This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9YKzzPVf_-fAxwfUGeXxrVTU-dg.roa File: 9YKzzPVf_-fAxwfUGeXxrVTU-dg.roa (raw, json) Hash identifier: 138XNLPITHTEIRc0L+/cq45uulnrkecJO9wYq80J+rU= Subject key identifier: F5:82:B3:CC:F5:5F:FF:E7:C0:C7:07:D4:19:E5:F1:AD:54:D4:F9:D8 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B79100528F6150BA2CD5AACCDDE3D978C Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9YKzzPVf_-fAxwfUGeXxrVTU-dg.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206683 IP address blocks: 194.8.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:05:28:f6:15:0b:a2:cd:5a:ac:cd:de:3d:97:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f582b3ccf55fffe7c0c707d419e5f1ad54d4f9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:38:eb:99:ba:4b:62:ce:c7:f8:69:b7:bb: 2f:c0:16:87:07:ea:d1:d3:21:a1:a6:67:02:94:03: c7:4f:af:ed:31:5a:34:64:57:1a:ce:86:a7:4e:58: 3e:b4:25:70:32:2c:9c:3e:66:c2:06:8a:ad:b7:68: e9:9a:35:10:a0:9d:39:3b:c4:25:f0:8c:ac:ff:86: 94:1b:df:fd:6b:a7:49:ac:bf:94:43:00:c1:46:a2: 13:24:db:b1:37:78:fb:9c:60:1c:57:35:79:cc:63: bb:21:72:6e:a6:fa:04:63:56:4c:56:19:03:bf:7a: 65:e1:af:97:be:95:1c:9c:6f:34:6a:a3:66:ac:e3: a9:8d:b7:fc:72:99:ea:08:9e:6f:f4:3b:31:27:fb: 2b:7c:d9:14:df:28:a0:c7:44:82:b8:74:5f:e0:84: 6e:4f:52:71:43:cc:8c:9b:99:ab:6b:ab:ce:c2:ad: 74:73:03:69:0f:be:1b:f9:14:0d:22:6f:4f:90:b6: 7d:f4:42:97:6b:4d:a3:ca:1e:4f:86:07:fb:21:a5: f4:a6:89:15:d4:0f:f7:be:ad:c8:f4:1e:8a:80:55: 24:27:81:eb:ea:44:bd:48:85:87:71:29:3f:72:2b: 61:18:fb:08:e2:fc:9e:e2:43:19:a1:4e:6b:80:be: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:82:B3:CC:F5:5F:FF:E7:C0:C7:07:D4:19:E5:F1:AD:54:D4:F9:D8 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9YKzzPVf_-fAxwfUGeXxrVTU-dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.238.0/24 Signature Algorithm: sha256WithRSAEncryption a3:23:c5:a7:16:5f:85:f1:56:f1:71:bf:b1:a2:95:a8:e0:8c: f3:1b:56:83:5a:b0:c5:11:e5:57:fc:31:10:b3:dc:83:d9:43: c9:f4:4b:92:d7:10:db:a1:fa:f0:6c:14:26:6e:21:10:a5:25: 6b:f4:9c:20:9d:8b:62:a9:5b:9d:84:aa:2e:32:66:12:15:c3: 64:bb:37:c1:01:f7:f6:51:89:2c:be:7c:87:b6:5c:cf:6e:19: a1:71:e4:4f:99:fe:7e:17:44:63:e9:0e:04:6b:85:9a:2f:37: c2:03:b9:60:d4:8b:a0:bd:6e:55:eb:73:82:29:fe:73:7d:85: 0d:65:df:ee:c6:86:b6:7e:b0:be:ba:18:fa:2f:fe:1c:b5:ae: 38:e3:7c:eb:da:8e:f6:67:23:88:29:2d:2d:73:3e:60:ab:12: 6b:73:c2:9f:6b:ab:00:13:94:0d:5c:d1:4a:67:ff:ee:8d:0d: 8f:88:de:59:3a:2b:50:95:1b:52:e8:84:39:aa:ef:28:dd:c9: 01:ce:2a:c2:5f:54:04:cc:e9:1a:86:a0:88:a0:7e:04:8e:9d: 2c:52:71:65:fb:fc:24:2c:c3:7c:6c:7b:75:8e:c6:fd:8f:31: 77:e8:91:b8:ca:98:7f:de:2c:c7:6e:f6:3d:70:0d:ba:1d:30: af:1f:4f:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAUo9hULos1arM3ePZeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTgyYjNjY2Y1NWZmZmU3YzBjNzA3ZDQxOWU1ZjFhZDU0ZDRmOWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YM465m6S2LOx/hpt7svwBaHB+rR 0yGhpmcClAPHT6/tMVo0ZFcazoanTlg+tCVwMiycPmbCBoqtt2jpmjUQoJ05O8Ql 8Iys/4aUG9/9a6dJrL+UQwDBRqITJNuxN3j7nGAcVzV5zGO7IXJupvoEY1ZMVhkD v3pl4a+XvpUcnG80aqNmrOOpjbf8cpnqCJ5v9DsxJ/srfNkU3yigx0SCuHRf4IRu T1JxQ8yMm5mra6vOwq10cwNpD74b+RQNIm9PkLZ99EKXa02jyh5Phgf7IaX0pokV 1A/3vq3I9B6KgFUkJ4Hr6kS9SIWHcSk/cithGPsI4vye4kMZoU5rgL5BIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWCs8z1X//nwMcH1Bnl8a1U1PnYMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvOVlLenpQVmZfLWZBeHdmVUdlWHhyVlRVLWRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgjuMA0G CSqGSIb3DQEBCwUAA4IBAQCjI8WnFl+F8Vbxcb+xopWo4IzzG1aDWrDFEeVX/DEQ s9yD2UPJ9EuS1xDbofrwbBQmbiEQpSVr9JwgnYtiqVudhKouMmYSFcNkuzfBAff2 UYksvnyHtlzPbhmhceRPmf5+F0Rj6Q4Ea4WaLzfCA7lg1IugvW5V63OCKf5zfYUN Zd/uxoa2frC+uhj6L/4cta4443zr2o72ZyOIKS0tcz5gqxJrc8Kfa6sAE5QNXNFK Z//ujQ2PiN5ZOitQlRtS6IQ5qu8o3ckBzirCX1QEzOkahqCIoH4Ejp0sUnFl+/wk LMN8bHt1jsb9jzF36JG4yph/3izHbvY9cA26HTCvH08S -----END CERTIFICATE-----Generated at Sun Jan 25 14:59:25 2026 by rpki-client