This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/y_HpVwqkxGf9RKiTbPlKlI6SwA4.roa File: y_HpVwqkxGf9RKiTbPlKlI6SwA4.roa (raw, json) Hash identifier: HrXw2qyXYnJqXxwziQH0WN+XcyEYu9MDffn18koM2xA= Subject key identifier: CB:F1:E9:57:0A:A4:C4:67:FD:44:A8:93:6C:F9:4A:94:8E:92:C0:0E Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C77169FD442AF025EB332E379827E8 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/y_HpVwqkxGf9RKiTbPlKlI6SwA4.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35463 IP address blocks: 82.177.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:71:69:fd:44:2a:f0:25:eb:33:2e:37:98:27:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbf1e9570aa4c467fd44a8936cf94a948e92c00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bb:4f:cf:3d:e3:4d:1f:64:db:a2:d4:1f:1d: 10:33:8a:57:a4:0d:02:69:65:0c:66:af:ac:99:2d: 33:79:50:c9:1a:eb:2b:2c:57:f3:92:00:26:f3:24: 97:b8:75:ef:28:06:d2:be:97:41:b1:ba:c1:80:d0: 91:69:48:d2:55:cc:1b:de:08:d7:8a:21:69:01:f7: 47:14:ad:80:2b:9e:91:4f:27:3e:c1:e6:e5:b1:c9: 06:0b:11:b1:0a:57:14:48:ac:57:a3:2a:47:53:a2: f0:04:ee:10:ae:71:bc:dc:8a:93:f0:48:66:c9:20: 6b:ce:e8:03:a1:66:19:56:5c:f6:e2:4f:cf:68:68: 04:9f:19:69:07:32:f8:78:3b:36:b2:17:b6:75:c2: e8:30:a6:48:85:85:6f:6a:0e:1a:d5:35:f9:ec:fc: a0:0d:a0:56:7d:b2:12:48:81:8b:4f:1c:fd:93:22: 96:85:e8:68:12:6f:b2:20:cf:56:28:31:6f:f3:67: 91:65:a9:de:04:1d:2a:80:1f:97:62:b0:7d:19:b6: c2:7e:ad:6a:66:da:bc:3b:b6:53:cf:54:50:ef:71: a6:53:58:46:df:91:4a:b8:d7:6e:ac:b3:ba:d6:31: b9:8d:fa:f2:8a:e0:0d:61:28:bb:ef:db:43:54:af: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F1:E9:57:0A:A4:C4:67:FD:44:A8:93:6C:F9:4A:94:8E:92:C0:0E X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/y_HpVwqkxGf9RKiTbPlKlI6SwA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.224.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:20:4d:26:ad:58:d9:22:11:e1:d3:84:08:ce:57:16:29:54: c2:90:c8:f3:b5:38:ba:0d:a9:08:22:b1:46:3a:d7:b1:fb:e5: 2e:17:20:13:97:6b:a0:92:11:84:8f:7d:a2:28:03:f8:73:68: e3:a1:56:d3:e9:f1:5f:70:96:63:10:21:cd:5b:54:09:19:81: 9c:ca:0a:82:08:72:88:26:5b:1f:34:01:e9:6f:9d:0c:80:cd: 90:04:46:60:f3:16:f6:57:ca:b2:e6:7b:76:cf:35:18:ac:1f: 0d:6f:a1:f5:18:70:50:bb:1e:e6:cf:3b:f2:24:72:20:99:32: 54:76:f1:ac:61:6d:18:eb:c6:6a:32:b7:7d:e5:17:f4:7f:80: 6c:1f:99:37:02:bc:0b:52:a2:c2:af:76:67:56:32:94:60:a4: 71:86:01:47:b0:8e:fc:eb:4f:51:83:22:84:21:70:f8:b8:1f: 4a:b7:90:2f:e5:4a:5e:3b:c5:f2:3d:51:b9:61:0c:16:96:b0: da:85:f4:75:af:2d:eb:0e:05:d5:7e:94:94:b1:c0:5c:b6:26: 5e:42:78:79:83:cb:f3:dc:89:b7:19:f3:5e:62:26:61:7c:d3: 09:f5:59:7f:85:83:9e:04:20:f1:94:4b:e6:f1:55:3d:53:bb: 3b:3e:64:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3Fp/UQq8CXrMy43mCfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmYxZTk1NzBhYTRjNDY3ZmQ0NGE4OTM2Y2Y5NGE5NDhlOTJjMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LtPzz3jTR9k26LUHx0QM4pXpA0C aWUMZq+smS0zeVDJGusrLFfzkgAm8ySXuHXvKAbSvpdBsbrBgNCRaUjSVcwb3gjX iiFpAfdHFK2AK56RTyc+weblsckGCxGxClcUSKxXoypHU6LwBO4QrnG83IqT8Ehm ySBrzugDoWYZVlz24k/PaGgEnxlpBzL4eDs2she2dcLoMKZIhYVvag4a1TX57Pyg DaBWfbISSIGLTxz9kyKWhehoEm+yIM9WKDFv82eRZaneBB0qgB+XYrB9GbbCfq1q Ztq8O7ZTz1RQ73GmU1hG35FKuNdurLO61jG5jfryiuANYSi779tDVK8VvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMvx6VcKpMRn/USok2z5SpSOksAOMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEveV9IcFZ3cWt4R2Y5UktpVGJQbEtsSTZTd0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUrHgMA0G CSqGSIb3DQEBCwUAA4IBAQAqIE0mrVjZIhHh04QIzlcWKVTCkMjztTi6DakIIrFG Otex++UuFyATl2ugkhGEj32iKAP4c2jjoVbT6fFfcJZjECHNW1QJGYGcygqCCHKI JlsfNAHpb50MgM2QBEZg8xb2V8qy5nt2zzUYrB8Nb6H1GHBQux7mzzvyJHIgmTJU dvGsYW0Y68ZqMrd95Rf0f4BsH5k3ArwLUqLCr3ZnVjKUYKRxhgFHsI78609RgyKE IXD4uB9Kt5Av5UpeO8XyPVG5YQwWlrDahfR1ry3rDgXVfpSUscBctiZeQnh5g8vz 3Im3GfNeYiZhfNMJ9Vl/hYOeBCDxlEvm8VU9U7s7PmSl -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:37 2026 by rpki-client