This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/ye1vO91j3zEaNLIkUtTaqaqrzqo.roa File: ye1vO91j3zEaNLIkUtTaqaqrzqo.roa (raw, json) Hash identifier: CZnBVB6wY1pdHrVxfveoiFUyTPJ5AHcYnnd9cEm8rlw= Subject key identifier: C9:ED:6F:3B:DD:63:DF:31:1A:34:B2:24:52:D4:DA:A9:AA:AB:CE:AA Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135CA7821E32BF7856BD320642EC77 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/ye1vO91j3zEaNLIkUtTaqaqrzqo.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31313 IP address blocks: 188.213.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5c:a7:82:1e:32:bf:78:56:bd:32:06:42:ec:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9ed6f3bdd63df311a34b22452d4daa9aaabceaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:ed:78:0e:85:b8:5a:4e:25:55:71:18:57: 17:6f:a5:ff:76:8f:75:29:23:02:d1:48:20:5c:74: 96:ad:bd:0c:28:37:e4:91:09:93:57:96:55:ad:40: 2b:94:84:8f:3d:d0:2a:e3:c3:8c:45:5e:34:d4:49: 39:46:e2:66:7f:90:a9:9e:51:38:a5:b7:cc:ed:14: 0c:fd:a5:9e:63:d6:24:e2:c2:83:54:3b:d0:db:00: c9:3b:96:44:47:63:61:7a:a0:7e:0d:85:5d:44:9d: 33:00:af:7f:b0:a2:c3:1e:d5:88:e2:21:a1:66:92: 40:3f:00:04:0d:3d:c0:57:2c:00:21:b4:2f:0a:c9: 2e:f6:d7:ad:4a:7b:ce:d1:85:3a:8a:0c:64:8f:e0: a2:3a:6b:3f:09:ee:82:9c:f8:fd:95:69:8a:08:df: f0:40:b6:5e:7f:ce:d2:fc:62:12:78:89:24:65:35: a5:04:70:34:15:cc:51:15:43:46:89:8e:a1:5c:6b: 4e:0b:9f:d8:e0:c7:3e:2a:ba:d8:3b:ef:5c:79:7c: 47:4b:0c:31:2c:ca:09:d1:b8:04:38:af:b8:be:c1: 34:d2:f5:7d:d7:62:e2:5b:59:80:4a:33:f1:d7:99: 10:f9:43:d0:df:4c:2d:ca:0f:f5:c7:35:f4:05:4d: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:ED:6F:3B:DD:63:DF:31:1A:34:B2:24:52:D4:DA:A9:AA:AB:CE:AA X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/ye1vO91j3zEaNLIkUtTaqaqrzqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.213.35.0/24 Signature Algorithm: sha256WithRSAEncryption a0:30:63:8f:a2:d5:5e:2e:2c:72:68:a6:d4:8f:9a:f6:fc:39: 53:85:94:dd:95:f1:32:b1:22:f2:e8:ae:78:4b:c0:99:a8:40: bd:b0:7f:a7:8b:75:64:f2:23:bb:91:9b:48:64:4b:b5:5e:06: df:36:84:6e:21:4f:8d:b7:d0:56:32:42:ed:d3:03:39:9f:06: bd:13:47:0b:f8:78:72:cc:d8:f7:1c:36:ac:d8:00:02:70:01: 13:ed:d8:cb:9d:0a:d3:55:b7:de:83:bf:8e:a5:ec:47:10:d7: ba:fa:c4:c8:28:0d:37:99:35:47:0b:5b:27:19:95:98:d0:ea: dc:16:92:e6:87:f4:7b:fa:ae:c2:6e:fe:dc:19:8c:12:a4:d7: 2a:af:80:bf:3e:1e:76:e7:10:e9:1b:e6:7b:6b:fa:33:7a:a4: 0e:94:7d:9d:11:2d:49:21:39:d7:31:68:13:b7:fb:56:2c:e5: cf:9e:34:fc:f6:92:de:eb:c6:fc:1e:48:ec:bf:02:0e:45:7f: 96:db:82:8f:f5:0a:22:70:10:c5:2e:46:0e:83:26:bb:a3:6a: a6:c8:e9:7d:6e:b0:26:23:1e:85:d0:79:a0:32:cc:6c:a1:d5: df:f3:ab:46:4f:a6:ac:41:9d:2b:62:fd:e6:d2:59:ae:33:79: c9:30:23:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1yngh4yv3hWvTIGQux3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWVkNmYzYmRkNjNkZjMxMWEzNGIyMjQ1MmQ0ZGFhOWFhYWJjZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ujteA6FuFpOJVVxGFcXb6X/do91 KSMC0UggXHSWrb0MKDfkkQmTV5ZVrUArlISPPdAq48OMRV401Ek5RuJmf5CpnlE4 pbfM7RQM/aWeY9Yk4sKDVDvQ2wDJO5ZER2NheqB+DYVdRJ0zAK9/sKLDHtWI4iGh ZpJAPwAEDT3AVywAIbQvCsku9tetSnvO0YU6igxkj+CiOms/Ce6CnPj9lWmKCN/w QLZef87S/GISeIkkZTWlBHA0FcxRFUNGiY6hXGtOC5/Y4Mc+KrrYO+9ceXxHSwwx LMoJ0bgEOK+4vsE00vV912LiW1mASjPx15kQ+UPQ30wtyg/1xzX0BU3ATwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMntbzvdY98xGjSyJFLU2qmqq86qMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEveWUxdk85MWozekVhTkxJa1V0VGFxYXFyenFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNUjMA0G CSqGSIb3DQEBCwUAA4IBAQCgMGOPotVeLixyaKbUj5r2/DlThZTdlfEysSLy6K54 S8CZqEC9sH+ni3Vk8iO7kZtIZEu1XgbfNoRuIU+Nt9BWMkLt0wM5nwa9E0cL+Hhy zNj3HDas2AACcAET7djLnQrTVbfeg7+OpexHENe6+sTIKA03mTVHC1snGZWY0Orc FpLmh/R7+q7Cbv7cGYwSpNcqr4C/Ph525xDpG+Z7a/ozeqQOlH2dES1JITnXMWgT t/tWLOXPnjT89pLe68b8HkjsvwIORX+W24KP9QoicBDFLkYOgya7o2qmyOl9brAm Ix6F0HmgMsxsodXf86tGT6asQZ0rYv3m0lmuM3nJMCO1 -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:53 2026 by rpki-client