This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/yvh8j0ru32STHkWQnm2Nc1JWsT8.roa File: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (raw, json) Hash identifier: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o= Subject key identifier: CA:F8:7C:8F:4A:EE:DF:64:93:1E:45:90:9E:6D:8D:73:52:56:B1:3F Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed Certificate serial: 019B78A2A857347E1DC1B7B153002CEBBF01 Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/yvh8j0ru32STHkWQnm2Nc1JWsT8.roa Signing time: Thu 01 Jan 2026 08:18:04 +0000 ROA not before: Thu 01 Jan 2026 08:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208905 IP address blocks: 176.106.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a8:57:34:7e:1d:c1:b7:b1:53:00:2c:eb:bf:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed Validity Not Before: Jan 1 08:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caf87c8f4aeedf64931e45909e6d8d735256b13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fc:c3:84:81:0a:e1:c4:33:c0:c7:0f:c6:6c: 88:1c:93:4d:4f:de:50:2b:52:05:78:a4:68:06:4f: 57:48:dc:ee:a8:13:07:95:f6:c0:a5:e3:20:a9:0b: ca:6a:2f:87:02:5e:a9:b1:a4:a1:20:e2:de:d0:45: d0:3c:00:07:93:34:6f:dd:3a:c6:9f:c0:80:9a:b7: ee:1e:ed:fd:4d:85:09:58:16:01:e9:8f:58:fa:35: b3:84:6c:ff:95:75:ec:e0:49:c6:3c:d8:31:34:c8: f6:28:60:39:55:5e:c2:3c:6f:cf:ec:50:e3:2b:fa: 34:81:ff:23:15:2d:56:b7:f8:6d:42:3d:e3:4a:e7: 80:f8:69:bd:e6:bc:d9:7f:23:1d:48:75:7f:13:7d: f2:38:d9:0c:fb:72:40:3a:9f:db:f3:b4:e6:a9:f9: 84:9c:06:79:25:4f:83:37:6a:b4:c7:b0:48:a0:4d: 29:8e:5b:d9:ed:51:94:eb:28:93:16:53:31:45:66: 27:09:3c:09:31:d5:4d:5f:51:f6:dc:27:76:40:3c: 5d:91:c8:26:16:58:6b:6c:40:4c:ad:56:b5:48:e4: 08:94:83:5b:1c:49:91:61:4d:d0:ac:58:cf:0c:ff: ed:3c:24:39:fc:48:78:66:df:de:dc:d8:2f:ba:8d: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F8:7C:8F:4A:EE:DF:64:93:1E:45:90:9E:6D:8D:73:52:56:B1:3F X509v3 Authority Key Identifier: keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/yvh8j0ru32STHkWQnm2Nc1JWsT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.106.229.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:60:ef:c0:80:f2:19:fd:5a:98:1f:25:85:ff:bb:0a:fc:36: 5b:09:62:77:c0:a4:c5:37:9c:45:12:8d:af:6a:67:8d:e9:1e: eb:8d:08:01:7a:17:16:c1:5b:49:46:5c:90:18:c4:14:ca:08: fd:9f:21:9f:fe:66:8e:e6:b2:dc:fc:1e:ab:5e:93:9e:d6:ff: ce:1d:42:58:af:66:0c:12:4d:35:54:d5:04:87:2d:1c:b9:2f: f3:cc:a2:42:9f:ab:20:29:1a:4c:7e:e6:6f:24:fd:5f:21:7a: c4:81:74:ee:4e:0d:e7:40:41:98:73:da:cf:18:eb:77:e6:46: 07:e3:db:94:3e:81:c1:a8:fb:e4:f7:93:ff:a7:fb:b7:b0:0a: 5f:7f:ef:4f:23:11:8f:86:89:a8:62:55:f6:21:65:e4:2f:ba: ea:3a:7c:70:c9:6f:91:b7:95:20:64:e2:59:2b:8b:f7:8f:be: 6b:d5:f3:6a:e5:6f:f6:c1:85:7b:1d:bc:50:62:d6:04:76:90: 04:d5:ee:8d:f3:81:62:96:25:17:b6:e6:83:f6:4c:dc:76:db: ce:f0:20:ee:75:ae:55:4a:69:61:34:76:3b:51:a4:30:12:2b: 92:20:1a:a2:30:3d:c7:b8:27:40:48:72:88:53:61:16:55:d7: 76:eb:3b:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oqhXNH4dwbexUwAs678BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDc0Y2M3YmY1MjRhYjkzYmQwZjBlNDFiYjU3OWU5MThi YjEzZWQwHhcNMjYwMTAxMDgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWY4N2M4ZjRhZWVkZjY0OTMxZTQ1OTA5ZTZkOGQ3MzUyNTZiMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fzDhIEK4cQzwMcPxmyIHJNNT95Q K1IFeKRoBk9XSNzuqBMHlfbApeMgqQvKai+HAl6psaShIOLe0EXQPAAHkzRv3TrG n8CAmrfuHu39TYUJWBYB6Y9Y+jWzhGz/lXXs4EnGPNgxNMj2KGA5VV7CPG/P7FDj K/o0gf8jFS1Wt/htQj3jSueA+Gm95rzZfyMdSHV/E33yONkM+3JAOp/b87TmqfmE nAZ5JU+DN2q0x7BIoE0pjlvZ7VGU6yiTFlMxRWYnCTwJMdVNX1H23Cd2QDxdkcgm FlhrbEBMrVa1SOQIlINbHEmRYU3QrFjPDP/tPCQ5/Eh4Zt/e3Ngvuo0iLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMr4fI9K7t9kkx5FkJ5tjXNSVrE/MB8GA1UdIwQY MBaAFIoHTMe/Ukq5O9Dw5Bu1eekYuxPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYt OWVkN2UzNjMyYmQwLzEveXZoOGowcnUzMlNUSGtXUW5tMk5jMUpXc1Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYtOWVkN2UzNjMyYmQw LzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGrlMA0G CSqGSIb3DQEBCwUAA4IBAQB6YO/AgPIZ/VqYHyWF/7sK/DZbCWJ3wKTFN5xFEo2v ameN6R7rjQgBehcWwVtJRlyQGMQUygj9nyGf/maO5rLc/B6rXpOe1v/OHUJYr2YM Ek01VNUEhy0cuS/zzKJCn6sgKRpMfuZvJP1fIXrEgXTuTg3nQEGYc9rPGOt35kYH 49uUPoHBqPvk95P/p/u3sApff+9PIxGPhomoYlX2IWXkL7rqOnxwyW+Rt5UgZOJZ K4v3j75r1fNq5W/2wYV7HbxQYtYEdpAE1e6N84FiliUXtuaD9kzcdtvO8CDuda5V SmlhNHY7UaQwEiuSIBqiMD3HuCdASHKIU2EWVdd26ztB -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:25 2026 by rpki-client