This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/YzkQZIuWtNFelhNpi4EnHDyBQJU.roa File: YzkQZIuWtNFelhNpi4EnHDyBQJU.roa (raw, json) Hash identifier: 7C0rYIhC0IdYSE2/clMiQQwJ66KGMZ1ByQiGiFH5l9s= Subject key identifier: 63:39:10:64:8B:96:B4:D1:5E:96:13:69:8B:81:27:1C:3C:81:40:95 Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Certificate serial: 019B7C7F7CFD31677E4C860CF77B3A2257F5 Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/YzkQZIuWtNFelhNpi4EnHDyBQJU.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213159 IP address blocks: 147.78.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7c:fd:31:67:7e:4c:86:0c:f7:7b:3a:22:57:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=633910648b96b4d15e9613698b81271c3c814095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:41:de:a9:84:cb:29:7b:72:2e:74:de:06:f1: eb:51:ed:db:4c:f5:37:1d:43:8d:89:45:a6:ca:63: 26:3f:a6:a4:3e:e1:8a:42:8c:15:61:93:80:e9:5d: 70:c7:26:51:9d:68:b8:32:90:d9:73:a5:14:28:97: 39:81:d0:90:78:ed:76:cf:ad:7e:1b:53:93:74:8f: 1c:ba:51:9c:1e:2a:4a:54:60:3d:82:5f:08:f2:a2: 7a:5e:9c:e8:15:5a:1e:f8:2c:77:a7:97:97:fe:45: 39:cd:13:a6:79:cd:db:a0:ab:d6:c8:0b:69:25:cc: 51:c5:f5:2e:31:02:82:67:1e:e3:e2:77:ee:f0:fb: 49:1f:8f:f1:dc:76:34:d0:cb:77:2d:13:44:57:45: 64:d9:3f:39:51:5f:dd:c6:f3:d9:c5:01:0c:2e:41: ec:00:88:84:a0:81:58:4c:d2:9c:8d:9d:e0:c9:8f: c3:e9:27:e1:c9:49:1c:ad:0a:07:44:be:5a:f2:5b: 6a:ec:da:70:66:68:6f:a7:d5:73:25:f1:8b:19:6d: 04:15:82:24:70:e9:15:2a:f0:31:35:cf:3f:44:d0: 14:76:3a:de:f4:44:bb:d4:a4:3c:2f:0c:f6:4c:a1: 45:15:61:03:3f:c8:ae:54:5b:f1:ae:ab:9b:2a:50: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:39:10:64:8B:96:B4:D1:5E:96:13:69:8B:81:27:1C:3C:81:40:95 X509v3 Authority Key Identifier: keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/YzkQZIuWtNFelhNpi4EnHDyBQJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.119.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:e0:16:b3:bd:63:d3:67:ed:12:22:3d:d9:ac:bf:3d:eb:1f: e0:fc:42:b9:a1:f0:03:1f:e0:8d:55:cd:68:0e:e1:16:42:10: 87:b2:9a:25:33:58:a2:9e:01:6c:fb:1d:95:e3:b7:0b:43:52: 31:3f:96:8e:41:2c:3f:9f:cb:53:ea:5d:13:3f:74:8f:2f:7e: dc:09:98:56:fe:ad:6a:34:96:3b:c4:64:2e:77:5a:e8:2e:37: 1c:b0:ab:2a:93:87:2c:80:83:4b:8b:25:9b:06:b7:69:15:a2: 6d:d5:d7:d1:b3:b2:67:a9:75:a4:a6:cc:e7:38:e3:83:2b:41: 3a:c4:d3:2f:b0:a4:10:09:9a:ad:72:b0:5f:45:01:1c:65:b2: e3:99:19:47:05:77:f3:f8:cb:53:0f:02:24:83:1e:c1:d8:25: 2f:3d:a0:b8:49:49:f8:77:3b:dc:33:db:36:f3:2e:66:3a:ed: 6c:d0:e0:41:a6:41:2d:c7:21:d8:f0:b0:13:5c:4c:36:95:6d: 64:82:a3:c0:fd:70:0f:4a:ee:fd:58:f0:20:ca:74:47:75:c3: eb:c5:70:80:2f:db:d5:9a:b1:47:85:4f:97:04:d7:b5:28:3a: 80:67:e0:b1:57:50:1d:47:1a:d9:5f:4f:8e:0e:ab:b4:63:73: 62:91:7c:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3z9MWd+TIYM93s6Ilf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm ZjFlMDkwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzM5MTA2NDhiOTZiNGQxNWU5NjEzNjk4YjgxMjcxYzNjODE0MDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0HeqYTLKXtyLnTeBvHrUe3bTPU3 HUONiUWmymMmP6akPuGKQowVYZOA6V1wxyZRnWi4MpDZc6UUKJc5gdCQeO12z61+ G1OTdI8culGcHipKVGA9gl8I8qJ6XpzoFVoe+Cx3p5eX/kU5zROmec3boKvWyAtp JcxRxfUuMQKCZx7j4nfu8PtJH4/x3HY00Mt3LRNEV0Vk2T85UV/dxvPZxQEMLkHs AIiEoIFYTNKcjZ3gyY/D6SfhyUkcrQoHRL5a8ltq7NpwZmhvp9VzJfGLGW0EFYIk cOkVKvAxNc8/RNAUdjre9ES71KQ8Lwz2TKFFFWEDP8iuVFvxrqubKlDE5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGM5EGSLlrTRXpYTaYuBJxw8gUCVMB8GA1UdIwQY MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt MDZjOTI5NmYwOGEyLzEvWXprUVpJdVd0TkZlbGhOcGk0RW5IRHlCUUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk053MA0G CSqGSIb3DQEBCwUAA4IBAQBO4BazvWPTZ+0SIj3ZrL896x/g/EK5ofADH+CNVc1o DuEWQhCHspolM1iingFs+x2V47cLQ1IxP5aOQSw/n8tT6l0TP3SPL37cCZhW/q1q NJY7xGQud1roLjccsKsqk4csgINLiyWbBrdpFaJt1dfRs7JnqXWkpsznOOODK0E6 xNMvsKQQCZqtcrBfRQEcZbLjmRlHBXfz+MtTDwIkgx7B2CUvPaC4SUn4dzvcM9s2 8y5mOu1s0OBBpkEtxyHY8LATXEw2lW1kgqPA/XAPSu79WPAgynRHdcPrxXCAL9vV mrFHhU+XBNe1KDqAZ+CxV1AdRxrZX0+ODqu0Y3NikXxi -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:59 2026 by rpki-client