This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa File: yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa (raw, json) Hash identifier: v/lSe2YGn/r4aMCpDUpUTQFRfYfqsJBd8pftAtwMWz0= Subject key identifier: C8:4A:B5:77:E6:3D:8E:12:02:F8:4C:55:0F:C8:B7:26:74:1F:29:62 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019B797E4343DB567937929D7CAECAE09153 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200848 IP address blocks: 185.94.4.0/22 maxlen: 22 213.109.172.0/22 maxlen: 22 2a09:fc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:43:43:db:56:79:37:92:9d:7c:ae:ca:e0:91:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c84ab577e63d8e1202f84c550fc8b726741f2962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a0:97:6d:1c:fa:a6:6c:ac:8c:31:0f:7e:1f: ad:ce:52:ad:7d:47:52:e2:9a:1e:62:59:64:13:8d: 12:62:67:8c:50:7f:2e:58:de:1d:05:5a:bb:4a:07: 4f:ce:55:da:a8:2e:61:c7:b1:b5:95:9a:3a:00:12: 4f:fb:f1:e4:d3:37:54:61:ee:c1:dc:48:cf:66:e5: 6d:ea:56:b8:8a:02:24:99:68:89:5d:3a:3f:e0:b7: 12:55:fa:6f:77:ce:f3:0b:26:55:09:a1:88:5b:e6: 65:dd:fb:a9:9f:7e:c9:31:a4:6a:fb:8c:c7:7b:f1: 66:88:f5:65:8c:22:4c:0a:72:1b:f0:35:d2:d7:20: 08:4f:a5:8e:54:51:d1:ae:66:d2:5c:98:2a:6d:1d: 9e:bf:97:fd:c6:61:2b:22:44:d6:fc:28:d3:91:ba: fe:90:25:67:4c:de:51:8f:fe:ff:88:d4:b3:b9:9b: b6:44:4b:b6:4e:90:af:ac:2c:20:2a:a9:ac:5f:63: 06:89:08:34:d1:76:17:51:9b:63:37:75:2a:74:f5: 1c:68:3d:60:ea:50:f5:29:de:f3:59:c5:c4:e4:55: 10:3f:e6:76:a3:70:81:43:71:1a:82:7c:ce:90:89: 01:d9:fa:fd:24:13:c9:e6:c6:1f:5a:27:0f:07:25: 29:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4A:B5:77:E6:3D:8E:12:02:F8:4C:55:0F:C8:B7:26:74:1F:29:62 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.4.0/22 213.109.172.0/22 IPv6: 2a09:fc00::/29 Signature Algorithm: sha256WithRSAEncryption ac:14:b0:8f:48:00:ad:59:27:1a:e2:8c:7e:55:2e:45:f8:62: 7a:48:d4:0f:de:e2:db:54:f1:d6:f2:d0:3b:b4:be:75:1f:71: 9d:46:a4:a6:7b:2b:c1:0c:d3:84:1a:6b:53:42:8b:89:d4:76: 71:d8:bb:86:70:60:f3:ed:7e:e0:f4:0c:28:35:d9:25:67:2b: d2:44:0b:9a:db:f5:91:71:bd:24:ac:23:e9:34:2a:2f:c6:9a: a3:9c:d2:e0:82:52:a4:69:e3:7c:11:1c:00:f4:b5:4e:db:65: 6e:6c:88:ce:4b:34:6f:81:a7:0d:1d:5a:33:a2:fa:06:23:23: 08:a0:12:b3:49:c4:af:5c:0f:68:f0:32:c8:f2:ba:7d:dd:86: cd:14:0f:58:f3:9b:86:d2:ef:eb:69:84:bd:75:da:0f:c7:aa: ef:de:cf:6f:ec:95:15:48:fe:3f:40:12:84:e0:c1:af:5c:f3: 61:ff:4f:49:b6:0f:5a:48:fc:d7:2b:87:45:71:ab:91:21:61: 3a:90:92:c9:31:2e:35:27:a6:98:27:d1:13:4b:73:da:da:c3: 78:9e:b9:31:49:d0:fb:24:32:00:50:5c:3a:f5:e0:78:12:03: 80:81:7c:5a:99:0d:ac:06:13:15:58:2f:5d:30:74:79:e7:f8: de:95:d1:87 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fkND21Z5N5KdfK7K4JFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODRhYjU3N2U2M2Q4ZTEyMDJmODRjNTUwZmM4YjcyNjc0MWYyOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKCXbRz6pmysjDEPfh+tzlKtfUdS 4poeYllkE40SYmeMUH8uWN4dBVq7SgdPzlXaqC5hx7G1lZo6ABJP+/Hk0zdUYe7B 3EjPZuVt6la4igIkmWiJXTo/4LcSVfpvd87zCyZVCaGIW+Zl3fupn37JMaRq+4zH e/FmiPVljCJMCnIb8DXS1yAIT6WOVFHRrmbSXJgqbR2ev5f9xmErIkTW/CjTkbr+ kCVnTN5Rj/7/iNSzuZu2REu2TpCvrCwgKqmsX2MGiQg00XYXUZtjN3UqdPUcaD1g 6lD1Kd7zWcXE5FUQP+Z2o3CBQ3EagnzOkIkB2fr9JBPJ5sYfWicPByUpCQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMhKtXfmPY4SAvhMVQ/ItyZ0HyliMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEveUVxMWQtWTlqaElDLUV4VkQ4aTNKblFmS1dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuV4EAwQC 1W2sMA0EAgACMAcDBQMqCfwAMA0GCSqGSIb3DQEBCwUAA4IBAQCsFLCPSACtWSca 4ox+VS5F+GJ6SNQP3uLbVPHW8tA7tL51H3GdRqSmeyvBDNOEGmtTQouJ1HZx2LuG cGDz7X7g9AwoNdklZyvSRAua2/WRcb0krCPpNCovxpqjnNLgglKkaeN8ERwA9LVO 22VubIjOSzRvgacNHVozovoGIyMIoBKzScSvXA9o8DLI8rp93YbNFA9Y85uG0u/r aYS9ddoPx6rv3s9v7JUVSP4/QBKE4MGvXPNh/09Jtg9aSPzXK4dFcauRIWE6kJLJ MS41J6aYJ9ETS3Pa2sN4nrkxSdD7JDIAUFw69eB4EgOAgXxamQ2sBhMVWC9dMHR5 5/jeldGH -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:11 2026 by rpki-client