This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/yrIjpEKkjVBO_-j8mIxwX1lzZOY.roa File: yrIjpEKkjVBO_-j8mIxwX1lzZOY.roa (raw, json) Hash identifier: FAr4hIEw59FiwSEosrYa4XkBS1NGFvpwv+TK+Np3XXo= Subject key identifier: CA:B2:23:A4:42:A4:8D:50:4E:FF:E8:FC:98:8C:70:5F:59:73:64:E6 Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1 Certificate serial: 019B79ED4B6A3BA610FD77EA5BFB8AA7FDF9 Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/yrIjpEKkjVBO_-j8mIxwX1lzZOY.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50119 IP address blocks: 176.126.124.0/24 maxlen: 24 2a12:380::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4b:6a:3b:a6:10:fd:77:ea:5b:fb:8a:a7:fd:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cab223a442a48d504effe8fc988c705f597364e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:a8:65:51:da:54:f1:9d:b2:31:23:8a:e5: ac:83:56:06:4a:07:b8:76:4b:8d:dc:30:6a:f8:ac: 2b:e7:61:85:6c:ce:b2:0a:67:a1:bb:a0:e4:08:90: 98:e2:8e:eb:97:6e:88:ed:aa:4e:7c:fb:04:b9:50: 58:52:13:52:75:a7:fe:c1:77:d9:01:b7:85:f3:3e: 62:05:12:cf:50:15:a5:39:e9:53:b9:f7:db:26:c4: 84:ae:a2:d2:fe:89:4c:c3:54:82:d6:c2:18:5d:e6: 2f:6e:c9:09:64:97:76:85:9c:15:0c:ff:1a:7c:5f: 6d:41:f9:56:9e:15:f2:7c:39:19:f7:1e:dc:e5:4f: 76:a1:ef:97:6a:63:4c:12:be:05:30:6b:b8:ad:c0: d7:9e:1c:91:f5:46:45:4b:c4:15:c1:c7:ac:75:1a: b0:48:7e:f2:f3:f8:97:8d:cd:70:c4:d3:bc:37:64: 2f:72:7f:bc:88:63:e3:5b:ab:50:e7:22:fd:37:44: fb:d1:36:91:8c:f7:cc:47:62:da:8b:21:8d:ec:4d: 7b:e2:dc:fd:3b:af:cf:73:d8:7f:58:54:11:22:b3: e7:74:63:bf:1e:e9:06:16:f6:3f:a7:fc:fc:93:d2: ff:3e:1b:8f:85:09:12:b2:f8:63:00:58:52:d9:aa: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:23:A4:42:A4:8D:50:4E:FF:E8:FC:98:8C:70:5F:59:73:64:E6 X509v3 Authority Key Identifier: keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/yrIjpEKkjVBO_-j8mIxwX1lzZOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.124.0/24 IPv6: 2a12:380::/29 Signature Algorithm: sha256WithRSAEncryption 23:d3:ef:99:af:29:ec:52:01:89:44:0d:39:7d:33:c3:2d:9f: e1:8c:d9:c6:e8:c7:e4:92:e1:17:e4:c2:c9:0e:17:e2:b5:58: 30:0a:eb:4a:a3:84:11:50:af:b9:98:cb:18:53:d4:3a:2a:61: 52:ee:c7:ff:ff:8f:01:7b:20:53:b4:b2:dd:ee:76:90:86:52: 2f:f3:ce:ee:55:c1:fd:4b:f5:f8:2d:fc:1f:53:27:4a:7f:e9: 22:fc:18:9c:91:99:e9:55:13:df:a5:43:99:ca:32:e7:08:f9: 78:86:87:8a:92:99:44:c2:c2:f2:da:c7:96:3e:4f:fc:5d:1c: 04:87:d0:2f:6e:51:c3:70:8a:4e:f8:7b:19:80:af:bd:f4:14: 78:4f:c9:57:5e:d2:e4:66:fd:79:4b:cf:12:cd:d5:77:50:93: b0:d4:59:09:63:e9:59:0e:9c:e5:99:c8:7f:74:fb:ec:96:88: 84:ae:93:23:7d:ea:05:53:f2:79:4a:7c:17:64:01:bf:cc:06: 20:b4:c1:f1:9a:24:ce:db:22:02:03:be:56:d2:34:3f:8c:3d: 95:e7:de:cd:e9:42:00:5b:6d:4f:65:e9:e6:84:a0:ae:6e:9a: 63:1b:de:62:3e:fb:9e:59:25:80:00:cb:a0:2b:eb:32:13:93: 37:78:7b:bd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57UtqO6YQ/XfqW/uKp/35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDYzMThkYThkMjM1NzljNGY3MzhiNmU4ZTU1Y2M1ZmYy N2U1YjEwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWIyMjNhNDQyYTQ4ZDUwNGVmZmU4ZmM5ODhjNzA1ZjU5NzM2NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLSoZVHaVPGdsjEjiuWsg1YGSge4 dkuN3DBq+Kwr52GFbM6yCmehu6DkCJCY4o7rl26I7apOfPsEuVBYUhNSdaf+wXfZ AbeF8z5iBRLPUBWlOelTuffbJsSErqLS/olMw1SC1sIYXeYvbskJZJd2hZwVDP8a fF9tQflWnhXyfDkZ9x7c5U92oe+XamNMEr4FMGu4rcDXnhyR9UZFS8QVwcesdRqw SH7y8/iXjc1wxNO8N2Qvcn+8iGPjW6tQ5yL9N0T70TaRjPfMR2LaiyGN7E174tz9 O6/Pc9h/WFQRIrPndGO/HukGFvY/p/z8k9L/PhuPhQkSsvhjAFhS2ao8GQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMqyI6RCpI1QTv/o/JiMcF9Zc2TmMB8GA1UdIwQY MBaAFHTWMY2o0jV5xPc4tujlXMX/J+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEt MDgzYWExOGE3NjI5LzEveXJJanBFS2tqVkJPXy1qOG1JeHdYMWx6Wk9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEtMDgzYWExOGE3NjI5 LzEvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAsH58MA0E AgACMAcDBQMqEgOAMA0GCSqGSIb3DQEBCwUAA4IBAQAj0++ZrynsUgGJRA05fTPD LZ/hjNnG6MfkkuEX5MLJDhfitVgwCutKo4QRUK+5mMsYU9Q6KmFS7sf//48BeyBT tLLd7naQhlIv887uVcH9S/X4LfwfUydKf+ki/BickZnpVRPfpUOZyjLnCPl4hoeK kplEwsLy2seWPk/8XRwEh9AvblHDcIpO+HsZgK+99BR4T8lXXtLkZv15S88SzdV3 UJOw1FkJY+lZDpzlmch/dPvsloiErpMjfeoFU/J5SnwXZAG/zAYgtMHxmiTO2yIC A75W0jQ/jD2V597N6UIAW21PZenmhKCubppjG95iPvueWSWAAMugK+syE5M3eHu9 -----END CERTIFICATE-----Generated at Tue Jan 13 06:19:43 2026 by rpki-client