This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/lYvJamI0tAc8O4FaFwfruFjjg1E.roa File: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (raw, json) Hash identifier: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78= Subject key identifier: 95:8B:C9:6A:62:34:B4:07:3C:3B:81:5A:17:07:EB:B8:58:E3:83:51 Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019B79ECF91226F8ACEBC70823EFD3E9A482 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/lYvJamI0tAc8O4FaFwfruFjjg1E.roa Signing time: Thu 01 Jan 2026 14:18:52 +0000 ROA not before: Thu 01 Jan 2026 14:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215968 IP address blocks: 194.49.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f9:12:26:f8:ac:eb:c7:08:23:ef:d3:e9:a4:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jan 1 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=958bc96a6234b4073c3b815a1707ebb858e38351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:72:9f:6a:12:d4:8b:b6:1f:5d:f5:6a:31: 2e:10:a2:6a:11:a5:2d:4c:1b:9c:77:2f:f0:9b:ab: e5:f7:77:ce:90:8c:1c:b2:a5:8c:42:66:70:e7:21: 7f:a3:f5:21:1d:64:a1:8a:46:69:ac:25:5e:bd:c3: b2:0a:89:6f:3d:5e:e9:87:41:0a:b5:72:53:b7:bd: 5f:6f:42:4a:61:0f:d7:29:b7:62:53:2e:0a:38:9e: 44:5c:e4:09:e7:76:b4:7f:3c:47:1c:56:2a:50:40: 0a:d7:15:53:44:b2:6b:8b:31:f3:a5:ba:f8:7a:80: 2e:5e:25:4c:98:d5:d3:9d:bc:c9:b9:a6:e8:4d:0f: eb:e5:90:6e:56:7b:f0:03:2e:9a:26:9a:33:7a:e0: 12:bc:6c:f3:5d:c0:aa:3f:bb:07:f4:0e:1e:9b:6f: be:43:58:b1:ea:a2:55:8f:c7:3f:61:ec:18:d7:81: bf:c3:ed:b7:22:81:cc:92:79:1c:d2:7d:97:a4:29: 2c:05:5a:05:46:02:29:08:bb:12:cf:e8:19:20:53: e9:ad:00:8e:18:92:60:4e:99:ac:3f:f6:2b:23:3f: f8:62:b8:5a:ee:c6:5e:99:95:1e:ec:48:1b:71:21: 2d:f9:80:b0:bc:0e:f2:ac:24:b3:d5:39:a1:48:e4: 8f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8B:C9:6A:62:34:B4:07:3C:3B:81:5A:17:07:EB:B8:58:E3:83:51 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/lYvJamI0tAc8O4FaFwfruFjjg1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.55.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:e3:16:b4:47:58:8e:ab:f9:9d:d7:37:0c:36:e1:0b:67:2b: cb:d6:05:0f:17:8b:22:ed:b4:b5:9c:69:17:56:98:7c:30:7f: d5:e2:66:e2:de:ce:fc:18:5d:88:72:87:d8:ab:24:69:65:bc: 8f:e1:99:68:2d:9e:cf:0a:3a:42:ca:fc:36:2b:c4:e9:f1:02: c5:b1:ab:b3:c6:37:48:ea:6a:89:58:d8:6a:8e:19:9f:b3:4f: 9a:e0:21:06:39:3f:6a:7d:29:d5:e1:3a:84:4a:3c:a5:1b:09: 3b:aa:fc:16:2b:a8:b6:3f:66:11:85:44:22:50:99:0c:a8:d4: 7e:a7:d7:ff:21:9c:79:98:84:81:6e:fe:8d:38:b5:11:23:a6: 6a:25:11:30:46:c1:b1:51:16:97:e2:4e:da:4c:96:ff:f7:2a: c5:a3:0c:12:9b:31:a5:2b:bc:d8:b5:ff:53:9e:6f:ce:7d:75: 70:69:b9:2f:2d:58:74:e6:2b:ee:09:24:e6:7a:af:c6:ea:ab: e6:ed:43:d4:00:cc:68:41:9a:e5:7f:31:a0:dc:b7:1d:cc:65: 3a:0f:3f:b1:03:76:fd:68:ba:4f:53:58:28:3e:bf:b5:57:f7: 2b:ec:64:78:82:2f:b5:ae:f2:d6:6f:6f:83:18:a1:91:e7:ca: 9a:d4:a9:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PkSJvis68cII+/T6aSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMTAxMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NThiYzk2YTYyMzRiNDA3M2MzYjgxNWExNzA3ZWJiODU4ZTM4MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqByn2oS1Iu2H131ajEuEKJqEaUt TBucdy/wm6vl93fOkIwcsqWMQmZw5yF/o/UhHWShikZprCVevcOyColvPV7ph0EK tXJTt71fb0JKYQ/XKbdiUy4KOJ5EXOQJ53a0fzxHHFYqUEAK1xVTRLJrizHzpbr4 eoAuXiVMmNXTnbzJuaboTQ/r5ZBuVnvwAy6aJpozeuASvGzzXcCqP7sH9A4em2++ Q1ix6qJVj8c/YewY14G/w+23IoHMknkc0n2XpCksBVoFRgIpCLsSz+gZIFPprQCO GJJgTpmsP/YrIz/4Yrha7sZemZUe7EgbcSEt+YCwvA7yrCSz1TmhSOSP9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWLyWpiNLQHPDuBWhcH67hY44NRMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvbFl2SmFtSTB0QWM4TzRGYUZ3ZnJ1RmpqZzFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjE3MA0G CSqGSIb3DQEBCwUAA4IBAQCf4xa0R1iOq/md1zcMNuELZyvL1gUPF4si7bS1nGkX Vph8MH/V4mbi3s78GF2IcofYqyRpZbyP4ZloLZ7PCjpCyvw2K8Tp8QLFsauzxjdI 6mqJWNhqjhmfs0+a4CEGOT9qfSnV4TqESjylGwk7qvwWK6i2P2YRhUQiUJkMqNR+ p9f/IZx5mISBbv6NOLURI6ZqJREwRsGxURaX4k7aTJb/9yrFowwSmzGlK7zYtf9T nm/OfXVwabkvLVh05ivuCSTmeq/G6qvm7UPUAMxoQZrlfzGg3LcdzGU6Dz+xA3b9 aLpPU1goPr+1V/cr7GR4gi+1rvLWb2+DGKGR58qa1Kmp -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:35 2026 by rpki-client