This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/yyxSxrF4ZcFyCTbbapEmZHvC14M.roa File: yyxSxrF4ZcFyCTbbapEmZHvC14M.roa (raw, json) Hash identifier: 9k1t3MVGGwaihFQgwuGr+VC3Y19Wd6fj+le41WnzZYE= Subject key identifier: CB:2C:52:C6:B1:78:65:C1:72:09:36:DB:6A:91:26:64:7B:C2:D7:83 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36AF4159293546A69FFA8D066C06C1 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/yyxSxrF4ZcFyCTbbapEmZHvC14M.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47445 IP address blocks: 193.232.139.0/24 maxlen: 24 2001:67c:1213::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:af:41:59:29:35:46:a6:9f:fa:8d:06:6c:06:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb2c52c6b17865c1720936db6a9126647bc2d783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:91:9b:ee:f5:13:f3:a2:37:e5:40:69:41:e3: f1:45:d2:00:43:4f:62:38:58:d9:58:1d:d1:c8:b0: a7:85:eb:82:5c:12:10:c4:4d:4f:16:98:f2:92:fe: bb:96:b0:09:32:37:83:55:29:f5:d0:55:0d:94:6d: ae:cc:16:8e:49:9a:7d:10:85:43:2c:07:fe:08:52: 07:fd:d6:5c:84:f7:00:c6:49:6c:12:bb:c5:35:1a: 06:1f:07:f4:fb:9f:27:12:37:ae:8a:b7:9c:b5:ef: 0f:9d:79:35:05:1f:35:e9:1f:5f:a6:13:bb:d1:f6: 11:b2:d1:2e:8c:1c:78:f0:be:b6:8e:ed:eb:5e:ef: 2f:02:10:89:b3:87:2d:75:0a:5d:d9:8a:ac:cd:6a: 65:29:c1:d2:c5:0a:94:05:15:82:86:bc:f8:0d:04: 2f:56:fc:ce:49:1c:b6:f4:ec:8b:e5:3d:04:d4:b8: 61:7c:87:d8:3c:16:05:b8:85:32:6a:b1:ca:87:b7: 87:92:88:9a:50:1c:d1:b5:65:12:ed:b2:93:c8:89: c5:33:9a:bb:f9:e3:e3:49:8b:8a:a7:4d:96:fd:f5: 7f:51:62:57:8c:76:ec:80:7d:6e:77:7d:df:6c:9b: 89:bb:8b:c4:56:b2:53:f2:f6:b7:c3:0f:12:26:ef: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2C:52:C6:B1:78:65:C1:72:09:36:DB:6A:91:26:64:7B:C2:D7:83 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/yyxSxrF4ZcFyCTbbapEmZHvC14M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.139.0/24 IPv6: 2001:67c:1213::/48 Signature Algorithm: sha256WithRSAEncryption 96:ce:7d:e6:ee:2b:ce:d5:11:17:ea:d3:6c:37:69:23:e9:3d: be:aa:db:5d:f3:0a:98:80:e0:8b:4f:88:cf:23:b3:7a:0c:3c: e1:7a:90:34:ba:b5:53:25:33:50:9f:2a:27:06:99:10:a9:3e: dc:07:66:74:40:8d:f3:ad:67:a9:e1:a3:1f:a7:78:cf:e4:73: 10:38:9a:f8:08:00:da:09:1d:db:18:c6:94:1a:57:17:b8:09: 5e:b1:47:ba:19:7d:d1:83:71:ef:67:42:de:b2:16:b2:bc:d5: 33:68:ba:dd:18:f6:41:78:0c:7f:2e:77:57:a1:f1:5d:37:c2: 3c:6b:08:fe:f1:db:05:08:38:a1:90:ad:f8:69:2c:43:6d:f8: 32:dc:06:20:64:0c:61:15:c0:89:8f:8d:86:b8:f3:68:53:20: 41:b5:a6:f8:6c:00:a2:e3:f5:ab:44:18:fc:ea:05:ca:c8:3a: 78:5a:2d:90:f3:77:fd:f6:10:5e:ad:b8:34:7c:a2:47:a6:fa: 3f:8f:ce:82:45:96:1e:b8:0a:0d:28:ec:be:dd:ad:f0:3a:62: 2c:9b:5c:e3:b6:86:ae:0f:4f:fb:cc:ef:d2:16:a1:44:47:f6: 95:2a:f0:79:82:06:f8:e7:89:bf:ab:bb:6a:4a:2d:98:96:51: bb:c6:01:48 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Nq9BWSk1Rqaf+o0GbAbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjJjNTJjNmIxNzg2NWMxNzIwOTM2ZGI2YTkxMjY2NDdiYzJkNzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35Gb7vUT86I35UBpQePxRdIAQ09i OFjZWB3RyLCnheuCXBIQxE1PFpjykv67lrAJMjeDVSn10FUNlG2uzBaOSZp9EIVD LAf+CFIH/dZchPcAxklsErvFNRoGHwf0+58nEjeuirecte8PnXk1BR816R9fphO7 0fYRstEujBx48L62ju3rXu8vAhCJs4ctdQpd2YqszWplKcHSxQqUBRWChrz4DQQv VvzOSRy29OyL5T0E1LhhfIfYPBYFuIUyarHKh7eHkoiaUBzRtWUS7bKTyInFM5q7 +ePjSYuKp02W/fV/UWJXjHbsgH1ud33fbJuJu4vEVrJT8va3ww8SJu/IgQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMssUsaxeGXBcgk222qRJmR7wteDMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEveXl4U3hyRjRaY0Z5Q1RiYmFwRW1aSHZDMTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAweiLMA8E AgACMAkDBwAgAQZ8EhMwDQYJKoZIhvcNAQELBQADggEBAJbOfebuK87VERfq02w3 aSPpPb6q213zCpiA4ItPiM8js3oMPOF6kDS6tVMlM1CfKicGmRCpPtwHZnRAjfOt Z6nhox+neM/kcxA4mvgIANoJHdsYxpQaVxe4CV6xR7oZfdGDce9nQt6yFrK81TNo ut0Y9kF4DH8ud1eh8V03wjxrCP7x2wUIOKGQrfhpLENt+DLcBiBkDGEVwImPjYa4 82hTIEG1pvhsAKLj9atEGPzqBcrIOnhaLZDzd/32EF6tuDR8okem+j+PzoJFlh64 Cg0o7L7drfA6YiybXOO2hq4PT/vM79IWoURH9pUq8HmCBvjnib+ru2pKLZiWUbvG AUg= -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:36 2026 by rpki-client