This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/_YMV-r6YGy_b5YOpBOqF7viPoc8.roa File: _YMV-r6YGy_b5YOpBOqF7viPoc8.roa (raw, json) Hash identifier: is3oJp1G8er/OBr6GK6OPtF33YU7blB2hOshyfedxsA= Subject key identifier: FD:83:15:FA:BE:98:1B:2F:DB:E5:83:A9:04:EA:85:EE:F8:8F:A1:CF Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E75458C4152EA60124B5CA51992C Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/_YMV-r6YGy_b5YOpBOqF7viPoc8.roa Signing time: Thu 01 Jan 2026 18:19:05 +0000 ROA not before: Thu 01 Jan 2026 18:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49112 IP address blocks: 95.157.128.0/18 maxlen: 18 130.0.96.0/19 maxlen: 19 176.52.224.0/20 maxlen: 20 185.147.232.0/22 maxlen: 22 2a00:9380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e7:54:58:c4:15:2e:a6:01:24:b5:ca:51:99:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd8315fabe981b2fdbe583a904ea85eef88fa1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:e6:ff:fb:1d:ca:49:97:ea:7e:71:df:19: 5d:81:2c:64:4f:bd:a7:a6:9c:76:e2:01:0b:97:af: a0:14:01:e4:bc:45:d2:b4:61:ca:65:92:b8:f8:cd: 75:ce:44:49:93:e5:8f:9a:71:c4:77:1a:c2:ab:30: 79:d7:59:f8:fc:9d:ad:44:6e:22:60:e3:6a:58:85: b2:f5:9e:7c:51:ef:85:c3:47:d8:93:c7:22:a4:a1: 37:7d:6c:fe:8f:08:78:7f:01:92:f1:36:a6:03:56: e1:f7:e8:92:0d:e7:8d:dd:6f:61:30:db:82:ea:9a: ea:23:58:57:96:9b:32:32:ac:f9:8d:75:af:2d:0a: 51:cd:cc:9d:bf:76:28:b1:d1:81:cb:e0:24:c9:42: a1:e0:00:c4:71:24:52:6e:b2:31:15:c3:0a:7e:ac: 27:9e:ca:8d:3c:ea:a5:ea:30:7e:f0:fc:64:a5:90: 7e:eb:7a:5f:4e:9c:7f:e0:38:56:07:01:36:ee:e0: 6c:35:c4:ee:57:4a:71:0b:2b:2e:09:85:cc:be:97: 2b:07:cd:45:95:81:fe:34:b2:7a:49:be:09:62:cd: e1:6e:5e:c9:31:e0:c5:c4:94:fd:91:8a:e8:9d:30: 52:b7:c6:6e:3c:b6:1e:df:8f:de:24:f3:da:ac:14: 00:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:83:15:FA:BE:98:1B:2F:DB:E5:83:A9:04:EA:85:EE:F8:8F:A1:CF X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/_YMV-r6YGy_b5YOpBOqF7viPoc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.157.128.0/18 130.0.96.0/19 176.52.224.0/20 185.147.232.0/22 IPv6: 2a00:9380::/32 Signature Algorithm: sha256WithRSAEncryption a7:d4:44:5b:94:99:53:5c:b1:87:00:db:0f:27:75:21:b4:8a: 8c:48:d3:b9:22:ac:26:46:d2:8a:2e:50:10:a3:f4:e3:2b:7c: 79:06:52:32:0a:1a:87:6f:c4:3e:03:16:6a:2c:da:07:6c:21: 08:f2:79:64:90:e5:d9:cd:37:02:cd:40:cd:07:4b:af:37:d1: ef:35:13:46:7f:80:69:fb:91:0b:6d:df:4f:da:38:64:16:c1: 00:ec:9b:37:af:84:07:14:e7:00:29:f1:ac:35:0a:35:72:16: 01:b1:76:55:2b:86:77:b0:58:5b:30:f3:00:7d:20:d9:f2:db: 66:da:b4:d8:20:f0:c2:cc:0b:c6:c6:7a:16:a1:0e:aa:3d:79: 96:9c:28:ac:89:83:3a:3b:2c:32:53:9b:b5:8c:88:3d:70:ba: 24:3b:69:7e:49:6c:92:ee:58:28:f9:1a:f4:47:32:68:40:af: 68:46:62:28:35:b4:ad:ec:11:58:f4:af:23:d6:e7:51:f0:1b: 72:fa:f4:b0:38:38:cb:01:8a:72:f1:85:81:77:71:60:26:fe: cf:a3:a7:44:96:92:f5:f6:0e:ae:18:95:ad:7c:3d:1e:b9:a0: 46:3c:db:39:3a:7a:e3:ea:c6:47:17:86:83:2e:4f:bd:9a:8d: a1:8c:b3:dd -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6yOdUWMQVLqYBJLXKUZksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDgzMTVmYWJlOTgxYjJmZGJlNTgzYTkwNGVhODVlZWY4OGZhMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ/m//sdykmX6n5x3xldgSxkT72n ppx24gELl6+gFAHkvEXStGHKZZK4+M11zkRJk+WPmnHEdxrCqzB511n4/J2tRG4i YONqWIWy9Z58Ue+Fw0fYk8cipKE3fWz+jwh4fwGS8TamA1bh9+iSDeeN3W9hMNuC 6prqI1hXlpsyMqz5jXWvLQpRzcydv3YosdGBy+AkyUKh4ADEcSRSbrIxFcMKfqwn nsqNPOql6jB+8PxkpZB+63pfTpx/4DhWBwE27uBsNcTuV0pxCysuCYXMvpcrB81F lYH+NLJ6Sb4JYs3hbl7JMeDFxJT9kYronTBSt8ZuPLYe34/eJPParBQA+wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFP2DFfq+mBsv2+WDqQTqhe74j6HPMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvX1lNVi1yNllHeV9iNVlPcEJPcUY3dmlQb2M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGX52AAwQF ggBgAwQEsDTgAwQCuZPoMA0EAgACMAcDBQAqAJOAMA0GCSqGSIb3DQEBCwUAA4IB AQCn1ERblJlTXLGHANsPJ3UhtIqMSNO5IqwmRtKKLlAQo/TjK3x5BlIyChqHb8Q+ AxZqLNoHbCEI8nlkkOXZzTcCzUDNB0uvN9HvNRNGf4Bp+5ELbd9P2jhkFsEA7Js3 r4QHFOcAKfGsNQo1chYBsXZVK4Z3sFhbMPMAfSDZ8ttm2rTYIPDCzAvGxnoWoQ6q PXmWnCisiYM6OywyU5u1jIg9cLokO2l+SWyS7lgo+Rr0RzJoQK9oRmIoNbSt7BFY 9K8j1udR8Bty+vSwODjLAYpy8YWBd3FgJv7Po6dElpL19g6uGJWtfD0euaBGPNs5 Onrj6sZHF4aDLk+9mo2hjLPd -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:49 2026 by rpki-client