This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa File: Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa (raw, json) Hash identifier: LtiAP0I3hFV4EJMfOTIDWfqdKu5nKxB9W4yPTHv9hdw= Subject key identifier: 63:D4:EF:7C:36:61:3D:49:E6:BF:3F:28:73:5C:C4:D5:09:4C:E4:9B Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f Certificate serial: 019B797F12B06F61CD2924CE391474E79001 Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa Signing time: Thu 01 Jan 2026 12:18:49 +0000 ROA not before: Thu 01 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207992 IP address blocks: 194.9.172.0/23 maxlen: 23 194.9.172.0/24 maxlen: 24 194.9.173.0/24 maxlen: 24 194.11.20.0/23 maxlen: 23 194.11.20.0/24 maxlen: 24 194.11.21.0/24 maxlen: 24 2a04:ecc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:12:b0:6f:61:cd:29:24:ce:39:14:74:e7:90:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63d4ef7c36613d49e6bf3f28735cc4d5094ce49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:12:bc:2e:3c:da:ec:58:69:45:b3:1b:ce:19: e7:22:fa:ed:6b:0b:06:09:c2:bf:4d:96:aa:c4:9d: 00:3a:0e:a6:34:f6:94:bb:98:5d:39:fc:09:52:77: 8a:07:13:0f:46:05:7a:30:1a:d0:02:65:71:8a:59: 3d:a0:a0:ec:9c:0d:16:99:d3:c6:0b:72:73:3f:d5: fb:b3:cb:33:f6:ee:3d:db:13:19:bc:c3:47:ce:2e: b2:9f:f0:ed:c2:92:32:52:99:db:8a:6f:10:60:e5: 50:8e:25:a6:53:45:9e:99:8b:8e:d4:40:82:8a:18: 80:b5:84:8f:3b:6f:b2:d6:a0:4b:51:25:c6:f3:bd: fa:0b:9b:c2:9f:03:f4:82:7d:0b:5f:c3:a5:46:96: 16:2d:4c:53:19:75:ff:e9:f7:42:a7:f5:0b:f0:aa: 4d:19:39:9e:2d:01:67:c6:d7:45:da:77:79:4d:31: c8:68:19:fc:a8:71:2e:33:af:f0:96:af:c4:81:15: 69:4b:25:c1:7f:44:4b:46:af:6a:43:91:38:a1:d0: 73:24:2d:82:d3:c3:1a:df:5f:8c:26:3d:6b:9d:33: 5d:7a:13:63:1a:20:3f:55:78:5b:77:97:c6:8c:78: ef:76:f7:39:0a:25:f1:06:5e:2e:13:92:3d:3e:86: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D4:EF:7C:36:61:3D:49:E6:BF:3F:28:73:5C:C4:D5:09:4C:E4:9B X509v3 Authority Key Identifier: keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.172.0/23 194.11.20.0/23 IPv6: 2a04:ecc0::/29 Signature Algorithm: sha256WithRSAEncryption 03:5d:cf:e0:5d:f8:12:c5:a5:88:b6:8d:4f:5f:54:6b:ca:30: 3e:80:66:34:bb:18:71:f2:5b:b6:27:65:97:16:7a:86:03:9f: 93:ac:70:ab:75:75:34:a5:55:8d:27:51:d7:9e:ea:c2:46:d1: fc:39:91:5e:29:6d:3e:f4:ec:d2:b3:71:e2:79:f9:87:66:3f: 16:5c:b9:aa:e3:7d:4c:4b:2c:ae:f4:11:d7:76:5f:42:69:12: 85:ed:e1:9f:d1:29:4c:8c:d5:5f:25:ef:2a:f9:b8:95:0d:6d: 8c:52:5e:99:67:0d:fa:6c:62:6d:76:91:83:b5:ea:01:64:76: a7:4f:24:4c:8a:4c:b3:84:46:28:2b:b1:15:ca:a7:b9:c4:79: ba:f1:c6:62:a9:d8:cb:06:2f:66:90:c8:ec:8d:6d:b0:de:9a: 4a:13:9f:f6:ce:dd:97:a3:f8:f1:ef:06:0c:ab:e1:61:3f:f2: c5:44:c9:e5:a5:e6:69:7e:47:c8:3b:c6:92:dd:c2:0e:d4:8a: 78:82:00:ed:cf:91:5a:48:f0:b4:ae:24:8a:94:b4:b1:bc:1a: c8:07:06:8c:7e:93:d3:f6:6a:9c:b6:25:cb:35:a4:13:50:96: af:22:63:d2:77:63:d3:b5:8d:75:49:8a:49:4f:65:eb:55:19: be:5b:8e:83 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fxKwb2HNKSTOORR055ABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmVkYzE3MDU1NzZkOTdmZTRhZDIwMjkxZGUxOTg0NzNk ODE1NmYwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2Q0ZWY3YzM2NjEzZDQ5ZTZiZjNmMjg3MzVjYzRkNTA5NGNlNDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBK8Ljza7FhpRbMbzhnnIvrtawsG CcK/TZaqxJ0AOg6mNPaUu5hdOfwJUneKBxMPRgV6MBrQAmVxilk9oKDsnA0WmdPG C3JzP9X7s8sz9u492xMZvMNHzi6yn/DtwpIyUpnbim8QYOVQjiWmU0WemYuO1ECC ihiAtYSPO2+y1qBLUSXG8736C5vCnwP0gn0LX8OlRpYWLUxTGXX/6fdCp/UL8KpN GTmeLQFnxtdF2nd5TTHIaBn8qHEuM6/wlq/EgRVpSyXBf0RLRq9qQ5E4odBzJC2C 08Ma31+MJj1rnTNdehNjGiA/VXhbd5fGjHjvdvc5CiXxBl4uE5I9PoZgkQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGPU73w2YT1J5r8/KHNcxNUJTOSbMB8GA1UdIwQY MBaAFBX+3BcFV22X/krSApHeGYRz2BVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMt ZDQ3MmU0OWY1OTFlLzEvWTlUdmZEWmhQVW5tdno4b2MxekUxUWxNNUpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMtZDQ3MmU0OWY1OTFl LzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwgmsAwQB wgsUMA0EAgACMAcDBQMqBOzAMA0GCSqGSIb3DQEBCwUAA4IBAQADXc/gXfgSxaWI to1PX1RryjA+gGY0uxhx8lu2J2WXFnqGA5+TrHCrdXU0pVWNJ1HXnurCRtH8OZFe KW0+9OzSs3HiefmHZj8WXLmq431MSyyu9BHXdl9CaRKF7eGf0SlMjNVfJe8q+biV DW2MUl6ZZw36bGJtdpGDteoBZHanTyRMikyzhEYoK7EVyqe5xHm68cZiqdjLBi9m kMjsjW2w3ppKE5/2zt2Xo/jx7wYMq+FhP/LFRMnlpeZpfkfIO8aS3cIO1Ip4ggDt z5FaSPC0riSKlLSxvBrIBwaMfpPT9mqctiXLNaQTUJavImPSd2PTtY11SYpJT2Xr VRm+W46D -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:58 2026 by rpki-client