This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa File: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (raw, json) Hash identifier: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04= Subject key identifier: CB:FB:CC:D9:BC:45:7A:ED:D1:D9:94:49:0A:00:46:B5:D5:5C:24:D1 Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429 Certificate serial: 019B7758C174EF9F380159322B2BB584AAAF Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43131 IP address blocks: 81.161.226.0/24 maxlen: 24 2a03:e842::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c1:74:ef:9f:38:01:59:32:2b:2b:b5:84:aa:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a10c73530bb684fd569dfc432704675704183429 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbfbccd9bc457aedd1d994490a0046b5d55c24d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:15:e5:b5:c3:78:68:4d:7a:20:9b:64:85: eb:ae:71:fe:cd:d7:81:e8:7d:20:7b:1a:40:c7:4a: ec:df:7e:0c:e5:43:8f:51:27:fd:c2:c1:a3:22:f6: 14:19:91:0f:3c:ab:a9:79:83:53:13:bf:fd:c5:21: fd:e3:62:3b:f9:7f:45:26:14:d3:93:31:e2:3b:24: ba:c3:07:88:a2:f1:6b:cc:a3:64:8a:12:d9:00:6d: 72:27:31:a6:52:b4:43:15:1b:9e:53:b9:3e:0f:8a: e6:ea:bf:ca:a1:09:86:61:9e:c1:4a:15:1f:e2:39: 62:2f:ca:63:1e:eb:cc:2a:df:11:63:e2:4b:4b:29: e0:eb:f9:6b:28:d2:d7:d7:ce:e2:81:66:c0:c0:78: c2:60:32:2b:cb:29:1c:1c:c0:53:aa:5d:a3:13:27: 90:a4:34:1b:f0:3c:43:d3:d7:57:23:09:c1:28:18: 87:9d:79:68:91:df:a8:51:8b:4d:18:6d:f9:5f:cb: 39:61:c3:93:ee:2c:8a:f0:6c:f9:e8:7d:b2:8f:d8: 1c:e3:16:09:97:1b:9e:ea:9f:26:4d:42:c8:23:4f: 80:e9:b5:f2:0c:b9:f3:bb:51:1a:a7:4f:d9:33:4b: e0:cd:1e:dd:a6:3b:59:e9:61:11:d0:42:6f:d5:b8: 4a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FB:CC:D9:BC:45:7A:ED:D1:D9:94:49:0A:00:46:B5:D5:5C:24:D1 X509v3 Authority Key Identifier: keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.226.0/24 IPv6: 2a03:e842::/44 Signature Algorithm: sha256WithRSAEncryption 31:17:0f:2d:ef:fb:82:89:d4:2c:1b:3f:8d:c2:bb:08:9c:82: 82:97:7b:a0:4a:86:5e:94:75:3e:bf:ec:3c:d7:35:e4:5e:62: 06:82:9c:dc:75:c7:00:0e:40:0f:f0:fb:68:26:6e:ae:92:cd: c4:13:8e:82:4d:68:bd:44:9a:d2:5b:91:79:21:fb:d5:0c:c9: 37:ec:f4:9a:73:9b:44:aa:1d:67:0b:8c:a2:45:91:be:e8:17: 68:d3:34:9f:70:c5:d5:7f:90:ed:da:c1:bb:f6:d0:08:96:c2: 37:9a:47:09:89:59:7a:2a:c7:37:d6:ad:2c:f9:9a:9d:d2:51: 42:a5:80:b2:fb:0a:05:2a:27:a8:43:99:fe:65:c9:14:4a:10: ea:b5:e0:11:ad:c9:ff:08:d7:72:ca:65:3e:49:05:01:f1:3f: c3:a6:66:19:d7:a7:ec:ba:57:bc:c6:c7:eb:85:6c:1f:c6:7d: 57:0b:e8:e4:84:5c:d7:86:37:8e:32:44:a0:08:16:64:c7:cd: 59:b0:71:72:47:30:a6:7b:c0:0b:0e:ea:26:c2:16:44:ef:90: b3:77:c5:8c:f1:91:70:2b:82:aa:77:21:01:c1:2c:8e:34:62: e7:c1:b1:38:bf:d0:a2:c3:a9:26:1a:5c:12:08:56:82:7a:9e: c8:02:be:c3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WMF07584AVkyKyu1hKqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx ODM0MjkwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmZiY2NkOWJjNDU3YWVkZDFkOTk0NDkwYTAwNDZiNWQ1NWMyNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf8V5bXDeGhNeiCbZIXrrnH+zdeB 6H0gexpAx0rs334M5UOPUSf9wsGjIvYUGZEPPKupeYNTE7/9xSH942I7+X9FJhTT kzHiOyS6wweIovFrzKNkihLZAG1yJzGmUrRDFRueU7k+D4rm6r/KoQmGYZ7BShUf 4jliL8pjHuvMKt8RY+JLSyng6/lrKNLX187igWbAwHjCYDIryykcHMBTql2jEyeQ pDQb8DxD09dXIwnBKBiHnXlokd+oUYtNGG35X8s5YcOT7iyK8Gz56H2yj9gc4xYJ lxue6p8mTULII0+A6bXyDLnzu1Eap0/ZM0vgzR7dpjtZ6WER0EJv1bhKYQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMv7zNm8RXrt0dmUSQoARrXVXCTRMB8GA1UdIwQY MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt N2QwODI5MWE3NjYyLzEveV92TTJieEZldTNSMlpSSkNnQkd0ZFZjSk5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUaHiMA8E AgACMAkDBwQqA+hCAAAwDQYJKoZIhvcNAQELBQADggEBADEXDy3v+4KJ1CwbP43C uwicgoKXe6BKhl6UdT6/7DzXNeReYgaCnNx1xwAOQA/w+2gmbq6SzcQTjoJNaL1E mtJbkXkh+9UMyTfs9Jpzm0SqHWcLjKJFkb7oF2jTNJ9wxdV/kO3awbv20AiWwjea RwmJWXoqxzfWrSz5mp3SUUKlgLL7CgUqJ6hDmf5lyRRKEOq14BGtyf8I13LKZT5J BQHxP8OmZhnXp+y6V7zGx+uFbB/GfVcL6OSEXNeGN44yRKAIFmTHzVmwcXJHMKZ7 wAsO6ibCFkTvkLN3xYzxkXArgqp3IQHBLI40YufBsTi/0KLDqSYaXBIIVoJ6nsgC vsM= -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:25 2026 by rpki-client