This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/yousl7rvRhV7vBlhbENkApio6rE.roa File: yousl7rvRhV7vBlhbENkApio6rE.roa (raw, json) Hash identifier: +ia048fdw3V1arQXfN1Y1/MH84RMFUaeBn50FD+hJkg= Subject key identifier: CA:8B:AC:97:BA:EF:46:15:7B:BC:19:61:6C:43:64:02:98:A8:EA:B1 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37E6EB99BBE244D2FEA357C0D43357 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/yousl7rvRhV7vBlhbENkApio6rE.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34684 IP address blocks: 195.87.47.0/24 maxlen: 24 195.87.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e6:eb:99:bb:e2:44:d2:fe:a3:57:c0:d4:33:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca8bac97baef46157bbc19616c43640298a8eab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:4d:4b:ac:c4:c5:5a:80:a2:04:c6:af:1b: 18:58:2c:66:74:77:f3:a6:44:cb:a2:eb:2a:11:27: 1d:0c:9c:67:25:62:57:4f:88:ca:52:70:cf:b4:2c: 96:c1:28:e3:fd:ed:5c:3c:72:9f:3f:c8:03:2a:e2: c9:1c:4c:d9:e0:50:b7:46:d9:ba:3e:67:95:d2:8e: a5:90:b5:be:eb:10:17:f5:23:2a:b3:05:8b:30:c5: 3c:ab:d8:bf:2e:d5:1e:96:9e:89:46:88:cc:99:cd: 7c:7f:ba:6c:45:69:2b:31:36:31:95:b5:cd:47:b5: 39:d6:8f:b5:31:98:29:f6:98:80:5f:ab:9b:16:b9: fe:8a:0d:92:0d:7c:12:ea:fd:ee:7d:0a:c4:a6:ab: 23:ea:89:81:5c:b5:56:a2:cb:3c:0b:0b:80:97:7a: c2:6d:4d:7b:c8:c7:f7:70:49:ca:cd:14:fd:99:23: 2f:90:04:24:4b:75:5b:3f:ea:87:98:b7:92:8b:29: fb:24:2f:e1:5c:9a:3b:14:4d:54:cd:86:5c:d2:a5: 93:86:99:17:b6:e4:51:6b:b0:b4:95:f9:03:b0:10: 8e:f2:dc:bf:f1:4a:c3:e9:32:c6:89:22:1b:6d:e9: aa:cd:55:a2:14:b0:4a:b7:87:75:36:4d:c7:9d:2d: 70:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8B:AC:97:BA:EF:46:15:7B:BC:19:61:6C:43:64:02:98:A8:EA:B1 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/yousl7rvRhV7vBlhbENkApio6rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.87.47.0/24 195.87.49.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:aa:a9:43:6d:77:1f:70:35:82:0e:6a:ba:2f:cd:90:bf:e8: 98:a9:2b:f2:96:fb:a7:1f:6a:f2:6a:db:91:47:5f:19:ee:92: 9b:d7:e7:87:56:d5:b4:1c:75:02:eb:9e:5e:21:17:e3:71:bd: c4:ee:88:57:08:f4:76:46:19:36:ac:7f:60:29:d0:7d:d2:22: b9:0c:23:04:2c:88:10:67:f6:3a:b3:cd:0d:bf:18:a4:5c:00: 6b:2e:49:36:6a:8e:2d:32:29:b3:3e:4d:97:9a:d7:4f:5f:a7: 8c:c1:e4:30:cb:51:3a:86:9b:3d:ed:49:fa:0b:40:dc:3d:a3: 85:50:6b:00:74:41:0c:c3:3f:2f:83:7c:ed:a9:ea:90:67:ff: 58:58:f1:08:a8:11:5a:f0:66:75:1e:1a:91:ea:52:39:ee:65: 21:46:b5:47:6d:9d:9b:c2:a9:1f:7c:49:3e:ab:b0:c2:30:77: c6:ed:14:85:97:d1:c2:ed:32:a8:b6:5b:f3:25:1c:4b:4a:56: 06:b1:6e:11:77:08:52:3d:57:10:ff:00:51:79:7c:47:d3:ec: bc:3f:28:a8:22:64:24:56:02:da:77:5e:04:0a:0a:5e:60:c0: 3d:ac:fd:d9:62:be:b6:29:07:21:ed:bb:28:98:90:46:b8:02: 33:cd:0f:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N+brmbviRNL+o1fA1DNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYThiYWM5N2JhZWY0NjE1N2JiYzE5NjE2YzQzNjQwMjk4YThlYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6ZNS6zExVqAogTGrxsYWCxmdHfz pkTLousqEScdDJxnJWJXT4jKUnDPtCyWwSjj/e1cPHKfP8gDKuLJHEzZ4FC3Rtm6 PmeV0o6lkLW+6xAX9SMqswWLMMU8q9i/LtUelp6JRojMmc18f7psRWkrMTYxlbXN R7U51o+1MZgp9piAX6ubFrn+ig2SDXwS6v3ufQrEpqsj6omBXLVWoss8CwuAl3rC bU17yMf3cEnKzRT9mSMvkAQkS3VbP+qHmLeSiyn7JC/hXJo7FE1UzYZc0qWThpkX tuRRa7C0lfkDsBCO8ty/8UrD6TLGiSIbbemqzVWiFLBKt4d1Nk3HnS1wAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMqLrJe670YVe7wZYWxDZAKYqOqxMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEveW91c2w3cnZSaFY3dkJsaGJFTmtBcGlvNnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw1cvAwQA w1cxMA0GCSqGSIb3DQEBCwUAA4IBAQB+qqlDbXcfcDWCDmq6L82Qv+iYqSvylvun H2ryatuRR18Z7pKb1+eHVtW0HHUC655eIRfjcb3E7ohXCPR2Rhk2rH9gKdB90iK5 DCMELIgQZ/Y6s80NvxikXABrLkk2ao4tMimzPk2XmtdPX6eMweQwy1E6hps97Un6 C0DcPaOFUGsAdEEMwz8vg3ztqeqQZ/9YWPEIqBFa8GZ1HhqR6lI57mUhRrVHbZ2b wqkffEk+q7DCMHfG7RSFl9HC7TKotlvzJRxLSlYGsW4RdwhSPVcQ/wBReXxH0+y8 PyioImQkVgLad14ECgpeYMA9rP3ZYr62KQch7bsomJBGuAIzzQ+J -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:38 2026 by rpki-client