This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/yP5IZXb_7446VPUdBZ-5do1NIhQ.roa File: yP5IZXb_7446VPUdBZ-5do1NIhQ.roa (raw, json) Hash identifier: NXBSg4FpuwKqoQ/ToBcnJwcPWxl5WInzzwqficKUDaQ= Subject key identifier: C8:FE:48:65:76:FF:EF:8E:3A:54:F5:1D:05:9F:B9:76:8D:4D:22:14 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78344A9826A10230AB6C5010E1308505 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/yP5IZXb_7446VPUdBZ-5do1NIhQ.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35536 IP address blocks: 94.124.116.0/24 maxlen: 24 2a09:6:6::/48 maxlen: 48 2a09:7:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4a:98:26:a1:02:30:ab:6c:50:10:e1:30:85:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8fe486576ffef8e3a54f51d059fb9768d4d2214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:22:c2:67:c0:a9:25:3d:93:3b:01:11:90: 04:14:a2:d8:53:f3:53:41:f6:5a:4d:d7:96:32:67: ef:a9:40:46:41:ac:5f:08:d8:8f:c4:bc:cc:0f:b6: a4:c5:46:dd:a7:2d:4d:31:41:4b:50:65:1a:08:5c: 8d:09:4c:e0:d7:2a:c8:4b:27:96:3c:42:f6:66:5d: 75:ce:94:80:fc:cc:bd:70:4d:2e:7e:35:80:61:81: 4d:80:56:d3:fc:0b:34:11:f2:3a:c0:10:77:c3:b2: 33:e3:17:18:f6:08:49:7b:04:57:91:60:24:65:5e: 1c:54:e0:ec:a0:3b:4e:90:4e:6a:f5:9e:4d:ec:c6: 73:3e:2d:6a:f9:8e:63:2c:92:7a:43:80:ff:a9:1d: c0:37:60:a7:af:00:d8:54:46:25:7c:1a:45:ea:e1: cc:8e:cb:ee:63:46:ab:62:d2:b8:5c:cf:f4:eb:62: 35:ab:e9:f4:10:3a:be:ed:d3:d7:0a:a5:2c:2d:3d: e5:c6:3d:85:06:1f:0b:c0:ae:bb:cc:b3:fd:68:7a: ce:9f:73:46:70:d3:c9:07:2f:cf:3e:7b:10:90:31: da:ee:a1:eb:63:17:f3:d6:f6:56:5e:4d:a8:40:96: 0c:c0:58:96:cf:7f:fb:d2:d9:82:c9:6c:98:32:3b: 17:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FE:48:65:76:FF:EF:8E:3A:54:F5:1D:05:9F:B9:76:8D:4D:22:14 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/yP5IZXb_7446VPUdBZ-5do1NIhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.116.0/24 IPv6: 2a09:6:6::/48 2a09:7:2003::/48 Signature Algorithm: sha256WithRSAEncryption 3b:28:e7:85:ca:5e:5b:17:99:1d:3f:c4:fc:f9:5e:0c:14:57: 63:1f:3f:5c:88:c6:fc:ba:d8:59:bb:10:2d:ab:00:b6:6b:e7: 25:7e:42:7e:cd:af:36:f7:7b:05:21:9c:9b:34:1f:8e:7c:08: 6c:b6:a4:b6:52:c3:4b:d3:39:52:4a:80:c5:06:96:7c:8e:ce: 48:e9:2b:2b:a5:45:03:45:18:f1:1e:81:69:70:61:4f:e8:9f: 4c:5b:65:0b:60:99:c8:5a:1b:3a:ef:af:eb:ec:44:ea:02:2d: c1:fb:ff:b7:c2:9a:bf:85:9b:58:06:ea:c2:10:34:f7:55:ef: 48:43:00:ca:b9:06:e4:5b:6c:b5:21:40:6c:12:ac:53:3e:a6: 2c:6e:66:a3:61:f1:f4:6d:c2:39:ec:bf:4c:7a:21:23:f7:1c: 05:43:6e:4b:dc:36:bc:9e:82:77:96:fb:77:92:47:48:8b:e7: 4d:ca:45:ca:20:d4:8d:05:52:e1:b1:ea:e8:16:0d:31:28:70: 30:d3:67:86:f2:e5:10:ab:3a:fe:7a:e3:50:6c:f6:d6:a0:87: d1:d9:98:48:60:98:7e:d4:ff:e8:a2:23:38:e6:ea:01:16:2b: 4b:54:58:49:d1:85:07:85:bd:7b:4d:ee:a7:7b:4c:09:b5:f7: f0:e9:ee:bf -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt4NEqYJqECMKtsUBDhMIUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGZlNDg2NTc2ZmZlZjhlM2E1NGY1MWQwNTlmYjk3NjhkNGQyMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk8iwmfAqSU9kzsBEZAEFKLYU/NT QfZaTdeWMmfvqUBGQaxfCNiPxLzMD7akxUbdpy1NMUFLUGUaCFyNCUzg1yrISyeW PEL2Zl11zpSA/My9cE0ufjWAYYFNgFbT/As0EfI6wBB3w7Iz4xcY9ghJewRXkWAk ZV4cVODsoDtOkE5q9Z5N7MZzPi1q+Y5jLJJ6Q4D/qR3AN2CnrwDYVEYlfBpF6uHM jsvuY0arYtK4XM/062I1q+n0EDq+7dPXCqUsLT3lxj2FBh8LwK67zLP9aHrOn3NG cNPJBy/PPnsQkDHa7qHrYxfz1vZWXk2oQJYMwFiWz3/70tmCyWyYMjsXmwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFMj+SGV2/++OOlT1HQWfuXaNTSIUMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEveVA1SVpYYl83NDQ2VlBVZEJaLTVkbzFOSWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAXnx0MBgE AgACMBIDBwAqCQAGAAYDBwAqCQAHIAMwDQYJKoZIhvcNAQELBQADggEBADso54XK XlsXmR0/xPz5XgwUV2MfP1yIxvy62Fm7EC2rALZr5yV+Qn7Nrzb3ewUhnJs0H458 CGy2pLZSw0vTOVJKgMUGlnyOzkjpKyulRQNFGPEegWlwYU/on0xbZQtgmchaGzrv r+vsROoCLcH7/7fCmr+Fm1gG6sIQNPdV70hDAMq5BuRbbLUhQGwSrFM+pixuZqNh 8fRtwjnsv0x6ISP3HAVDbkvcNryegneW+3eSR0iL503KRcog1I0FUuGx6ugWDTEo cDDTZ4by5RCrOv5641Bs9tagh9HZmEhgmH7U/+iiIzjm6gEWK0tUWEnRhQeFvXtN 7qd7TAm19/Dp7r8= -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:17 2026 by rpki-client