This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/YqBJj4QOZe_mJKDs248c4_DsF6s.roa File: YqBJj4QOZe_mJKDs248c4_DsF6s.roa (raw, json) Hash identifier: ZDFKOurRRaHh8voy0j7Npo5QmnZr2B2qAZU5jtYcJks= Subject key identifier: 62:A0:49:8F:84:0E:65:EF:E6:24:A0:EC:DB:8F:1C:E3:F0:EC:17:AB Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6 Certificate serial: 019B79ED3E42515A224B10FA0228C2FA7DFD Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/YqBJj4QOZe_mJKDs248c4_DsF6s.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35268 IP address blocks: 195.60.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3e:42:51:5a:22:4b:10:fa:02:28:c2:fa:7d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62a0498f840e65efe624a0ecdb8f1ce3f0ec17ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:8a:b8:46:6e:f1:99:67:2f:98:6d:c7:64: 86:f1:f0:d9:a9:bd:57:89:55:a2:38:42:be:84:49: 79:0d:54:e5:89:dd:e4:ea:61:8b:b4:a0:74:3c:07: 3d:ed:d1:41:60:4c:68:c2:01:2d:b1:84:d6:c8:c7: e5:c1:2b:e3:fb:07:4d:6a:48:e7:a9:64:26:98:cf: b7:21:0e:de:0a:9a:0a:de:d5:f5:4e:99:53:b9:c6: d8:0d:fa:fe:a2:9b:38:03:9e:a7:f2:ec:0e:10:ac: a6:13:58:60:1a:80:9d:bd:ea:ba:79:f6:46:40:10: 39:f1:dd:4c:81:68:41:fb:db:97:46:6e:73:9b:96: 96:d3:e2:46:2b:6d:e0:0c:5b:cd:dd:03:fa:4c:84: 88:f7:21:b7:fb:3e:73:e4:1e:27:b4:95:f8:a8:5e: 65:ec:7a:ab:4b:ff:79:c6:e3:cf:62:90:7f:9a:c8: 98:4e:47:e8:01:99:06:b0:4a:cf:70:a1:ba:2b:b5: b4:19:c6:9d:32:06:15:1c:26:c5:9a:6b:4e:19:64: 06:e5:04:76:b7:f1:c3:96:41:ac:06:10:54:0b:16: 4a:f9:c7:5c:fe:4d:de:ee:f5:28:8b:1d:ff:a6:51: 12:0f:39:b0:b2:c8:5a:4a:52:36:ae:26:16:4e:02: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A0:49:8F:84:0E:65:EF:E6:24:A0:EC:DB:8F:1C:E3:F0:EC:17:AB X509v3 Authority Key Identifier: keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/YqBJj4QOZe_mJKDs248c4_DsF6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.74.0/24 Signature Algorithm: sha256WithRSAEncryption b1:66:8f:52:f7:a6:b4:ff:cb:55:8a:f2:d4:8d:ab:99:5b:ba: 77:60:91:b8:ed:39:2c:91:df:71:fb:9f:27:10:04:d7:ce:1f: fb:0b:41:93:39:89:bd:05:6f:8e:5e:00:25:20:ba:81:5d:c6: 74:13:4c:a7:de:59:9f:f3:d8:45:8d:f1:08:ca:df:09:1f:e5: ef:d9:d8:51:0d:01:8e:c3:c2:c1:81:41:3b:38:0f:92:27:47: 33:92:5c:d7:7c:5e:8e:f4:d7:0c:6d:65:dc:ad:c6:b1:f1:a6: 6f:c9:26:2a:42:9a:fa:dd:93:5d:f2:03:a6:51:32:33:32:66: 77:57:f0:03:9b:36:dd:fb:c0:4a:14:8f:f2:7a:b3:93:9c:73: 13:5e:9a:70:7e:eb:a5:59:01:43:57:60:d0:dc:c2:8f:f6:16: 51:3a:50:91:0f:0c:bb:14:22:3e:5c:dd:1e:4e:26:4e:a1:5d: ec:67:55:49:b9:47:80:9e:71:54:cc:39:f0:90:4e:3b:d5:b8: 84:fd:2e:26:fa:09:5d:98:6e:3b:9e:45:fa:9f:a8:c1:0d:c9: cd:30:c5:bf:ce:00:7f:1c:0e:b5:75:52:14:bc:b8:38:d9:c3: 89:b6:ea:44:08:3f:4b:3a:23:c3:61:e6:0d:93:ca:96:44:13: 50:88:c7:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57T5CUVoiSxD6AijC+n39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDEzZDM3NDFlNGIzZjNhM2EzZTM0NzIxZjEyNDZlNGIy N2M3YTYwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmEwNDk4Zjg0MGU2NWVmZTYyNGEwZWNkYjhmMWNlM2YwZWMxN2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJaKuEZu8ZlnL5htx2SG8fDZqb1X iVWiOEK+hEl5DVTlid3k6mGLtKB0PAc97dFBYExowgEtsYTWyMflwSvj+wdNakjn qWQmmM+3IQ7eCpoK3tX1TplTucbYDfr+ops4A56n8uwOEKymE1hgGoCdveq6efZG QBA58d1MgWhB+9uXRm5zm5aW0+JGK23gDFvN3QP6TISI9yG3+z5z5B4ntJX4qF5l 7HqrS/95xuPPYpB/msiYTkfoAZkGsErPcKG6K7W0GcadMgYVHCbFmmtOGWQG5QR2 t/HDlkGsBhBUCxZK+cdc/k3e7vUoix3/plESDzmwsshaSlI2riYWTgKMtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKgSY+EDmXv5iSg7NuPHOPw7BerMB8GA1UdIwQY MBaAFO3RPTdB5LPzo6PjRyHxJG5LJ8emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2RFOU4wSGtzX09qby1OSElmRWtia3NueDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ODA4YmMtOTc2ZC00MjEyLWFkMmYt MWE4ZjIzZTJjZWJiLzEvWXFCSmo0UU9aZV9tSktEczI0OGM0X0RzRjZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS84ODA4YmMtOTc2ZC00MjEyLWFkMmYtMWE4ZjIzZTJjZWJi LzEvN2RFOU4wSGtzX09qby1OSElmRWtia3NueDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzxKMA0G CSqGSIb3DQEBCwUAA4IBAQCxZo9S96a0/8tVivLUjauZW7p3YJG47Tkskd9x+58n EATXzh/7C0GTOYm9BW+OXgAlILqBXcZ0E0yn3lmf89hFjfEIyt8JH+Xv2dhRDQGO w8LBgUE7OA+SJ0czklzXfF6O9NcMbWXcrcax8aZvySYqQpr63ZNd8gOmUTIzMmZ3 V/ADmzbd+8BKFI/yerOTnHMTXppwfuulWQFDV2DQ3MKP9hZROlCRDwy7FCI+XN0e TiZOoV3sZ1VJuUeAnnFUzDnwkE471biE/S4m+gldmG47nkX6n6jBDcnNMMW/zgB/ HA61dVIUvLg42cOJtupECD9LOiPDYeYNk8qWRBNQiMeE -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:45 2026 by rpki-client