This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/yXyD_zifD57_3ENmURpKOxN4wrI.roa File: yXyD_zifD57_3ENmURpKOxN4wrI.roa (raw, json) Hash identifier: vtmbJA6HNA5a5SEYjfVwIxLDIaP7c5sX/Ao1BROY2M8= Subject key identifier: C9:7C:83:FF:38:9F:0F:9E:FF:DC:43:66:51:1A:4A:3B:13:78:C2:B2 Certificate issuer: /CN=10e5efe934cf377ddf373b366721f1339243f907 Certificate serial: 019B7D5B9DE49BE778E343F60066187699E6 Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/yXyD_zifD57_3ENmURpKOxN4wrI.roa Signing time: Fri 02 Jan 2026 06:18:34 +0000 ROA not before: Fri 02 Jan 2026 06:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26356 IP address blocks: 160.211.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:9d:e4:9b:e7:78:e3:43:f6:00:66:18:76:99:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907 Validity Not Before: Jan 2 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97c83ff389f0f9effdc4366511a4a3b1378c2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:b5:39:0a:2e:e1:0d:fb:43:23:62:23:19: f7:af:79:f2:7a:41:f1:f2:12:37:6a:28:e4:6e:9f: 89:e1:80:ba:f4:89:f5:f3:74:62:09:9e:67:b9:51: 13:1b:53:be:75:8b:da:60:95:71:0b:21:0b:85:71: 41:45:1d:1c:9e:d3:2c:9d:e0:cd:98:fc:63:0a:5a: cd:89:23:84:50:0d:47:27:9d:fb:39:35:8e:ba:0a: 5c:9f:da:20:8b:d8:77:e1:01:be:23:f3:83:21:81: a3:11:86:00:8f:8c:60:e8:03:9d:a3:b3:4a:f7:6c: 3e:34:4a:df:4d:32:bd:e5:da:21:3f:35:e2:bb:80: 33:82:b1:66:9a:3b:25:a6:3d:6a:69:e3:7a:1a:3a: 02:90:85:07:5f:ef:1a:18:7e:0f:b0:41:e6:58:7b: 10:6b:33:6e:20:64:8c:97:2b:49:98:1a:55:ce:29: f0:29:ee:27:c9:2e:92:d4:82:0a:f1:79:fb:02:dd: ec:14:86:e1:e5:da:9e:93:a6:89:1d:aa:87:29:88: 6e:0e:d7:10:ac:7a:ef:63:96:9b:c6:15:78:7e:45: 04:0b:e4:0e:85:6a:23:8b:50:bf:95:df:e0:f9:f5: 6a:5f:79:fa:af:69:19:6d:f8:fd:01:f1:b4:88:06: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:83:FF:38:9F:0F:9E:FF:DC:43:66:51:1A:4A:3B:13:78:C2:B2 X509v3 Authority Key Identifier: keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/yXyD_zifD57_3ENmURpKOxN4wrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.211.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3a:5a:91:16:30:8e:c2:bc:0b:d9:fd:0e:95:5a:30:65:d0:43: 2c:79:33:f5:93:e4:c6:f8:64:f4:ab:0c:13:5f:ad:c4:35:af: 18:16:4b:4b:30:35:27:aa:29:f5:8f:f2:5e:76:8b:0c:28:2e: bb:82:e4:52:dd:73:ee:b2:83:24:99:8d:c1:34:a1:90:6e:20: 20:7c:b3:bc:83:02:f8:44:fd:a9:ca:28:5e:07:62:67:0c:78: 13:8d:55:f8:3a:a3:a1:93:8c:3c:6a:70:19:f5:b2:f2:53:d4: 1c:b3:17:60:30:7d:ea:79:52:db:5b:a5:6d:31:3f:4f:a9:39: 2e:74:db:2a:08:57:b5:51:81:df:60:3a:56:38:69:13:9c:88: 80:2d:a5:44:2f:2e:54:1f:c3:2c:78:cd:c0:fe:2b:b9:30:ac: a8:e2:2c:39:26:4f:19:57:82:b3:8c:73:c1:4e:31:f3:07:b1: 20:ad:ee:89:de:5e:db:01:3c:31:75:2a:4f:36:67:95:2d:15: d3:08:9c:91:7a:07:55:b4:bd:fc:43:c7:5c:07:35:5d:0e:5c: ba:1f:7b:34:3b:08:ec:a7:9c:89:ea:d0:d7:f5:0f:c0:36:54: 5b:35:39:67:ae:ed:34:e5:b4:f4:cf:e3:c9:15:7e:b7:9c:d8: cc:27:c9:76 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9W53km+d440P2AGYYdpnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZTVlZmU5MzRjZjM3N2RkZjM3M2IzNjY3MjFmMTMzOTI0 M2Y5MDcwHhcNMjYwMTAyMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTdjODNmZjM4OWYwZjllZmZkYzQzNjY1MTFhNGEzYjEzNzhjMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEi1OQou4Q37QyNiIxn3r3nyekHx 8hI3aijkbp+J4YC69In183RiCZ5nuVETG1O+dYvaYJVxCyELhXFBRR0cntMsneDN mPxjClrNiSOEUA1HJ537OTWOugpcn9ogi9h34QG+I/ODIYGjEYYAj4xg6AOdo7NK 92w+NErfTTK95dohPzXiu4AzgrFmmjslpj1qaeN6GjoCkIUHX+8aGH4PsEHmWHsQ azNuIGSMlytJmBpVzinwKe4nyS6S1IIK8Xn7At3sFIbh5dqek6aJHaqHKYhuDtcQ rHrvY5abxhV4fkUEC+QOhWoji1C/ld/g+fVqX3n6r2kZbfj9AfG0iAaSmQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMl8g/84nw+e/9xDZlEaSjsTeMKyMB8GA1UdIwQY MBaAFBDl7+k0zzd93zc7Nmch8TOSQ/kHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTIt OTVjMGEzZDk1Y2Q0LzEveVh5RF96aWZENTdfM0VObVVScEtPeE40d3JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTItOTVjMGEzZDk1Y2Q0 LzEvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoNMwDQYJ KoZIhvcNAQELBQADggEBADpakRYwjsK8C9n9DpVaMGXQQyx5M/WT5Mb4ZPSrDBNf rcQ1rxgWS0swNSeqKfWP8l52iwwoLruC5FLdc+6ygySZjcE0oZBuICB8s7yDAvhE /anKKF4HYmcMeBONVfg6o6GTjDxqcBn1svJT1ByzF2Awfep5UttbpW0xP0+pOS50 2yoIV7VRgd9gOlY4aROciIAtpUQvLlQfwyx4zcD+K7kwrKjiLDkmTxlXgrOMc8FO MfMHsSCt7oneXtsBPDF1Kk82Z5UtFdMInJF6B1W0vfxDx1wHNV0OXLofezQ7COyn nInq0Nf1D8A2VFs1OWeu7TTltPTP48kVfrec2MwnyXY= -----END CERTIFICATE-----Generated at Mon Jan 26 01:21:39 2026 by rpki-client