This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/YVly3HyFx4cO-VDnGW8-TlLZp8c.roa File: YVly3HyFx4cO-VDnGW8-TlLZp8c.roa (raw, json) Hash identifier: zmddt2tM/OfIW2jjFDZBhz9+RtNwb/OeGPoKv5WQBq0= Subject key identifier: 61:59:72:DC:7C:85:C7:87:0E:F9:50:E7:19:6F:3E:4E:52:D9:A7:C7 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019B7CEDBF136814BE5326A42B3F627FC6B7 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/YVly3HyFx4cO-VDnGW8-TlLZp8c.roa Signing time: Fri 02 Jan 2026 04:18:34 +0000 ROA not before: Fri 02 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205097 IP address blocks: 195.114.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:bf:13:68:14:be:53:26:a4:2b:3f:62:7f:c6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jan 2 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=615972dc7c85c7870ef950e7196f3e4e52d9a7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:fa:a6:9a:ab:ac:55:26:a5:0b:e8:4b:6c: 7d:a0:63:af:d6:3a:8b:47:ec:72:24:f9:b6:cc:2b: d1:5d:40:b2:bc:1c:11:1c:1c:b0:c5:4f:4b:48:cf: d0:3d:d8:d4:f7:34:d4:f8:f7:73:f3:52:ee:dc:c7: 94:d4:f7:09:c5:b1:99:7b:6e:e0:6e:57:98:28:f0: ba:47:2e:f5:71:16:77:a3:d5:95:b3:d0:06:dc:80: 4b:09:f8:f4:be:ff:ad:f8:48:3a:6e:4c:3c:ab:9c: 07:05:06:6e:25:8c:d1:74:a7:8d:00:74:5a:47:04: 0e:bd:4e:08:3b:02:64:d9:72:20:bd:71:27:74:30: 7e:4f:91:d5:f2:45:14:50:26:32:de:b4:fc:ff:89: 72:26:2e:bf:88:70:18:9a:f8:4a:bf:c7:e5:80:38: cf:3e:07:c6:0e:64:55:e7:39:ee:10:fd:a9:33:cf: a2:7c:e2:74:4b:db:ef:18:ea:9a:f5:57:f3:e8:cb: e7:2f:28:f9:11:70:9f:4c:74:e2:63:6a:1b:d5:6a: 72:b0:64:49:8d:1f:71:1f:de:9f:de:26:33:4a:c7: c8:11:87:03:bc:e3:be:43:40:ac:14:ca:fc:f8:f8: d6:7c:9f:86:01:77:d9:19:ef:09:83:b4:42:f9:c9: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:59:72:DC:7C:85:C7:87:0E:F9:50:E7:19:6F:3E:4E:52:D9:A7:C7 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/YVly3HyFx4cO-VDnGW8-TlLZp8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.130.0/24 Signature Algorithm: sha256WithRSAEncryption a5:22:f6:d7:e6:29:d5:3c:1e:93:8d:9e:72:f4:cf:a7:5f:1a: b5:fe:6c:e3:4d:31:ff:7d:1b:ec:5d:e6:27:71:d6:18:6e:3f: 5a:bb:f4:61:00:57:77:8a:67:37:a9:00:64:aa:65:43:f1:15: 49:de:76:68:2e:f3:01:af:c7:f1:30:3d:ee:94:8b:ff:cf:68: 94:d7:b5:d5:da:40:35:c7:f1:b3:c6:f5:2c:b0:45:c5:e9:25: ba:ac:50:65:c9:7f:a0:dc:2a:a3:94:b5:fb:9a:29:d4:99:10: 58:f3:66:cb:a3:a1:41:5e:35:ca:53:2e:83:6f:40:56:86:b1: fa:3c:a6:21:96:2b:bf:71:7e:0c:2a:76:cf:20:c3:bb:59:fa: b3:f7:cd:eb:d5:02:3e:45:e8:43:3f:03:46:5d:34:d8:ea:b1: b4:86:06:e3:24:51:b5:93:e0:91:b4:83:c0:b7:8d:66:90:cf: 86:9a:de:e2:5e:73:8b:43:52:8e:b6:62:22:fa:cf:f6:18:9e: a6:af:bf:54:9a:b4:be:1c:d7:15:5b:1a:7e:b3:a4:cd:cc:08: b1:93:8f:37:af:94:8c:c8:b6:96:aa:3a:f5:24:9a:b9:4a:1c: 85:5e:8e:73:41:2c:d4:6c:bf:b8:d2:22:2f:10:5b:99:12:62: 1c:55:20:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87b8TaBS+UyakKz9if8a3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwMTAyMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTU5NzJkYzdjODVjNzg3MGVmOTUwZTcxOTZmM2U0ZTUyZDlhN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlev6ppqrrFUmpQvoS2x9oGOv1jqL R+xyJPm2zCvRXUCyvBwRHBywxU9LSM/QPdjU9zTU+Pdz81Lu3MeU1PcJxbGZe27g bleYKPC6Ry71cRZ3o9WVs9AG3IBLCfj0vv+t+Eg6bkw8q5wHBQZuJYzRdKeNAHRa RwQOvU4IOwJk2XIgvXEndDB+T5HV8kUUUCYy3rT8/4lyJi6/iHAYmvhKv8flgDjP PgfGDmRV5znuEP2pM8+ifOJ0S9vvGOqa9Vfz6MvnLyj5EXCfTHTiY2ob1WpysGRJ jR9xH96f3iYzSsfIEYcDvOO+Q0CsFMr8+PjWfJ+GAXfZGe8Jg7RC+cnnRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFZctx8hceHDvlQ5xlvPk5S2afHMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvWVZseTNIeUZ4NGNPLVZEbkdXOC1UbExacDhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3KCMA0G CSqGSIb3DQEBCwUAA4IBAQClIvbX5inVPB6TjZ5y9M+nXxq1/mzjTTH/fRvsXeYn cdYYbj9au/RhAFd3imc3qQBkqmVD8RVJ3nZoLvMBr8fxMD3ulIv/z2iU17XV2kA1 x/GzxvUssEXF6SW6rFBlyX+g3CqjlLX7minUmRBY82bLo6FBXjXKUy6Db0BWhrH6 PKYhliu/cX4MKnbPIMO7Wfqz983r1QI+RehDPwNGXTTY6rG0hgbjJFG1k+CRtIPA t41mkM+Gmt7iXnOLQ1KOtmIi+s/2GJ6mr79UmrS+HNcVWxp+s6TNzAixk483r5SM yLaWqjr1JJq5ShyFXo5zQSzUbL+40iIvEFuZEmIcVSA/ -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:41 2026 by rpki-client