This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa File: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (raw, json) Hash identifier: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8= Subject key identifier: 61:B6:F8:30:5E:D6:F2:92:37:3D:86:22:56:CA:74:5D:1E:AF:3A:4A Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910EA5E572921C99797EE67A2E52D61 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47950 IP address blocks: 193.41.244.0/24 maxlen: 24 2a0d:f400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ea:5e:57:29:21:c9:97:97:ee:67:a2:e5:2d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61b6f8305ed6f292373d862256ca745d1eaf3a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:ea:a3:fa:de:5a:ef:d2:71:ed:66:03:c5: 4b:7e:e4:b3:a3:57:f9:c5:52:f5:79:4d:e3:cb:69: b0:9c:01:fa:77:69:8a:a9:71:a0:3e:b1:18:28:69: 92:64:55:ff:a5:1a:ca:8c:4e:6f:64:1c:87:9d:74: c8:06:86:50:ea:34:da:df:4b:b1:b5:3f:31:eb:af: 3d:b9:82:00:ab:ae:b7:e7:20:84:f2:45:d1:a3:07: 33:ae:d6:fa:58:64:28:ea:7f:e0:3c:65:24:fb:e8: 4a:6b:4a:24:e0:b4:2d:f8:cb:fe:8d:f7:28:8b:95: f5:cb:0b:b1:54:9a:fb:1c:e7:5b:e0:a4:bf:d0:56: bf:fb:02:87:8f:44:29:de:ec:9c:ac:82:60:9d:f3: 03:4f:2b:f8:94:c4:96:b5:6b:eb:1e:3f:db:14:ef: fe:09:dd:f9:1f:6d:b0:11:a1:73:b6:88:54:d4:c5: 3f:70:8a:2b:56:34:7f:a6:66:73:d0:c2:f4:34:38: ed:a6:51:5e:19:1c:51:43:e0:df:8c:0f:8a:68:91: a2:b7:55:41:dc:d0:57:19:79:98:8c:0d:8c:37:1b: 65:ce:6d:85:3d:6b:46:85:fa:6a:a8:91:92:1b:5b: 13:ff:e7:65:4f:50:cb:82:0e:79:85:51:bc:ff:c9: 08:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B6:F8:30:5E:D6:F2:92:37:3D:86:22:56:CA:74:5D:1E:AF:3A:4A X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.244.0/24 IPv6: 2a0d:f400::/32 Signature Algorithm: sha256WithRSAEncryption 2d:b3:d3:ca:47:1f:4a:f2:53:49:03:8c:b2:15:3a:5f:1e:98: b0:f1:0c:73:33:0f:2f:ad:c1:f5:1e:d8:28:c0:66:0c:30:de: c2:e9:84:67:2f:de:8e:f5:e9:1b:a0:0b:7d:1f:bf:e6:59:7c: f6:4b:ed:4b:58:43:e2:ef:8d:9c:75:4a:df:8c:fb:56:45:0f: ea:25:95:e3:1b:83:94:1d:ac:2e:3b:a0:55:a9:4a:bb:94:81: 4d:da:4e:ba:b3:88:f0:54:d4:2a:fb:d7:92:d1:4a:ac:51:65: e5:4b:a4:ed:0c:cd:7f:d1:34:1d:40:94:9b:83:6b:91:7c:f0: ac:60:f7:53:63:e3:64:cc:f8:75:b3:dd:a2:a6:6b:0f:25:73: b5:48:72:f0:f1:cf:2d:f0:54:27:05:02:68:1a:2e:bd:09:10: ab:f1:58:28:6c:d4:3f:16:d9:ab:ea:8c:5f:f9:7c:90:7f:d7: fb:23:ec:51:4e:cf:24:40:06:eb:0f:90:08:b2:4f:de:a5:7a: 7c:d2:cc:bc:0a:4e:24:30:0f:d7:a2:4b:77:b8:d8:e8:aa:c4: 6c:03:61:b6:92:6d:78:59:ce:7a:a7:72:40:15:bb:c6:d8:0a: 24:91:a8:7a:6f:47:82:a6:4e:9f:ac:7e:5a:1e:31:bc:de:b4: f0:ac:da:50 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EOpeVykhyZeX7mei5S1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWI2ZjgzMDVlZDZmMjkyMzczZDg2MjI1NmNhNzQ1ZDFlYWYzYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7jqo/reWu/Sce1mA8VLfuSzo1f5 xVL1eU3jy2mwnAH6d2mKqXGgPrEYKGmSZFX/pRrKjE5vZByHnXTIBoZQ6jTa30ux tT8x6689uYIAq6635yCE8kXRowczrtb6WGQo6n/gPGUk++hKa0ok4LQt+Mv+jfco i5X1ywuxVJr7HOdb4KS/0Fa/+wKHj0Qp3uycrIJgnfMDTyv4lMSWtWvrHj/bFO/+ Cd35H22wEaFztohU1MU/cIorVjR/pmZz0ML0NDjtplFeGRxRQ+DfjA+KaJGit1VB 3NBXGXmYjA2MNxtlzm2FPWtGhfpqqJGSG1sT/+dlT1DLgg55hVG8/8kIXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGG2+DBe1vKSNz2GIlbKdF0erzpKMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvWWJiNE1GN1c4cEkzUFlZaVZzcDBYUjZ2T2tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSn0MA0E AgACMAcDBQAqDfQAMA0GCSqGSIb3DQEBCwUAA4IBAQAts9PKRx9K8lNJA4yyFTpf Hpiw8QxzMw8vrcH1HtgowGYMMN7C6YRnL96O9ekboAt9H7/mWXz2S+1LWEPi742c dUrfjPtWRQ/qJZXjG4OUHawuO6BVqUq7lIFN2k66s4jwVNQq+9eS0UqsUWXlS6Tt DM1/0TQdQJSbg2uRfPCsYPdTY+NkzPh1s92ipmsPJXO1SHLw8c8t8FQnBQJoGi69 CRCr8VgobNQ/Ftmr6oxf+XyQf9f7I+xRTs8kQAbrD5AIsk/epXp80sy8Ck4kMA/X okt3uNjoqsRsA2G2km14Wc56p3JAFbvG2Aokkah6b0eCpk6frH5aHjG83rTwrNpQ -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:27 2026 by rpki-client