This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/YrEr9LA-khkmEW07gT8B8DqCy0I.roa File: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (raw, json) Hash identifier: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34= Subject key identifier: 62:B1:2B:F4:B0:3E:92:19:26:11:6D:3B:81:3F:01:F0:3A:82:CB:42 Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7 Certificate serial: 019B78A2B167A365C87E635F84EAA35A2D11 Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/YrEr9LA-khkmEW07gT8B8DqCy0I.roa Signing time: Thu 01 Jan 2026 08:18:06 +0000 ROA not before: Thu 01 Jan 2026 08:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29141 IP address blocks: 37.247.112.0/24 maxlen: 24 37.247.113.0/24 maxlen: 24 37.247.114.0/24 maxlen: 24 37.247.115.0/24 maxlen: 24 37.247.118.0/24 maxlen: 24 2a03:402::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b1:67:a3:65:c8:7e:63:5f:84:ea:a3:5a:2d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7 Validity Not Before: Jan 1 08:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62b12bf4b03e921926116d3b813f01f03a82cb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:ce:be:9d:0c:de:72:90:29:b6:64:79:ef: 37:48:29:8d:0b:2b:8d:52:7e:50:b0:13:ac:b5:77: 10:11:74:90:56:54:4f:f0:81:b2:1d:3f:d1:02:23: d4:34:93:8c:94:0d:fd:e7:77:5e:10:fe:39:50:49: 51:a1:b1:eb:3b:af:bd:2a:85:6d:a7:20:af:88:96: e1:6a:9a:37:d2:c2:4a:1e:4e:5e:2b:e6:06:91:37: 08:4f:3c:bd:ca:80:97:b2:2b:2f:f5:04:c8:42:ec: 6b:d4:c2:36:1f:89:be:cf:ad:01:cb:3e:28:14:62: 9e:79:72:85:5d:f2:71:c9:e9:fc:f9:bb:1d:9d:b4: 77:a7:34:e4:d8:60:02:f3:f1:5d:db:b1:9c:cf:b3: 91:a8:e4:d1:0d:26:9a:d6:16:a9:b9:7c:04:fb:5b: 34:25:8e:b0:cf:b1:67:76:e2:03:c3:e8:c0:0a:44: b7:a0:c0:a5:af:67:e9:8b:2f:f0:22:d1:6d:b1:9f: 20:55:33:3a:d9:fe:fd:c0:c4:d9:14:b0:8b:7d:6f: b0:75:7f:7d:47:e9:b5:2f:68:3c:fb:20:a7:51:37: 33:f7:ab:00:50:c3:e6:7e:bf:14:a6:2c:72:cf:27: 1e:d7:9f:ad:a3:0b:1c:51:d6:26:ea:16:ce:e8:1e: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B1:2B:F4:B0:3E:92:19:26:11:6D:3B:81:3F:01:F0:3A:82:CB:42 X509v3 Authority Key Identifier: keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/YrEr9LA-khkmEW07gT8B8DqCy0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.247.112.0/22 37.247.118.0/24 IPv6: 2a03:402::/32 Signature Algorithm: sha256WithRSAEncryption 13:ad:40:d6:93:c2:dc:a9:2a:e4:44:77:87:72:9e:d9:a8:a7: e1:42:3a:ec:82:1c:21:c6:7b:a9:32:22:e7:dc:22:ec:14:3f: 1b:75:62:7d:0c:d7:82:c5:13:47:75:99:ff:eb:bc:16:5a:62: 1f:07:1d:d3:0c:a5:bb:fd:65:fe:c8:81:b3:36:b3:60:6e:5f: f9:15:46:8a:5e:c1:b1:5c:c6:0a:25:ba:5e:1c:b8:15:99:86: a9:45:95:1b:18:d2:33:49:e1:4b:29:7b:12:d0:24:a6:ac:f2: 6f:6d:49:25:01:49:01:09:5e:89:96:76:ff:74:f5:c1:24:a7: 6f:7a:44:b7:23:5f:40:22:3d:c0:7a:e5:24:06:db:cc:95:5c: 47:27:67:9d:da:ee:b6:10:7f:67:93:2c:6d:b0:47:bd:36:34: 84:5d:40:c1:3e:9e:65:1b:22:2f:3b:53:c4:78:2f:6c:65:e7: 83:f1:7e:72:d2:34:2c:42:b1:88:47:48:d5:37:64:3b:6f:f3: ea:85:d0:1f:dd:9d:cc:b6:9e:f1:4a:bc:03:f4:28:c3:1a:25: f2:47:90:3f:22:56:d7:89:d0:b1:fa:8c:92:95:f7:4c:96:d1: b3:86:b4:ff:31:b7:cd:92:9f:46:47:5a:de:9a:a2:50:d9:e2: 56:5a:50:dd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4orFno2XIfmNfhOqjWi0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5 MmFlYjcwHhcNMjYwMTAxMDgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmIxMmJmNGIwM2U5MjE5MjYxMTZkM2I4MTNmMDFmMDNhODJjYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiLOvp0M3nKQKbZkee83SCmNCyuN Un5QsBOstXcQEXSQVlRP8IGyHT/RAiPUNJOMlA3953deEP45UElRobHrO6+9KoVt pyCviJbhapo30sJKHk5eK+YGkTcITzy9yoCXsisv9QTIQuxr1MI2H4m+z60Byz4o FGKeeXKFXfJxyen8+bsdnbR3pzTk2GAC8/Fd27Gcz7ORqOTRDSaa1hapuXwE+1s0 JY6wz7FnduIDw+jACkS3oMClr2fpiy/wItFtsZ8gVTM62f79wMTZFLCLfW+wdX99 R+m1L2g8+yCnUTcz96sAUMPmfr8Upixyzyce15+towscUdYm6hbO6B4LrQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGKxK/SwPpIZJhFtO4E/AfA6gstCMB8GA1UdIwQY MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt NDU2NWYwNGY4ZDg1LzEvWXJFcjlMQS1raGttRVcwN2dUOEI4RHFDeTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1 LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCJfdwAwQA Jfd2MA0EAgACMAcDBQAqAwQCMA0GCSqGSIb3DQEBCwUAA4IBAQATrUDWk8LcqSrk RHeHcp7ZqKfhQjrsghwhxnupMiLn3CLsFD8bdWJ9DNeCxRNHdZn/67wWWmIfBx3T DKW7/WX+yIGzNrNgbl/5FUaKXsGxXMYKJbpeHLgVmYapRZUbGNIzSeFLKXsS0CSm rPJvbUklAUkBCV6Jlnb/dPXBJKdvekS3I19AIj3AeuUkBtvMlVxHJ2ed2u62EH9n kyxtsEe9NjSEXUDBPp5lGyIvO1PEeC9sZeeD8X5y0jQsQrGIR0jVN2Q7b/PqhdAf 3Z3Mtp7xSrwD9CjDGiXyR5A/IlbXidCx+oySlfdMltGzhrT/MbfNkp9GR1remqJQ 2eJWWlDd -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:25 2026 by rpki-client