This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/yn0AIXSmQUy2ZdVLfREbNPEMx98.roa File: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (raw, json) Hash identifier: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE= Subject key identifier: CA:7D:00:21:74:A6:41:4C:B6:65:D5:4B:7D:11:1B:34:F1:0C:C7:DF Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019B7E37AE2AD064D5474930487C392DD37E Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/yn0AIXSmQUy2ZdVLfREbNPEMx98.roa Signing time: Fri 02 Jan 2026 10:18:56 +0000 ROA not before: Fri 02 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21734 IP address blocks: 195.122.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ae:2a:d0:64:d5:47:49:30:48:7c:39:2d:d3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jan 2 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca7d002174a6414cb665d54b7d111b34f10cc7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:d2:1d:11:59:fb:30:e2:35:48:0e:90:54: 7e:91:80:c4:c2:2c:34:52:83:14:10:ce:c4:9d:3b: df:76:13:d0:62:e3:31:b2:65:2d:2a:6c:7c:42:3b: 8d:c8:3c:b7:75:23:a7:a1:fa:b6:8f:83:af:c7:ad: de:0d:39:72:e9:ad:29:14:ec:95:01:7f:14:d7:ee: 9b:5b:aa:f2:7e:5c:2b:d8:5d:a7:06:37:ed:29:63: 48:9a:8e:79:6e:2c:8d:26:d1:8d:a0:66:dd:66:02: 8e:4d:81:d6:27:03:79:17:2f:10:f6:97:25:e2:05: 25:28:64:45:80:ce:9d:2f:06:c0:62:94:f0:11:24: 64:78:7a:1c:89:7c:48:09:44:b8:7f:1c:10:f2:39: ec:fe:d1:34:33:63:3a:2e:03:61:c4:d1:fc:26:2c: 3f:5c:d0:48:30:46:5e:4f:49:c6:c1:f5:61:62:a8: 4e:5d:a5:68:09:2e:82:f4:1e:00:78:08:85:bd:e8: cc:fa:53:b8:48:2d:39:03:a2:0a:78:7f:cf:0b:0d: 90:1b:67:93:6e:31:a2:e1:8f:64:6d:ca:e0:da:ba: f7:82:03:66:76:26:a4:42:eb:fe:ee:7b:4b:7a:c5: d8:2f:8a:4d:6c:15:45:bd:96:45:b5:70:f1:7e:dd: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7D:00:21:74:A6:41:4C:B6:65:D5:4B:7D:11:1B:34:F1:0C:C7:DF X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/yn0AIXSmQUy2ZdVLfREbNPEMx98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.122.186.0/24 Signature Algorithm: sha256WithRSAEncryption 92:27:f3:34:64:89:0a:db:08:31:e6:0f:4a:58:0f:db:33:00: a9:91:5e:2d:a3:9f:4b:08:1f:f3:0e:6e:fc:df:0d:69:30:de: 88:d1:eb:74:1c:93:64:38:16:f2:e7:d7:34:ab:12:c0:33:22: 2e:88:30:51:4c:fd:61:6b:67:e1:c4:b4:a7:a2:00:4b:89:af: 05:f0:43:8e:23:ca:85:4d:1b:e9:e7:1e:c4:87:27:e8:9c:43: 04:68:09:5d:27:53:e3:f3:17:3c:c7:4c:2d:fa:c6:52:9c:9c: 6c:85:7b:fa:e3:01:d1:5a:90:5d:a9:0b:83:cc:f7:98:55:12: df:17:69:65:a7:44:9d:04:f1:d1:20:c0:14:8f:47:e1:17:6a: 53:e5:bf:f1:8b:0c:54:cd:83:7f:3d:40:bd:09:ad:10:de:38: 31:15:d6:56:43:91:0e:94:40:46:6c:07:75:b1:ed:6c:b8:f3: d3:0a:94:c9:8f:a4:12:35:98:eb:78:be:80:96:e1:9d:df:2c: dd:3b:6b:cf:e5:a2:09:6b:f9:52:62:3f:93:d1:ab:0e:ec:74: 04:25:d6:b1:13:84:54:a0:89:d1:d0:92:76:f8:91:1d:ed:18: 71:66:fd:5b:01:ce:92:2e:5a:8f:81:78:31:c0:37:b5:24:b5: c7:57:34:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N64q0GTVR0kwSHw5LdN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMTAyMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTdkMDAyMTc0YTY0MTRjYjY2NWQ1NGI3ZDExMWIzNGYxMGNjN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe3SHRFZ+zDiNUgOkFR+kYDEwiw0 UoMUEM7EnTvfdhPQYuMxsmUtKmx8QjuNyDy3dSOnofq2j4Ovx63eDTly6a0pFOyV AX8U1+6bW6ryflwr2F2nBjftKWNImo55biyNJtGNoGbdZgKOTYHWJwN5Fy8Q9pcl 4gUlKGRFgM6dLwbAYpTwESRkeHociXxICUS4fxwQ8jns/tE0M2M6LgNhxNH8Jiw/ XNBIMEZeT0nGwfVhYqhOXaVoCS6C9B4AeAiFvejM+lO4SC05A6IKeH/PCw2QG2eT bjGi4Y9kbcrg2rr3ggNmdiakQuv+7ntLesXYL4pNbBVFvZZFtXDxft2UYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMp9ACF0pkFMtmXVS30RGzTxDMffMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEveW4wQUlYU21RVXkyWmRWTGZSRWJOUEVNeDk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3q6MA0G CSqGSIb3DQEBCwUAA4IBAQCSJ/M0ZIkK2wgx5g9KWA/bMwCpkV4to59LCB/zDm78 3w1pMN6I0et0HJNkOBby59c0qxLAMyIuiDBRTP1ha2fhxLSnogBLia8F8EOOI8qF TRvp5x7EhyfonEMEaAldJ1Pj8xc8x0wt+sZSnJxshXv64wHRWpBdqQuDzPeYVRLf F2llp0SdBPHRIMAUj0fhF2pT5b/xiwxUzYN/PUC9Ca0Q3jgxFdZWQ5EOlEBGbAd1 se1suPPTCpTJj6QSNZjreL6AluGd3yzdO2vP5aIJa/lSYj+T0asO7HQEJdaxE4RU oInR0JJ2+JEd7RhxZv1bAc6SLlqPgXgxwDe1JLXHVzR6 -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:48 2026 by rpki-client