This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa File: YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa (raw, json) Hash identifier: bxowbJpolM8aC3Tyo8Qe1Sfr/zVg+4jTgjgqaAuFw7k= Subject key identifier: 60:91:B0:22:7D:C7:7E:7E:02:5C:67:08:7C:5E:52:AA:F8:78:2F:65 Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71 Certificate serial: 019B7DCA5BD06B28F1B63F33732148F5CBAA Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa Signing time: Fri 02 Jan 2026 08:19:32 +0000 ROA not before: Fri 02 Jan 2026 08:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213904 IP address blocks: 82.214.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5b:d0:6b:28:f1:b6:3f:33:73:21:48:f5:cb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71 Validity Not Before: Jan 2 08:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6091b0227dc77e7e025c67087c5e52aaf8782f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:dd:6d:f7:f7:a1:fa:de:7f:28:02:12:94: 7a:8c:9e:ba:ab:df:ef:12:0d:eb:24:a2:27:fc:2c: fc:20:9b:67:03:e0:19:76:bc:9d:b0:e3:fd:d7:8e: 20:fa:30:e7:6d:0f:52:44:65:a3:08:6e:1a:d8:39: 04:a9:a4:2f:0e:a9:56:13:f7:87:cd:b6:56:54:7d: 99:01:7e:86:da:6c:f1:f4:75:8f:9f:a5:65:60:b3: a5:51:72:ad:9f:62:88:f8:b6:e4:81:24:03:45:f2: 9b:2c:8f:da:b0:4f:79:98:5b:3c:fb:7a:70:8e:3c: ca:50:6f:f9:eb:55:22:12:25:cf:90:0c:fd:91:5b: a5:e9:82:dd:52:d2:48:d5:ac:f4:d0:a5:13:1d:dc: 0d:4d:70:db:bf:92:0e:60:92:3d:8b:2b:3d:2d:2f: fb:23:52:8e:d1:5e:5d:5b:13:1d:26:f5:a4:ec:6e: 8d:f5:e8:74:1b:73:f8:c5:b6:ba:7f:47:64:0e:1a: 6c:51:5a:8f:23:44:f7:65:29:79:68:9a:29:16:9a: 34:32:79:53:ac:ee:6d:94:0c:ca:c5:77:69:f5:da: 15:3a:d0:f2:1e:04:a0:ec:52:ce:42:92:fe:0d:a2: 71:70:3a:d5:e1:ec:2b:60:1f:aa:dd:cb:74:c5:3f: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:91:B0:22:7D:C7:7E:7E:02:5C:67:08:7C:5E:52:AA:F8:78:2F:65 X509v3 Authority Key Identifier: keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.214.78.0/24 Signature Algorithm: sha256WithRSAEncryption 26:43:db:99:43:80:fa:aa:aa:94:4e:fb:2e:3c:46:bf:3e:85: 35:a1:45:04:14:00:b0:6a:be:85:d4:d8:93:a4:35:c2:0d:a0: 6c:a9:a6:a2:86:5d:44:89:86:e5:1f:04:f4:29:ab:e4:45:85: c0:44:22:6b:ce:34:0d:1c:24:a6:b2:9d:f4:0d:28:7c:5a:1f: 9f:0e:7d:c1:38:df:42:48:43:c9:b0:01:be:35:4d:26:64:32: 05:85:e5:fd:dc:a3:fd:19:e8:a4:65:77:23:b9:1a:72:d4:64: 4c:17:eb:4c:31:b4:e1:64:70:2f:41:27:a7:e8:e4:89:68:35: b7:97:ef:cd:78:6a:de:e0:50:98:3e:aa:a6:1b:4a:bc:e3:fe: e6:fb:4b:60:eb:3e:49:04:1b:f3:4e:02:0d:6b:7b:34:ef:6b: 9b:e0:9c:86:e6:cd:9a:79:1c:e4:1a:a8:96:ba:44:94:31:5d: 88:95:18:c8:ef:5b:c5:75:54:9c:93:b9:19:6f:81:ae:62:ae: d0:c2:e2:51:1b:43:1f:11:55:b2:ec:0c:7a:90:1c:75:5c:4c: 32:0d:d9:5e:b0:87:67:90:01:5b:52:fb:40:a7:50:c0:9e:5c: bc:ae:f0:41:36:6f:10:b8:57:03:e0:c7:76:0e:5f:4e:3f:f8: 5e:47:28:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ylvQayjxtj8zcyFI9cuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ODIzNWRmNTM1NTI2ZDllNmQ2YWZmNmZhN2FjNTIyOTNh OTJjNzEwHhcNMjYwMTAyMDgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDkxYjAyMjdkYzc3ZTdlMDI1YzY3MDg3YzVlNTJhYWY4NzgyZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzrdbff3ofrefygCEpR6jJ66q9/v Eg3rJKIn/Cz8IJtnA+AZdrydsOP9144g+jDnbQ9SRGWjCG4a2DkEqaQvDqlWE/eH zbZWVH2ZAX6G2mzx9HWPn6VlYLOlUXKtn2KI+LbkgSQDRfKbLI/asE95mFs8+3pw jjzKUG/561UiEiXPkAz9kVul6YLdUtJI1az00KUTHdwNTXDbv5IOYJI9iys9LS/7 I1KO0V5dWxMdJvWk7G6N9eh0G3P4xba6f0dkDhpsUVqPI0T3ZSl5aJopFpo0MnlT rO5tlAzKxXdp9doVOtDyHgSg7FLOQpL+DaJxcDrV4ewrYB+q3ct0xT8t6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCRsCJ9x35+AlxnCHxeUqr4eC9lMB8GA1UdIwQY MBaAFBeCNd9TVSbZ5tav9vp6xSKTqSxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgt ZWU1Y2EzNmYxZDlhLzEvWUpHd0luM0hmbjRDWEdjSWZGNVNxdmg0TDJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgtZWU1Y2EzNmYxZDlh LzEvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUtZOMA0G CSqGSIb3DQEBCwUAA4IBAQAmQ9uZQ4D6qqqUTvsuPEa/PoU1oUUEFACwar6F1NiT pDXCDaBsqaaihl1EiYblHwT0KavkRYXARCJrzjQNHCSmsp30DSh8Wh+fDn3BON9C SEPJsAG+NU0mZDIFheX93KP9GeikZXcjuRpy1GRMF+tMMbThZHAvQSen6OSJaDW3 l+/NeGre4FCYPqqmG0q84/7m+0tg6z5JBBvzTgINa3s072ub4JyG5s2aeRzkGqiW ukSUMV2IlRjI71vFdVSck7kZb4GuYq7QwuJRG0MfEVWy7Ax6kBx1XEwyDdlesIdn kAFbUvtAp1DAnly8rvBBNm8QuFcD4Md2Dl9OP/heRyj3 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:27 2026 by rpki-client