This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa File: YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa (raw, json) Hash identifier: 54/I0U+2gsfxDHjTGitToFh36OuJx0rhyc8ObFsTIiY= Subject key identifier: 62:97:87:C9:4A:D1:7C:7B:14:4E:1E:40:D7:F9:6C:9F:D7:9C:2D:D2 Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0 Certificate serial: 019B7EA4FADC20E45D9778D7AA74E5C99D83 Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa Signing time: Fri 02 Jan 2026 12:18:19 +0000 ROA not before: Fri 02 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51269 IP address blocks: 185.140.44.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:fa:dc:20:e4:5d:97:78:d7:aa:74:e5:c9:9d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0 Validity Not Before: Jan 2 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=629787c94ad17c7b144e1e40d7f96c9fd79c2dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:01:d5:e2:83:d6:d3:16:6f:16:41:cd:dd: fd:6a:11:56:57:61:7b:fe:d6:d3:7b:26:ef:07:a8: a4:ee:89:9a:61:f9:92:ad:48:9d:db:01:cf:56:0c: 5f:56:62:9f:b2:a5:fe:25:d4:8a:72:8e:02:a5:04: fe:ea:ec:cb:77:e3:b4:6e:0e:f6:39:16:e5:18:c6: 4a:60:02:3d:8e:9c:3b:14:f1:55:94:14:cf:8a:f6: fa:9f:41:97:46:a2:e2:f8:0d:12:ae:1d:2d:0e:6b: e4:dc:a9:af:ae:c3:ee:a9:88:ed:29:f3:36:78:48: a6:af:ee:1c:00:79:e0:bc:da:dd:a4:07:8a:df:e4: a5:02:8c:bc:18:ac:70:11:2f:ab:fb:bd:cf:9c:02: 09:d0:6a:f8:7d:86:a3:69:27:54:ee:9e:a3:e8:ce: aa:24:91:ab:56:ab:12:a1:7b:ec:35:ab:92:34:96: 3d:f3:23:89:68:b1:37:5d:34:2a:ed:9b:89:d3:4a: 28:75:70:a9:17:25:a2:c5:13:e3:65:44:40:08:38: 54:c4:e0:0a:e2:0c:d0:f6:73:2b:3c:21:fd:5e:1c: 38:fd:cd:b8:e3:7c:ec:e4:b0:13:e3:5b:4d:d3:01: 49:c6:61:96:43:48:75:3b:76:6d:f0:63:f4:5e:f9: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:97:87:C9:4A:D1:7C:7B:14:4E:1E:40:D7:F9:6C:9F:D7:9C:2D:D2 X509v3 Authority Key Identifier: keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.44.0/22 Signature Algorithm: sha256WithRSAEncryption 30:d9:1a:d5:84:1d:8a:04:f3:96:a4:9d:74:b2:08:e2:32:ea: cf:ff:92:de:93:8d:c3:f7:94:08:6d:48:9c:68:f0:49:f3:e8: ae:72:14:7b:7d:e8:56:e9:50:60:c5:de:36:0b:f7:24:c9:b0: 8c:41:d5:93:ee:bf:e1:02:9c:47:48:8c:b3:7f:cd:ae:b0:c8: 98:06:eb:2a:5e:85:55:bc:05:b4:57:88:5d:92:d0:b5:7c:68: 28:6e:73:ea:9a:71:d9:fb:07:ea:40:73:9e:11:8c:43:6e:fe: 59:46:c9:b2:55:7a:d0:9a:67:09:64:7f:56:d4:60:58:58:f5: 21:f2:7e:2e:39:ce:76:7f:bc:2f:e9:c6:07:17:01:de:3a:34: 54:a6:ba:c2:9f:86:f1:e8:67:18:e1:b5:83:42:77:34:81:8b: e6:60:f3:37:86:09:bb:7d:e5:27:cb:3c:79:71:b5:43:00:21: 60:f7:92:13:00:01:20:1a:56:e9:67:3c:4c:58:50:1a:04:bf: b8:9b:b1:ba:cd:7d:c6:9f:4c:fe:73:93:10:af:bb:7a:19:27: 84:f0:22:a4:89:a4:6e:52:62:58:9a:23:43:bc:f8:78:f7:8a: 02:3b:98:d3:c2:58:d8:af:bb:79:0a:55:1a:67:c9:01:8e:06: 80:01:bd:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pPrcIORdl3jXqnTlyZ2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMGIyZjQ2YmE1NzBhMTY3N2JmZDU4NGM3MjgyMmFkOWQ5 ZmU1YjAwHhcNMjYwMTAyMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjk3ODdjOTRhZDE3YzdiMTQ0ZTFlNDBkN2Y5NmM5ZmQ3OWMyZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK8B1eKD1tMWbxZBzd39ahFWV2F7 /tbTeybvB6ik7omaYfmSrUid2wHPVgxfVmKfsqX+JdSKco4CpQT+6uzLd+O0bg72 ORblGMZKYAI9jpw7FPFVlBTPivb6n0GXRqLi+A0Srh0tDmvk3KmvrsPuqYjtKfM2 eEimr+4cAHngvNrdpAeK3+SlAoy8GKxwES+r+73PnAIJ0Gr4fYajaSdU7p6j6M6q JJGrVqsSoXvsNauSNJY98yOJaLE3XTQq7ZuJ00oodXCpFyWixRPjZURACDhUxOAK 4gzQ9nMrPCH9Xhw4/c2443zs5LAT41tN0wFJxmGWQ0h1O3Zt8GP0XvnmhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKXh8lK0Xx7FE4eQNf5bJ/XnC3SMB8GA1UdIwQY MBaAFDALL0a6VwoWd7/VhMcoIq2dn+WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmIt OTgwNzI5MzZjNTE4LzEvWXBlSHlVclJmSHNVVGg1QTFfbHNuOWVjTGRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmItOTgwNzI5MzZjNTE4 LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYwsMA0G CSqGSIb3DQEBCwUAA4IBAQAw2RrVhB2KBPOWpJ10sgjiMurP/5Lek43D95QIbUic aPBJ8+iuchR7fehW6VBgxd42C/ckybCMQdWT7r/hApxHSIyzf82usMiYBusqXoVV vAW0V4hdktC1fGgobnPqmnHZ+wfqQHOeEYxDbv5ZRsmyVXrQmmcJZH9W1GBYWPUh 8n4uOc52f7wv6cYHFwHeOjRUprrCn4bx6GcY4bWDQnc0gYvmYPM3hgm7feUnyzx5 cbVDACFg95ITAAEgGlbpZzxMWFAaBL+4m7G6zX3Gn0z+c5MQr7t6GSeE8CKkiaRu UmJYmiNDvPh494oCO5jTwljYr7t5ClUaZ8kBjgaAAb1I -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:56 2026 by rpki-client