1b0cee5655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:0a:b4:66:2d:04:15:93:41:58:22:1b:29: a5:46:57:01:3f:a3:42:d6:43:72:7a:bc:48:8d:0a: d0:a7:11:67:96:4f:b2:bb:56:4d:d3:66:3e:8d:00: ec:80:a0:ee:ee:35:1a:0a:4f:a5:c6:d2:18:69:54: ee:ac:5d:7c:16:5f:5c:ab:27:de:ce:e7:05:a8:c2: 4e:2a:99:36:f0:32:25:a0:83:76:f5:1a:8d:d2:e0: 59:65:a2:18:0c:92:ff:d4:97:0f:82:b3:c3:9f:f1: 21:4d:34:f2:4f:62:ce:ad:48:5e:0c:64:3d:c4:88: cb:74:64:de:a4:6e:54:f9:01:35:93:0c:d7:df:2b: 6a:50:6e:70:93:ab:ef:81:99:a8:8c:6b:3b:69:9d: cf:11:28:45:dc:11:c6:9c:8c:30:1b:10:08:07:aa: 2d:c7:f3:5c:3a:fb:0b:5d:fa:66:83:76:43:6b:44: 4c:a5:4e:8c:e2:f7:26:c5:06:05:f6:ae:93:b4:be: e5:95:ae:53:cc:01:07:05:6d:95:73:34:62:b8:ec: 03:c5:62:cf:fc:c9:f6:53:44:e0:2c:3a:c8:1d:34: cb:06:5f:d1:7b:73:ea:51:de:8a:e9:2a:bf:ac:af: 6c:3c:42:3b:29:f5:e6:f7:8b:9e:58:68:f6:ec:60: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:86:84:5A:2F:EF:5F:B8:DB:FD:48:47:1B:97:BA:1B:0C:EE:56:55 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yYaEWi_vX7jb_UhHG5e6GwzuVlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.134.0/23 195.136.66.0/23 Signature Algorithm: sha256WithRSAEncryption 61:92:a9:e8:4c:86:36:3d:f3:c0:f3:c6:76:79:b0:72:34:dc: ea:d7:93:37:af:a2:2b:a0:c4:2e:f4:04:a6:e9:fc:9b:07:3e: ba:05:0d:6c:56:fd:e3:53:71:c2:24:7d:e9:88:b0:e4:a1:18: a1:99:ae:c4:4c:93:fa:97:12:66:57:43:03:9a:1a:a8:99:e1: 80:44:d2:69:bd:31:09:d5:7d:38:06:76:f3:ae:de:81:83:f6: ed:7c:cd:d5:0a:44:8e:af:d8:64:01:16:46:b3:02:d5:27:06: 0a:74:9d:68:47:c7:51:bd:ef:2a:af:f2:0a:f9:3e:66:ab:98: 2f:bc:1f:3b:36:ab:57:9d:db:c3:d8:b4:1a:b2:1a:dc:5a:14: ed:c2:cf:4f:56:58:f8:74:69:67:74:a0:ce:e5:b6:6f:f6:53: 74:ae:7c:d1:d5:6d:c8:29:c7:8c:e9:be:7e:9b:1f:e3:43:e1: 7b:39:ad:78:ac:88:b6:04:52:79:05:79:76:a2:85:8b:36:e3: e9:34:b3:2b:a2:c3:c5:27:40:1f:b9:a8:96:89:93:6e:cb:2b: 05:07:b9:9b:b6:7f:84:57:13:c0:aa:d2:e3:5e:47:6d:5f:2c: 15:41:44:6d:20:bf:66:98:ae:3e:0c:be:d3:01:ce:a3:2b:60: ab:1d:de:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x4lvmwNzFF9ELNI4CBKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTg2ODQ1YTJmZWY1ZmI4ZGJmZDQ4NDcxYjk3YmExYjBjZWU1NjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZEKtGYtBBWTQVgiGymlRlcBP6NC 1kNyerxIjQrQpxFnlk+yu1ZN02Y+jQDsgKDu7jUaCk+lxtIYaVTurF18Fl9cqyfe zucFqMJOKpk28DIloIN29RqN0uBZZaIYDJL/1JcPgrPDn/EhTTTyT2LOrUheDGQ9 xIjLdGTepG5U+QE1kwzX3ytqUG5wk6vvgZmojGs7aZ3PEShF3BHGnIwwGxAIB6ot x/NcOvsLXfpmg3ZDa0RMpU6M4vcmxQYF9q6TtL7lla5TzAEHBW2VczRiuOwDxWLP /Mn2U0TgLDrIHTTLBl/Re3PqUd6K6Sq/rK9sPEI7KfXm94ueWGj27GBqGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMmGhFov71+42/1IRxuXuhsM7lZVMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEveVlhRVdpX3ZYN2piX1VoSEc1ZTZHd3p1VmxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUrGGAwQB w4hCMA0GCSqGSIb3DQEBCwUAA4IBAQBhkqnoTIY2PfPA88Z2ebByNNzq15M3r6Ir oMQu9ASm6fybBz66BQ1sVv3jU3HCJH3piLDkoRihma7ETJP6lxJmV0MDmhqomeGA RNJpvTEJ1X04Bnbzrt6Bg/btfM3VCkSOr9hkARZGswLVJwYKdJ1oR8dRve8qr/IK +T5mq5gvvB87NqtXndvD2LQashrcWhTtws9PVlj4dGlndKDO5bZv9lN0rnzR1W3I KceM6b5+mx/jQ+F7Oa14rIi2BFJ5BXl2ooWLNuPpNLMrosPFJ0AfuaiWiZNuyysF B7mbtn+EVxPAqtLjXkdtXywVQURtIL9mmK4+DL7TAc6jK2CrHd6T -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:39 2026 by rpki-client