This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/ynMxlcFBB2L4-uja3__b866yjKI.roa File: ynMxlcFBB2L4-uja3__b866yjKI.roa (raw, json) Hash identifier: NfYPYHpG7deE0wKHNgZIplB1gjV6dRMZ7FyQyY5Xg+s= Subject key identifier: CA:73:31:95:C1:41:07:62:F8:FA:E8:DA:DF:FF:DB:F3:AE:B2:8C:A2 Certificate issuer: /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859 Certificate serial: 019B77C74B3F25990AAB7E63291EF3313F7F Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/ynMxlcFBB2L4-uja3__b866yjKI.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44951 IP address blocks: 195.230.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4b:3f:25:99:0a:ab:7e:63:29:1e:f3:31:3f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca733195c1410762f8fae8dadfffdbf3aeb28ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:1e:68:38:e4:ee:e9:4c:01:1b:7a:f7:5a: 4d:3e:b7:9e:8e:f7:10:4a:ac:4e:0e:b9:fe:94:18: 54:0c:d6:c9:7b:ae:fc:ea:67:e2:73:91:66:50:20: da:65:de:04:2f:e6:c5:bc:7b:d6:8c:cd:20:c2:3a: c6:d4:7d:69:d9:48:24:b1:53:12:9b:fe:0a:e6:0d: e7:7d:eb:0b:9c:7f:3a:71:f6:8a:29:ee:72:2e:c3: 9c:13:87:2a:3f:a6:3b:a8:a8:57:25:a6:76:0f:6c: f0:9e:81:ba:6a:6d:5e:c7:b3:26:3c:5c:2e:83:82: 32:39:45:4e:c1:1d:c2:bd:f5:02:90:2c:1d:6e:f5: 86:44:2d:c5:0d:a4:ee:f9:79:6c:fe:76:a4:17:0d: 89:4f:e9:4e:5a:ab:27:6b:62:2a:92:50:db:4b:13: 76:0a:56:06:1b:4f:55:be:6a:b3:a5:60:58:3c:36: 6d:94:2e:5f:19:fc:f8:de:ff:e2:4b:bc:0f:ae:8e: 5b:07:3d:01:6b:d8:f5:91:7c:61:18:0a:bd:27:a5: c0:18:87:50:7e:04:32:1b:1d:b2:18:55:83:6f:29: 66:dd:94:e8:39:18:28:8d:06:79:c1:f8:7a:80:49: 40:1c:00:10:de:d5:69:ac:fd:08:f3:a2:10:70:c8: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:31:95:C1:41:07:62:F8:FA:E8:DA:DF:FF:DB:F3:AE:B2:8C:A2 X509v3 Authority Key Identifier: keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/ynMxlcFBB2L4-uja3__b866yjKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.114.0/24 Signature Algorithm: sha256WithRSAEncryption 42:2f:2c:2e:ed:61:eb:fc:0b:90:79:65:2d:4e:86:6e:f2:6f: de:e8:7a:66:b0:d1:bf:97:8c:34:6e:42:77:67:96:03:8c:a7: fc:06:4d:88:a8:2d:36:db:d5:20:90:3d:3b:bc:c6:50:71:b7: e7:f4:f0:6a:39:23:aa:b6:f7:2a:60:81:d1:a8:d6:76:48:32: b4:3a:24:5b:80:97:dd:26:5d:fc:a6:e8:e7:10:6a:72:be:91: 9a:02:67:15:82:63:77:ef:1d:6c:f4:cd:de:81:88:c7:3b:70: bb:91:bf:9c:e8:6c:e6:b0:7e:a8:7b:78:c9:1a:79:2e:c8:f6: 16:ca:1e:4d:22:d5:69:78:74:72:9b:bf:f8:8e:f0:07:46:35: b6:a8:33:1b:a7:54:58:43:34:e0:01:e8:16:2c:f6:10:04:22: d4:64:04:c2:80:db:c2:74:6e:f9:14:27:3d:63:fa:99:09:a3: 82:78:f7:ea:d6:b1:3e:c9:91:78:da:bc:e3:e6:87:0c:7b:26: cc:f1:3b:bc:c0:e9:b9:1e:35:71:4d:ee:9e:88:41:94:68:72: 1a:38:63:f3:2e:85:7e:af:de:d9:00:ba:7d:3a:95:2d:60:64: b8:48:c0:78:e8:1a:d0:87:d4:67:88:ef:12:3b:0d:25:d7:eb: 00:a3:fc:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0s/JZkKq35jKR7zMT9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWFmYTk2YzlkNTYzZTY1MGJhNTkyZmZiMDZlMmNlZWI2 YTA4NTkwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTczMzE5NWMxNDEwNzYyZjhmYWU4ZGFkZmZmZGJmM2FlYjI4Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMAeaDjk7ulMARt691pNPreejvcQ SqxODrn+lBhUDNbJe6786mfic5FmUCDaZd4EL+bFvHvWjM0gwjrG1H1p2UgksVMS m/4K5g3nfesLnH86cfaKKe5yLsOcE4cqP6Y7qKhXJaZ2D2zwnoG6am1ex7MmPFwu g4IyOUVOwR3CvfUCkCwdbvWGRC3FDaTu+Xls/nakFw2JT+lOWqsna2IqklDbSxN2 ClYGG09VvmqzpWBYPDZtlC5fGfz43v/iS7wPro5bBz0Ba9j1kXxhGAq9J6XAGIdQ fgQyGx2yGFWDbylm3ZToORgojQZ5wfh6gElAHAAQ3tVprP0I86IQcMgVSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMpzMZXBQQdi+Pro2t//2/OusoyiMB8GA1UdIwQY MBaAFJrq+pbJ1WPmULpZL/sG4s7raghZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80NzI3NWQtNWZhNy00YmIyLTk5ZWIt MWYwMDczN2NiMmEyLzEveW5NeGxjRkJCMkw0LXVqYTNfX2I4NjZ5aktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80NzI3NWQtNWZhNy00YmIyLTk5ZWItMWYwMDczN2NiMmEy LzEvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+ZyMA0G CSqGSIb3DQEBCwUAA4IBAQBCLywu7WHr/AuQeWUtToZu8m/e6HpmsNG/l4w0bkJ3 Z5YDjKf8Bk2IqC0229UgkD07vMZQcbfn9PBqOSOqtvcqYIHRqNZ2SDK0OiRbgJfd Jl38pujnEGpyvpGaAmcVgmN37x1s9M3egYjHO3C7kb+c6GzmsH6oe3jJGnkuyPYW yh5NItVpeHRym7/4jvAHRjW2qDMbp1RYQzTgAegWLPYQBCLUZATCgNvCdG75FCc9 Y/qZCaOCePfq1rE+yZF42rzj5ocMeybM8Tu8wOm5HjVxTe6eiEGUaHIaOGPzLoV+ r97ZALp9OpUtYGS4SMB46BrQh9RniO8SOw0l1+sAo/xP -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:00 2026 by rpki-client