This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/YizgVCIfkaAWNjo2WPl1U__4NbU.roa File: YizgVCIfkaAWNjo2WPl1U__4NbU.roa (raw, json) Hash identifier: bGUWPkhP3FgoyHjCC/yg5ZBj0yMfxpaS74FEnTPRW2Y= Subject key identifier: 62:2C:E0:54:22:1F:91:A0:16:36:3A:36:58:F9:75:53:FF:F8:35:B5 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAB6C9E13B3493A6B741A4010FCB52 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/YizgVCIfkaAWNjo2WPl1U__4NbU.roa Signing time: Fri 02 Jan 2026 08:19:55 +0000 ROA not before: Fri 02 Jan 2026 08:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5542 IP address blocks: 194.225.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b6:c9:e1:3b:34:93:a6:b7:41:a4:01:0f:cb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=622ce054221f91a016363a3658f97553fff835b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:06:74:67:31:8d:01:ee:6d:78:eb:87:8e: 28:f9:ee:d4:47:38:ea:8e:cd:1e:fa:46:02:2a:9f: 05:b0:fe:65:f3:ef:bb:6a:ff:4c:cd:7d:f4:85:24: 08:fe:47:5a:5f:5d:86:e6:db:25:81:bd:f6:43:15: 92:df:c7:cd:9c:02:6c:0d:12:d6:1e:ea:f8:cb:3d: e0:8e:11:30:aa:e0:f0:cc:62:87:a8:46:43:9a:05: d0:8b:a0:1b:b5:d0:2c:b6:dc:ff:5e:4d:b8:aa:fa: 12:a9:bc:8d:02:ae:d8:54:ee:c9:b0:0c:84:b5:79: 48:47:3d:a4:88:04:42:20:d9:96:6b:de:0c:51:c9: e4:28:c5:a1:71:33:8f:ec:68:85:c3:b8:3b:de:e1: 90:fb:2c:ad:a8:6e:91:a0:1e:f3:fa:55:80:0e:11: af:46:cf:23:51:13:ad:00:0d:37:79:7b:3e:32:32: ad:30:88:62:76:19:cd:0d:6b:52:1a:0e:be:1d:f4: 84:18:eb:d3:e5:a2:cd:cb:58:6a:58:bc:5c:f0:bc: 9f:df:aa:09:58:cf:ac:a9:e3:f1:78:77:d1:b5:8f: b6:62:df:43:37:64:be:80:45:9d:28:c1:4f:06:f0: fc:90:85:ee:a1:75:24:fd:b6:ca:d9:1f:97:a0:48: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2C:E0:54:22:1F:91:A0:16:36:3A:36:58:F9:75:53:FF:F8:35:B5 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/YizgVCIfkaAWNjo2WPl1U__4NbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.225.77.0/24 Signature Algorithm: sha256WithRSAEncryption 92:fe:c7:a9:83:0a:de:90:9c:45:94:96:85:57:e3:bd:aa:b2: 39:a8:c2:4c:bf:62:a2:77:32:e7:df:57:39:2f:a8:30:37:ce: fd:cf:89:fd:a9:8a:1f:77:39:4c:6a:b9:37:5a:2d:e2:88:37: 4b:d5:33:7c:0f:82:ac:b7:e1:08:14:5e:91:5c:32:26:15:c1: ca:dc:94:cb:85:2a:0e:38:a4:42:e4:d4:0c:c4:12:e3:bc:18: 72:bd:e1:a8:81:6f:13:c9:27:b3:84:10:d8:d8:e5:13:9a:63: 68:52:ba:c6:ff:e6:72:73:da:e6:42:a6:b6:21:83:1e:d8:5a: b3:4a:a9:be:26:8f:46:45:ef:a5:5c:8a:47:46:39:8e:55:f2: ba:27:cb:19:61:92:d0:36:7d:7a:c3:b0:b0:53:d8:f5:06:46: 86:32:98:2f:d5:1a:5a:b3:25:ae:c6:47:f4:63:41:30:6c:3b: c2:dc:1c:6f:03:ad:f3:a3:9d:33:74:a1:0f:c1:38:35:95:c9: c1:97:2e:97:59:26:ee:6e:58:93:7d:0f:42:a6:e4:07:e6:4d: f6:93:f0:0c:64:e3:cd:09:34:f2:6e:f3:44:0c:17:32:09:ee: d7:14:e8:66:6a:a2:62:7b:9c:85:ec:88:58:c3:2a:3c:33:3a: 80:6f:c0:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yrbJ4Ts0k6a3QaQBD8tSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjJjZTA1NDIyMWY5MWEwMTYzNjNhMzY1OGY5NzU1M2ZmZjgzNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v4GdGcxjQHubXjrh44o+e7URzjq js0e+kYCKp8FsP5l8++7av9MzX30hSQI/kdaX12G5tslgb32QxWS38fNnAJsDRLW Hur4yz3gjhEwquDwzGKHqEZDmgXQi6AbtdAsttz/Xk24qvoSqbyNAq7YVO7JsAyE tXlIRz2kiARCINmWa94MUcnkKMWhcTOP7GiFw7g73uGQ+yytqG6RoB7z+lWADhGv Rs8jUROtAA03eXs+MjKtMIhidhnNDWtSGg6+HfSEGOvT5aLNy1hqWLxc8Lyf36oJ WM+sqePxeHfRtY+2Yt9DN2S+gEWdKMFPBvD8kIXuoXUk/bbK2R+XoEgEBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIs4FQiH5GgFjY6Nlj5dVP/+DW1MB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvWWl6Z1ZDSWZrYUFXTmpvMldQbDFVX180TmJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuFNMA0G CSqGSIb3DQEBCwUAA4IBAQCS/sepgwrekJxFlJaFV+O9qrI5qMJMv2KidzLn31c5 L6gwN879z4n9qYofdzlMark3Wi3iiDdL1TN8D4Kst+EIFF6RXDImFcHK3JTLhSoO OKRC5NQMxBLjvBhyveGogW8TySezhBDY2OUTmmNoUrrG/+Zyc9rmQqa2IYMe2Fqz Sqm+Jo9GRe+lXIpHRjmOVfK6J8sZYZLQNn16w7CwU9j1BkaGMpgv1RpasyWuxkf0 Y0EwbDvC3BxvA63zo50zdKEPwTg1lcnBly6XWSbubliTfQ9CpuQH5k32k/AMZOPN CTTybvNEDBcyCe7XFOhmaqJie5yF7IhYwyo8MzqAb8Cy -----END CERTIFICATE-----Generated at Mon Jan 26 01:39:46 2026 by rpki-client