This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/9YUjZkELa6GF8gXKAy2oZk9823g.roa File: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (raw, json) Hash identifier: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E= Subject key identifier: F5:85:23:66:41:0B:6B:A1:85:F2:05:CA:03:2D:A8:66:4F:7C:DB:78 Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c Certificate serial: 019B7BA337F5A70254AD728E61BF90952E52 Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/9YUjZkELa6GF8gXKAy2oZk9823g.roa Signing time: Thu 01 Jan 2026 22:17:32 +0000 ROA not before: Thu 01 Jan 2026 22:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25151 IP address blocks: 193.33.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:37:f5:a7:02:54:ad:72:8e:61:bf:90:95:2e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26144c824959711b652d78c18702bf432f2195c Validity Not Before: Jan 1 22:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5852366410b6ba185f205ca032da8664f7cdb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:a7:0b:0e:1b:93:2d:32:31:5c:51:b2:57: f5:19:e5:1d:34:a3:ba:24:e5:fa:cb:73:eb:8f:3a: d8:9e:e2:78:d7:a3:36:9b:a4:8c:84:ef:fd:ca:a6: bd:8f:46:19:e2:9b:94:08:bf:71:21:fa:32:07:39: dd:d6:32:a8:4d:0c:3a:02:57:db:a3:4c:a9:cf:60: 87:12:75:2d:3a:bd:2e:ed:1e:ae:0d:e2:a1:00:6b: 18:98:64:f0:ab:df:43:0f:58:70:1f:7a:59:e0:6e: af:f2:52:47:7e:45:04:05:69:38:97:b0:b8:eb:99: ec:65:fd:5b:dc:fb:db:4b:f1:94:8d:ba:5c:ca:65: 15:a7:61:58:84:c9:a7:b0:56:13:c8:37:e2:1b:2d: 84:59:f1:ac:5b:2c:ba:b8:4a:07:50:10:8b:a3:43: 15:e2:06:66:71:8b:3d:5d:61:20:86:4b:49:03:ef: 4d:3b:af:fa:8d:2f:4c:07:72:a2:2a:f1:60:79:b4: 52:e0:d1:7d:dc:b9:e9:0f:5f:a2:7b:47:8e:a5:ad: a0:da:d2:5e:83:a1:59:fb:38:25:18:b8:6d:86:ab: 37:89:0a:a3:a3:9a:a0:32:9d:06:5e:03:d0:a1:fa: ca:4f:10:32:46:7f:52:83:75:55:94:07:e5:79:78: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:85:23:66:41:0B:6B:A1:85:F2:05:CA:03:2D:A8:66:4F:7C:DB:78 X509v3 Authority Key Identifier: keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/9YUjZkELa6GF8gXKAy2oZk9823g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.220.0/24 Signature Algorithm: sha256WithRSAEncryption 87:24:1d:e7:82:58:39:5a:41:dc:71:d1:11:8f:15:ed:6f:d0: 90:93:4f:3b:08:ba:de:89:71:f5:85:7e:6b:28:52:ee:88:48: e6:4f:6c:12:63:c3:1d:d8:fe:ef:1c:7a:3c:03:02:15:07:0e: e2:39:e1:53:bb:84:f9:e1:4c:96:71:12:ac:c3:3e:c4:24:0f: b9:6a:eb:38:4f:90:58:82:ea:ea:1f:dc:d9:75:61:a4:c9:ad: af:3a:90:e5:0b:30:68:25:24:3e:ec:c8:35:b4:55:db:c5:94: 83:6c:29:85:da:0b:eb:a2:bf:5e:d6:56:5f:eb:52:d3:b6:5b: 46:af:52:29:4e:db:78:65:38:52:24:34:d4:c2:16:b4:9c:75: 74:e5:ae:a0:04:5c:33:4c:8a:b1:75:41:50:99:93:9f:be:e0: 4d:02:7c:99:1e:97:4c:71:17:ae:5e:1c:a8:18:f7:9c:bb:dc: e3:1f:d8:3b:8d:db:d8:45:43:3c:cb:00:8e:aa:02:86:02:53: 98:29:4a:89:8a:87:03:75:19:29:43:2b:f0:71:d0:ec:b8:12: e1:91:15:da:ef:78:d9:94:30:3e:df:96:38:77:dd:d4:aa:97: 2c:28:61:e9:79:8c:3b:a8:87:79:ea:ac:a1:80:be:62:b3:2b: 98:6a:a7:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ozf1pwJUrXKOYb+QlS5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjE0NGM4MjQ5NTk3MTFiNjUyZDc4YzE4NzAyYmY0MzJm MjE5NWMwHhcNMjYwMTAxMjIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTg1MjM2NjQxMGI2YmExODVmMjA1Y2EwMzJkYTg2NjRmN2NkYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xqnCw4bky0yMVxRslf1GeUdNKO6 JOX6y3PrjzrYnuJ416M2m6SMhO/9yqa9j0YZ4puUCL9xIfoyBznd1jKoTQw6Alfb o0ypz2CHEnUtOr0u7R6uDeKhAGsYmGTwq99DD1hwH3pZ4G6v8lJHfkUEBWk4l7C4 65nsZf1b3PvbS/GUjbpcymUVp2FYhMmnsFYTyDfiGy2EWfGsWyy6uEoHUBCLo0MV 4gZmcYs9XWEghktJA+9NO6/6jS9MB3KiKvFgebRS4NF93LnpD1+ie0eOpa2g2tJe g6FZ+zglGLhthqs3iQqjo5qgMp0GXgPQofrKTxAyRn9Sg3VVlAfleXj7ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWFI2ZBC2uhhfIFygMtqGZPfNt4MB8GA1UdIwQY MBaAFPJhRMgklZcRtlLXjBhwK/Qy8hlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjIt MzViNDgzYmI0Yzg0LzEvOVlValprRUxhNkdGOGdYS0F5Mm9aazk4MjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjItMzViNDgzYmI0Yzg0 LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSHcMA0G CSqGSIb3DQEBCwUAA4IBAQCHJB3nglg5WkHccdERjxXtb9CQk087CLreiXH1hX5r KFLuiEjmT2wSY8Md2P7vHHo8AwIVBw7iOeFTu4T54UyWcRKswz7EJA+5aus4T5BY gurqH9zZdWGkya2vOpDlCzBoJSQ+7Mg1tFXbxZSDbCmF2gvror9e1lZf61LTtltG r1IpTtt4ZThSJDTUwha0nHV05a6gBFwzTIqxdUFQmZOfvuBNAnyZHpdMcReuXhyo GPecu9zjH9g7jdvYRUM8ywCOqgKGAlOYKUqJiocDdRkpQyvwcdDsuBLhkRXa73jZ lDA+35Y4d93UqpcsKGHpeYw7qId56qyhgL5isyuYaqei -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:38 2026 by rpki-client