This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/yO7LvNiXH8dJz8-PSOEFtqq5tK8.roa File: yO7LvNiXH8dJz8-PSOEFtqq5tK8.roa (raw, json) Hash identifier: AO3PZggrYOo/9vmb5ohU7nlXGncVTS7gulY25fvYV8E= Subject key identifier: C8:EE:CB:BC:D8:97:1F:C7:49:CF:CF:8F:48:E1:05:B6:AA:B9:B4:AF Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5 Certificate serial: 019B76EB22DD88A1FF9E2B4C50224FECF1EA Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/yO7LvNiXH8dJz8-PSOEFtqq5tK8.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1064 IP address blocks: 192.76.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:22:dd:88:a1:ff:9e:2b:4c:50:22:4f:ec:f1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5 Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8eecbbcd8971fc749cfcf8f48e105b6aab9b4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:a8:6b:a6:5d:7e:0c:4e:d9:8c:8c:32:48: db:31:a7:81:1b:8b:34:55:9e:9e:a3:3e:7c:5a:74: 2b:da:97:9d:e1:4b:17:e4:0b:a0:af:a7:c8:e1:a6: 78:13:fa:ad:9b:25:70:33:2f:b6:18:c4:2d:12:dc: 21:9d:fe:0e:a8:35:54:f5:1d:97:2f:20:6b:b5:03: c0:94:d4:9f:74:93:7f:31:ac:23:97:54:df:fc:81: 98:19:72:98:16:9f:6f:e2:b3:5e:90:4c:41:b1:fd: 1c:0c:84:fd:5a:da:32:57:28:d2:5a:dc:3a:2b:10: a4:aa:0b:1c:bc:fa:a4:4e:ee:b5:1e:3c:6e:f9:9f: bb:75:20:4c:e6:eb:af:bf:4c:79:cb:5b:d4:d8:50: 41:49:e1:59:7c:a2:63:b2:30:d1:f4:7e:a2:7f:e6: af:f9:36:c2:f6:8b:30:20:59:92:0e:a3:7d:ea:b6: 59:8d:e7:af:0e:15:cd:a8:f2:a7:4e:9c:5f:84:98: 3f:07:32:f9:a8:b0:ec:9f:8e:03:75:e1:30:98:be: 91:5b:7a:6c:8a:02:64:b4:a6:ef:e0:70:93:cf:f4: 8f:f6:28:1d:0d:c4:41:c4:1a:9b:07:19:19:ec:48: cc:d4:8d:3f:fc:95:d7:aa:6e:7c:07:2c:8a:d3:0e: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EE:CB:BC:D8:97:1F:C7:49:CF:CF:8F:48:E1:05:B6:AA:B9:B4:AF X509v3 Authority Key Identifier: keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/yO7LvNiXH8dJz8-PSOEFtqq5tK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.76.164.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:2c:7a:18:49:4c:b8:95:31:d5:ea:73:46:ec:d3:ba:1d:b3: 89:6b:4e:2d:b5:93:87:1a:6e:13:50:09:ab:fc:1e:9d:ec:e8: 8e:e4:2d:d3:7a:c8:a2:80:7e:68:a5:27:d1:6a:cf:29:28:2b: 60:81:c8:f8:9d:c9:9e:19:de:63:1f:41:c7:a7:76:4d:f2:7a: 80:62:a2:ec:84:7f:4a:39:bf:35:83:f9:ee:7f:28:17:be:e3: a7:ba:3b:1d:df:4f:71:4b:00:67:09:4a:6d:29:e8:15:3b:a2: 4c:f0:aa:42:e4:e9:73:eb:ad:5f:43:bf:8c:b3:51:39:08:5d: 60:54:c8:02:53:dd:b2:9d:51:4c:92:f4:5d:1a:9f:b2:36:ac: 5e:19:c2:54:f5:0b:d9:f0:70:96:59:42:e5:df:37:75:21:b9: fe:96:68:d4:73:64:33:93:5d:c4:55:34:84:f0:01:60:26:b2: 74:b6:05:e6:e7:ae:22:98:c8:f3:da:41:53:89:0c:9c:91:f6: 79:0b:31:74:c3:83:f0:d0:99:7b:cd:b6:ba:77:b2:fe:c8:72: 88:d3:d0:93:e0:48:e2:04:75:ab:39:89:20:9f:72:0e:7b:64: 47:9f:71:37:99:74:54:a1:64:71:b0:0a:b1:15:ed:61:1f:ee: 71:70:5c:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yLdiKH/nitMUCJP7PHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjhiOTMwYmVlY2E1MWZiZjM1NDNmZTc5ZjliMTkzNDVj ZjEzZDUwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVlY2JiY2Q4OTcxZmM3NDljZmNmOGY0OGUxMDViNmFhYjliNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu6oa6ZdfgxO2YyMMkjbMaeBG4s0 VZ6eoz58WnQr2ped4UsX5Augr6fI4aZ4E/qtmyVwMy+2GMQtEtwhnf4OqDVU9R2X LyBrtQPAlNSfdJN/Mawjl1Tf/IGYGXKYFp9v4rNekExBsf0cDIT9WtoyVyjSWtw6 KxCkqgscvPqkTu61Hjxu+Z+7dSBM5uuvv0x5y1vU2FBBSeFZfKJjsjDR9H6if+av +TbC9oswIFmSDqN96rZZjeevDhXNqPKnTpxfhJg/BzL5qLDsn44DdeEwmL6RW3ps igJktKbv4HCTz/SP9igdDcRBxBqbBxkZ7EjM1I0//JXXqm58ByyK0w5rqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMjuy7zYlx/HSc/Pj0jhBbaqubSvMB8GA1UdIwQY MBaAFAJouTC+7KUfvzVD/nn5sZNFzxPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80M2NkOTgtNmY4YS00NGNmLTk1YmQt NDIwZjljOGVhZmE0LzEveU83THZOaVhIOGRKejgtUFNPRUZ0cXE1dEs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80M2NkOTgtNmY4YS00NGNmLTk1YmQtNDIwZjljOGVhZmE0 LzEvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEykMA0G CSqGSIb3DQEBCwUAA4IBAQBOLHoYSUy4lTHV6nNG7NO6HbOJa04ttZOHGm4TUAmr /B6d7OiO5C3TesiigH5opSfRas8pKCtggcj4ncmeGd5jH0HHp3ZN8nqAYqLshH9K Ob81g/nufygXvuOnujsd309xSwBnCUptKegVO6JM8KpC5Olz661fQ7+Ms1E5CF1g VMgCU92ynVFMkvRdGp+yNqxeGcJU9QvZ8HCWWULl3zd1Ibn+lmjUc2Qzk13EVTSE 8AFgJrJ0tgXm564imMjz2kFTiQyckfZ5CzF0w4Pw0Jl7zba6d7L+yHKI09CT4Eji BHWrOYkgn3IOe2RHn3E3mXRUoWRxsAqxFe1hH+5xcFwM -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:43 2026 by rpki-client