This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa File: yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa (raw, json) Hash identifier: DJXVu9TX9c1g1XkC2WWXZifFU9SFE1sev4C5DeMfFM8= Subject key identifier: C8:1E:CB:CE:88:0C:BE:E6:60:57:E9:12:57:D0:64:EC:82:7F:CF:F5 Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb Certificate serial: 019B79EC926ADE4232914DB68DC33E938136 Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa Signing time: Thu 01 Jan 2026 14:18:25 +0000 ROA not before: Thu 01 Jan 2026 14:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49558 IP address blocks: 194.242.127.0/24 maxlen: 24 195.178.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:92:6a:de:42:32:91:4d:b6:8d:c3:3e:93:81:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb Validity Not Before: Jan 1 14:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c81ecbce880cbee66057e91257d064ec827fcff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:fc:ad:a6:6b:f7:ae:08:26:ee:82:88:6b: fb:b1:ef:19:fb:0b:7b:03:ed:75:39:03:2d:f9:84: 44:b2:4d:50:42:b8:43:16:1f:91:01:ac:a2:2e:47: 7e:c4:c3:88:96:3c:70:b3:dd:4b:34:25:ab:b9:02: aa:09:9a:d4:c4:90:64:75:de:4e:d0:86:82:79:21: f9:75:6d:98:09:a0:ff:00:89:71:e0:72:ec:0e:9d: 19:cb:d0:9b:51:cd:c4:8d:b1:1f:7b:22:5d:93:98: f2:2d:73:3b:c2:92:5c:39:54:7d:52:b9:a1:14:7a: 60:a3:62:58:2f:a4:a9:d5:8c:2e:86:90:a1:3a:25: 4c:9e:ef:2f:a6:ee:e4:c0:0a:66:45:45:9d:f2:b4: 87:a9:87:c9:4f:77:f2:35:57:38:51:1b:1e:cb:fb: 53:86:b6:51:4a:21:4f:a4:de:03:ea:33:86:bc:86: fa:39:48:84:ad:9c:ed:77:6d:5e:fb:09:a2:fd:87: f2:a4:ee:26:ac:e6:47:43:d8:8a:09:25:ba:44:92: 2e:c1:c2:20:9a:7a:40:8d:c2:66:fa:f0:79:4a:67: 1a:e9:c6:0f:90:c9:ae:94:60:79:0a:21:c2:d8:3f: eb:13:8c:b7:c4:8c:8b:0b:74:97:c4:b1:e7:4d:12: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1E:CB:CE:88:0C:BE:E6:60:57:E9:12:57:D0:64:EC:82:7F:CF:F5 X509v3 Authority Key Identifier: keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.127.0/24 195.178.16.0/24 Signature Algorithm: sha256WithRSAEncryption 65:13:f3:e0:8c:c7:a4:e7:85:07:fd:ce:a2:22:00:ff:e5:f0: 7e:14:ed:1e:f6:b3:53:42:f9:d0:5e:00:d3:0a:42:60:b3:7f: 16:dc:2b:7a:3a:72:f7:65:5d:36:94:ff:55:5f:aa:75:af:4f: 34:11:9e:95:8c:9b:4e:e4:bf:6d:1a:ac:02:6b:38:b1:c8:15: 66:61:bb:88:72:ca:a6:59:b6:9b:87:56:22:6d:b9:de:7e:bf: d1:4c:6f:2d:a0:10:ef:3a:96:d7:1e:f7:09:34:cc:5f:66:57: 90:e9:d1:b3:b3:c5:f8:2c:d2:a3:cc:e1:a7:ff:98:94:70:d8: 01:8b:fd:f9:b0:a9:cf:aa:83:52:21:42:dc:e8:2e:a2:92:b9: 37:4d:4e:2d:a5:0d:ad:b3:72:89:99:d9:45:ab:18:80:fd:ad: 7b:7f:51:c1:6d:77:1a:d1:aa:91:66:30:4a:20:81:c8:0d:75: 40:ca:49:4e:9f:96:46:e0:83:3c:d1:2b:26:28:6e:80:2a:2d: e0:6f:33:19:19:52:b2:3a:d3:10:eb:2c:a3:dc:d0:2d:d9:7b: 9b:5e:59:55:5f:35:29:29:47:46:00:00:8b:02:cc:3a:85:cb: f0:9c:e1:76:a5:f4:ed:c2:e6:d0:06:b8:75:16:1a:4a:2c:17: 3d:00:39:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57JJq3kIykU22jcM+k4E2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODE0ZGQzOWRkMzkyNWNmZjg4YmYzNGQ0MzA3ZmQ2YzYy MTY1ZWIwHhcNMjYwMTAxMTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODFlY2JjZTg4MGNiZWU2NjA1N2U5MTI1N2QwNjRlYzgyN2ZjZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ78raZr964IJu6CiGv7se8Z+wt7 A+11OQMt+YREsk1QQrhDFh+RAayiLkd+xMOIljxws91LNCWruQKqCZrUxJBkdd5O 0IaCeSH5dW2YCaD/AIlx4HLsDp0Zy9CbUc3EjbEfeyJdk5jyLXM7wpJcOVR9Urmh FHpgo2JYL6Sp1YwuhpChOiVMnu8vpu7kwApmRUWd8rSHqYfJT3fyNVc4URsey/tT hrZRSiFPpN4D6jOGvIb6OUiErZztd21e+wmi/YfypO4mrOZHQ9iKCSW6RJIuwcIg mnpAjcJm+vB5Smca6cYPkMmulGB5CiHC2D/rE4y3xIyLC3SXxLHnTRLEZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMgey86IDL7mYFfpElfQZOyCf8/1MB8GA1UdIwQY MBaAFJCBTdOd05Jc/4i/NNQwf9bGIWXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjkt OTQwYWU0NTRjYjg1LzEveUI3THpvZ012dVpnVi1rU1Y5Qms3SUpfel9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjktOTQwYWU0NTRjYjg1 LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwvJ/AwQA w7IQMA0GCSqGSIb3DQEBCwUAA4IBAQBlE/PgjMek54UH/c6iIgD/5fB+FO0e9rNT QvnQXgDTCkJgs38W3Ct6OnL3ZV02lP9VX6p1r080EZ6VjJtO5L9tGqwCazixyBVm YbuIcsqmWbabh1Yibbnefr/RTG8toBDvOpbXHvcJNMxfZleQ6dGzs8X4LNKjzOGn /5iUcNgBi/35sKnPqoNSIULc6C6ikrk3TU4tpQ2ts3KJmdlFqxiA/a17f1HBbXca 0aqRZjBKIIHIDXVAyklOn5ZG4IM80SsmKG6AKi3gbzMZGVKyOtMQ6yyj3NAt2Xub XllVXzUpKUdGAACLAsw6hcvwnOF2pfTtwubQBrh1FhpKLBc9ADnQ -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:12 2026 by rpki-client