This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yjURpRBd8WZqP_E0upSdCQxAE7k.roa File: yjURpRBd8WZqP_E0upSdCQxAE7k.roa (raw, json) Hash identifier: pTEt7XlcFsk+7yWG2BxrxuXPtUAX2BP2HDrC6REo1eI= Subject key identifier: CA:35:11:A5:10:5D:F1:66:6A:3F:F1:34:BA:94:9D:09:0C:40:13:B9 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834453D12D9EE81303E0A52B8A324AC Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yjURpRBd8WZqP_E0upSdCQxAE7k.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8473 IP address blocks: 192.71.5.0/24 maxlen: 24 192.121.12.0/24 maxlen: 24 192.121.101.0/24 maxlen: 24 192.165.182.0/24 maxlen: 24 193.181.65.0/24 maxlen: 24 193.183.47.0/24 maxlen: 24 193.183.48.0/24 maxlen: 24 193.183.92.0/24 maxlen: 24 193.183.104.0/24 maxlen: 24 193.183.105.0/24 maxlen: 24 193.234.54.0/24 maxlen: 24 194.71.215.0/24 maxlen: 24 194.103.93.0/24 maxlen: 24 194.132.27.0/24 maxlen: 24 194.132.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:45:3d:12:d9:ee:81:30:3e:0a:52:b8:a3:24:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca3511a5105df1666a3ff134ba949d090c4013b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:ba:57:cc:13:73:06:b1:a0:34:62:3e:1a: 3d:5a:63:87:6d:4d:14:5b:e3:4b:8c:4e:86:2b:0c: 8b:9c:72:be:b7:08:6c:df:51:9f:a5:40:d7:ef:fc: 68:d8:25:bc:88:7c:6b:ee:72:08:5d:51:7e:04:92: 85:2e:f0:18:ed:2e:ed:df:93:ca:d9:9a:95:25:b8: fd:d1:45:ce:b3:ba:d1:e2:97:c8:89:72:f8:fb:24: ba:5c:3f:c5:cc:fd:82:32:9d:a8:a2:63:e8:ec:13: 9e:af:95:3d:ae:33:97:5b:a5:74:c6:ba:2d:7e:8b: 27:93:c2:2c:69:7d:5c:a8:69:29:69:25:94:1f:f8: 2c:32:ce:09:d5:5e:a8:59:2c:4d:64:57:e1:91:b2: 73:8d:15:77:6e:f8:6f:2f:28:69:79:df:49:f5:ea: a6:60:5c:84:e5:da:39:e6:02:0b:72:b4:d8:86:6e: 72:21:78:51:d1:f6:7d:98:0b:9b:93:b3:73:57:a8: ac:15:94:88:ff:fe:45:15:5b:d2:4f:f0:21:6f:b3: 2d:68:1c:67:c5:55:f6:de:f7:d5:43:1b:44:1c:0a: 2c:f3:dc:d6:81:b8:8d:59:ef:93:c3:1d:64:3d:74: 11:84:e4:68:13:f7:99:4d:2b:81:c4:10:81:62:e4: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:35:11:A5:10:5D:F1:66:6A:3F:F1:34:BA:94:9D:09:0C:40:13:B9 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yjURpRBd8WZqP_E0upSdCQxAE7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.5.0/24 192.121.12.0/24 192.121.101.0/24 192.165.182.0/24 193.181.65.0/24 193.183.47.0-193.183.48.255 193.183.92.0/24 193.183.104.0/23 193.234.54.0/24 194.71.215.0/24 194.103.93.0/24 194.132.27.0/24 194.132.162.0/24 Signature Algorithm: sha256WithRSAEncryption c3:8d:28:8e:c4:00:62:5d:35:84:73:a2:07:d1:f6:d4:96:59: f6:cb:8d:c9:b4:21:36:fd:f4:e3:7b:bb:bc:e4:38:ac:06:a0: b8:64:cf:6d:c9:dc:18:86:3a:c8:26:43:ec:2a:11:a6:dc:c1: 7f:bb:cb:dc:59:4c:5d:ca:4e:4d:dd:aa:27:3f:1e:1d:9d:6e: 96:ee:d0:7a:a2:95:cf:f6:fd:79:8b:9a:3e:cb:ae:26:3e:d3: f7:c9:6e:81:c7:a5:e9:e3:7d:26:b5:f3:7f:30:7c:44:40:1f: a9:03:2f:7e:8f:0c:b0:6c:74:38:39:a9:7e:24:47:74:e9:9c: 94:fa:74:3b:81:a6:6a:59:b1:96:7e:c9:31:64:2f:5b:c6:9e: 6f:fb:1c:c9:7e:eb:50:8e:d1:55:b9:71:ff:23:3c:f4:e8:7e: 76:1b:e5:a2:f1:b7:31:0d:d2:0e:f8:45:78:0c:1c:75:f0:a5: 14:fb:dc:96:19:c5:7e:fb:12:f5:fb:b8:40:e2:01:9c:db:77: a8:4d:53:76:c7:19:91:1f:83:d4:b0:42:f6:8d:39:92:a3:8f: b8:0e:c0:8d:14:91:ff:0b:bc:a5:8e:db:2c:93:79:f1:51:fc: 25:92:15:3f:bb:2f:31:cb:40:d0:1a:61:34:61:2b:28:17:42: 7c:38:20:90 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZt4NEU9EtnugTA+ClK4oySsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTM1MTFhNTEwNWRmMTY2NmEzZmYxMzRiYTk0OWQwOTBjNDAxM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfi6V8wTcwaxoDRiPho9WmOHbU0U W+NLjE6GKwyLnHK+twhs31GfpUDX7/xo2CW8iHxr7nIIXVF+BJKFLvAY7S7t35PK 2ZqVJbj90UXOs7rR4pfIiXL4+yS6XD/FzP2CMp2oomPo7BOer5U9rjOXW6V0xrot fosnk8IsaX1cqGkpaSWUH/gsMs4J1V6oWSxNZFfhkbJzjRV3bvhvLyhped9J9eqm YFyE5do55gILcrTYhm5yIXhR0fZ9mAubk7NzV6isFZSI//5FFVvST/Ahb7MtaBxn xVX23vfVQxtEHAos89zWgbiNWe+Twx1kPXQRhORoE/eZTSuBxBCBYuRBiwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFMo1EaUQXfFmaj/xNLqUnQkMQBO5MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEveWpVUnBSQmQ4V1pxUF9FMHVwU2RDUXhBRTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAwEcFAwQA wHkMAwQAwHllAwQAwKW2AwQAwbVBMAwDBADBty8DBADBtzADBADBt1wDBAHBt2gD BADB6jYDBADCR9cDBADCZ10DBADChBsDBADChKIwDQYJKoZIhvcNAQELBQADggEB AMONKI7EAGJdNYRzogfR9tSWWfbLjcm0ITb99ON7u7zkOKwGoLhkz23J3BiGOsgm Q+wqEabcwX+7y9xZTF3KTk3dqic/Hh2dbpbu0Hqilc/2/XmLmj7LriY+0/fJboHH penjfSa1838wfERAH6kDL36PDLBsdDg5qX4kR3TpnJT6dDuBpmpZsZZ+yTFkL1vG nm/7HMl+61CO0VW5cf8jPPTofnYb5aLxtzEN0g74RXgMHHXwpRT73JYZxX77EvX7 uEDiAZzbd6hNU3bHGZEfg9SwQvaNOZKjj7gOwI0Ukf8LvKWO2yyTefFR/CWSFT+7 LzHLQNAaYTRhKygXQnw4IJA= -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:10 2026 by rpki-client