This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/n7pDY_8zMb4XywLOR-Gyk8ZEh6Q.roa File: n7pDY_8zMb4XywLOR-Gyk8ZEh6Q.roa (raw, json) Hash identifier: CUzjuBkLmCl6WtXKZbLolmS3oXPaSaat/iqu2Jp6Roo= Subject key identifier: 9F:BA:43:63:FF:33:31:BE:17:CB:02:CE:47:E1:B2:93:C6:44:87:A4 Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Certificate serial: 019B7D5D3640400250E293976A194685A8CA Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/n7pDY_8zMb4XywLOR-Gyk8ZEh6Q.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42 IP address blocks: 194.0.17.0/24 maxlen: 24 2001:678:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:36:40:40:02:50:e2:93:97:6a:19:46:85:a8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fba4363ff3331be17cb02ce47e1b293c64487a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:6f:51:47:57:2b:03:ef:90:07:d0:d3:77: 4c:b2:f1:81:bf:62:b1:34:a9:73:1b:51:b6:89:34: ff:cb:a0:99:4f:f2:58:ca:4b:41:3b:ac:b9:b7:a8: 87:ff:c9:74:4a:08:54:7a:e7:e7:99:9f:a6:25:7f: de:57:de:c7:65:7e:36:9a:3f:d8:ba:bf:19:cc:e5: 3b:22:c2:a0:a4:e8:cd:3e:23:a6:66:0a:ae:02:2c: 55:fd:9c:de:ce:22:72:db:7e:d1:a0:61:04:81:b6: ce:06:2b:24:5e:4e:c1:d6:b3:4b:65:ad:1b:4b:7a: b0:bf:d3:af:3e:c7:26:dc:6f:da:dd:9c:f3:1a:fc: 88:f2:03:63:7c:e5:27:32:a0:33:9b:a6:cb:5d:2f: 4b:d7:17:cb:26:1f:fd:fe:44:3a:11:c8:b9:ec:7d: 90:06:58:47:ad:b8:cd:d1:37:51:90:e9:e3:f2:a4: b4:e4:b0:75:62:a9:87:69:32:38:d8:9a:d7:85:a4: 47:39:48:a6:ac:ec:7a:e2:9a:1a:ad:7f:c3:2e:13: a4:9e:c6:62:a1:97:10:d8:ce:f8:9a:a5:a9:93:47: c5:b7:49:08:eb:39:e7:86:39:06:d5:ae:fe:dc:ea: 22:bb:f4:51:d5:2d:bc:d9:ca:67:3e:35:65:9c:cf: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BA:43:63:FF:33:31:BE:17:CB:02:CE:47:E1:B2:93:C6:44:87:A4 X509v3 Authority Key Identifier: keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/n7pDY_8zMb4XywLOR-Gyk8ZEh6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.17.0/24 IPv6: 2001:678:3::/48 Signature Algorithm: sha256WithRSAEncryption 91:51:51:3b:ba:48:85:dd:5b:5c:0f:c8:a3:5d:ba:73:03:c6: 8c:61:87:20:d6:62:eb:69:0e:dc:67:1e:06:14:bc:76:6e:c7: 1b:f8:2b:e7:08:d1:45:42:d5:51:9d:85:80:34:61:54:94:9b: 35:d3:31:24:79:9d:55:b7:e4:03:ca:0b:2a:45:0f:b8:87:eb: ff:9a:b4:6b:79:6a:3a:d5:68:d3:f0:ad:49:93:aa:9d:59:65: d5:8d:40:dd:db:f3:54:af:1e:f1:9e:6b:71:0e:62:c3:fa:52: 64:18:ca:76:ad:2d:0c:1e:1f:5c:cc:d3:e8:8e:bc:b6:48:ff: b1:77:67:e7:9e:9a:07:15:4b:3a:dc:02:5c:8f:a9:78:3d:87: 0a:6d:84:34:59:e7:4d:91:34:40:fd:c8:ab:dc:57:41:01:8a: 93:c9:ab:8a:24:46:25:3d:d7:ff:64:92:ed:5d:ae:6b:f7:9f: be:6f:9f:ad:d7:c3:f0:1c:35:9d:e6:b4:54:e4:dd:7a:ac:a7: 25:bf:0a:77:5b:29:85:ea:e4:fb:73:3a:4a:2c:89:ad:64:f2: 45:0e:52:e4:5b:32:90:c3:04:40:ae:e7:00:5b:2c:23:15:98: 27:4e:8e:c0:80:6e:d2:a3:d9:d8:b4:ca:c9:9a:4b:2e:90:0c: 9d:90:a8:ae -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XTZAQAJQ4pOXahlGhajKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5 ZjBhOTMwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmJhNDM2M2ZmMzMzMWJlMTdjYjAyY2U0N2UxYjI5M2M2NDQ4N2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMdvUUdXKwPvkAfQ03dMsvGBv2Kx NKlzG1G2iTT/y6CZT/JYyktBO6y5t6iH/8l0SghUeufnmZ+mJX/eV97HZX42mj/Y ur8ZzOU7IsKgpOjNPiOmZgquAixV/ZzeziJy237RoGEEgbbOBiskXk7B1rNLZa0b S3qwv9OvPscm3G/a3ZzzGvyI8gNjfOUnMqAzm6bLXS9L1xfLJh/9/kQ6Eci57H2Q BlhHrbjN0TdRkOnj8qS05LB1YqmHaTI42JrXhaRHOUimrOx64poarX/DLhOknsZi oZcQ2M74mqWpk0fFt0kI6znnhjkG1a7+3Ooiu/RR1S282cpnPjVlnM/KFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ+6Q2P/MzG+F8sCzkfhspPGRIekMB8GA1UdIwQY MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt N2NmZDk1N2YwOGZmLzEvbjdwRFlfOHpNYjRYeXdMT1ItR3lrOFpFaDZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgARMA8E AgACMAkDBwAgAQZ4AAMwDQYJKoZIhvcNAQELBQADggEBAJFRUTu6SIXdW1wPyKNd unMDxoxhhyDWYutpDtxnHgYUvHZuxxv4K+cI0UVC1VGdhYA0YVSUmzXTMSR5nVW3 5APKCypFD7iH6/+atGt5ajrVaNPwrUmTqp1ZZdWNQN3b81SvHvGea3EOYsP6UmQY ynatLQweH1zM0+iOvLZI/7F3Z+eemgcVSzrcAlyPqXg9hwpthDRZ502RNED9yKvc V0EBipPJq4okRiU91/9kku1drmv3n75vn63Xw/AcNZ3mtFTk3XqspyW/CndbKYXq 5PtzOkosia1k8kUOUuRbMpDDBECu5wBbLCMVmCdOjsCAbtKj2di0ysmaSy6QDJ2Q qK4= -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:03 2026 by rpki-client