This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/yjfBxV_rdwxlbtWbC0f6CXmYidM.roa File: yjfBxV_rdwxlbtWbC0f6CXmYidM.roa (raw, json) Hash identifier: cEHh1mv/vVXkxP03jyzCPQKZKyj1EccWurODavR3WD4= Subject key identifier: CA:37:C1:C5:5F:EB:77:0C:65:6E:D5:9B:0B:47:FA:09:79:98:89:D3 Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c Certificate serial: 019B7910792B1756E144E995C20F8B44935B Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/yjfBxV_rdwxlbtWbC0f6CXmYidM.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21371 IP address blocks: 37.46.0.0/21 maxlen: 21 80.69.0.0/19 maxlen: 19 89.187.96.0/19 maxlen: 19 185.2.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:79:2b:17:56:e1:44:e9:95:c2:0f:8b:44:93:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca37c1c55feb770c656ed59b0b47fa09799889d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:99:6c:df:ec:a4:2f:99:a2:eb:bd:c2:d2:f8: f6:15:72:2d:10:86:89:93:98:2b:4a:fd:d9:ba:b1: 20:8f:29:94:48:8d:ed:72:ae:b0:20:36:cc:a7:d5: 75:05:98:3a:f5:29:7b:19:8a:fc:34:3f:cd:67:06: 84:5d:ec:b0:60:71:ee:f2:e1:9d:e1:b6:fe:71:0c: 1b:be:b0:ed:87:6e:56:58:1a:4b:c5:95:44:44:35: e6:07:22:24:6e:8b:f8:41:ad:14:82:61:e2:dc:ab: e0:37:18:67:8c:ec:34:d7:90:1d:48:b7:88:53:16: 60:66:63:7e:a5:53:cf:08:59:e4:29:5a:c3:54:14: 5d:4f:06:73:9b:d0:32:70:76:d8:bb:8a:21:3e:3e: 7d:cd:40:d2:b4:e9:7e:f4:9b:60:dc:82:e4:ae:d2: c5:a0:57:8f:2f:74:19:05:e8:bf:f9:76:99:c4:e2: 48:27:9d:e9:5b:2a:bd:3b:ff:00:25:6f:bb:ba:d7: c6:3b:7b:a2:67:3a:da:db:48:bc:9c:7d:37:35:31: 85:46:81:81:07:84:d2:23:42:ba:55:6e:43:8b:02: 74:c7:e1:3c:af:6d:40:ba:9d:6f:dc:e5:ec:da:7b: f2:74:cd:c3:a6:42:7e:d6:79:15:77:e2:12:16:a8: 80:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:37:C1:C5:5F:EB:77:0C:65:6E:D5:9B:0B:47:FA:09:79:98:89:D3 X509v3 Authority Key Identifier: keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/yjfBxV_rdwxlbtWbC0f6CXmYidM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.0.0/21 80.69.0.0/19 89.187.96.0/19 185.2.164.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:cc:19:a2:ff:af:ee:fa:e1:99:c5:cf:8f:aa:c3:db:de:81: 28:f5:1f:97:76:c4:59:9b:a5:12:06:c0:00:8f:2f:1f:92:86: b8:be:7f:4b:21:40:e6:e2:b1:d8:cd:eb:48:a7:ff:19:47:d2: 37:08:3f:c6:9b:47:ad:a2:79:83:a6:7f:9d:21:71:3a:b6:f5: 12:93:63:b5:52:57:9f:46:81:03:41:83:10:99:19:92:a7:7c: a5:79:dc:63:94:f1:67:30:16:53:01:03:57:61:97:78:84:41: 00:b0:be:88:cd:0f:47:58:de:01:20:4d:c3:7a:cc:1c:f3:62: be:7f:84:74:3c:1f:b7:35:05:9a:3f:da:16:ee:ab:84:fd:41: 6e:bd:47:b6:fc:ee:d3:b0:84:d4:2a:30:06:00:e5:28:25:3b: 02:d0:50:bb:28:c9:a7:f0:22:d9:49:fe:49:0c:6e:35:dd:59: 61:e5:e3:20:50:94:cf:fa:d7:79:58:a8:a0:2b:a1:58:74:89: ed:a0:63:db:c2:b5:8a:41:7a:bd:72:8f:c2:0b:fe:9f:cd:89: b0:b4:ec:1b:90:6f:8d:86:6f:dc:b3:af:fc:06:5c:2f:f5:eb: 4a:bd:56:89:fc:e3:7c:5e:6e:50:51:cc:5a:33:8c:48:6a:c5: 66:4a:96:88 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EHkrF1bhROmVwg+LRJNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzRhMzVhYmZhODJkNTQ5ZTQ5MDcwNGQ2OGJiZTY1ODAw NWQ2M2MwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTM3YzFjNTVmZWI3NzBjNjU2ZWQ1OWIwYjQ3ZmEwOTc5OTg4OWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zls3+ykL5mi673C0vj2FXItEIaJ k5grSv3ZurEgjymUSI3tcq6wIDbMp9V1BZg69Sl7GYr8ND/NZwaEXeywYHHu8uGd 4bb+cQwbvrDth25WWBpLxZVERDXmByIkbov4Qa0UgmHi3KvgNxhnjOw015AdSLeI UxZgZmN+pVPPCFnkKVrDVBRdTwZzm9AycHbYu4ohPj59zUDStOl+9Jtg3ILkrtLF oFePL3QZBei/+XaZxOJIJ53pWyq9O/8AJW+7utfGO3uiZzra20i8nH03NTGFRoGB B4TSI0K6VW5DiwJ0x+E8r21Aup1v3OXs2nvydM3DpkJ+1nkVd+ISFqiATQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMo3wcVf63cMZW7VmwtH+gl5mInTMB8GA1UdIwQY MBaAFMM0o1q/qC1UnkkHBNaLvmWABdY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMt MjczODg0YjUzYzZlLzEveWpmQnhWX3Jkd3hsYnRXYkMwZjZDWG1ZaWRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMtMjczODg0YjUzYzZl LzEvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJS4AAwQF UEUAAwQFWbtgAwQCuQKkMA0GCSqGSIb3DQEBCwUAA4IBAQB+zBmi/6/u+uGZxc+P qsPb3oEo9R+XdsRZm6USBsAAjy8fkoa4vn9LIUDm4rHYzetIp/8ZR9I3CD/Gm0et onmDpn+dIXE6tvUSk2O1UlefRoEDQYMQmRmSp3yledxjlPFnMBZTAQNXYZd4hEEA sL6IzQ9HWN4BIE3Deswc82K+f4R0PB+3NQWaP9oW7quE/UFuvUe2/O7TsITUKjAG AOUoJTsC0FC7KMmn8CLZSf5JDG413Vlh5eMgUJTP+td5WKigK6FYdIntoGPbwrWK QXq9co/CC/6fzYmwtOwbkG+Nhm/cs6/8Blwv9etKvVaJ/ON8Xm5QUcxaM4xIasVm SpaI -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:34 2026 by rpki-client