This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/yISpbsKHVNYR2VhOiL05QDs4Xik.roa File: yISpbsKHVNYR2VhOiL05QDs4Xik.roa (raw, json) Hash identifier: 0ZssM8aTan4+nLMRdeDi3TYrIbskGxrV96V07ZBRqhU= Subject key identifier: C8:84:A9:6E:C2:87:54:D6:11:D9:58:4E:88:BD:39:40:3B:38:5E:29 Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864 Certificate serial: 019B7F15ACFFBFF9E3B3777F6E68CB21B5D2 Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/yISpbsKHVNYR2VhOiL05QDs4Xik.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16243 IP address blocks: 94.103.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ac:ff:bf:f9:e3:b3:77:7f:6e:68:cb:21:b5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c884a96ec28754d611d9584e88bd39403b385e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:36:7d:f2:15:20:aa:38:1f:56:79:c4:44:c5: d3:0a:ad:b3:b7:e9:16:55:f4:4c:d8:02:21:8c:1d: ab:98:55:4b:70:84:8b:0d:15:64:2c:09:ff:a6:cc: 39:4f:95:dd:45:0b:88:13:f5:7a:19:76:3d:8b:e5: b5:f6:e2:f2:16:84:81:34:5f:ab:e6:25:08:c7:bd: c6:b0:4c:84:fb:5b:30:1c:58:84:73:3d:cf:71:3f: e3:d2:ad:98:09:0a:6e:bf:76:a6:14:d5:e5:b6:a5: 1e:46:b3:97:37:b9:cf:af:96:bc:96:17:4c:38:c2: 8e:9a:e3:d8:59:b7:5c:f5:c7:60:5f:e2:b3:06:df: 5d:08:19:69:c7:a4:4b:02:bd:ce:7f:2b:51:16:81: 14:66:e1:f3:fd:de:2d:26:65:7a:98:e5:01:d8:8d: 57:4d:fc:6a:e8:94:1c:c9:45:2d:9e:d1:1a:bd:52: 14:9e:cd:7b:c6:3b:fb:53:db:1c:1e:dc:3d:d0:73: 1e:8c:e7:ee:29:bf:e4:a7:3c:00:b2:fe:2b:84:b3: 6b:b4:7b:99:76:fd:41:8c:3c:32:5c:59:6b:bf:5c: 28:9c:18:72:2b:8c:e4:e8:37:d5:92:f7:be:05:32: 12:b1:bb:0f:d1:d0:5d:67:71:5f:0b:71:cf:2c:f1: ca:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:84:A9:6E:C2:87:54:D6:11:D9:58:4E:88:BD:39:40:3B:38:5E:29 X509v3 Authority Key Identifier: keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/yISpbsKHVNYR2VhOiL05QDs4Xik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.103.17.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:5e:f1:a6:26:b4:5c:8d:8c:33:f5:5f:f0:df:27:e9:1d:5e: 67:22:ca:ca:1f:ad:3f:6e:58:74:8e:cd:51:e7:35:86:b5:ea: 7a:b7:2c:87:f7:e4:66:fc:60:4e:82:8e:0b:09:38:84:78:de: ab:5e:42:be:32:3d:8f:97:b8:97:64:11:c6:60:25:80:da:13: 52:2f:9d:b5:5c:66:e6:2f:12:53:82:82:66:79:7a:97:51:d5: f8:0c:fa:e6:a3:56:24:01:4d:74:f3:3c:21:15:09:71:9d:d5: 07:5f:c5:c4:60:8b:96:64:ad:67:e4:c9:71:4e:94:d7:08:a6: b7:d1:e3:9f:84:4f:28:d7:49:69:8c:c9:1c:fc:7d:79:33:aa: 41:18:92:d0:62:b0:c3:cb:02:61:f3:39:39:6a:7a:ae:49:30: c3:a9:38:32:47:99:f0:c0:03:b9:2b:57:c0:20:55:f1:2e:3a: 29:c6:09:42:f4:cb:a8:ec:33:e3:26:be:84:36:a2:7b:f0:2c: 91:07:48:e4:66:ed:a9:a7:f6:1f:35:88:d8:d0:99:16:ad:cc: e9:9a:08:e4:bb:ce:4e:db:a5:b7:04:ea:ab:ba:83:b7:e9:78: b0:aa:b6:5a:be:e1:97:66:a2:14:f2:b7:9d:14:98:b2:84:92: 5d:74:ea:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Faz/v/njs3d/bmjLIbXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMGZlOTcxYjNlMzZiMTZhOTJiZTg1ZjU5OTg1YmU0NTk2 OGI4NjQwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODg0YTk2ZWMyODc1NGQ2MTFkOTU4NGU4OGJkMzk0MDNiMzg1ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjZ98hUgqjgfVnnERMXTCq2zt+kW VfRM2AIhjB2rmFVLcISLDRVkLAn/psw5T5XdRQuIE/V6GXY9i+W19uLyFoSBNF+r 5iUIx73GsEyE+1swHFiEcz3PcT/j0q2YCQpuv3amFNXltqUeRrOXN7nPr5a8lhdM OMKOmuPYWbdc9cdgX+KzBt9dCBlpx6RLAr3OfytRFoEUZuHz/d4tJmV6mOUB2I1X Tfxq6JQcyUUtntEavVIUns17xjv7U9scHtw90HMejOfuKb/kpzwAsv4rhLNrtHuZ dv1BjDwyXFlrv1wonBhyK4zk6DfVkve+BTISsbsP0dBdZ3FfC3HPLPHKtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMiEqW7Ch1TWEdlYToi9OUA7OF4pMB8GA1UdIwQY MBaAFDMP6XGz42sWqSvoX1mYW+RZaLhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWIt MTFlOWU5ZjAxMzQzLzEveUlTcGJzS0hWTllSMlZoT2lMMDVRRHM0WGlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWItMTFlOWU5ZjAxMzQz LzEvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmcRMA0G CSqGSIb3DQEBCwUAA4IBAQB6XvGmJrRcjYwz9V/w3yfpHV5nIsrKH60/blh0js1R 5zWGtep6tyyH9+Rm/GBOgo4LCTiEeN6rXkK+Mj2Pl7iXZBHGYCWA2hNSL521XGbm LxJTgoJmeXqXUdX4DPrmo1YkAU108zwhFQlxndUHX8XEYIuWZK1n5MlxTpTXCKa3 0eOfhE8o10lpjMkc/H15M6pBGJLQYrDDywJh8zk5anquSTDDqTgyR5nwwAO5K1fA IFXxLjopxglC9Muo7DPjJr6ENqJ78CyRB0jkZu2pp/YfNYjY0JkWrczpmgjku85O 26W3BOqruoO36XiwqrZavuGXZqIU8redFJiyhJJddOrN -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:44 2026 by rpki-client