This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/rY66itDDLvcle-1MpYTgXG_M4zo.roa File: rY66itDDLvcle-1MpYTgXG_M4zo.roa (raw, json) Hash identifier: knoTBDvlJ1a2MSnUjOh4TAK/Rthq7es3OkAljnFYzRI= Subject key identifier: AD:8E:BA:8A:D0:C3:2E:F7:25:7B:ED:4C:A5:84:E0:5C:6F:CC:E3:3A Certificate issuer: /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8 Certificate serial: 019B7A5B14D3BB1C7FA81A541361758B33C3 Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/rY66itDDLvcle-1MpYTgXG_M4zo.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 193.34.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:14:d3:bb:1c:7f:a8:1a:54:13:61:75:8b:33:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad8eba8ad0c32ef7257bed4ca584e05c6fcce33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:b2:32:fb:82:3a:5d:9d:5d:56:c1:2f:92: 26:d1:be:c8:4b:1a:03:11:3f:48:ea:53:aa:71:12: 41:a1:ba:e2:33:21:0d:43:42:bd:e7:c9:36:c7:17: b2:72:8b:2c:bf:17:69:c1:fe:bc:05:0b:ef:92:b7: 07:f5:c9:ba:b7:64:70:e3:48:24:2c:63:a2:d9:81: a9:ca:42:e7:25:62:d3:03:35:ca:cd:f8:7c:bd:cc: 5e:a6:bf:18:3b:25:e6:46:15:f7:3a:35:9e:66:ff: c0:86:ba:17:3c:d9:e1:df:91:bd:c3:2f:c9:7a:3d: 84:9b:f7:10:07:eb:60:92:5f:b3:0f:10:ee:d4:22: db:36:30:22:a7:e3:c7:87:9e:b6:51:df:dc:f4:f6: 30:3b:a8:35:21:85:2c:61:59:ad:53:73:4b:1b:dc: 5c:b0:9d:87:ab:f1:1a:65:4b:ca:1d:9c:f2:42:ee: 66:07:54:9a:4f:08:49:9e:a7:bc:cb:47:39:5e:42: f4:28:f9:70:da:73:57:56:5c:33:62:3f:f9:94:65: 73:3e:ea:8f:6f:16:69:f2:57:a8:5f:e8:01:1e:81: 0c:3b:b1:33:97:d7:28:ca:e6:37:e9:b9:e9:4c:e4: 21:8f:a5:45:37:30:9a:8f:8f:2b:e1:01:55:6c:41: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8E:BA:8A:D0:C3:2E:F7:25:7B:ED:4C:A5:84:E0:5C:6F:CC:E3:3A X509v3 Authority Key Identifier: keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/rY66itDDLvcle-1MpYTgXG_M4zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.4.0/22 Signature Algorithm: sha256WithRSAEncryption 18:fa:01:36:4f:1f:9a:19:2b:f7:30:21:31:64:b1:6f:89:40: 88:f0:39:ff:3c:17:20:b0:a3:7f:c5:c0:bd:60:40:3c:4e:04: a6:1a:a6:f5:77:99:82:82:1d:b4:99:75:0b:0f:22:8e:7d:36: cd:97:f0:11:98:bb:c5:3f:ed:c7:ec:04:45:58:d7:5b:ec:a0: 2e:e0:31:82:99:cb:1e:f8:8e:58:4c:d5:b0:0d:6d:a9:24:8d: d4:a0:d4:28:59:f6:f5:39:c5:cd:f6:1f:0f:7f:ff:04:87:ea: 8a:86:fb:9f:ea:59:68:78:fc:77:fc:7f:51:b9:26:9f:3a:1f: 33:cd:57:4c:aa:35:f6:5f:98:54:59:1f:e9:90:6c:f8:e6:25: 2c:4c:02:55:02:60:50:23:32:63:93:2e:77:37:fa:db:ba:24: 19:2c:d2:b3:ef:06:24:ce:48:05:13:6d:66:2b:1f:e9:ec:1d: fc:27:0b:56:93:6b:f3:25:43:dc:28:9c:2f:66:6b:2a:ed:e3: 54:ee:f8:b1:92:6c:09:5d:7a:0a:5e:a2:88:58:f1:dd:1f:a6: 6b:c8:16:af:b2:4e:ba:19:8f:59:89:32:75:06:da:7f:25:9c: d9:e2:83:c4:c0:53:10:14:1b:f1:36:d4:f3:27:bc:d4:ed:e0: a6:25:c4:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxTTuxx/qBpUE2F1izPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzM0MTViZGYxYzAxNGFlMWMxOGU3Y2ZkMzNjNTZmMDE4 ZmVlZTgwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDhlYmE4YWQwYzMyZWY3MjU3YmVkNGNhNTg0ZTA1YzZmY2NlMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgOyMvuCOl2dXVbBL5Im0b7ISxoD ET9I6lOqcRJBobriMyENQ0K958k2xxeycossvxdpwf68BQvvkrcH9cm6t2Rw40gk LGOi2YGpykLnJWLTAzXKzfh8vcxepr8YOyXmRhX3OjWeZv/AhroXPNnh35G9wy/J ej2Em/cQB+tgkl+zDxDu1CLbNjAip+PHh562Ud/c9PYwO6g1IYUsYVmtU3NLG9xc sJ2Hq/EaZUvKHZzyQu5mB1SaTwhJnqe8y0c5XkL0KPlw2nNXVlwzYj/5lGVzPuqP bxZp8leoX+gBHoEMO7Ezl9coyuY36bnpTOQhj6VFNzCaj48r4QFVbEFTGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2OuorQwy73JXvtTKWE4FxvzOM6MB8GA1UdIwQY MBaAFOfDQVvfHAFK4cGOfP0zxW8Bj+7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThOQlc5OGNBVXJod1k1OF9UUEZid0dQN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jY2I1NmYtZGQwNS00NjE2LWE1ZjEt NTYzMjQ2NjhhOTY0LzEvclk2Nml0RERMdmNsZS0xTXBZVGdYR19NNHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jY2I1NmYtZGQwNS00NjE2LWE1ZjEtNTYzMjQ2NjhhOTY0 LzEvNThOQlc5OGNBVXJod1k1OF9UUEZid0dQN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSIEMA0G CSqGSIb3DQEBCwUAA4IBAQAY+gE2Tx+aGSv3MCExZLFviUCI8Dn/PBcgsKN/xcC9 YEA8TgSmGqb1d5mCgh20mXULDyKOfTbNl/ARmLvFP+3H7ARFWNdb7KAu4DGCmcse +I5YTNWwDW2pJI3UoNQoWfb1OcXN9h8Pf/8Eh+qKhvuf6lloePx3/H9RuSafOh8z zVdMqjX2X5hUWR/pkGz45iUsTAJVAmBQIzJjky53N/rbuiQZLNKz7wYkzkgFE21m Kx/p7B38JwtWk2vzJUPcKJwvZmsq7eNU7vixkmwJXXoKXqKIWPHdH6ZryBavsk66 GY9ZiTJ1Btp/JZzZ4oPEwFMQFBvxNtTzJ7zU7eCmJcQ/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:15 2026 by rpki-client