This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/y_uL1WMbjPlMuAHmDW2TNxgmcfE.roa File: y_uL1WMbjPlMuAHmDW2TNxgmcfE.roa (raw, json) Hash identifier: M9MfxZEGovLpPigX0GaHkPh57HVgA2eEEbtaEhYlFcI= Subject key identifier: CB:FB:8B:D5:63:1B:8C:F9:4C:B8:01:E6:0D:6D:93:37:18:26:71:F1 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7E2C9CEAB59D8526F3EB7D1CEBE73 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/y_uL1WMbjPlMuAHmDW2TNxgmcfE.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1102 IP address blocks: 194.104.0.0/24 maxlen: 24 2001:678:230::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e2:c9:ce:ab:59:d8:52:6f:3e:b7:d1:ce:be:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbfb8bd5631b8cf94cb801e60d6d9337182671f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:c9:61:6b:56:5f:2a:15:31:fc:42:8a:58: d0:ff:76:e0:5f:64:f7:7f:03:7c:f6:76:93:48:e0: 9f:22:7a:40:1b:eb:d9:c1:d7:80:17:ac:9e:16:4b: 04:e4:df:5c:13:52:42:d0:f0:4d:ff:9d:7c:2c:6a: 25:73:79:8f:9a:08:4d:53:a7:f9:ca:75:81:91:ad: 2a:9a:68:6f:46:d5:ad:dd:03:e1:93:d4:58:5c:be: 19:79:11:ab:6a:6f:6e:48:95:45:ea:ae:30:c6:e3: a3:d9:06:2d:de:d9:11:f8:10:53:17:b5:5d:2b:bf: 9d:85:41:f0:19:e2:c4:66:d4:f2:8d:ae:3c:6b:b6: 19:13:d1:81:c1:9c:56:35:11:e7:12:f7:bb:ba:6b: 08:e1:3b:d3:f9:b7:6c:16:00:40:e5:89:fb:a3:7f: d8:ba:c3:19:15:cb:76:ea:cb:48:6e:95:42:f0:3e: 07:5b:06:c2:21:91:44:ae:bc:d0:2d:d9:76:63:af: 95:42:f6:09:8e:58:84:90:73:c8:d2:58:a8:08:95: a0:81:c5:3d:af:f5:b1:85:76:ae:c1:fc:1d:16:6e: 80:16:92:cc:51:bf:bd:ba:bf:60:a2:36:bc:cf:01: 8f:ae:16:c7:cc:60:a2:f8:49:ef:fe:e0:e6:c0:ac: 0e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FB:8B:D5:63:1B:8C:F9:4C:B8:01:E6:0D:6D:93:37:18:26:71:F1 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/y_uL1WMbjPlMuAHmDW2TNxgmcfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.0.0/24 IPv6: 2001:678:230::/48 Signature Algorithm: sha256WithRSAEncryption 59:ea:a3:54:d5:74:c7:a2:f0:a8:dc:22:fb:b1:28:db:21:6f: 86:fe:05:12:b3:24:18:4f:20:bf:8b:8c:1d:e9:0a:69:49:ce: c2:71:a5:d1:ec:ad:50:74:9d:ef:70:ae:b5:a8:2e:c4:ad:8e: 5f:35:fb:a2:90:58:b2:62:fd:20:2a:a3:d3:36:a7:64:6d:ef: 1b:10:4e:4a:80:9d:b9:4d:fb:68:05:45:fa:7f:00:39:19:7f: 27:e7:18:a1:05:26:58:14:27:e6:25:55:f4:39:77:2f:27:ac: 63:1d:5d:f6:a7:ad:71:3f:25:52:06:8a:07:7f:dc:62:74:1d: 26:89:5e:7e:6f:5f:67:52:fa:4e:7d:e3:64:60:98:c4:10:ab: da:da:ba:5a:e1:b4:0b:b2:cc:63:0e:c0:c2:46:47:be:2e:8f: e4:74:be:6f:96:2c:5f:0b:b7:59:e7:1e:71:7d:3c:f7:29:ab: 4b:87:9f:e0:25:79:b7:ea:f9:10:70:5e:78:a5:15:f0:5a:95: d4:c8:24:d8:65:da:ad:c1:71:3c:eb:e1:8f:d5:97:e9:9e:65: a9:5c:4e:4a:8b:85:fc:82:21:8e:0d:e5:b3:dc:db:cc:eb:c5: 81:01:28:fc:68:df:dc:fa:75:0e:52:5c:93:c1:cf:f8:5b:bb: d6:78:6d:b8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x+LJzqtZ2FJvPrfRzr5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmZiOGJkNTYzMWI4Y2Y5NGNiODAxZTYwZDZkOTMzNzE4MjY3MWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnebJYWtWXyoVMfxCiljQ/3bgX2T3 fwN89naTSOCfInpAG+vZwdeAF6yeFksE5N9cE1JC0PBN/518LGolc3mPmghNU6f5 ynWBka0qmmhvRtWt3QPhk9RYXL4ZeRGram9uSJVF6q4wxuOj2QYt3tkR+BBTF7Vd K7+dhUHwGeLEZtTyja48a7YZE9GBwZxWNRHnEve7umsI4TvT+bdsFgBA5Yn7o3/Y usMZFct26stIbpVC8D4HWwbCIZFErrzQLdl2Y6+VQvYJjliEkHPI0lioCJWggcU9 r/WxhXauwfwdFm6AFpLMUb+9ur9goja8zwGPrhbHzGCi+Env/uDmwKwOIQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMv7i9VjG4z5TLgB5g1tkzcYJnHxMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEveV91TDFXTWJqUGxNdUFIbURXMlROeGdtY2ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwmgAMA8E AgACMAkDBwAgAQZ4AjAwDQYJKoZIhvcNAQELBQADggEBAFnqo1TVdMei8KjcIvux KNshb4b+BRKzJBhPIL+LjB3pCmlJzsJxpdHsrVB0ne9wrrWoLsStjl81+6KQWLJi /SAqo9M2p2Rt7xsQTkqAnblN+2gFRfp/ADkZfyfnGKEFJlgUJ+YlVfQ5dy8nrGMd XfanrXE/JVIGigd/3GJ0HSaJXn5vX2dS+k5942RgmMQQq9raulrhtAuyzGMOwMJG R74uj+R0vm+WLF8Lt1nnHnF9PPcpq0uHn+Alebfq+RBwXnilFfBaldTIJNhl2q3B cTzr4Y/Vl+meZalcTkqLhfyCIY4N5bPc28zrxYEBKPxo39z6dQ5SXJPBz/hbu9Z4 bbg= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:21 2026 by rpki-client