This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Y8VofECg6XDRc7kBDxvZBE-ydHI.roa File: Y8VofECg6XDRc7kBDxvZBE-ydHI.roa (raw, json) Hash identifier: 5sI62v5HRBdxoauH9VhzHWAJkQqiRWMnuYGerEaV4nw= Subject key identifier: 63:C5:68:7C:40:A0:E9:70:D1:73:B9:01:0F:1B:D9:04:4F:B2:74:72 Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4 Certificate serial: 019B7CEDB3E6ED0442C29907B8009BDC8028 Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Y8VofECg6XDRc7kBDxvZBE-ydHI.roa Signing time: Fri 02 Jan 2026 04:18:31 +0000 ROA not before: Fri 02 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61003 IP address blocks: 193.108.116.0/24 maxlen: 24 193.108.117.0/24 maxlen: 24 193.108.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b3:e6:ed:04:42:c2:99:07:b8:00:9b:dc:80:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4 Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63c5687c40a0e970d173b9010f1bd9044fb27472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:fa:2c:3d:c7:92:77:e8:28:3e:ea:17:5a: a5:1d:3b:1b:61:6f:8c:0d:40:ef:50:2f:bb:2e:51: c3:e8:93:9d:33:7f:f4:c9:95:00:3d:a3:20:a5:d5: da:74:12:8c:5f:79:98:0a:aa:db:a2:1b:2a:8a:6b: ee:48:93:42:9c:7b:8f:cc:53:97:3c:6b:79:3a:50: ce:3b:28:b8:eb:ae:b0:36:1d:1d:d4:fd:86:6a:d3: 20:00:2f:14:c0:98:18:17:54:a6:b3:69:af:4f:8b: af:cf:a8:ba:c0:08:93:89:74:e1:ca:f3:88:1a:b5: 0a:f6:62:44:3b:66:84:ec:b8:ec:ba:40:3c:a5:00: 89:4a:7a:f0:f8:be:e9:f5:08:d3:76:78:1e:51:af: b1:cc:a7:7d:2e:9d:81:9a:91:5c:b9:ce:f9:a8:60: 4d:c7:25:61:7d:f8:1f:da:5b:57:a1:80:f1:c3:e3: 87:78:07:51:c1:4e:09:af:22:cf:69:db:bd:39:61: 92:c5:46:86:8c:fb:b7:57:e7:a6:b4:3d:4c:26:36: a9:f4:a7:3b:78:ca:38:12:e4:f6:72:bb:31:89:01: 56:ea:aa:86:81:e1:e8:8e:47:67:ea:38:5b:a7:5d: cb:e7:66:b7:7f:42:9d:54:f6:a4:db:5a:71:c2:d5: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C5:68:7C:40:A0:E9:70:D1:73:B9:01:0F:1B:D9:04:4F:B2:74:72 X509v3 Authority Key Identifier: keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Y8VofECg6XDRc7kBDxvZBE-ydHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.116.0-193.108.118.255 Signature Algorithm: sha256WithRSAEncryption 0d:8d:74:12:b0:fa:ca:41:64:73:75:b1:9d:95:c8:04:74:d1: e6:16:93:65:15:6f:08:17:94:da:3d:75:b8:bb:d6:6d:f5:23: 34:a2:4d:8a:ef:7f:b4:d7:db:d0:a2:12:b9:14:ce:7a:74:5b: a2:8d:0b:e6:37:f1:87:82:cc:f2:ac:ad:69:a8:fd:ac:15:e1: cc:3a:70:35:c7:80:91:e8:ef:f9:16:7b:24:5c:9b:a4:f1:85: 8f:40:ad:44:98:4e:a3:4f:a2:fa:93:dc:b6:c9:07:b2:07:91: f0:ba:8d:6a:45:25:10:7e:d0:f9:9f:d3:fc:03:a4:12:86:0e: b6:a4:e9:b8:95:d3:c0:86:da:0c:38:fe:ae:ff:e9:d1:3c:21: ab:65:c3:e0:85:42:59:54:14:bb:6e:4c:a4:b2:0b:6f:05:19: 9d:fe:ec:5c:5e:4f:54:fc:90:b6:ac:10:f9:6b:ab:e4:60:a4: 10:2d:2d:7c:0e:e3:12:77:31:b8:73:a8:0d:ce:10:bf:17:28: 9e:98:05:2d:23:56:b7:6f:8b:9e:63:8f:66:aa:30:98:0e:ee: 3e:c2:fe:29:15:af:ab:20:44:92:41:af:15:de:67:26:3c:c2: 52:62:9e:6c:9e:7e:87:50:ef:6b:34:f1:8f:12:7a:1f:b5:c2: 48:8d:a5:4c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87bPm7QRCwpkHuACb3IAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTZlYmQ0MGE3NDRhMGM4NGYyNTM1NDU3MDQ3ODA4YWQy ZjE3YzQwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2M1Njg3YzQwYTBlOTcwZDE3M2I5MDEwZjFiZDkwNDRmYjI3NDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5f6LD3HknfoKD7qF1qlHTsbYW+M DUDvUC+7LlHD6JOdM3/0yZUAPaMgpdXadBKMX3mYCqrbohsqimvuSJNCnHuPzFOX PGt5OlDOOyi4666wNh0d1P2GatMgAC8UwJgYF1Sms2mvT4uvz6i6wAiTiXThyvOI GrUK9mJEO2aE7LjsukA8pQCJSnrw+L7p9QjTdngeUa+xzKd9Lp2BmpFcuc75qGBN xyVhffgf2ltXoYDxw+OHeAdRwU4JryLPadu9OWGSxUaGjPu3V+emtD1MJjap9Kc7 eMo4EuT2crsxiQFW6qqGgeHojkdn6jhbp13L52a3f0KdVPak21pxwtUV+wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGPFaHxAoOlw0XO5AQ8b2QRPsnRyMB8GA1UdIwQY MBaAFBcW69QKdEoMhPJTVFcEeAitLxfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhicjFBcDBTZ3lFOGxOVVZ3UjRDSzB2RjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81ZjU1ODktNGMzMi00OTNmLTkyNGUt YmFlN2FhMGExOGEwLzEvWThWb2ZFQ2c2WERSYzdrQkR4dlpCRS15ZEhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81ZjU1ODktNGMzMi00OTNmLTkyNGUtYmFlN2FhMGExOGEw LzEvRnhicjFBcDBTZ3lFOGxOVVZ3UjRDSzB2RjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALBbHQD BADBbHYwDQYJKoZIhvcNAQELBQADggEBAA2NdBKw+spBZHN1sZ2VyAR00eYWk2UV bwgXlNo9dbi71m31IzSiTYrvf7TX29CiErkUznp0W6KNC+Y38YeCzPKsrWmo/awV 4cw6cDXHgJHo7/kWeyRcm6TxhY9ArUSYTqNPovqT3LbJB7IHkfC6jWpFJRB+0Pmf 0/wDpBKGDrak6biV08CG2gw4/q7/6dE8Iatlw+CFQllUFLtuTKSyC28FGZ3+7Fxe T1T8kLasEPlrq+RgpBAtLXwO4xJ3MbhzqA3OEL8XKJ6YBS0jVrdvi55jj2aqMJgO 7j7C/ikVr6sgRJJBrxXeZyY8wlJinmyefodQ72s08Y8Seh+1wkiNpUw= -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:27 2026 by rpki-client