This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YiQeB6mXzfCyupPAPRe9_Hb1pYw.roa File: YiQeB6mXzfCyupPAPRe9_Hb1pYw.roa (raw, json) Hash identifier: cMc8tFq2W+6uplHr19NVGh6oiwRaddm6QI76iqzQ574= Subject key identifier: 62:24:1E:07:A9:97:CD:F0:B2:BA:93:C0:3D:17:BD:FC:76:F5:A5:8C Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14C247BC69317246D910C4D07DD08B Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YiQeB6mXzfCyupPAPRe9_Hb1pYw.roa Signing time: Fri 02 Jan 2026 14:20:25 +0000 ROA not before: Fri 02 Jan 2026 14:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207747 IP address blocks: 195.143.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c2:47:bc:69:31:72:46:d9:10:c4:d0:7d:d0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62241e07a997cdf0b2ba93c03d17bdfc76f5a58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9e:ec:d0:8d:0e:47:b0:a9:f5:60:a6:c2:f3: ff:5f:16:a8:e1:5a:4e:25:b4:13:98:23:4d:c4:9d: 51:09:cf:9e:fa:2f:9f:b9:7b:1a:44:bd:1e:01:a2: d3:16:2e:75:0b:87:14:26:42:28:f1:a7:c2:c9:ca: 8c:9c:2e:81:1d:5c:9b:c7:83:ec:1a:a1:bd:e5:4e: bd:46:ec:c8:e6:48:9d:6c:07:d2:5d:ba:0d:40:e4: 35:de:e7:2a:76:4e:c7:c9:ff:3a:87:12:a2:8e:32: c4:f4:00:f9:3f:e0:2e:de:3d:50:79:d0:03:aa:1e: d0:f1:cf:7c:d6:5b:8f:98:19:99:99:c8:0b:09:67: 93:f7:24:7b:fd:50:c2:44:55:da:1f:1a:c3:6a:ee: be:93:2c:0b:58:c3:6d:63:61:e5:9e:ab:17:5d:ee: 91:0f:4c:3b:bf:a1:00:9c:cb:d7:9f:c7:25:d2:e7: 57:a8:06:d9:ea:ee:c9:30:f2:41:07:e1:35:61:9a: 5b:e9:43:64:75:27:74:08:22:48:72:24:fe:34:ff: 59:65:63:a9:da:72:10:e6:52:20:db:0e:3b:3c:e9: 54:72:13:5a:bf:a4:ee:47:27:73:99:8f:49:4c:ee: 0c:1f:bf:1d:6f:86:88:2d:54:4d:a1:28:4b:85:23: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:24:1E:07:A9:97:CD:F0:B2:BA:93:C0:3D:17:BD:FC:76:F5:A5:8C X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YiQeB6mXzfCyupPAPRe9_Hb1pYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.143.125.0/24 Signature Algorithm: sha256WithRSAEncryption 26:3e:a8:16:3b:8d:7b:17:0d:5e:c6:20:e4:b3:cb:87:1d:48: 4a:60:30:1f:70:85:3d:fb:de:d0:2a:ae:ae:60:01:31:29:90: 3f:cd:92:f8:f8:74:cf:a2:90:b6:66:ad:50:23:63:c3:dc:26: a9:54:8f:5b:9d:4e:b1:2d:21:61:c8:b1:54:b1:08:8b:d5:48: db:27:21:37:4e:04:30:6c:4b:66:7c:c0:07:bf:aa:b7:e1:5e: f8:9f:7b:06:52:94:9f:7a:7b:7b:5e:5d:80:4e:b8:39:0e:a0: 20:65:f7:8f:2e:2b:0e:39:18:30:29:8c:25:69:40:9a:13:1f: 64:f9:ce:9e:c2:3b:ba:c8:29:d1:ac:03:08:d8:81:c0:11:cc: a0:95:dd:71:6b:3b:6a:0e:e8:38:bc:d7:bc:75:e2:b9:d8:49: a8:a2:51:b3:ac:8a:3f:c1:20:01:ba:32:92:93:bd:e1:66:ac: 6d:2b:6b:ae:bf:2b:9f:6a:a4:62:91:18:65:82:a4:8a:48:07: 90:ee:68:fa:82:07:b1:14:49:32:07:73:33:1b:1a:3d:34:c1: 13:8e:01:c6:24:51:cc:f8:fa:79:ee:b2:a0:df:35:0b:69:2b: 15:11:90:8d:54:87:56:97:61:33:bf:a6:99:6b:43:0f:22:89: c4:d4:41:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FMJHvGkxckbZEMTQfdCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjI0MWUwN2E5OTdjZGYwYjJiYTkzYzAzZDE3YmRmYzc2ZjVhNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl57s0I0OR7Cp9WCmwvP/Xxao4VpO JbQTmCNNxJ1RCc+e+i+fuXsaRL0eAaLTFi51C4cUJkIo8afCycqMnC6BHVybx4Ps GqG95U69RuzI5kidbAfSXboNQOQ13ucqdk7Hyf86hxKijjLE9AD5P+Au3j1QedAD qh7Q8c981luPmBmZmcgLCWeT9yR7/VDCRFXaHxrDau6+kywLWMNtY2HlnqsXXe6R D0w7v6EAnMvXn8cl0udXqAbZ6u7JMPJBB+E1YZpb6UNkdSd0CCJIciT+NP9ZZWOp 2nIQ5lIg2w47POlUchNav6TuRydzmY9JTO4MH78db4aILVRNoShLhSPvgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIkHgepl83wsrqTwD0Xvfx29aWMMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvWWlRZUI2bVh6ZkN5dXBQQVBSZTlfSGIxcFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw499MA0G CSqGSIb3DQEBCwUAA4IBAQAmPqgWO417Fw1exiDks8uHHUhKYDAfcIU9+97QKq6u YAExKZA/zZL4+HTPopC2Zq1QI2PD3CapVI9bnU6xLSFhyLFUsQiL1UjbJyE3TgQw bEtmfMAHv6q34V74n3sGUpSfent7Xl2ATrg5DqAgZfePLisOORgwKYwlaUCaEx9k +c6ewju6yCnRrAMI2IHAEcygld1xaztqDug4vNe8deK52EmoolGzrIo/wSABujKS k73hZqxtK2uuvyufaqRikRhlgqSKSAeQ7mj6ggexFEkyB3MzGxo9NMETjgHGJFHM +Pp57rKg3zULaSsVEZCNVIdWl2Ezv6aZa0MPIonE1EET -----END CERTIFICATE-----Generated at Sun Jan 25 10:37:28 2026 by rpki-client