This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa File: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (raw, json) Hash identifier: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA= Subject key identifier: C9:0A:63:86:FC:3C:8B:A7:BD:2B:3A:E9:BE:31:27:4A:99:07:CF:07 Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e Certificate serial: 019B7F15582E3959F9CC80356C6AEE0F35AC Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa Signing time: Fri 02 Jan 2026 14:21:03 +0000 ROA not before: Fri 02 Jan 2026 14:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205402 IP address blocks: 109.234.224.0/21 maxlen: 24 185.108.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:58:2e:39:59:f9:cc:80:35:6c:6a:ee:0f:35:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c90a6386fc3c8ba7bd2b3ae9be31274a9907cf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:34:3e:ad:d7:cc:71:01:60:61:db:13:b4: 4e:d4:bd:92:e2:ef:ba:50:af:42:0d:f8:16:75:b4: 98:b3:61:b4:60:ce:f8:4a:6e:cc:85:d4:73:02:e6: 2d:bd:52:aa:a3:c1:51:f3:45:4c:22:54:42:17:53: 86:26:40:a1:40:ba:9d:5d:88:9b:7b:30:4b:36:0a: 57:be:62:c6:b9:7c:21:eb:c0:55:89:11:3a:6b:18: 5d:33:44:f0:a0:1d:37:fb:e5:1f:41:88:c5:54:15: 5e:e1:f6:dc:d2:f0:4b:6d:84:b8:ef:45:53:18:03: 4f:19:50:c8:54:dd:ba:2e:50:c1:78:c0:0b:13:76: 0c:64:f2:b9:c5:e5:84:0f:ec:ce:04:54:c0:07:10: a8:cf:6e:7a:85:f8:86:3f:c6:2a:3a:d0:dd:da:42: f6:c9:d0:4f:09:df:85:d1:e2:90:b1:05:e8:4c:43: e7:95:06:3e:3b:a3:94:03:9e:5c:7b:c3:a0:a8:fd: b3:5c:1f:03:0e:55:4e:fa:60:63:c1:3d:84:1a:f8: 4d:a1:25:f1:28:27:c1:6f:ad:3f:84:c9:ff:f8:c8: a2:0e:99:70:14:38:ec:d7:d2:5f:a3:ef:b0:7a:0a: 5b:d0:a7:a3:91:ab:38:e6:61:f8:80:a6:4f:9d:a8: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:63:86:FC:3C:8B:A7:BD:2B:3A:E9:BE:31:27:4A:99:07:CF:07 X509v3 Authority Key Identifier: keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.224.0/21 185.108.92.0/22 Signature Algorithm: sha256WithRSAEncryption a2:e7:07:66:60:b9:b1:d9:66:e0:9f:74:6e:82:f3:67:72:a2: 3c:62:d9:14:cb:c9:45:d3:68:bd:df:c7:a8:3e:5f:d6:d6:83: 38:ca:22:12:42:1a:c4:60:30:57:7d:84:43:9b:cf:06:2d:e0: 57:a8:1c:33:a8:52:2f:47:0f:a2:18:8e:f0:a7:e1:d2:95:1b: 12:03:9f:6f:b6:24:09:e2:ac:69:cc:12:c6:da:18:ae:16:5c: 12:9d:cd:d1:a6:68:a0:d6:1b:20:2f:76:6a:65:09:7c:f9:f9: 33:f3:d5:cc:f5:5c:cd:b9:f0:c8:aa:50:93:df:0b:79:59:1a: ef:6b:5c:0f:a2:1d:98:ea:e4:55:ba:83:48:01:ac:f5:b6:7b: 70:f8:73:3e:37:52:f3:aa:87:50:0a:6c:99:73:22:26:ed:58: 3f:3e:c9:64:af:7e:3d:f9:cb:f5:4b:f3:1c:f4:ee:a3:8e:f2: 5e:18:ac:9a:e7:50:a3:ad:4f:de:8e:3e:00:22:77:97:3b:d9: e2:10:21:c6:26:12:a9:3d:ef:48:41:e6:59:35:bd:fc:c6:e8: c0:93:de:f2:d4:84:87:1e:d5:44:7c:f4:3e:8d:35:42:ba:1e: 43:ad:9c:e4:62:1c:45:80:dc:e3:69:95:12:d1:d0:90:cb:20: 96:26:eb:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FVguOVn5zIA1bGruDzWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi Y2VkNWUwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTBhNjM4NmZjM2M4YmE3YmQyYjNhZTliZTMxMjc0YTk5MDdjZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcQ0Pq3XzHEBYGHbE7RO1L2S4u+6 UK9CDfgWdbSYs2G0YM74Sm7MhdRzAuYtvVKqo8FR80VMIlRCF1OGJkChQLqdXYib ezBLNgpXvmLGuXwh68BViRE6axhdM0TwoB03++UfQYjFVBVe4fbc0vBLbYS470VT GANPGVDIVN26LlDBeMALE3YMZPK5xeWED+zOBFTABxCoz256hfiGP8YqOtDd2kL2 ydBPCd+F0eKQsQXoTEPnlQY+O6OUA55ce8OgqP2zXB8DDlVO+mBjwT2EGvhNoSXx KCfBb60/hMn/+MiiDplwFDjs19Jfo++wegpb0Kejkas45mH4gKZPnajoewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMkKY4b8PIunvSs66b4xJ0qZB88HMB8GA1UdIwQY MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt ZDYwNmQ5OTI1YWI3LzEveVFwamh2dzhpNmU5S3pycHZqRW5TcGtIendjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3 LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDbergAwQC uWxcMA0GCSqGSIb3DQEBCwUAA4IBAQCi5wdmYLmx2Wbgn3RugvNncqI8YtkUy8lF 02i938eoPl/W1oM4yiISQhrEYDBXfYRDm88GLeBXqBwzqFIvRw+iGI7wp+HSlRsS A59vtiQJ4qxpzBLG2hiuFlwSnc3Rpmig1hsgL3ZqZQl8+fkz89XM9VzNufDIqlCT 3wt5WRrva1wPoh2Y6uRVuoNIAaz1tntw+HM+N1LzqodQCmyZcyIm7Vg/Pslkr349 +cv1S/Mc9O6jjvJeGKya51CjrU/ejj4AIneXO9niECHGJhKpPe9IQeZZNb38xujA k97y1ISHHtVEfPQ+jTVCuh5DrZzkYhxFgNzjaZUS0dCQyyCWJus2 -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:16 2026 by rpki-client