This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/2YaZrEMg7LZBl_zgZzUJtJwcln8.roa File: 2YaZrEMg7LZBl_zgZzUJtJwcln8.roa (raw, json) Hash identifier: HB07P7vDHjc2ngfs2qPvHHK8zBcmGcnuzjmLRG9H2/8= Subject key identifier: D9:86:99:AC:43:20:EC:B6:41:97:FC:E0:67:35:09:B4:9C:1C:96:7F Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC95510ABF587164C455F8EEB4F1320 Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/2YaZrEMg7LZBl_zgZzUJtJwcln8.roa Signing time: Thu 01 Jan 2026 18:19:33 +0000 ROA not before: Thu 01 Jan 2026 18:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212013 IP address blocks: 5.59.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:55:10:ab:f5:87:16:4c:45:5f:8e:eb:4f:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d98699ac4320ecb64197fce0673509b49c1c967f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:d1:38:65:63:2b:90:d1:0e:0c:c1:74:77: 4a:9b:2f:a9:ed:78:d8:ff:1a:ef:be:08:63:60:18: 50:cc:3a:60:f6:90:14:4d:eb:11:28:02:2d:5a:23: ab:34:5b:91:ab:50:36:94:46:1a:75:f4:93:ad:35: 66:fa:4a:d0:76:c2:ee:29:56:13:70:b4:bc:4b:10: 98:ba:c4:9d:5f:af:8b:ca:d6:8e:43:05:b8:d1:32: 3a:fa:a8:06:e2:fd:a3:36:9b:2f:9e:e6:70:ad:61: 6d:aa:91:53:eb:39:cc:1a:e6:38:4f:81:50:2b:90: 46:b1:31:65:0d:11:d9:c1:88:e3:62:d0:aa:f3:a7: 0b:f2:00:be:43:c6:5f:a1:c7:23:42:72:93:d1:9a: 3a:dc:06:6c:c2:6e:de:f8:90:7e:15:6b:85:77:14: 16:2b:7d:cb:c2:0a:7f:76:3f:b0:9b:05:04:35:13: ff:14:1f:10:32:4a:81:0f:d6:df:7b:4a:b5:11:57: c8:2e:d1:6b:2c:63:84:ae:a8:53:74:44:58:fc:cf: 6a:08:79:79:24:a5:5d:d7:d6:c4:70:53:c9:09:16: 93:c6:cd:31:89:49:dc:8c:b3:f3:9a:d8:90:25:1c: c1:f4:f8:4b:a6:55:3a:a0:6e:e1:fb:c1:0f:6e:51: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:86:99:AC:43:20:EC:B6:41:97:FC:E0:67:35:09:B4:9C:1C:96:7F X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/2YaZrEMg7LZBl_zgZzUJtJwcln8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.105.0/24 Signature Algorithm: sha256WithRSAEncryption 53:6a:99:09:22:8b:af:b5:00:91:d0:c1:38:f7:ac:fd:bc:7f: 23:e0:a2:0e:d5:8b:26:15:67:6c:18:09:70:73:cd:11:05:9b: ef:10:90:9d:02:a9:c6:5f:93:21:98:0d:ef:35:95:24:48:80: 56:20:4d:e2:65:29:a0:e5:1e:5d:de:d1:20:26:9f:22:15:f0: 73:0b:dd:16:27:96:74:6f:a4:57:95:28:2a:cd:64:ec:4f:de: 4e:86:cc:a2:b8:b2:bc:93:4f:5b:f8:31:c4:9a:d7:8f:f4:1f: ee:b9:01:eb:fb:ce:0d:4b:84:f3:9c:77:ca:4e:1d:fe:55:6e: 54:3b:47:30:05:f9:8c:19:3c:24:f4:82:65:cf:b4:6f:39:27: a4:32:f1:54:14:8f:0b:4f:b5:45:7e:d6:32:e5:92:68:f7:4b: 1e:8b:97:b8:ae:b3:fa:5c:d6:26:c8:6d:63:16:d4:56:17:84: d5:24:c8:8c:e4:a4:a5:df:6c:d7:8d:bb:58:b4:78:15:07:cf: 6d:4e:11:22:63:e9:51:20:a7:d7:10:55:4b:0c:d1:d9:2f:98: e5:db:dd:ac:c6:4e:89:83:87:fa:0f:89:4b:a3:9a:26:33:39: 2a:5f:a2:67:7e:7f:32:26:70:79:ef:58:b7:d8:20:62:ed:74: f0:8e:67:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVUQq/WHFkxFX47rTxMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTg2OTlhYzQzMjBlY2I2NDE5N2ZjZTA2NzM1MDliNDljMWM5NjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3TROGVjK5DRDgzBdHdKmy+p7XjY /xrvvghjYBhQzDpg9pAUTesRKAItWiOrNFuRq1A2lEYadfSTrTVm+krQdsLuKVYT cLS8SxCYusSdX6+LytaOQwW40TI6+qgG4v2jNpsvnuZwrWFtqpFT6znMGuY4T4FQ K5BGsTFlDRHZwYjjYtCq86cL8gC+Q8ZfoccjQnKT0Zo63AZswm7e+JB+FWuFdxQW K33Lwgp/dj+wmwUENRP/FB8QMkqBD9bfe0q1EVfILtFrLGOErqhTdERY/M9qCHl5 JKVd19bEcFPJCRaTxs0xiUncjLPzmtiQJRzB9PhLplU6oG7h+8EPblFRFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmGmaxDIOy2QZf84Gc1CbScHJZ/MB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvMllhWnJFTWc3TFpCbF96Z1p6VUp0SndjbG44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTtpMA0G CSqGSIb3DQEBCwUAA4IBAQBTapkJIouvtQCR0ME496z9vH8j4KIO1YsmFWdsGAlw c80RBZvvEJCdAqnGX5MhmA3vNZUkSIBWIE3iZSmg5R5d3tEgJp8iFfBzC90WJ5Z0 b6RXlSgqzWTsT95OhsyiuLK8k09b+DHEmteP9B/uuQHr+84NS4TznHfKTh3+VW5U O0cwBfmMGTwk9IJlz7RvOSekMvFUFI8LT7VFftYy5ZJo90sei5e4rrP6XNYmyG1j FtRWF4TVJMiM5KSl32zXjbtYtHgVB89tThEiY+lRIKfXEFVLDNHZL5jl292sxk6J g4f6D4lLo5omMzkqX6Jnfn8yJnB571i32CBi7XTwjmf4 -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:40 2026 by rpki-client