This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa File: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (raw, json) Hash identifier: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg= Subject key identifier: C8:99:CF:61:90:35:C9:94:82:42:06:1D:FF:49:4F:9D:BF:2C:7C:BE Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Certificate serial: 019B7B353DB4AFBFB93357CA7D9455CD64DD Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 45.13.171.0/24 maxlen: 24 103.127.47.0/24 maxlen: 24 185.152.60.0/23 maxlen: 23 185.152.61.0/24 maxlen: 24 185.189.224.0/24 maxlen: 24 185.198.51.0/24 maxlen: 24 195.245.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3d:b4:af:bf:b9:33:57:ca:7d:94:55:cd:64:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c899cf619035c9948242061dff494f9dbf2c7cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:76:6a:35:35:71:87:fe:19:ea:14:83:94: 8d:31:b1:93:da:38:41:9f:85:5e:8c:77:12:2d:e9: fc:d7:47:df:4b:4b:62:52:d8:a7:79:b7:7b:5c:e3: 88:0c:be:ec:1e:32:33:0c:58:ee:a7:60:58:bc:23: 4f:ab:10:ca:a1:18:1d:d6:4a:7e:32:a5:43:82:c9: be:3b:a5:46:ee:01:b9:06:c4:18:9d:32:67:ec:4a: 2b:66:ce:0e:a6:20:fa:ff:5a:42:66:49:63:b2:ca: 1d:43:82:bb:43:09:86:3c:e9:a2:25:8e:a2:88:10: ae:cb:68:99:80:01:c3:2d:72:1b:19:72:0f:b4:b0: b1:82:38:58:71:b1:96:48:b7:84:ff:e5:f0:0e:19: 9c:d2:46:c2:66:80:cf:02:76:ac:95:9a:29:bd:8a: c6:2a:60:ed:00:78:f5:f2:3f:03:13:19:a9:8f:97: e9:a3:33:c8:1b:92:d0:64:5e:4c:96:5b:f9:12:41: 95:88:43:ee:a3:24:08:ad:80:27:f5:7a:9e:2e:2a: 23:8c:ab:97:ca:67:9d:ed:43:0f:7b:f6:75:50:a3: 53:7f:1e:75:18:d3:e7:a8:64:0e:36:5d:47:70:e1: 16:ef:fa:ea:89:02:0a:90:a6:1c:9d:8e:65:7b:0d: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:99:CF:61:90:35:C9:94:82:42:06:1D:FF:49:4F:9D:BF:2C:7C:BE X509v3 Authority Key Identifier: keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.171.0/24 103.127.47.0/24 185.152.60.0/23 185.189.224.0/24 185.198.51.0/24 195.245.89.0/24 Signature Algorithm: sha256WithRSAEncryption 99:60:79:f2:f1:5e:60:2d:f8:4a:dc:2c:6f:f9:a5:4c:56:1f: 81:11:8d:66:54:70:67:b1:65:10:aa:b7:c4:14:69:94:22:77: e5:24:0f:10:5d:40:75:39:82:cd:d5:b3:14:84:71:80:df:33: 72:97:73:ba:bd:b2:f4:d7:9d:7d:42:1d:19:22:32:ce:b4:84: 86:0c:27:5b:fb:03:a9:9e:c3:5f:17:56:08:06:b9:ca:65:6d: d4:c4:8d:38:78:7c:86:5c:ca:6f:36:44:bc:d0:92:21:d0:59: 63:49:bc:12:00:cc:19:4f:9b:74:63:a7:98:e5:dd:20:84:f6: 1b:f0:7b:6d:be:3a:b7:9b:5a:3e:62:99:81:d1:2a:15:32:d4: fd:74:52:85:84:dc:4f:c0:2e:88:01:59:04:23:92:8c:8c:bf: f4:68:a0:2e:8f:35:58:e0:b8:c9:53:5c:fa:73:34:4b:57:23: f2:83:75:16:3a:6e:16:c9:c1:fc:26:11:9e:61:16:58:f6:87: 5a:63:90:63:ef:37:ad:2b:bd:1c:c4:ae:ac:5f:30:bb:16:c2: 93:3c:30:d3:5b:49:64:5c:a6:66:dd:3a:27:5c:2b:ed:aa:91: aa:d2:80:d0:af:74:bb:61:cf:68:63:f3:16:32:55:a7:cf:e4: 32:ee:a3:a1 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7NT20r7+5M1fKfZRVzWTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTM2MWNkMTgxZDg2ZWY1NGViZTJmYzkxYTgwZWM1MzRj ZWFjNzgwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODk5Y2Y2MTkwMzVjOTk0ODI0MjA2MWRmZjQ5NGY5ZGJmMmM3Y2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWp2ajU1cYf+GeoUg5SNMbGT2jhB n4VejHcSLen810ffS0tiUtinebd7XOOIDL7sHjIzDFjup2BYvCNPqxDKoRgd1kp+ MqVDgsm+O6VG7gG5BsQYnTJn7EorZs4OpiD6/1pCZkljssodQ4K7QwmGPOmiJY6i iBCuy2iZgAHDLXIbGXIPtLCxgjhYcbGWSLeE/+XwDhmc0kbCZoDPAnaslZopvYrG KmDtAHj18j8DExmpj5fpozPIG5LQZF5Mllv5EkGViEPuoyQIrYAn9XqeLiojjKuX ymed7UMPe/Z1UKNTfx51GNPnqGQONl1HcOEW7/rqiQIKkKYcnY5lew3jLwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMiZz2GQNcmUgkIGHf9JT52/LHy+MB8GA1UdIwQY MBaAFEKTYc0YHYbvVOvi/JGoDsU0zqx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjkt OWJiYjQyZmE4Y2VkLzEveUpuUFlaQTF5WlNDUWdZZF8wbFBuYjhzZkw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjktOWJiYjQyZmE4Y2Vk LzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALQ2rAwQA Z38vAwQBuZg8AwQAub3gAwQAucYzAwQAw/VZMA0GCSqGSIb3DQEBCwUAA4IBAQCZ YHny8V5gLfhK3Cxv+aVMVh+BEY1mVHBnsWUQqrfEFGmUInflJA8QXUB1OYLN1bMU hHGA3zNyl3O6vbL01519Qh0ZIjLOtISGDCdb+wOpnsNfF1YIBrnKZW3UxI04eHyG XMpvNkS80JIh0FljSbwSAMwZT5t0Y6eY5d0ghPYb8Httvjq3m1o+YpmB0SoVMtT9 dFKFhNxPwC6IAVkEI5KMjL/0aKAujzVY4LjJU1z6czRLVyPyg3UWOm4WycH8JhGe YRZY9odaY5Bj7zetK70cxK6sXzC7FsKTPDDTW0lkXKZm3TonXCvtqpGq0oDQr3S7 Yc9oY/MWMlWnz+Qy7qOh -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:30 2026 by rpki-client