This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/yXEtTJb7Q9QNq9QwBOpKF1Og1mg.roa File: yXEtTJb7Q9QNq9QwBOpKF1Og1mg.roa (raw, json) Hash identifier: DbsY9yqJmKOSdLO9tL/m8Sp1oKJbQqdJXvqChVz5qJw= Subject key identifier: C9:71:2D:4C:96:FB:43:D4:0D:AB:D4:30:04:EA:4A:17:53:A0:D6:68 Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056 Certificate serial: 019B79ECD5597C02ECD3A921870CFF146690 Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/yXEtTJb7Q9QNq9QwBOpKF1Og1mg.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50538 IP address blocks: 37.110.240.0/21 maxlen: 21 109.235.216.0/21 maxlen: 21 2a03:dcc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d5:59:7c:02:ec:d3:a9:21:87:0c:ff:14:66:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9712d4c96fb43d40dabd43004ea4a1753a0d668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:b5:b1:9b:2d:21:20:db:a8:a1:73:59:64: e0:e0:ac:a5:4f:fb:6c:69:87:fd:13:ee:5e:7f:fd: c7:cb:cf:d9:33:03:ce:db:15:4e:64:dc:56:75:2b: b5:d2:e6:40:ed:ac:09:66:3b:af:92:98:35:37:6f: 29:23:45:b1:c4:2b:28:2b:25:9b:2d:e8:51:72:f9: dd:4c:69:09:5d:b6:d6:d6:2f:5d:37:dd:87:97:30: 20:03:5a:d2:e2:97:be:6a:54:16:d9:dc:2b:8c:9f: 97:f9:96:c0:56:ef:a1:1c:ec:f8:d8:eb:3d:dc:55: 86:dd:8a:ca:64:01:0a:c5:e2:27:4b:15:79:12:f0: dc:1c:64:be:88:b1:80:ef:83:17:01:aa:72:9c:10: 67:53:5e:8b:db:9d:90:bc:52:bc:78:f0:b9:7e:3e: 45:02:25:6e:92:0f:9e:5a:bf:f4:27:b6:cb:db:32: c2:6c:c0:01:8b:9e:79:a2:7d:0a:62:fa:48:f8:8c: fa:94:c5:10:e6:f0:d3:b7:68:d9:4a:11:0f:d4:fb: a3:0f:f7:8d:c1:5a:b2:42:ec:03:82:5e:5b:1c:f3: 95:33:e2:85:a3:9c:cd:4d:46:ea:e4:71:ef:6c:76: 8b:72:dd:db:1e:f6:59:b6:e4:bd:05:0d:39:7b:4e: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:71:2D:4C:96:FB:43:D4:0D:AB:D4:30:04:EA:4A:17:53:A0:D6:68 X509v3 Authority Key Identifier: keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/yXEtTJb7Q9QNq9QwBOpKF1Og1mg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.110.240.0/21 109.235.216.0/21 IPv6: 2a03:dcc0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:e3:c3:b2:8f:19:3a:ab:e9:b3:37:96:1f:dc:ba:d8:cb:be: 1d:f4:fb:50:58:64:cb:05:90:3f:3b:ca:a8:79:d0:b5:02:84: 04:7a:6f:89:53:5b:f7:91:1a:63:ec:cb:ec:db:b8:53:92:b7: 1b:e8:31:16:37:e2:3c:84:85:3b:fb:cc:91:69:a9:ae:2b:65: 2d:e4:b4:67:18:85:bb:17:81:c5:a6:4a:49:8c:01:86:ca:6d: 96:0c:db:c8:4f:af:83:45:0c:ba:cb:23:f1:40:1c:e9:b1:70: 3b:28:45:c0:93:2c:b8:b4:37:ad:5a:e8:c4:cb:9d:03:0c:be: 6e:df:4a:e1:78:d5:c0:65:cd:4f:56:67:7f:6c:56:e7:68:be: 7f:64:23:8d:09:5c:8b:5b:81:e0:85:b4:0f:03:12:78:bc:9b: ae:11:77:b9:e9:36:6c:89:d4:da:b7:4a:d3:ae:41:e4:0f:5d: e5:dc:7e:38:45:7e:47:80:bf:11:39:90:0d:cc:46:1d:ab:18: 28:aa:e2:e9:1f:40:a7:71:af:d1:45:45:7f:0e:a5:c9:ae:da: 0e:e2:86:e0:15:1c:ce:2b:b7:e7:4f:c4:53:b9:2f:c2:64:d7: 32:4b:f5:ed:e2:80:96:16:72:fb:fe:fb:05:94:c8:40:25:f1: 91:e1:d7:db -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57NVZfALs06khhwz/FGaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTI0ZTU4MTJmY2MzMTA2YjllYjBhZWIwMGU2MjdiYTIz NWQwNTYwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTcxMmQ0Yzk2ZmI0M2Q0MGRhYmQ0MzAwNGVhNGExNzUzYTBkNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uq1sZstISDbqKFzWWTg4KylT/ts aYf9E+5ef/3Hy8/ZMwPO2xVOZNxWdSu10uZA7awJZjuvkpg1N28pI0WxxCsoKyWb LehRcvndTGkJXbbW1i9dN92HlzAgA1rS4pe+alQW2dwrjJ+X+ZbAVu+hHOz42Os9 3FWG3YrKZAEKxeInSxV5EvDcHGS+iLGA74MXAapynBBnU16L252QvFK8ePC5fj5F AiVukg+eWr/0J7bL2zLCbMABi555on0KYvpI+Iz6lMUQ5vDTt2jZShEP1PujD/eN wVqyQuwDgl5bHPOVM+KFo5zNTUbq5HHvbHaLct3bHvZZtuS9BQ05e07qSwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMlxLUyW+0PUDavUMATqShdToNZoMB8GA1UdIwQY MBaAFCqiTlgS/MMQa56wrrAOYnuiNdBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FKT1dCTDh3eEJybnJDdXNBNWllNkkxMEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xMDM0NmUtMTUwNC00M2RkLWFiMjgt NjY4NThiYzhlYjc3LzEveVhFdFRKYjdROVFOcTlRd0JPcEtGMU9nMW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xMDM0NmUtMTUwNC00M2RkLWFiMjgtNjY4NThiYzhlYjc3 LzEvS3FKT1dCTDh3eEJybnJDdXNBNWllNkkxMEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJW7wAwQD bevYMA0EAgACMAcDBQAqA9zAMA0GCSqGSIb3DQEBCwUAA4IBAQB648Oyjxk6q+mz N5Yf3LrYy74d9PtQWGTLBZA/O8qoedC1AoQEem+JU1v3kRpj7Mvs27hTkrcb6DEW N+I8hIU7+8yRaamuK2Ut5LRnGIW7F4HFpkpJjAGGym2WDNvIT6+DRQy6yyPxQBzp sXA7KEXAkyy4tDetWujEy50DDL5u30rheNXAZc1PVmd/bFbnaL5/ZCONCVyLW4Hg hbQPAxJ4vJuuEXe56TZsidTat0rTrkHkD13l3H44RX5HgL8ROZANzEYdqxgoquLp H0Cnca/RRUV/DqXJrtoO4obgFRzOK7fnT8RTuS/CZNcyS/Xt4oCWFnL7/vsFlMhA JfGR4dfb -----END CERTIFICATE-----Generated at Mon Jan 26 06:21:11 2026 by rpki-client