This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/YogSL5izPYypDSpRN-bhm7FC-Zc.roa File: YogSL5izPYypDSpRN-bhm7FC-Zc.roa (raw, json) Hash identifier: SYMSdL9jKWAhxjZJN7qyE8Onp0ESoc3LmqO5sBgdEyM= Subject key identifier: 62:88:12:2F:98:B3:3D:8C:A9:0D:2A:51:37:E6:E1:9B:B1:42:F9:97 Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced Certificate serial: 019B7E37622104E379966C8ED5131BDCEB3E Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/YogSL5izPYypDSpRN-bhm7FC-Zc.roa Signing time: Fri 02 Jan 2026 10:18:37 +0000 ROA not before: Fri 02 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205247 IP address blocks: 185.224.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:62:21:04:e3:79:96:6c:8e:d5:13:1b:dc:eb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced Validity Not Before: Jan 2 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6288122f98b33d8ca90d2a5137e6e19bb142f997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:45:35:6f:05:f2:c5:7e:ac:38:45:b3:d0: 21:44:ae:1f:14:60:8a:83:55:1c:30:26:2e:c2:96: 83:e4:69:28:24:41:e3:69:56:af:4c:55:26:12:f5: 22:ad:f2:62:71:93:00:d6:d1:1a:2c:50:8a:30:0f: 62:fb:49:ce:36:4c:78:ea:93:6d:3f:e3:f5:a9:8e: 9d:fd:eb:e6:55:25:e0:8e:27:11:25:e6:cb:7f:0c: 60:2b:37:c1:e3:bc:7b:28:0a:90:25:f9:6b:73:6f: 4d:d0:fb:13:a7:c5:9d:79:73:09:c2:68:89:2f:0a: aa:3b:cf:6a:62:bd:6f:2d:81:ea:0f:0a:55:70:cb: 4d:2e:bb:10:0f:56:f2:db:6f:b4:7b:c4:36:85:1f: b5:25:ef:c5:6b:45:82:25:3c:9c:2e:c0:40:ca:12: 09:db:f9:7e:2d:9e:4d:45:dc:e7:4a:34:d0:f9:52: bc:58:97:8b:fb:45:98:9b:41:6f:01:b1:5a:e8:fb: d1:7f:f4:b8:ef:42:be:45:f7:cc:4f:e4:26:21:c6: 8e:33:d8:8b:12:ed:3b:66:76:c2:4b:3f:53:dc:41: 20:cd:cf:77:b7:2f:a6:40:4a:8b:53:cd:8d:09:3a: 04:2e:37:60:87:09:63:48:eb:2d:fc:ad:5f:b1:7d: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:88:12:2F:98:B3:3D:8C:A9:0D:2A:51:37:E6:E1:9B:B1:42:F9:97 X509v3 Authority Key Identifier: keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/YogSL5izPYypDSpRN-bhm7FC-Zc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.108.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:d4:27:66:27:3b:26:f7:21:24:6f:04:ec:7e:2a:ea:39:57: a0:ba:f3:ab:dc:2a:6c:1c:95:58:0c:ed:56:cc:0e:1e:96:82: 0f:0f:24:d2:22:6f:92:87:91:86:62:53:d9:39:24:32:7f:52: 36:64:84:e8:17:68:f3:80:1b:88:b9:0f:94:31:7b:37:e6:74: 47:b9:70:98:2d:70:6c:a0:d6:04:dd:97:34:05:56:54:42:55: 29:01:20:85:88:4f:48:92:bd:5f:30:9b:98:bb:25:e2:88:fc: e8:18:98:cb:50:fd:32:46:78:e0:ba:5c:fc:fa:76:db:ba:6a: 20:c5:28:89:37:8f:e2:8e:0e:bd:1d:c5:33:70:0f:e3:6a:2d: a9:29:1c:c7:a4:b1:0e:81:fb:15:0c:0a:54:c9:80:33:05:17: 1d:72:e8:06:46:de:5d:d7:a6:4d:7b:87:b2:dd:25:a1:f2:45: 8e:92:d1:09:c7:6d:39:69:bc:73:2e:2d:dc:f4:d5:56:eb:eb: 13:57:15:67:c1:7b:e6:48:09:ee:39:4c:cb:f0:72:56:ba:b9: 42:cf:ef:7c:0f:d5:6a:ee:f6:3d:ae:d4:2e:2e:5b:e9:73:04: ae:49:7a:62:e9:71:a8:d7:3c:f7:af:f2:1d:b3:b1:ef:e9:27: 65:fa:1f:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2IhBON5lmyO1RMb3Os+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDA0ZGE2MDJkYWIwNjI1YmU3MjIzZDA5MzIwYjFjZDdh YWZjZWQwHhcNMjYwMTAyMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjg4MTIyZjk4YjMzZDhjYTkwZDJhNTEzN2U2ZTE5YmIxNDJmOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KJFNW8F8sV+rDhFs9AhRK4fFGCK g1UcMCYuwpaD5GkoJEHjaVavTFUmEvUirfJicZMA1tEaLFCKMA9i+0nONkx46pNt P+P1qY6d/evmVSXgjicRJebLfwxgKzfB47x7KAqQJflrc29N0PsTp8WdeXMJwmiJ LwqqO89qYr1vLYHqDwpVcMtNLrsQD1by22+0e8Q2hR+1Je/Fa0WCJTycLsBAyhIJ 2/l+LZ5NRdznSjTQ+VK8WJeL+0WYm0FvAbFa6PvRf/S470K+RffMT+QmIcaOM9iL Eu07ZnbCSz9T3EEgzc93ty+mQEqLU82NCToELjdghwljSOst/K1fsX2BUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKIEi+Ysz2MqQ0qUTfm4ZuxQvmXMB8GA1UdIwQY MBaAFFRATaYC2rBiW+ciPQkyCxzXqvztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgt MWIyNDQ4NGU1NWVjLzEvWW9nU0w1aXpQWXlwRFNwUk4tYmhtN0ZDLVpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgtMWIyNDQ4NGU1NWVj LzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueBsMA0G CSqGSIb3DQEBCwUAA4IBAQCO1CdmJzsm9yEkbwTsfirqOVeguvOr3CpsHJVYDO1W zA4eloIPDyTSIm+Sh5GGYlPZOSQyf1I2ZIToF2jzgBuIuQ+UMXs35nRHuXCYLXBs oNYE3Zc0BVZUQlUpASCFiE9Ikr1fMJuYuyXiiPzoGJjLUP0yRnjgulz8+nbbumog xSiJN4/ijg69HcUzcA/jai2pKRzHpLEOgfsVDApUyYAzBRcdcugGRt5d16ZNe4ey 3SWh8kWOktEJx205abxzLi3c9NVW6+sTVxVnwXvmSAnuOUzL8HJWurlCz+98D9Vq 7vY9rtQuLlvpcwSuSXpi6XGo1zz3r/Ids7Hv6Sdl+h+0 -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:17 2026 by rpki-client