This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/yIOWYvs8zmXxlBajX3odsYxOM8Y.roa File: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (raw, json) Hash identifier: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo= Subject key identifier: C8:83:96:62:FB:3C:CE:65:F1:94:16:A3:5F:7A:1D:B1:8C:4E:33:C6 Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59 Certificate serial: 019B7B35C27BDCD7AA76052BD79F4DBF2CCF Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/yIOWYvs8zmXxlBajX3odsYxOM8Y.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44947 IP address blocks: 193.41.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c2:7b:dc:d7:aa:76:05:2b:d7:9f:4d:bf:2c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8839662fb3cce65f19416a35f7a1db18c4e33c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:5f:b0:3e:04:d7:8c:5b:8c:ee:cb:d0:45: de:bc:e3:a7:e5:a8:4c:ce:75:42:b9:67:9a:38:d8: a4:a9:07:5d:d2:ec:1c:87:a2:fe:fb:b9:2f:07:c4: 98:39:94:d5:95:6b:0b:97:22:6c:e6:8a:42:8e:55: db:50:9e:1f:65:77:8a:c3:c6:82:be:76:38:b5:40: 02:9a:20:d5:ee:0c:88:95:6a:66:6f:bd:92:5b:b3: 58:d6:dd:01:98:29:a3:99:06:3b:35:f2:eb:81:5a: 6c:e4:4b:ac:8e:eb:a3:b2:7b:70:e8:a8:68:a0:14: 03:74:e1:13:2a:e0:37:3c:ce:cc:fe:80:02:d1:74: 86:e0:2a:d4:fc:f0:60:e7:cd:2d:ee:b7:ea:c1:20: aa:b4:48:5f:c6:8c:a9:c2:3f:f1:ff:ba:e7:7b:8f: 49:df:35:68:4b:de:6c:d4:ba:d8:d9:cf:43:d5:c3: 0a:ff:35:9f:40:af:53:9c:88:19:20:9c:79:16:03: c2:4a:2d:a8:5a:91:80:c1:5c:39:66:5e:4d:8b:ad: cb:77:7f:36:fb:f8:18:56:aa:0e:7b:cc:a3:d0:22: e3:d4:05:77:c9:e7:32:62:a1:c6:d8:53:39:e5:35: 31:68:b8:cc:33:9b:81:65:e4:07:12:04:26:e9:b5: 69:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:83:96:62:FB:3C:CE:65:F1:94:16:A3:5F:7A:1D:B1:8C:4E:33:C6 X509v3 Authority Key Identifier: keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/yIOWYvs8zmXxlBajX3odsYxOM8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.206.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:31:b8:9f:5a:e6:47:51:cf:c1:50:b8:3a:9f:16:1a:a3:0d: 93:f8:c9:54:c0:ed:c4:76:be:41:15:68:8c:d0:17:61:6e:d3: 25:fb:d8:26:75:a1:34:45:90:06:4e:2c:b9:b8:ef:e0:cf:53: cf:60:ba:fd:02:e6:82:c5:41:2c:c9:49:34:ca:41:eb:cc:6a: c3:55:29:7f:95:fe:b2:ed:da:ca:a6:74:86:1d:d2:7b:69:21: dc:cc:03:45:83:07:af:db:dc:d6:ba:79:68:4f:ef:cb:1c:ad: e4:fa:a9:d4:bf:98:01:7e:50:3c:4b:57:44:47:37:96:97:77: b6:ef:8e:3d:94:75:c2:19:90:a4:ab:a4:fc:1c:d3:09:e4:8e: d8:7a:70:74:40:44:a2:19:49:b6:52:af:54:c2:cb:f7:cd:67: 95:03:9b:f1:42:d6:ef:51:d9:c0:a8:11:87:bc:e0:3f:42:84: ff:f9:1d:bc:53:30:e6:9b:3f:8e:49:bc:13:6d:bb:39:8e:46: fd:ba:fd:f2:ee:b6:e2:46:ef:90:dc:0f:21:bc:c5:4f:f9:39: c2:8d:45:ac:33:b3:a1:4b:81:42:77:2a:5f:b2:0b:e7:2a:39: 74:a7:e4:cb:eb:7c:c6:6f:2a:6a:b4:8a:ca:dc:39:69:66:61: a8:e8:7b:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcJ73NeqdgUr159NvyzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTAxMDc3ZGI4MGQ1MmIxNmQ0OWY4NjNhNjFlYTQxYTEy NGJjNTkwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODgzOTY2MmZiM2NjZTY1ZjE5NDE2YTM1ZjdhMWRiMThjNGUzM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLpfsD4E14xbjO7L0EXevOOn5ahM znVCuWeaONikqQdd0uwch6L++7kvB8SYOZTVlWsLlyJs5opCjlXbUJ4fZXeKw8aC vnY4tUACmiDV7gyIlWpmb72SW7NY1t0BmCmjmQY7NfLrgVps5Eusjuujsntw6Kho oBQDdOETKuA3PM7M/oAC0XSG4CrU/PBg580t7rfqwSCqtEhfxoypwj/x/7rne49J 3zVoS95s1LrY2c9D1cMK/zWfQK9TnIgZIJx5FgPCSi2oWpGAwVw5Zl5Ni63Ld382 +/gYVqoOe8yj0CLj1AV3yecyYqHG2FM55TUxaLjMM5uBZeQHEgQm6bVpXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMiDlmL7PM5l8ZQWo196HbGMTjPGMB8GA1UdIwQY MBaAFJNQEHfbgNUrFtSfhjph6kGhJLxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUt NzlkMWEyN2NkOTkzLzEveUlPV1l2czh6bVh4bEJhalgzb2RzWXhPTThZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUtNzlkMWEyN2NkOTkz LzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSnOMA0G CSqGSIb3DQEBCwUAA4IBAQBcMbifWuZHUc/BULg6nxYaow2T+MlUwO3Edr5BFWiM 0BdhbtMl+9gmdaE0RZAGTiy5uO/gz1PPYLr9AuaCxUEsyUk0ykHrzGrDVSl/lf6y 7drKpnSGHdJ7aSHczANFgwev29zWunloT+/LHK3k+qnUv5gBflA8S1dERzeWl3e2 7449lHXCGZCkq6T8HNMJ5I7YenB0QESiGUm2Uq9Uwsv3zWeVA5vxQtbvUdnAqBGH vOA/QoT/+R28UzDmmz+OSbwTbbs5jkb9uv3y7rbiRu+Q3A8hvMVP+TnCjUWsM7Oh S4FCdypfsgvnKjl0p+TL63zGbypqtIrK3DlpZmGo6HsN -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:25 2026 by rpki-client