This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa File: eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa (raw, json) Hash identifier: OjAQmRNCdlZ/ho0O0hjfQYZhYcPqc7W3tUBnTWwRO0M= Subject key identifier: 79:82:86:20:5A:A6:5F:10:2B:C4:AA:E6:E1:D1:CF:94:17:DD:0E:44 Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Certificate serial: 019B7D5D301D3CBFFCD1E549DA2045D5238A Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1257 IP address blocks: 193.227.126.0/24 maxlen: 24 2001:678:454::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:30:1d:3c:bf:fc:d1:e5:49:da:20:45:d5:23:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=798286205aa65f102bc4aae6e1d1cf9417dd0e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:13:49:d7:70:8e:d6:b1:a8:70:0d:5e:57: 02:b8:3f:6f:7c:22:41:85:ba:4d:a5:2e:68:08:fa: b7:de:57:5a:7c:73:ae:78:25:30:1a:d7:98:69:4b: c8:04:f0:70:46:5b:06:fb:76:48:2b:bf:66:78:d7: 6a:f1:8c:94:f1:49:b3:d9:8e:c2:db:f7:43:f2:98: d6:bb:75:b8:fe:10:a9:71:4b:97:26:45:f9:2f:ce: c6:4b:b4:ce:b3:ca:c8:29:dd:28:f8:cd:c2:90:5b: c8:c8:a3:51:22:44:28:98:d5:2f:78:8c:3e:2b:57: 1d:1c:6c:80:b4:d3:5a:5a:d4:52:1a:90:d2:f7:1a: f5:6a:59:ae:8a:9c:50:30:a7:71:3a:69:55:c4:5e: a5:5e:85:80:d9:22:34:c0:82:9b:1d:c0:62:40:74: f3:01:95:19:5d:fc:96:fc:6e:dc:f8:35:5c:a8:e6: 5e:99:ae:3f:a3:32:07:47:7c:12:f5:5a:98:83:8b: 3d:e4:f8:70:4d:92:e2:25:a8:93:ca:db:99:df:f3: f5:86:d4:36:e1:b1:b7:ba:43:74:08:d8:fb:37:d5: 12:07:c5:0a:80:57:5d:f9:31:2d:1f:a7:9f:e5:8a: 3f:bf:4f:b2:d2:30:b2:79:90:fb:6e:69:16:e3:62: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:82:86:20:5A:A6:5F:10:2B:C4:AA:E6:E1:D1:CF:94:17:DD:0E:44 X509v3 Authority Key Identifier: keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.126.0/24 IPv6: 2001:678:454::/48 Signature Algorithm: sha256WithRSAEncryption 4d:57:1c:8b:23:de:a7:94:06:d2:75:1e:33:8c:2c:35:74:47: c2:a0:f7:b4:0e:a1:dc:be:ba:64:17:03:39:9e:c4:29:de:f0: 61:3d:19:b5:2a:c4:7f:82:75:7b:8f:e7:cf:13:fe:57:03:8c: 70:b7:22:b0:86:7b:81:3e:86:a9:6b:4e:7b:e6:c4:be:4e:f9: 7e:60:0e:a5:75:f3:b7:de:5c:9c:0b:c8:ec:81:93:8f:0b:17: 91:0b:03:d7:d4:c4:e6:4d:4b:74:63:bc:f8:c4:a9:d2:9d:93: d5:ce:22:b4:6a:a3:a2:20:e7:7a:cc:01:f0:0f:65:a6:8f:ae: 2d:9c:4d:b9:0e:4e:48:3d:66:45:77:1e:7d:65:ee:32:ff:b3: 9f:88:1a:1a:77:31:05:7d:d3:75:6c:87:ca:95:a8:1b:cd:73: 21:99:9b:39:d0:9b:ca:c7:a6:5b:b4:37:f0:73:21:1a:b2:2c: fb:6e:c2:a3:97:60:50:4a:8d:0f:8e:1c:56:b4:2e:5d:43:ab: 23:70:18:1f:cc:18:a6:f1:8b:68:e0:29:4d:5e:a3:26:02:4f: a1:d0:e8:b1:69:05:e4:9a:84:21:29:61:6a:ec:cb:f6:be:bf: 55:a9:68:4e:63:c8:9d:f5:7d:19:81:f5:55:4a:30:77:e9:41: 93:79:c6:18 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XTAdPL/80eVJ2iBF1SOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMWI5ZmI0NTYzOWU3NDkyZjJiMzYzMWY2NDBmNmFiOWFm YjYyOTAwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTgyODYyMDVhYTY1ZjEwMmJjNGFhZTZlMWQxY2Y5NDE3ZGQwZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12QTSddwjtaxqHANXlcCuD9vfCJB hbpNpS5oCPq33ldafHOueCUwGteYaUvIBPBwRlsG+3ZIK79meNdq8YyU8Umz2Y7C 2/dD8pjWu3W4/hCpcUuXJkX5L87GS7TOs8rIKd0o+M3CkFvIyKNRIkQomNUveIw+ K1cdHGyAtNNaWtRSGpDS9xr1almuipxQMKdxOmlVxF6lXoWA2SI0wIKbHcBiQHTz AZUZXfyW/G7c+DVcqOZema4/ozIHR3wS9VqYg4s95PhwTZLiJaiTytuZ3/P1htQ2 4bG3ukN0CNj7N9USB8UKgFdd+TEtH6ef5Yo/v0+y0jCyeZD7bmkW42K0UQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHmChiBapl8QK8Sq5uHRz5QX3Q5EMB8GA1UdIwQY MBaAFGEbn7RWOedJLys2MfZA9qua+2KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYt N2Q3NWUyYjFhN2I5LzEvZVlLR0lGcW1YeEFyeEtybTRkSFBsQmZkRGtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYtN2Q3NWUyYjFhN2I5 LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAweN+MA8E AgACMAkDBwAgAQZ4BFQwDQYJKoZIhvcNAQELBQADggEBAE1XHIsj3qeUBtJ1HjOM LDV0R8Kg97QOody+umQXAzmexCne8GE9GbUqxH+CdXuP588T/lcDjHC3IrCGe4E+ hqlrTnvmxL5O+X5gDqV187feXJwLyOyBk48LF5ELA9fUxOZNS3RjvPjEqdKdk9XO IrRqo6Ig53rMAfAPZaaPri2cTbkOTkg9ZkV3Hn1l7jL/s5+IGhp3MQV903Vsh8qV qBvNcyGZmznQm8rHplu0N/BzIRqyLPtuwqOXYFBKjQ+OHFa0Ll1DqyNwGB/MGKbx i2jgKU1eoyYCT6HQ6LFpBeSahCEpYWrsy/a+v1WpaE5jyJ31fRmB9VVKMHfpQZN5 xhg= -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:08 2026 by rpki-client