This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa File: YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa (raw, json) Hash identifier: pk3xXRT/YI5ZZlRdgZc1sONUJsTQ601Dr7np29n/iyc= Subject key identifier: 63:11:EC:41:A4:5F:B8:7F:54:ED:3D:A8:29:BF:85:92:91:C7:A2:8E Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664 Certificate serial: 019B76EB2F67A5277EC2DE9842249EDAEE95 Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202247 IP address blocks: 77.73.33.0/24 maxlen: 24 2a05:9480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2f:67:a5:27:7e:c2:de:98:42:24:9e:da:ee:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664 Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6311ec41a45fb87f54ed3da829bf859291c7a28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:33:32:c9:b0:c6:c4:19:2b:7e:17:c6:da:45: 66:ac:ca:bd:08:f3:a6:70:95:cb:bd:f1:ca:de:01: b2:d9:cb:31:b4:32:e1:c8:07:e3:6c:6e:aa:48:59: 29:04:ef:2a:61:69:96:f4:32:43:df:e6:a6:5c:e7: e4:d5:8f:f8:87:e5:46:6f:00:b8:9a:0f:cd:4f:06: e0:55:81:32:9d:aa:46:69:59:83:51:13:1a:fc:00: ca:48:83:9e:2a:2d:fb:74:2d:28:1a:30:89:6f:56: 8b:ef:a8:0a:3e:98:88:6c:6d:1e:e0:55:bf:47:f8: cb:1b:ad:46:05:6f:e3:47:e5:e1:d0:75:2d:d3:a9: 04:79:44:e8:9e:a0:20:5e:03:c9:5f:f3:d6:bd:f4: 8f:f7:2d:32:62:38:e4:43:f2:1c:66:54:81:99:e4: bb:5d:86:0b:1d:ef:40:f1:b4:40:b3:e2:13:6d:07: 84:ad:12:1b:c8:e4:76:b3:3e:95:31:35:01:51:a7: 48:69:22:a9:bb:77:e9:e0:e4:94:b1:5b:ba:16:04: b4:63:9a:2b:da:40:72:ed:a2:08:14:1a:0b:6b:ef: 7c:fa:85:ec:7c:c5:1d:c7:4f:8a:55:ef:cc:5c:ee: 1b:ce:05:65:0c:42:0b:45:e7:bb:23:6a:d6:19:cd: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:11:EC:41:A4:5F:B8:7F:54:ED:3D:A8:29:BF:85:92:91:C7:A2:8E X509v3 Authority Key Identifier: keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.33.0/24 IPv6: 2a05:9480::/29 Signature Algorithm: sha256WithRSAEncryption 51:56:46:f7:43:18:5b:96:a2:78:7e:8a:96:00:67:26:5b:69: ef:2a:88:5b:37:d5:74:4b:72:74:4c:2e:75:2e:ea:53:d5:9a: 45:18:e7:3b:7f:e8:24:ec:e0:e1:7a:e0:e0:9b:9f:91:3a:a0: 5f:33:3f:ed:0a:ed:b8:be:59:6e:68:4a:84:31:38:e2:16:94: 41:f8:9d:87:ba:c1:76:34:61:db:d1:47:1f:76:c5:17:1f:a0: 73:44:12:b8:89:d0:81:45:27:87:c6:18:e1:7b:dc:d1:d2:93: d2:a7:cd:35:7c:02:b8:8b:7c:1f:c6:ff:9b:aa:20:d7:b3:b4: 95:7a:a4:bd:63:fc:fc:6a:a1:9d:8d:e7:b6:2b:be:87:a9:2c: 0e:90:7e:2b:a0:9e:16:88:4e:87:5d:e6:5a:d4:92:11:0b:0a: 7f:22:bb:d9:91:86:ff:60:e1:94:89:1c:d3:1e:2e:6d:92:cd: 56:35:a8:cd:04:75:17:12:85:7b:12:fc:c8:87:3e:fa:08:1d: 64:31:8b:0a:24:f2:86:ba:3a:3e:12:4d:58:73:c7:6b:9c:d1: b8:b2:87:d1:e6:f9:5b:b7:c6:e0:97:80:f2:53:a3:a3:9a:4f: 56:c7:2e:37:82:db:56:dc:5e:84:85:3f:63:c1:55:7c:5d:c8: f6:95:c0:7b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26y9npSd+wt6YQiSe2u6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNTRiODA3MjM5MjFjZGQ1MWRhNTMzMjVmMTJiM2RiYzY3 ODI2NjQwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzExZWM0MWE0NWZiODdmNTRlZDNkYTgyOWJmODU5MjkxYzdhMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijMyybDGxBkrfhfG2kVmrMq9CPOm cJXLvfHK3gGy2csxtDLhyAfjbG6qSFkpBO8qYWmW9DJD3+amXOfk1Y/4h+VGbwC4 mg/NTwbgVYEynapGaVmDURMa/ADKSIOeKi37dC0oGjCJb1aL76gKPpiIbG0e4FW/ R/jLG61GBW/jR+Xh0HUt06kEeUTonqAgXgPJX/PWvfSP9y0yYjjkQ/IcZlSBmeS7 XYYLHe9A8bRAs+ITbQeErRIbyOR2sz6VMTUBUadIaSKpu3fp4OSUsVu6FgS0Y5or 2kBy7aIIFBoLa+98+oXsfMUdx0+KVe/MXO4bzgVlDEILRee7I2rWGc0bQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGMR7EGkX7h/VO09qCm/hZKRx6KOMB8GA1UdIwQY MBaAFB5UuAcjkhzdUdpTMl8Ss9vGeCZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxTNEJ5T1NITjFSMmxNeVh4S3oyOFo0Sm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NmEzOGMtNWQ3My00MmI0LWFmZWIt ZGU4MDc5MWExMzg2LzEvWXhIc1FhUmZ1SDlVN1Qyb0tiLUZrcEhIb280LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NmEzOGMtNWQ3My00MmI0LWFmZWItZGU4MDc5MWExMzg2 LzEvSGxTNEJ5T1NITjFSMmxNeVh4S3oyOFo0Sm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATUkhMA0E AgACMAcDBQMqBZSAMA0GCSqGSIb3DQEBCwUAA4IBAQBRVkb3QxhblqJ4foqWAGcm W2nvKohbN9V0S3J0TC51LupT1ZpFGOc7f+gk7ODheuDgm5+ROqBfMz/tCu24vllu aEqEMTjiFpRB+J2HusF2NGHb0UcfdsUXH6BzRBK4idCBRSeHxhjhe9zR0pPSp801 fAK4i3wfxv+bqiDXs7SVeqS9Y/z8aqGdjee2K76HqSwOkH4roJ4WiE6HXeZa1JIR Cwp/IrvZkYb/YOGUiRzTHi5tks1WNajNBHUXEoV7EvzIhz76CB1kMYsKJPKGujo+ Ek1Yc8drnNG4sofR5vlbt8bgl4DyU6Ojmk9Wxy43gttW3F6EhT9jwVV8Xcj2lcB7 -----END CERTIFICATE-----Generated at Thu Jan 1 14:05:32 2026 by rpki-client