This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/nYWrF9Km5Z2bdnEGENFIysthFYY.roa File: nYWrF9Km5Z2bdnEGENFIysthFYY.roa (raw, json) Hash identifier: 9Sz8hqL9rh1yiVyW8AkvB82GifJEOrPjylm2DNyZ1lA= Subject key identifier: 9D:85:AB:17:D2:A6:E5:9D:9B:76:71:06:10:D1:48:CA:CB:61:15:86 Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e Certificate serial: 019B791031F8E0A1C4634C2DEF82F9B7B573 Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/nYWrF9Km5Z2bdnEGENFIysthFYY.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140543 IP address blocks: 193.25.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:31:f8:e0:a1:c4:63:4c:2d:ef:82:f9:b7:b5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d85ab17d2a6e59d9b76710610d148cacb611586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:89:5b:a0:15:93:59:0c:94:bb:2f:fa:ff: b0:a7:c0:35:96:de:91:6a:cd:41:28:f0:24:00:7a: 13:db:aa:9d:a7:24:30:9c:ee:0e:c5:00:49:bf:84: ae:2f:ed:59:12:ca:68:d2:51:23:42:b7:ca:4a:4b: d3:67:56:67:38:cf:20:15:76:fb:e1:64:5b:5e:6a: b8:ef:76:91:6e:26:79:a8:d2:4f:d8:b9:44:5f:0c: 18:54:62:cf:ae:79:52:13:9e:b3:20:49:b6:94:59: 30:02:e0:f0:e6:ab:30:58:48:9a:bd:f2:d0:03:23: 0e:b3:d0:a1:d2:73:18:9c:a7:37:a9:46:ca:20:62: a3:39:fa:18:12:e4:25:90:a7:cf:db:60:e1:40:ac: 4c:e2:1a:01:35:42:52:ee:c7:af:05:30:1d:57:3f: e8:02:8e:a6:24:c6:dc:db:dd:84:58:62:ba:8f:f0: d9:78:26:ea:7d:20:1d:24:2f:dc:4b:21:e9:fd:3d: 75:19:7e:d5:57:92:25:2d:a6:5d:54:df:fc:de:88: 33:e8:a8:70:73:ab:d8:1a:17:49:6e:bd:0e:1e:c6: 39:c0:2c:8c:ea:8a:99:c6:08:08:f6:2d:82:5c:72: 08:80:f8:9b:6c:17:3e:81:e5:1e:c5:33:78:80:ba: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:85:AB:17:D2:A6:E5:9D:9B:76:71:06:10:D1:48:CA:CB:61:15:86 X509v3 Authority Key Identifier: keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/nYWrF9Km5Z2bdnEGENFIysthFYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:1f:fe:6f:f9:65:05:f4:5d:d6:09:49:e2:19:a7:43:e5:c6: 92:cb:df:8b:fc:b0:ca:74:ad:20:ac:64:1a:73:75:8b:d0:ac: cd:6a:96:c0:af:7b:7a:0f:40:d8:f9:4a:af:c6:a8:2d:16:bb: 55:93:ce:13:48:d4:95:4b:0b:34:54:1e:09:5c:e3:27:58:17: 82:a8:72:3e:24:fe:05:28:fc:44:a6:59:9e:cf:8f:24:f8:29: ad:70:7a:83:2a:5c:96:b4:82:61:3f:3a:58:01:f4:91:6e:e0: cc:73:8d:9c:1f:74:82:5e:90:ec:85:67:9f:4a:f9:c1:77:69: 27:71:b6:fc:ce:14:14:57:5e:3d:69:07:a8:d2:db:76:ea:5a: 80:49:91:84:55:b7:14:72:c6:f8:cc:89:6c:1a:07:c2:20:93: b1:2e:cd:ff:d1:0e:1b:5b:7f:e6:cb:ed:2e:d3:cf:5d:3d:a1: 5b:68:c1:58:23:b9:8a:7a:26:61:bd:f8:00:92:00:0c:79:9e: 1c:74:ff:3e:95:c6:55:46:60:6d:c8:0c:32:f1:1a:4a:52:3d: 0a:b7:78:95:68:95:a5:45:57:4d:f7:ac:e2:6c:f2:a7:76:64: da:05:cb:6c:be:6e:3d:04:d8:2d:e6:6b:a6:50:12:1a:c2:84: 1d:1d:8b:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDH44KHEY0wt74L5t7VzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw NDE5NGUwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDg1YWIxN2QyYTZlNTlkOWI3NjcxMDYxMGQxNDhjYWNiNjExNTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7CJW6AVk1kMlLsv+v+wp8A1lt6R as1BKPAkAHoT26qdpyQwnO4OxQBJv4SuL+1ZEspo0lEjQrfKSkvTZ1ZnOM8gFXb7 4WRbXmq473aRbiZ5qNJP2LlEXwwYVGLPrnlSE56zIEm2lFkwAuDw5qswWEiavfLQ AyMOs9Ch0nMYnKc3qUbKIGKjOfoYEuQlkKfP22DhQKxM4hoBNUJS7sevBTAdVz/o Ao6mJMbc292EWGK6j/DZeCbqfSAdJC/cSyHp/T11GX7VV5IlLaZdVN/83ogz6Khw c6vYGhdJbr0OHsY5wCyM6oqZxggI9i2CXHIIgPibbBc+geUexTN4gLqN1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2FqxfSpuWdm3ZxBhDRSMrLYRWGMB8GA1UdIwQY MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt MWFkNDdjY2QyZDlhLzEvbllXckY5S201WjJiZG5FR0VORkl5c3RoRllZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRn9MA0G CSqGSIb3DQEBCwUAA4IBAQA/H/5v+WUF9F3WCUniGadD5caSy9+L/LDKdK0grGQa c3WL0KzNapbAr3t6D0DY+UqvxqgtFrtVk84TSNSVSws0VB4JXOMnWBeCqHI+JP4F KPxEplmez48k+CmtcHqDKlyWtIJhPzpYAfSRbuDMc42cH3SCXpDshWefSvnBd2kn cbb8zhQUV149aQeo0tt26lqASZGEVbcUcsb4zIlsGgfCIJOxLs3/0Q4bW3/my+0u 089dPaFbaMFYI7mKeiZhvfgAkgAMeZ4cdP8+lcZVRmBtyAwy8RpKUj0Kt3iVaJWl RVdN96zibPKndmTaBctsvm49BNgt5mumUBIawoQdHYs0 -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:45 2026 by rpki-client