This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/YJY6sXgdjZPpBkj1VwmX4zvap9o.roa File: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (raw, json) Hash identifier: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0= Subject key identifier: 60:96:3A:B1:78:1D:8D:93:E9:06:48:F5:57:09:97:E3:3B:DA:A7:DA Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019B7F1551952A1DB26FFD3AA7583DCD8213 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/YJY6sXgdjZPpBkj1VwmX4zvap9o.roa Signing time: Fri 02 Jan 2026 14:21:02 +0000 ROA not before: Fri 02 Jan 2026 14:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30880 IP address blocks: 194.236.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:51:95:2a:1d:b2:6f:fd:3a:a7:58:3d:cd:82:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jan 2 14:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60963ab1781d8d93e90648f5570997e33bdaa7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:a5:21:e6:7c:1d:16:73:5f:ab:7c:47:ae: 82:fc:81:93:72:50:69:d4:f0:3d:66:55:f7:7a:f2: 34:cb:4f:1d:08:97:71:f5:6f:76:bc:68:8d:58:96: fc:f9:ef:aa:e0:44:1f:14:2e:6c:75:9b:25:9d:c3: fd:21:70:4b:cc:a9:4d:5a:ff:a0:ce:28:e3:ca:99: d6:14:27:83:4c:1d:15:12:cf:6f:34:6f:0c:16:9d: c8:95:c2:3d:f7:e6:0a:74:ae:59:f7:01:57:02:d4: 66:05:02:af:f3:06:88:28:de:0a:db:a0:28:3f:07: c0:ef:f3:51:ae:ca:a0:c7:55:58:52:48:30:35:15: 3f:fd:8c:44:6c:b3:88:c3:a0:75:2a:28:14:40:3c: ae:6f:d8:39:71:09:c5:7d:ee:f0:af:34:4e:15:e1: ed:48:86:34:9e:56:02:40:65:1b:34:95:f4:ee:ec: 03:72:d9:26:59:b3:fb:d8:49:d4:f0:19:35:10:3c: 67:fd:aa:28:36:8d:49:a5:77:50:bb:f5:34:b1:a6: b8:b6:5e:07:e6:15:05:f5:25:dc:7c:54:5b:fb:ff: cc:33:d6:d6:fb:20:40:bd:6a:db:83:fa:9e:ae:2a: 8e:eb:42:45:72:b6:ab:a4:58:78:59:66:b0:9b:92: 66:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:96:3A:B1:78:1D:8D:93:E9:06:48:F5:57:09:97:E3:3B:DA:A7:DA X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/YJY6sXgdjZPpBkj1VwmX4zvap9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.236.124.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:0e:00:76:5e:26:53:6f:5a:03:ae:af:15:8f:35:9d:37:58: b9:0c:75:3f:90:5d:c4:be:33:e2:93:1d:ed:45:da:a7:d3:45: 14:9c:36:ee:4c:95:26:21:4c:3b:66:4d:15:39:af:e2:7f:f7: b3:9b:dd:7c:35:ac:9a:ac:f7:1f:d5:79:23:86:41:98:45:63: 86:a9:bf:b8:5f:5e:e7:3d:f4:90:7f:2a:b3:3b:79:f1:ed:77: 7d:f8:25:db:03:ae:97:89:91:29:04:f0:45:6c:3e:a3:87:d6: 1f:4c:b9:83:93:28:80:b3:1e:d7:5e:74:95:81:2a:16:9d:fb: 10:dd:83:8a:f9:88:78:9f:09:76:fe:de:75:40:92:ca:b7:e4: ed:b9:61:ea:eb:93:bc:a8:b7:1d:70:2b:e2:91:c6:a3:3b:04: 98:da:eb:d1:fd:7c:fb:7e:f5:58:bf:6f:95:22:f2:45:11:0f: ad:3d:c7:55:c4:d7:00:e5:08:2b:74:bf:57:c8:c4:39:a6:07: 60:02:b0:36:54:82:cd:8b:20:55:ef:f7:69:ce:66:a5:ef:5b: ac:e3:9c:14:40:7c:49:b9:0c:37:81:da:7d:87:ff:4b:44:d4: fc:97:50:90:4e:ee:79:6d:35:85:56:14:c2:20:87:f2:c2:3e: 0a:82:ef:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVGVKh2yb/06p1g9zYITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDk2M2FiMTc4MWQ4ZDkzZTkwNjQ4ZjU1NzA5OTdlMzNiZGFhN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHilIeZ8HRZzX6t8R66C/IGTclBp 1PA9ZlX3evI0y08dCJdx9W92vGiNWJb8+e+q4EQfFC5sdZslncP9IXBLzKlNWv+g zijjypnWFCeDTB0VEs9vNG8MFp3IlcI99+YKdK5Z9wFXAtRmBQKv8waIKN4K26Ao PwfA7/NRrsqgx1VYUkgwNRU//YxEbLOIw6B1KigUQDyub9g5cQnFfe7wrzROFeHt SIY0nlYCQGUbNJX07uwDctkmWbP72EnU8Bk1EDxn/aooNo1JpXdQu/U0saa4tl4H 5hUF9SXcfFRb+//MM9bW+yBAvWrbg/qeriqO60JFcrarpFh4WWawm5JmKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCWOrF4HY2T6QZI9VcJl+M72qfaMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvWUpZNnNYZ2RqWlBwQmtqMVZ3bVg0enZhcDlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwux8MA0G CSqGSIb3DQEBCwUAA4IBAQAPDgB2XiZTb1oDrq8VjzWdN1i5DHU/kF3EvjPikx3t Rdqn00UUnDbuTJUmIUw7Zk0VOa/if/ezm918NayarPcf1XkjhkGYRWOGqb+4X17n PfSQfyqzO3nx7Xd9+CXbA66XiZEpBPBFbD6jh9YfTLmDkyiAsx7XXnSVgSoWnfsQ 3YOK+Yh4nwl2/t51QJLKt+TtuWHq65O8qLcdcCvikcajOwSY2uvR/Xz7fvVYv2+V IvJFEQ+tPcdVxNcA5QgrdL9XyMQ5pgdgArA2VILNiyBV7/dpzmal71us45wUQHxJ uQw3gdp9h/9LRNT8l1CQTu55bTWFVhTCIIfywj4Kgu8M -----END CERTIFICATE-----Generated at Sun Jan 25 11:14:20 2026 by rpki-client