This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/yu7FGYZBG0qZPxFlCSBNuH6vubo.roa File: yu7FGYZBG0qZPxFlCSBNuH6vubo.roa (raw, json) Hash identifier: TJHmQ5jIZkK8Ij/mX9PCFzWqzWwlwt2c2mMEyeNiyPk= Subject key identifier: CA:EE:C5:19:86:41:1B:4A:99:3F:11:65:09:20:4D:B8:7E:AF:B9:BA Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a Certificate serial: 019B7C80D8B1F6FA1343485CDE65DEC80CBF Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/yu7FGYZBG0qZPxFlCSBNuH6vubo.roa Signing time: Fri 02 Jan 2026 02:19:37 +0000 ROA not before: Fri 02 Jan 2026 02:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25540 IP address blocks: 93.188.144.0/21 maxlen: 21 178.22.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d8:b1:f6:fa:13:43:48:5c:de:65:de:c8:0c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caeec51986411b4a993f116509204db87eafb9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:3c:e0:bc:cd:ea:3c:30:d0:a2:49:49:d3: 90:e7:ad:6c:ff:15:c7:e7:55:f0:a5:bf:10:57:50: 7c:4b:fd:fb:28:f0:28:38:ed:82:8a:08:2a:42:5e: 16:2b:51:5b:60:63:6c:8f:a2:0b:b6:89:e1:7b:97: 8d:a3:85:8b:a9:24:cb:4a:21:ea:42:4d:80:df:c1: c5:e4:be:57:fd:3e:73:71:5b:0e:ea:7c:10:0b:02: c4:32:57:72:a2:5b:eb:b3:df:b8:7e:6c:5a:cd:8b: 6f:e2:ce:47:ef:fb:c5:53:76:88:63:c9:67:dc:13: 1a:51:74:21:86:92:dc:f1:03:7d:15:2e:9d:e3:ba: d2:79:9d:30:55:51:fc:59:2a:ce:eb:2d:28:9e:fc: 8a:62:88:39:d8:21:e1:3e:a5:81:86:7d:4f:d4:4c: 22:ed:ad:a0:f5:2b:b5:2c:fd:38:18:d4:0e:d9:01: e3:a4:73:99:be:d3:c5:66:fa:3f:5b:2d:a0:53:37: 31:d3:a2:c2:14:e2:f0:22:f7:4c:3b:18:35:94:08: ef:ea:fe:a0:c5:e7:21:36:83:13:4b:91:27:3b:86: 94:4d:69:f9:11:94:91:40:27:f0:31:63:75:f5:ce: 1b:b2:86:88:20:d4:bd:61:83:f5:3c:e5:db:31:b3: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EE:C5:19:86:41:1B:4A:99:3F:11:65:09:20:4D:B8:7E:AF:B9:BA X509v3 Authority Key Identifier: keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/yu7FGYZBG0qZPxFlCSBNuH6vubo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.188.144.0/21 178.22.176.0/21 Signature Algorithm: sha256WithRSAEncryption 18:23:e2:ae:96:5c:4e:e4:c1:3a:2b:64:c8:f1:dc:df:37:17: 6b:48:fc:ca:fa:f2:98:00:2a:e9:5e:5c:ab:cb:92:3d:1e:e7: 0a:35:26:42:97:28:30:29:20:46:8a:38:94:f4:4d:82:06:22: 2c:21:fa:e2:1e:fa:eb:99:98:ab:ca:25:5e:e7:7a:cf:4f:b7: 91:42:93:57:6e:be:6d:fe:4a:7f:9b:b1:8b:7e:65:df:de:6e: 36:67:40:d8:6d:95:b3:30:8d:ec:27:61:63:4c:f0:61:87:b6: 31:f8:17:b6:9f:3b:bc:54:c3:43:db:d1:ec:31:8b:17:f6:66: bd:d0:fb:d7:da:ce:5d:0d:f5:b6:f6:2b:82:af:a6:d3:14:dd: 3d:e4:08:be:10:69:63:ec:35:fa:db:ab:f4:4c:69:0a:72:af: 1f:03:b5:83:5f:62:08:3b:ef:e5:7d:66:72:6a:f2:4a:93:86: c6:6c:7f:c6:ee:c0:d5:d5:1a:73:ba:37:c0:80:20:8d:d3:cd: f2:f7:b0:ce:89:b1:ab:bb:b1:2e:6a:c0:64:02:d6:87:4b:7e: fa:dd:4f:cf:2a:53:b6:90:e6:96:dc:d2:6f:d9:90:1c:9b:85: 40:4a:a5:5f:bd:c0:6f:12:44:db:f8:82:26:40:d8:9c:b4:67: 08:2b:c5:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gNix9voTQ0hc3mXeyAy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDVhNGVkMTdhNjgxODQyMTAyY2M4ZjZlZjAzYTU2OWUx NTYxMmEwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWVlYzUxOTg2NDExYjRhOTkzZjExNjUwOTIwNGRiODdlYWZiOWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQs84LzN6jww0KJJSdOQ561s/xXH 51Xwpb8QV1B8S/37KPAoOO2CiggqQl4WK1FbYGNsj6ILtonhe5eNo4WLqSTLSiHq Qk2A38HF5L5X/T5zcVsO6nwQCwLEMldyolvrs9+4fmxazYtv4s5H7/vFU3aIY8ln 3BMaUXQhhpLc8QN9FS6d47rSeZ0wVVH8WSrO6y0onvyKYog52CHhPqWBhn1P1Ewi 7a2g9Su1LP04GNQO2QHjpHOZvtPFZvo/Wy2gUzcx06LCFOLwIvdMOxg1lAjv6v6g xechNoMTS5EnO4aUTWn5EZSRQCfwMWN19c4bsoaIINS9YYP1POXbMbNa6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMruxRmGQRtKmT8RZQkgTbh+r7m6MB8GA1UdIwQY MBaAFCcFpO0XpoGEIQLMj27wOlaeFWEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUt NjUzNjhmNDA4ZGEzLzEveXU3RkdZWkJHMHFaUHhGbENTQk51SDZ2dWJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUtNjUzNjhmNDA4ZGEz LzEvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXbyQAwQD shawMA0GCSqGSIb3DQEBCwUAA4IBAQAYI+KullxO5ME6K2TI8dzfNxdrSPzK+vKY ACrpXlyry5I9HucKNSZClygwKSBGijiU9E2CBiIsIfriHvrrmZiryiVe53rPT7eR QpNXbr5t/kp/m7GLfmXf3m42Z0DYbZWzMI3sJ2FjTPBhh7Yx+Be2nzu8VMND29Hs MYsX9ma90PvX2s5dDfW29iuCr6bTFN095Ai+EGlj7DX626v0TGkKcq8fA7WDX2II O+/lfWZyavJKk4bGbH/G7sDV1RpzujfAgCCN083y97DOibGru7EuasBkAtaHS376 3U/PKlO2kOaW3NJv2ZAcm4VASqVfvcBvEkTb+IImQNictGcIK8VO -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:17 2026 by rpki-client