This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa File: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (raw, json) Hash identifier: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg= Subject key identifier: C8:99:17:A9:FF:BA:FD:1C:59:69:9C:DB:88:D5:CC:C0:F9:F1:BE:AF Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Certificate serial: 019B7CED7B35E8D098EDF9D0F613E3474846 Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa Signing time: Fri 02 Jan 2026 04:18:16 +0000 ROA not before: Fri 02 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34353 IP address blocks: 193.178.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7b:35:e8:d0:98:ed:f9:d0:f6:13:e3:47:48:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c89917a9ffbafd1c59699cdb88d5ccc0f9f1beaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:95:0a:46:f4:18:c6:ee:eb:8f:73:55:2b: 25:9a:61:da:cb:89:a5:d7:0d:74:be:e9:c0:1c:25: 7b:24:a9:d6:e0:e5:b5:f1:91:27:6f:ac:bf:82:20: 5d:25:f5:69:0a:14:d4:0c:c0:fc:c0:38:bb:07:43: 09:0a:a4:29:c4:5c:da:be:21:4d:80:9c:65:95:6d: 31:31:b6:70:72:12:b3:80:7f:24:2d:d5:5d:55:f0: 39:38:00:11:be:fb:5d:81:2b:81:83:d3:00:4f:de: 65:28:52:eb:ae:3c:df:ca:18:5c:48:7e:bf:05:0e: b0:85:25:7d:3d:f8:4a:e1:cd:99:10:d4:fa:68:cd: c3:2e:d7:91:d7:e6:83:19:45:a5:30:95:c9:4f:64: 28:98:e8:fd:f9:3e:1d:d2:fa:14:c1:40:47:49:6b: e8:53:0a:27:16:41:cb:f0:cf:35:66:f0:ac:9d:db: 52:94:cb:93:0e:96:d8:b6:e2:d9:9a:1e:a5:fd:0a: 34:9b:de:82:d9:5f:9a:04:a9:80:3d:f1:93:fc:32: de:a5:ba:9c:58:c3:2a:85:7e:61:1d:07:73:ba:91: a6:80:0c:34:2b:1e:7a:e2:99:15:96:be:6d:20:a1: cc:18:7e:d3:20:87:8b:95:9e:ec:5b:f6:79:1c:01: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:99:17:A9:FF:BA:FD:1C:59:69:9C:DB:88:D5:CC:C0:F9:F1:BE:AF X509v3 Authority Key Identifier: keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.141.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:83:73:eb:fa:2a:c8:74:43:2b:89:25:a8:ea:0a:6d:bd:56: d0:fa:44:8f:8b:dd:ff:fc:4c:5d:b7:c9:7a:6b:b3:3e:e7:50: b7:8e:30:1f:7a:d8:aa:92:e9:29:27:1d:17:39:94:7d:c1:6f: dd:39:c4:1f:6d:f5:38:2b:5c:56:22:bd:e0:79:8a:75:a7:14: 88:cf:36:fe:41:ee:fb:2d:94:e3:e9:17:34:69:91:e7:40:0d: 9c:92:f8:3f:69:a0:05:f3:7b:de:b8:9f:4a:62:9b:14:22:cd: 8d:14:2b:34:df:84:c3:d5:27:b6:83:9a:3f:3d:21:69:7c:68: 16:b3:12:b6:8d:d5:0b:08:c6:68:c6:87:ba:42:8d:05:34:47: 63:46:16:63:53:99:b4:40:b2:8c:f6:6f:21:80:55:3c:77:34: 4a:56:73:c3:bc:27:fb:57:81:37:20:21:17:b2:9d:1c:35:5f: 91:c0:00:b5:5e:61:37:30:2c:98:e3:df:36:b6:94:d7:3c:8b: 62:52:23:38:c4:c0:23:0d:4f:f4:9e:22:9d:d6:0f:28:88:06: 4e:97:dc:48:b0:d0:34:65:d8:dc:31:d1:78:a0:a1:03:73:89: 3d:85:8d:ad:63:60:01:0e:b8:2d:22:35:b8:44:87:e3:c0:c4: 37:8d:f1:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Xs16NCY7fnQ9hPjR0hGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0 Mzk5NDEwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODk5MTdhOWZmYmFmZDFjNTk2OTljZGI4OGQ1Y2NjMGY5ZjFiZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/WVCkb0GMbu649zVSslmmHay4ml 1w10vunAHCV7JKnW4OW18ZEnb6y/giBdJfVpChTUDMD8wDi7B0MJCqQpxFzaviFN gJxllW0xMbZwchKzgH8kLdVdVfA5OAARvvtdgSuBg9MAT95lKFLrrjzfyhhcSH6/ BQ6whSV9PfhK4c2ZENT6aM3DLteR1+aDGUWlMJXJT2QomOj9+T4d0voUwUBHSWvo UwonFkHL8M81ZvCsndtSlMuTDpbYtuLZmh6l/Qo0m96C2V+aBKmAPfGT/DLepbqc WMMqhX5hHQdzupGmgAw0Kx564pkVlr5tIKHMGH7TIIeLlZ7sW/Z5HAGQSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMiZF6n/uv0cWWmc24jVzMD58b6vMB8GA1UdIwQY MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt YmQ3ZDM0NTFhYTY2LzEveUprWHFmLTZfUnhaYVp6YmlOWE13UG54dnE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2 LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKNMA0G CSqGSIb3DQEBCwUAA4IBAQCMg3Pr+irIdEMriSWo6gptvVbQ+kSPi93//Exdt8l6 a7M+51C3jjAfetiqkukpJx0XOZR9wW/dOcQfbfU4K1xWIr3geYp1pxSIzzb+Qe77 LZTj6Rc0aZHnQA2ckvg/aaAF83veuJ9KYpsUIs2NFCs034TD1Se2g5o/PSFpfGgW sxK2jdULCMZoxoe6Qo0FNEdjRhZjU5m0QLKM9m8hgFU8dzRKVnPDvCf7V4E3ICEX sp0cNV+RwAC1XmE3MCyY4982tpTXPItiUiM4xMAjDU/0niKd1g8oiAZOl9xIsNA0 ZdjcMdF4oKEDc4k9hY2tY2ABDrgtIjW4RIfjwMQ3jfF0 -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:01 2026 by rpki-client