This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa File: eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa (raw, json) Hash identifier: Rl68HFZO+NzHdjcGZ7M/7lCLTV99GPY1FIFYCt0/pnw= Subject key identifier: 78:3E:55:3A:F6:D3:10:62:B2:93:61:46:1B:1B:81:55:20:4D:47:40 Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e Certificate serial: 019B7E37714D9D1851C87EE026DE0F1EC76A Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa Signing time: Fri 02 Jan 2026 10:18:41 +0000 ROA not before: Fri 02 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12180 IP address blocks: 81.91.112.0/20 maxlen: 20 217.17.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:71:4d:9d:18:51:c8:7e:e0:26:de:0f:1e:c7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e Validity Not Before: Jan 2 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=783e553af6d31062b29361461b1b8155204d4740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:e7:85:dc:b4:af:4e:5c:7b:fe:59:26:01: 9a:01:d6:5d:a5:55:ae:e1:30:f5:81:6f:0e:0d:06: af:44:bc:09:07:d1:21:e4:ee:21:90:b0:05:00:b6: b4:72:e5:60:0f:b0:f3:b7:26:66:3a:a5:fc:fb:1c: ac:11:84:7f:fe:09:ce:ac:59:11:04:5a:9c:75:3f: 57:36:10:2c:7b:51:79:b4:c4:ae:97:e8:db:89:85: 12:15:fe:63:fc:2f:2c:ba:39:ab:b3:74:ea:3e:fe: 56:b7:57:a9:25:56:a6:60:2a:e8:c7:03:e1:8b:99: 91:72:df:1c:74:7b:42:92:0f:2b:12:65:1b:d0:b0: a0:9d:1d:e7:47:08:34:fc:dc:5b:46:1c:eb:2d:a4: 06:cc:73:9a:31:75:d2:41:ed:08:56:ee:0b:a8:e7: 39:e9:12:85:3a:2b:f0:48:a9:e2:be:ee:62:fa:65: 87:55:80:f7:86:59:2d:0a:ad:7c:78:23:cb:d8:df: 6a:d8:ca:7d:a0:50:7a:11:64:ca:29:ee:47:b0:67: b4:09:a0:5a:bd:14:a9:9c:61:74:4a:41:76:9d:d1: 75:26:b0:0b:6a:b4:38:41:d3:61:1d:64:ad:ee:7c: 75:62:64:fa:70:92:09:47:14:3c:ba:6b:08:d9:26: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3E:55:3A:F6:D3:10:62:B2:93:61:46:1B:1B:81:55:20:4D:47:40 X509v3 Authority Key Identifier: keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.91.112.0/20 217.17.144.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:34:74:be:4d:c4:c8:eb:8c:b7:ec:c4:83:20:48:f0:9b:26: 97:48:65:42:25:e7:9c:9a:4d:6f:20:c0:6f:01:5d:25:a8:7a: b9:a9:36:67:14:b7:ce:69:5a:2e:3d:aa:a1:17:0b:d4:07:b9: d4:2b:6b:f1:6f:23:58:b4:49:e9:0b:0f:9d:07:82:d7:25:3a: 2a:68:e7:af:53:84:1b:96:9c:e6:08:65:35:9d:3e:7d:90:68: a3:29:fd:7e:48:2a:d0:ec:55:d7:77:5f:42:cc:37:57:7c:08: d9:ff:d7:7e:ac:e0:1e:f0:d8:49:9d:01:6b:be:fe:95:fc:4b: b0:2f:8c:f9:63:75:11:74:40:ef:01:7e:e0:08:26:5f:77:53: 09:44:9e:a0:31:73:14:09:00:76:02:c4:23:a7:b2:b8:c6:2e: 8c:f5:2b:fa:c2:8d:4f:ee:27:18:8e:8f:b3:57:22:60:15:4f: f3:33:03:d8:69:aa:e9:3b:ef:c1:b3:47:61:a2:53:e6:dd:a7: 0b:46:b7:9d:28:5a:cb:82:5c:51:a0:a3:e8:fd:74:54:e5:aa: 34:8d:b6:06:ff:1b:c2:7b:60:cf:a6:b9:c0:fc:16:80:19:fd: 3e:0b:09:d1:f6:e0:74:b0:2b:47:60:fa:6c:86:d7:0f:9b:53: 39:96:0e:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N3FNnRhRyH7gJt4PHsdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZmFmNmZhMjViOGQyYWNiMWI0NGRjZGQ1NTQzN2FiYTIy MjZlOWUwHhcNMjYwMTAyMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODNlNTUzYWY2ZDMxMDYyYjI5MzYxNDYxYjFiODE1NTIwNGQ0NzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJHnhdy0r05ce/5ZJgGaAdZdpVWu 4TD1gW8ODQavRLwJB9Eh5O4hkLAFALa0cuVgD7DztyZmOqX8+xysEYR//gnOrFkR BFqcdT9XNhAse1F5tMSul+jbiYUSFf5j/C8sujmrs3TqPv5Wt1epJVamYCroxwPh i5mRct8cdHtCkg8rEmUb0LCgnR3nRwg0/NxbRhzrLaQGzHOaMXXSQe0IVu4LqOc5 6RKFOivwSKnivu5i+mWHVYD3hlktCq18eCPL2N9q2Mp9oFB6EWTKKe5HsGe0CaBa vRSpnGF0SkF2ndF1JrALarQ4QdNhHWSt7nx1YmT6cJIJRxQ8umsI2SbX4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHg+VTr20xBispNhRhsbgVUgTUdAMB8GA1UdIwQY MBaAFMr69voluNKssbRNzdVUN6uiIm6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZyMi1pVzQwcXl4dEUzTjFWUTNxNklpYnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YzY1MDctOWQ3Zi00MmM3LTlkMTIt MGUzNTAwMTc3OGE1LzEvZUQ1Vk92YlRFR0t5azJGR0d4dUJWU0JOUjBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85YzY1MDctOWQ3Zi00MmM3LTlkMTItMGUzNTAwMTc3OGE1 LzEveXZyMi1pVzQwcXl4dEUzTjFWUTNxNklpYnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUVtwAwQE 2RGQMA0GCSqGSIb3DQEBCwUAA4IBAQA7NHS+TcTI64y37MSDIEjwmyaXSGVCJeec mk1vIMBvAV0lqHq5qTZnFLfOaVouPaqhFwvUB7nUK2vxbyNYtEnpCw+dB4LXJToq aOevU4QblpzmCGU1nT59kGijKf1+SCrQ7FXXd19CzDdXfAjZ/9d+rOAe8NhJnQFr vv6V/EuwL4z5Y3URdEDvAX7gCCZfd1MJRJ6gMXMUCQB2AsQjp7K4xi6M9Sv6wo1P 7icYjo+zVyJgFU/zMwPYaarpO+/Bs0dholPm3acLRredKFrLglxRoKPo/XRU5ao0 jbYG/xvCe2DPprnA/BaAGf0+CwnR9uB0sCtHYPpshtcPm1M5lg4k -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:45 2026 by rpki-client