This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/yL1p9BGlippA5i5iVucMVBM9S4Q.roa File: yL1p9BGlippA5i5iVucMVBM9S4Q.roa (raw, json) Hash identifier: oRvpMIJ5EsAuSoZty3HeQ0Lgu38Q+0FUJoGBlWaTjec= Subject key identifier: C8:BD:69:F4:11:A5:8A:9A:40:E6:2E:62:56:E7:0C:54:13:3D:4B:84 Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Certificate serial: 019B7C11D606144345A82531672309380E7B Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/yL1p9BGlippA5i5iVucMVBM9S4Q.roa Signing time: Fri 02 Jan 2026 00:18:22 +0000 ROA not before: Fri 02 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59943 IP address blocks: 2.57.40.0/24 maxlen: 24 2.57.41.0/24 maxlen: 24 2.57.42.0/24 maxlen: 24 2.57.43.0/24 maxlen: 24 91.236.244.0/24 maxlen: 24 91.236.245.0/24 maxlen: 24 185.70.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d6:06:14:43:45:a8:25:31:67:23:09:38:0e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Validity Not Before: Jan 2 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8bd69f411a58a9a40e62e6256e70c54133d4b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:87:0a:2e:2a:05:e4:ef:22:5c:71:e9:9f: 85:c1:07:a8:84:19:fb:be:9d:41:69:c7:bd:ae:13: 0b:67:65:17:cf:42:51:6d:6a:0e:f1:b9:32:fe:ba: e0:22:a4:0b:5c:7f:6e:eb:7e:d4:e7:4b:cd:d2:d4: c6:b5:2e:7f:0c:9d:1c:64:dd:c8:a3:ad:8a:5b:08: 8a:42:e6:0c:ba:7c:6c:96:5b:54:45:ea:c4:d9:b4: f3:40:fc:2a:db:b1:6a:89:38:bd:b1:b0:ce:54:f5: 37:a8:99:50:27:cf:8a:0e:5a:3a:56:68:bc:2c:4b: 98:53:55:53:c1:a5:50:46:ce:79:b6:aa:d7:9c:0e: 24:03:bd:98:f2:a8:e7:5b:b8:0a:c2:91:65:e4:af: c6:c7:7e:51:b4:08:18:5e:07:0e:ba:28:0f:67:b1: 14:a0:18:85:1b:ff:87:97:80:e6:a4:c8:7b:99:6c: 71:b3:f7:0c:a1:89:47:7c:22:b4:b0:fe:00:81:e1: 1c:42:25:d7:76:a6:f6:b3:17:d9:be:66:c9:b8:27: b9:45:f8:33:98:77:ff:47:b8:5e:21:75:5d:18:4e: 49:c0:03:a2:01:e6:b1:52:99:f9:e4:50:cc:00:3f: 6e:5b:74:34:ec:96:9e:a8:6c:fd:10:45:8d:1c:bb: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BD:69:F4:11:A5:8A:9A:40:E6:2E:62:56:E7:0C:54:13:3D:4B:84 X509v3 Authority Key Identifier: keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/yL1p9BGlippA5i5iVucMVBM9S4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.40.0/22 91.236.244.0/23 185.70.44.0/24 Signature Algorithm: sha256WithRSAEncryption 67:6b:86:20:50:3e:ea:82:78:5e:f9:94:63:15:d2:ff:fb:61: 3f:97:0d:e7:ff:f1:1c:dc:ca:6f:65:f2:5b:a1:4f:a7:0e:36: 4b:b0:9b:98:d0:dd:26:e6:54:37:34:68:b9:f0:a4:ed:d7:79: 17:99:ef:57:39:0f:52:03:6f:82:e7:87:d3:83:44:43:b5:e2: af:49:fa:af:76:ca:f0:53:bf:19:7b:ee:17:41:62:57:45:14: 1c:61:de:9e:f9:52:61:fb:3e:c1:6f:88:78:37:ec:bf:8f:9a: 04:f1:82:71:22:7c:85:29:24:fe:b0:db:1a:70:5d:ed:3d:d2: e6:ef:c5:6c:6b:1b:6f:3e:e6:3a:5f:d2:22:53:c8:5b:e7:68: b4:a4:95:87:94:8e:d6:4c:5d:d1:b5:ae:d9:a1:b1:a2:95:ec: be:61:50:8f:83:cc:34:ea:3c:a7:38:f2:88:04:7d:6f:b1:08: 2b:38:7d:10:9f:53:67:7c:4d:a4:11:47:05:08:5b:d2:f4:f3: 92:55:73:b0:dd:ff:d2:ed:0c:7f:f7:ad:be:11:84:00:05:e7: 23:14:a2:3a:8c:d7:8b:c4:b5:9e:d1:e0:f5:01:31:6d:ee:37: 7c:94:a4:47:19:02:14:f0:c7:56:62:38:30:60:cc:76:2d:1b: af:56:2e:6e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EdYGFENFqCUxZyMJOA57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYThjNmU5MzA4YmIwMDA4MzEwMDE3MWUwMGRiYjYxNDBm NGY1ODAwHhcNMjYwMTAyMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGJkNjlmNDExYTU4YTlhNDBlNjJlNjI1NmU3MGM1NDEzM2Q0Yjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjiHCi4qBeTvIlxx6Z+FwQeohBn7 vp1Bace9rhMLZ2UXz0JRbWoO8bky/rrgIqQLXH9u637U50vN0tTGtS5/DJ0cZN3I o62KWwiKQuYMunxslltURerE2bTzQPwq27FqiTi9sbDOVPU3qJlQJ8+KDlo6Vmi8 LEuYU1VTwaVQRs55tqrXnA4kA72Y8qjnW7gKwpFl5K/Gx35RtAgYXgcOuigPZ7EU oBiFG/+Hl4DmpMh7mWxxs/cMoYlHfCK0sP4AgeEcQiXXdqb2sxfZvmbJuCe5Rfgz mHf/R7heIXVdGE5JwAOiAeaxUpn55FDMAD9uW3Q07JaeqGz9EEWNHLvJJQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMi9afQRpYqaQOYuYlbnDFQTPUuEMB8GA1UdIwQY MBaAFBCoxukwi7AAgxABceANu2FA9PWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYt NmI0OTdiMmMwYjM4LzEveUwxcDlCR2xpcHBBNWk1aVZ1Y01WQk05UzRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYtNmI0OTdiMmMwYjM4 LzEvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjkoAwQB W+z0AwQAuUYsMA0GCSqGSIb3DQEBCwUAA4IBAQBna4YgUD7qgnhe+ZRjFdL/+2E/ lw3n//Ec3MpvZfJboU+nDjZLsJuY0N0m5lQ3NGi58KTt13kXme9XOQ9SA2+C54fT g0RDteKvSfqvdsrwU78Ze+4XQWJXRRQcYd6e+VJh+z7Bb4h4N+y/j5oE8YJxInyF KST+sNsacF3tPdLm78VsaxtvPuY6X9IiU8hb52i0pJWHlI7WTF3Rta7ZobGiley+ YVCPg8w06jynOPKIBH1vsQgrOH0Qn1NnfE2kEUcFCFvS9POSVXOw3f/S7Qx/962+ EYQABecjFKI6jNeLxLWe0eD1ATFt7jd8lKRHGQIU8MdWYjgwYMx2LRuvVi5u -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:35 2026 by rpki-client