This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Yl-c_Z4vHEK-iI9aMfFocbI8cWU.roa File: Yl-c_Z4vHEK-iI9aMfFocbI8cWU.roa (raw, json) Hash identifier: cDP8W9SA7kri+7+m28tZHCLpb7Hu7PBPYZaCs2lbGOk= Subject key identifier: 62:5F:9C:FD:9E:2F:1C:42:BE:88:8F:5A:31:F1:68:71:B2:3C:71:65 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED15AE13B07F532643B4C98ED2C0E6 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Yl-c_Z4vHEK-iI9aMfFocbI8cWU.roa Signing time: Thu 01 Jan 2026 14:18:59 +0000 ROA not before: Thu 01 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15606 IP address blocks: 192.195.72.0/24 maxlen: 24 2001:7f9:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:15:ae:13:b0:7f:53:26:43:b4:c9:8e:d2:c0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=625f9cfd9e2f1c42be888f5a31f16871b23c7165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:2a:97:7e:86:7f:a6:8b:6e:9e:e4:82:75: c8:43:c7:b9:22:07:a9:e9:c7:fd:0a:c7:ea:f0:d1: d6:32:42:4f:16:87:32:62:d8:f4:47:fa:f2:fc:e4: 67:35:26:d9:6c:78:ff:2a:fd:4f:50:78:08:0d:25: 04:03:04:96:c6:cf:9d:c9:0f:25:62:f5:a4:72:6a: 54:97:cf:17:f3:64:66:2d:93:ed:a6:46:e9:c5:f5: 7e:b6:26:ae:b7:66:68:7a:97:00:9f:27:5b:20:55: 2f:3b:da:58:f8:d6:23:1e:b2:c5:2b:4e:6a:b7:29: b3:fb:47:04:6f:1f:65:08:c3:c5:97:14:5f:7d:ee: 36:59:04:ab:01:95:69:7e:31:6a:55:c9:96:2b:03: 36:11:fe:4f:5b:97:a3:3a:45:b6:9c:89:18:c4:8b: e6:35:ef:55:51:dd:4a:d6:af:04:c7:67:0c:da:a2: e9:4a:e5:8f:b0:3a:f5:77:4c:d7:bc:6d:03:79:67: 4c:78:2b:61:c9:a8:aa:18:47:eb:a1:47:a2:db:d6: d4:c7:93:01:1d:d5:1a:42:74:35:57:80:61:8a:39: 7d:d0:b6:0b:2d:9c:53:e1:a6:90:4d:bf:98:a6:e1: 8d:a1:b7:8a:92:5d:a0:a9:94:05:58:ce:6a:ad:b9: ee:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5F:9C:FD:9E:2F:1C:42:BE:88:8F:5A:31:F1:68:71:B2:3C:71:65 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Yl-c_Z4vHEK-iI9aMfFocbI8cWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.195.72.0/24 IPv6: 2001:7f9:c::/48 Signature Algorithm: sha256WithRSAEncryption 83:be:15:d5:84:4d:cd:2b:60:94:70:8b:59:b5:35:1d:06:95: 91:e9:7a:ff:ef:81:e0:df:27:7f:4b:ec:6c:56:2b:b5:62:21: 1d:d2:45:c3:b2:72:05:17:3a:af:09:fa:69:c3:ba:e3:9b:30: 93:dc:8b:dd:2b:db:e2:62:e2:a7:89:8d:b9:8d:c6:38:8d:d7: 6c:50:05:59:42:1e:02:2c:58:35:08:ac:56:23:b4:09:b2:5f: eb:7d:36:80:78:fd:8b:73:2f:ba:1a:b6:05:76:df:45:4e:d2: a7:35:a9:3a:3f:9c:78:67:d2:15:d4:02:cc:30:57:8c:a9:7e: d0:a1:49:95:36:74:48:25:a4:e8:f3:7a:3f:f1:91:00:77:99: a0:20:a1:14:1e:9f:c4:fe:b1:3e:24:01:32:57:1a:c3:55:60: dd:87:36:f7:ea:ca:35:71:da:b7:e5:b9:f8:30:1a:ea:a3:3a: 68:8d:a6:4b:13:99:99:9f:88:c6:43:6c:01:39:fb:aa:04:e8: c6:93:f6:61:c6:08:e6:1a:19:e9:6d:81:89:da:4c:45:77:94: 6b:0a:56:aa:87:77:95:70:b1:43:98:01:27:55:75:12:0f:1e: 71:6e:fe:99:9c:47:7b:06:e9:cd:cc:c6:ac:42:dd:f6:4d:01: 25:99:75:57 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57RWuE7B/UyZDtMmO0sDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjVmOWNmZDllMmYxYzQyYmU4ODhmNWEzMWYxNjg3MWIyM2M3MTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCgql36Gf6aLbp7kgnXIQ8e5Igep 6cf9Csfq8NHWMkJPFocyYtj0R/ry/ORnNSbZbHj/Kv1PUHgIDSUEAwSWxs+dyQ8l YvWkcmpUl88X82RmLZPtpkbpxfV+tiaut2ZoepcAnydbIFUvO9pY+NYjHrLFK05q tymz+0cEbx9lCMPFlxRffe42WQSrAZVpfjFqVcmWKwM2Ef5PW5ejOkW2nIkYxIvm Ne9VUd1K1q8Ex2cM2qLpSuWPsDr1d0zXvG0DeWdMeCthyaiqGEfroUei29bUx5MB HdUaQnQ1V4Bhijl90LYLLZxT4aaQTb+YpuGNobeKkl2gqZQFWM5qrbnuCQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGJfnP2eLxxCvoiPWjHxaHGyPHFlMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvWWwtY19aNHZIRUstaUk5YU1mRm9jYkk4Y1dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwMNIMA8E AgACMAkDBwAgAQf5AAwwDQYJKoZIhvcNAQELBQADggEBAIO+FdWETc0rYJRwi1m1 NR0GlZHpev/vgeDfJ39L7GxWK7ViIR3SRcOycgUXOq8J+mnDuuObMJPci90r2+Ji 4qeJjbmNxjiN12xQBVlCHgIsWDUIrFYjtAmyX+t9NoB4/YtzL7oatgV230VO0qc1 qTo/nHhn0hXUAswwV4ypftChSZU2dEglpOjzej/xkQB3maAgoRQen8T+sT4kATJX GsNVYN2HNvfqyjVx2rflufgwGuqjOmiNpksTmZmfiMZDbAE5+6oE6MaT9mHGCOYa GeltgYnaTEV3lGsKVqqHd5VwsUOYASdVdRIPHnFu/pmcR3sG6c3MxqxC3fZNASWZ dVc= -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:38 2026 by rpki-client