This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/_Yb7IW78SKZuD4V1IkJEZwe6uu8.roa File: _Yb7IW78SKZuD4V1IkJEZwe6uu8.roa (raw, json) Hash identifier: 14e7sG8qVox+8SMefeXpeF7AFL8AbwbjJc3kCO+AHdc= Subject key identifier: FD:86:FB:21:6E:FC:48:A6:6E:0F:85:75:22:42:44:67:07:BA:BA:EF Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7 Certificate serial: 019B797F1BD46831F3DE3968A3B20C82FB1B Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/_Yb7IW78SKZuD4V1IkJEZwe6uu8.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 193.242.97.0/24 maxlen: 24 2001:67c:18a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1b:d4:68:31:f3:de:39:68:a3:b2:0c:82:fb:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd86fb216efc48a66e0f85752242446707babaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:f6:48:1d:54:73:72:bf:cc:53:39:b4:97: 8a:e5:33:00:23:2b:eb:43:dd:0c:36:fc:12:5b:31: 23:f0:a3:e0:0a:ec:a4:3b:b8:e2:f1:e2:a9:4b:84: ae:22:ee:e5:a3:8c:4a:8e:95:e3:e9:9a:23:87:e3: db:24:7d:e5:95:7a:43:e5:a6:d9:49:4a:15:8b:e6: bd:77:7f:1c:f9:80:e2:05:a7:51:26:6f:c0:2c:a5: 59:f4:58:29:0e:e9:28:f3:2d:36:34:7f:b1:35:7d: 24:0b:a3:7a:37:9c:31:76:32:02:9d:c3:af:49:d1: bc:8a:2a:1c:05:ca:00:2c:a4:c2:3e:16:fa:11:d5: 37:dd:e8:06:f2:2a:0f:ff:f4:7d:aa:3b:ac:10:60: 27:e1:4c:5c:e7:25:f3:41:16:ae:1f:c2:fd:ce:09: 51:62:8c:5f:e3:7e:37:83:7e:04:a5:a6:ec:38:59: 84:fe:65:09:9a:0a:a9:d5:36:f2:96:20:04:0f:c6: 60:02:ad:4f:9a:10:86:80:7e:07:fa:d1:18:87:11: 75:8b:ad:5e:70:30:98:f4:f3:14:d9:33:c9:06:eb: 03:d9:77:61:6c:23:eb:08:7d:c1:b6:08:ee:2d:07: 1d:aa:dd:1f:32:0e:7b:5b:b7:5b:20:54:57:2c:84: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:86:FB:21:6E:FC:48:A6:6E:0F:85:75:22:42:44:67:07:BA:BA:EF X509v3 Authority Key Identifier: keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/_Yb7IW78SKZuD4V1IkJEZwe6uu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.97.0/24 IPv6: 2001:67c:18a0::/48 Signature Algorithm: sha256WithRSAEncryption 9a:a5:d8:3a:25:fd:ed:f3:b1:e0:28:d2:29:e8:10:09:bc:83: 6d:35:20:e4:6d:cf:a7:83:58:a9:34:45:75:f7:72:5d:9c:ca: 6a:7d:37:1e:12:2a:ac:47:46:4c:43:12:79:51:e3:0c:31:dd: 2d:55:24:c9:5f:07:3f:77:ec:c2:e2:f2:05:29:f0:27:6b:d5: 7c:64:5a:82:8b:f3:56:b7:ac:90:34:19:bc:0c:60:df:c3:b6: 32:db:f2:32:dc:a9:6e:27:24:72:15:64:9a:61:49:ca:63:25: a5:b9:53:bc:6d:c1:f4:c8:1a:56:84:14:7d:fd:55:43:74:f3: eb:fd:ee:71:4b:51:2b:a2:86:d7:3c:0d:84:b5:d7:c9:91:7d: 21:95:72:9d:16:f9:8b:f4:5f:da:52:a7:54:13:e4:e9:1c:94: 7c:d4:d3:5c:92:1a:63:75:77:b2:2a:ac:ed:f7:3e:f6:24:59: 8c:54:e1:c2:a9:e6:1c:6a:ab:bb:48:e8:0b:cc:62:72:52:45: ff:c0:0b:45:65:1e:57:eb:23:7d:66:32:bb:00:52:e8:f7:71: 81:86:33:9f:41:31:23:80:5f:a1:b4:16:86:af:40:a8:16:24: e8:a2:c8:e6:f9:20:f8:3d:87:80:74:8e:9f:8b:23:21:a9:bc: 5c:37:a3:4d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fxvUaDHz3jloo7IMgvsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDY3YTg0NDA5Y2VkYmEwMjJlZWIwMzViZDhhZDYyMGQ2 ODNlYTcwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDg2ZmIyMTZlZmM0OGE2NmUwZjg1NzUyMjQyNDQ2NzA3YmFiYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/z2SB1Uc3K/zFM5tJeK5TMAIyvr Q90MNvwSWzEj8KPgCuykO7ji8eKpS4SuIu7lo4xKjpXj6Zojh+PbJH3llXpD5abZ SUoVi+a9d38c+YDiBadRJm/ALKVZ9FgpDuko8y02NH+xNX0kC6N6N5wxdjICncOv SdG8iiocBcoALKTCPhb6EdU33egG8ioP//R9qjusEGAn4Uxc5yXzQRauH8L9zglR Yoxf4343g34EpabsOFmE/mUJmgqp1TbyliAED8ZgAq1PmhCGgH4H+tEYhxF1i61e cDCY9PMU2TPJBusD2XdhbCPrCH3BtgjuLQcdqt0fMg57W7dbIFRXLITVkQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFP2G+yFu/Eimbg+FdSJCRGcHurrvMB8GA1UdIwQY MBaAFIDWeoRAnO26Ai7rA1vYrWINaD6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05aNmhFQ2M3Ym9DTHVzRFc5aXRZZzFvUHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xM2Q1MGItN2RiMy00ZDEwLThhNGUt NmViM2FhNmEyMWFmLzEvX1liN0lXNzhTS1p1RDRWMUlrSkVad2U2dXU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8xM2Q1MGItN2RiMy00ZDEwLThhNGUtNmViM2FhNmEyMWFm LzEvZ05aNmhFQ2M3Ym9DTHVzRFc5aXRZZzFvUHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwfJhMA8E AgACMAkDBwAgAQZ8GKAwDQYJKoZIhvcNAQELBQADggEBAJql2Dol/e3zseAo0ino EAm8g201IORtz6eDWKk0RXX3cl2cymp9Nx4SKqxHRkxDEnlR4wwx3S1VJMlfBz93 7MLi8gUp8Cdr1XxkWoKL81a3rJA0GbwMYN/DtjLb8jLcqW4nJHIVZJphScpjJaW5 U7xtwfTIGlaEFH39VUN08+v97nFLUSuihtc8DYS118mRfSGVcp0W+Yv0X9pSp1QT 5OkclHzU01ySGmN1d7IqrO33PvYkWYxU4cKp5hxqq7tI6AvMYnJSRf/AC0VlHlfr I31mMrsAUuj3cYGGM59BMSOAX6G0FoavQKgWJOiiyOb5IPg9h4B0jp+LIyGpvFw3 o00= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:36 2026 by rpki-client