This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/yYJYN7yB_Q-nMabNeBbuq0usaU8.roa File: yYJYN7yB_Q-nMabNeBbuq0usaU8.roa (raw, json) Hash identifier: JotV8yhZRYv27OMcLIgmr6zSV2UH9Ktauyk4zm0D0HY= Subject key identifier: C9:82:58:37:BC:81:FD:0F:A7:31:A6:CD:78:16:EE:AB:4B:AC:69:4F Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B369EC658DB27BD31DA82E07F31A1C4 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/yYJYN7yB_Q-nMabNeBbuq0usaU8.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199568 IP address blocks: 82.163.38.0/24 maxlen: 24 82.196.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9e:c6:58:db:27:bd:31:da:82:e0:7f:31:a1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9825837bc81fd0fa731a6cd7816eeab4bac694f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:de:50:68:35:8e:e9:e2:ea:e2:c9:06:02: 79:e9:f0:d2:0f:bb:92:23:62:5c:cb:13:be:8b:96: 7e:71:88:22:66:1f:63:71:9a:f5:c3:b6:51:ed:4d: 9c:09:8a:f1:49:08:f8:50:54:9d:9b:22:db:1a:e9: 42:73:d4:4f:36:19:fe:7e:bb:85:e0:15:db:c5:27: ad:92:49:39:47:aa:06:12:03:0b:d7:18:e2:d8:7b: ef:3f:49:7a:b6:0f:67:2b:07:21:bc:db:29:20:d4: ee:bc:55:bc:d6:b5:e1:bd:36:9c:0e:07:c5:b5:76: fa:01:56:2d:da:c1:2d:e6:82:6d:4c:0d:a6:d5:dc: 55:96:84:d0:8e:60:61:5d:77:2d:1d:f0:4b:9d:f0: d5:49:d9:46:c6:df:fa:a5:65:ff:11:c7:03:71:bd: 59:29:02:2f:fb:e6:69:0f:33:46:96:c7:56:9b:6b: ec:6c:2c:cc:6f:95:bf:4b:45:91:68:5a:15:7f:b4: d9:ad:69:15:50:36:2d:39:18:65:9c:89:6a:28:f0: 88:52:1d:67:a4:1b:fb:8a:5d:4a:80:29:11:d7:0b: 47:e2:77:a4:77:97:eb:98:df:37:23:32:cd:ca:3a: 3f:9f:1d:60:6e:c7:6d:75:74:99:3d:22:88:23:7d: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:82:58:37:BC:81:FD:0F:A7:31:A6:CD:78:16:EE:AB:4B:AC:69:4F X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/yYJYN7yB_Q-nMabNeBbuq0usaU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.38.0/24 82.196.24.0/24 Signature Algorithm: sha256WithRSAEncryption 44:05:91:7e:90:91:37:b7:39:20:fa:a4:1a:f4:8d:20:84:d7: 89:2f:b3:d8:f4:99:19:0e:31:b5:0c:4f:2f:91:a9:14:43:f3: ec:ae:0f:b9:7f:6b:6c:2e:1c:f8:18:3e:39:1b:c2:c9:16:08: d7:2a:38:4c:56:a2:55:dd:b2:ec:68:a2:99:bf:6f:fc:8c:a1: 26:74:9c:27:0c:8f:01:ce:d2:5b:d0:ad:76:b4:c6:fc:08:41: 41:86:6e:c2:cf:be:07:5d:0f:9b:f2:27:b8:08:f4:bb:29:07: 4d:fe:70:9b:1d:40:79:07:fe:a1:ee:61:64:eb:37:35:70:3d: 70:0f:9e:f4:c8:35:29:9f:77:3b:3b:dc:11:d6:11:6c:eb:8e: 5c:91:4d:f2:93:be:77:62:a4:6c:6b:94:78:0c:cf:f4:5b:aa: aa:20:a6:d6:14:a1:ef:55:d6:fa:a6:0b:52:fc:93:d2:eb:37: 97:06:72:ab:78:e3:0b:6a:69:8f:1b:63:82:56:27:dd:d1:22: 53:ea:62:cd:d1:f2:94:da:8a:59:6e:d4:6c:9a:47:c8:35:8f: 4b:77:54:6a:d4:9f:c9:69:86:d9:71:c5:b2:d3:b8:f3:7e:d1: ae:48:c2:e2:a9:4e:7c:73:b1:43:f5:e1:42:74:de:aa:64:ab: 64:2f:e1:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Np7GWNsnvTHaguB/MaHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTgyNTgzN2JjODFmZDBmYTczMWE2Y2Q3ODE2ZWVhYjRiYWM2OTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRPeUGg1juni6uLJBgJ56fDSD7uS I2JcyxO+i5Z+cYgiZh9jcZr1w7ZR7U2cCYrxSQj4UFSdmyLbGulCc9RPNhn+fruF 4BXbxSetkkk5R6oGEgML1xji2HvvP0l6tg9nKwchvNspINTuvFW81rXhvTacDgfF tXb6AVYt2sEt5oJtTA2m1dxVloTQjmBhXXctHfBLnfDVSdlGxt/6pWX/EccDcb1Z KQIv++ZpDzNGlsdWm2vsbCzMb5W/S0WRaFoVf7TZrWkVUDYtORhlnIlqKPCIUh1n pBv7il1KgCkR1wtH4nekd5frmN83IzLNyjo/nx1gbsdtdXSZPSKII30GUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMmCWDe8gf0PpzGmzXgW7qtLrGlPMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEveVlKWU43eUJfUS1uTWFiTmVCYnVxMHVzYVU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUqMmAwQA UsQYMA0GCSqGSIb3DQEBCwUAA4IBAQBEBZF+kJE3tzkg+qQa9I0ghNeJL7PY9JkZ DjG1DE8vkakUQ/Psrg+5f2tsLhz4GD45G8LJFgjXKjhMVqJV3bLsaKKZv2/8jKEm dJwnDI8BztJb0K12tMb8CEFBhm7Cz74HXQ+b8ie4CPS7KQdN/nCbHUB5B/6h7mFk 6zc1cD1wD570yDUpn3c7O9wR1hFs645ckU3yk753YqRsa5R4DM/0W6qqIKbWFKHv Vdb6pgtS/JPS6zeXBnKreOMLammPG2OCVifd0SJT6mLN0fKU2opZbtRsmkfINY9L d1Rq1J/JaYbZccWy07jzftGuSMLiqU58c7FD9eFCdN6qZKtkL+HX -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:47 2026 by rpki-client