This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/YFo06dx0o1PHDC6LUgSFCDM_MLE.roa File: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (raw, json) Hash identifier: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8= Subject key identifier: 60:5A:34:E9:DC:74:A3:53:C7:0C:2E:8B:52:04:85:08:33:3F:30:B1 Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Certificate serial: 019B7D5D0EAC718C96133E98F50B89B5E4F6 Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/YFo06dx0o1PHDC6LUgSFCDM_MLE.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4134 IP address blocks: 147.78.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0e:ac:71:8c:96:13:3e:98:f5:0b:89:b5:e4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=605a34e9dc74a353c70c2e8b52048508333f30b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:75:0c:f9:eb:fb:7a:31:bd:2b:4a:63:77:44: dd:d8:53:4c:91:d4:14:aa:13:e8:e6:51:04:54:0e: 76:a0:09:5a:34:19:77:70:b0:af:5e:70:08:9b:10: 59:bd:d6:2b:0c:17:c0:02:c7:db:9a:7c:f2:35:84: 95:3a:6d:0f:18:bf:3c:aa:c8:79:f1:ee:9d:25:6f: 62:3d:6a:ee:7c:b2:2a:ec:10:6a:94:95:07:ad:83: e3:0d:19:5a:58:be:a2:30:d0:60:74:90:c9:f3:72: 0b:2c:e2:22:e3:af:68:a4:7c:09:00:99:07:1d:f8: 1f:8c:68:08:bd:b8:a6:e6:8b:5d:26:c9:d7:dd:e9: 54:1e:23:2c:16:be:4c:fd:af:19:2f:55:e1:59:e5: 44:56:99:16:4e:5f:10:9d:4c:f4:25:36:25:da:c2: fa:44:83:2f:ec:15:d1:99:6e:5a:bb:18:04:32:33: 50:d8:ec:57:58:20:3f:8f:d6:15:8c:de:44:b9:c6: 8b:97:90:84:af:f9:66:01:20:61:79:da:1d:3c:63: 99:f9:68:fe:2e:d4:26:fe:ce:a8:c6:63:87:fa:9e: 26:ba:c2:5a:62:31:70:ca:0c:ee:a9:29:d3:ea:2b: 49:e8:78:a9:4b:19:6e:82:c5:51:bd:62:31:60:c1: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5A:34:E9:DC:74:A3:53:C7:0C:2E:8B:52:04:85:08:33:3F:30:B1 X509v3 Authority Key Identifier: keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/YFo06dx0o1PHDC6LUgSFCDM_MLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.134.0/23 Signature Algorithm: sha256WithRSAEncryption 63:61:ed:98:89:a1:55:d8:3d:41:fc:0e:7a:e2:3b:82:93:aa: 7b:a5:92:2c:07:0c:72:ac:c7:cc:68:a9:22:12:9e:e4:62:03: dc:b2:53:01:99:88:25:a1:99:14:58:dd:27:40:02:70:38:0d: 67:2b:ac:48:6c:db:a9:52:ec:7e:0e:a8:e7:29:29:39:78:af: c3:61:7f:17:e1:17:82:bc:5f:90:dd:06:71:6c:b5:41:64:59: 17:53:a5:25:85:0a:96:84:85:bc:1a:8f:08:22:2e:02:6e:22: 4f:40:63:f9:65:ab:8b:cb:0e:7b:df:55:e9:e5:d1:b2:53:41: 58:02:c6:0b:01:8d:bd:e5:a9:45:42:7b:01:8a:12:df:e5:90: a1:ce:96:90:29:62:7d:f3:73:c7:d4:99:0a:93:cf:d9:f8:f8: 69:6b:79:73:84:9b:70:8f:1c:a3:dd:d7:64:98:c8:e1:df:49: 69:12:7e:3e:51:08:18:75:d5:36:03:1e:0d:b4:13:20:2c:c0: 34:47:8e:c6:50:91:1d:27:b7:3d:a7:2c:91:c5:eb:f8:eb:cb: f4:0e:f5:8a:dd:e1:ee:12:8a:4e:96:e6:98:71:44:55:f3:46: 9d:28:69:fc:b4:96:5c:ea:55:c3:c1:29:04:72:b2:00:bf:ee: 93:98:32:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQ6scYyWEz6Y9QuJteT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj MzlmMzQwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDVhMzRlOWRjNzRhMzUzYzcwYzJlOGI1MjA0ODUwODMzM2YzMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnUM+ev7ejG9K0pjd0Td2FNMkdQU qhPo5lEEVA52oAlaNBl3cLCvXnAImxBZvdYrDBfAAsfbmnzyNYSVOm0PGL88qsh5 8e6dJW9iPWrufLIq7BBqlJUHrYPjDRlaWL6iMNBgdJDJ83ILLOIi469opHwJAJkH HfgfjGgIvbim5otdJsnX3elUHiMsFr5M/a8ZL1XhWeVEVpkWTl8QnUz0JTYl2sL6 RIMv7BXRmW5auxgEMjNQ2OxXWCA/j9YVjN5EucaLl5CEr/lmASBhedodPGOZ+Wj+ LtQm/s6oxmOH+p4musJaYjFwygzuqSnT6itJ6HipSxlugsVRvWIxYMGE+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBaNOncdKNTxwwui1IEhQgzPzCxMB8GA1UdIwQY MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt MjU2MzM5NzM2YzJiLzEvWUZvMDZkeDBvMVBIREM2TFVnU0ZDRE1fTUxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk06GMA0G CSqGSIb3DQEBCwUAA4IBAQBjYe2YiaFV2D1B/A564juCk6p7pZIsBwxyrMfMaKki Ep7kYgPcslMBmYgloZkUWN0nQAJwOA1nK6xIbNupUux+DqjnKSk5eK/DYX8X4ReC vF+Q3QZxbLVBZFkXU6UlhQqWhIW8Go8IIi4CbiJPQGP5ZauLyw5731Xp5dGyU0FY AsYLAY295alFQnsBihLf5ZChzpaQKWJ983PH1JkKk8/Z+Phpa3lzhJtwjxyj3ddk mMjh30lpEn4+UQgYddU2Ax4NtBMgLMA0R47GUJEdJ7c9pyyRxev468v0DvWK3eHu EopOluaYcURV80adKGn8tJZc6lXDwSkEcrIAv+6TmDKT -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:54 2026 by rpki-client