This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/y7Yhc7l6YNnMUl1U-lU4LXVz6B4.roa File: y7Yhc7l6YNnMUl1U-lU4LXVz6B4.roa (raw, json) Hash identifier: 9QPX2u4tZEN3H/22+qKUcxXcBFy2u4JGqbw8FLY/7C4= Subject key identifier: CB:B6:21:73:B9:7A:60:D9:CC:52:5D:54:FA:55:38:2D:75:73:E8:1E Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D182AC19F1B3F146333A525F68A6D Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/y7Yhc7l6YNnMUl1U-lU4LXVz6B4.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28924 IP address blocks: 195.56.44.0/24 maxlen: 24 195.56.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:18:2a:c1:9f:1b:3f:14:63:33:a5:25:f6:8a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbb62173b97a60d9cc525d54fa55382d7573e81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:53:2b:29:d4:a5:b2:c3:28:2a:b9:0a:49: 12:8c:b6:23:5c:b2:3c:cf:b1:ad:01:39:31:ac:c6: 12:a5:47:2c:8c:ab:f9:4d:1f:53:ad:58:39:8f:1a: 6d:33:5d:fc:ec:9e:82:39:ba:77:92:57:51:8d:86: b1:38:b8:8a:ff:e8:07:09:ba:47:39:3b:54:6f:61: a7:bd:aa:f9:4c:8b:a6:5c:57:4f:6d:68:8a:83:be: 0c:23:d9:d3:5f:c2:54:3a:f5:3d:21:ae:16:e6:91: f5:a6:bd:70:12:f1:3c:dd:96:b3:19:16:db:04:b7: bd:a2:33:f1:28:41:bc:5b:1e:a5:07:29:3f:69:a8: 84:fb:40:5a:5c:72:68:42:6f:5a:dd:e5:3d:08:c9: db:33:67:45:bc:91:07:44:20:ab:65:d9:c4:cd:96: eb:d7:fa:80:7f:99:50:78:af:d1:35:bf:d5:b4:88: ac:2e:45:4e:1f:fa:5f:7b:9b:c4:5b:b1:45:fe:c4: c1:6a:25:80:5d:3e:60:db:53:4b:a2:7c:92:6f:3f: 57:3d:5e:14:51:f7:74:37:46:26:27:35:69:04:3c: f5:67:81:1e:df:6e:90:b2:21:49:ea:33:57:b4:2b: fc:cc:8f:ea:c6:09:64:fb:46:0d:02:ba:b0:38:58: fd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B6:21:73:B9:7A:60:D9:CC:52:5D:54:FA:55:38:2D:75:73:E8:1E X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/y7Yhc7l6YNnMUl1U-lU4LXVz6B4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.56.44.0/24 195.56.147.0/24 Signature Algorithm: sha256WithRSAEncryption 01:c8:72:a4:a3:dd:5e:78:b3:f2:19:2f:8a:e2:51:dc:6a:56: 96:2d:53:2b:9e:23:f2:77:d6:02:3c:89:d3:12:b4:28:00:b0: c2:ec:31:ea:21:7c:b7:f7:ee:da:95:76:4b:b5:4e:44:d7:d0: b4:0f:3a:b8:29:57:1e:63:9b:ab:e6:15:35:2c:45:72:82:e5: d0:d9:9c:5a:b1:52:d1:e9:ce:60:92:c9:e4:61:b9:c4:3a:fb: 78:64:9c:a2:3e:0b:65:6e:eb:5a:fb:fc:70:82:bc:72:1a:7d: a2:e5:d0:dd:d3:95:1a:f8:2b:48:e4:90:88:30:74:08:82:30: 6c:2d:0a:0c:f1:50:9a:bb:12:50:ee:56:9d:8b:0d:0f:4f:52: 7e:16:7b:40:98:cf:97:cb:8a:2d:07:16:76:0d:19:db:fb:e7: b6:82:98:55:0e:83:91:b9:3f:40:0c:4a:e1:31:af:c4:1c:2b: e9:53:1c:5d:07:81:15:b5:b6:58:cc:3e:25:81:ba:68:c6:26: 98:a8:5f:18:a0:d7:c5:01:58:f9:c8:43:8a:1e:11:79:3b:53: 79:32:8f:68:47:28:d5:88:11:b9:6b:bc:c5:bf:31:0c:6f:76: d4:0a:f8:35:c0:60:40:f9:9b:97:74:77:15:35:53:06:59:f5: b8:01:3e:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XRgqwZ8bPxRjM6Ul9optMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmI2MjE3M2I5N2E2MGQ5Y2M1MjVkNTRmYTU1MzgyZDc1NzNlODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufhTKynUpbLDKCq5CkkSjLYjXLI8 z7GtATkxrMYSpUcsjKv5TR9TrVg5jxptM1387J6CObp3kldRjYaxOLiK/+gHCbpH OTtUb2Gnvar5TIumXFdPbWiKg74MI9nTX8JUOvU9Ia4W5pH1pr1wEvE83ZazGRbb BLe9ojPxKEG8Wx6lByk/aaiE+0BaXHJoQm9a3eU9CMnbM2dFvJEHRCCrZdnEzZbr 1/qAf5lQeK/RNb/VtIisLkVOH/pfe5vEW7FF/sTBaiWAXT5g21NLonySbz9XPV4U Ufd0N0YmJzVpBDz1Z4Ee326QsiFJ6jNXtCv8zI/qxglk+0YNArqwOFj9xwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMu2IXO5emDZzFJdVPpVOC11c+geMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEveTdZaGM3bDZZTm5NVWwxVS1sVTRMWFZ6NkI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwzgsAwQA wziTMA0GCSqGSIb3DQEBCwUAA4IBAQAByHKko91eeLPyGS+K4lHcalaWLVMrniPy d9YCPInTErQoALDC7DHqIXy39+7alXZLtU5E19C0Dzq4KVceY5ur5hU1LEVyguXQ 2ZxasVLR6c5gksnkYbnEOvt4ZJyiPgtlbuta+/xwgrxyGn2i5dDd05Ua+CtI5JCI MHQIgjBsLQoM8VCauxJQ7ladiw0PT1J+FntAmM+Xy4otBxZ2DRnb++e2gphVDoOR uT9ADErhMa/EHCvpUxxdB4EVtbZYzD4lgbpoxiaYqF8YoNfFAVj5yEOKHhF5O1N5 Mo9oRyjViBG5a7zFvzEMb3bUCvg1wGBA+ZuXdHcVNVMGWfW4AT4t -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:31 2026 by rpki-client