This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/ywVR7woUIzneTMtjfuoirWk196k.roa File: ywVR7woUIzneTMtjfuoirWk196k.roa (raw, json) Hash identifier: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg= Subject key identifier: CB:05:51:EF:0A:14:23:39:DE:4C:CB:63:7E:EA:22:AD:69:35:F7:A9 Certificate issuer: /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea Certificate serial: 019B7E38AA0FEF4B02EDC73F67FED76E1466 Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/ywVR7woUIzneTMtjfuoirWk196k.roa Signing time: Fri 02 Jan 2026 10:20:01 +0000 ROA not before: Fri 02 Jan 2026 10:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205268 IP address blocks: 195.90.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:aa:0f:ef:4b:02:ed:c7:3f:67:fe:d7:6e:14:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea Validity Not Before: Jan 2 10:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb0551ef0a142339de4ccb637eea22ad6935f7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:86:5d:a9:4e:4b:dd:ad:5e:24:9e:cc:ff:e2: 6a:40:cb:d7:a8:43:88:47:e3:9d:01:fb:91:76:f2: 58:cd:02:ec:c7:5e:45:38:71:fc:fe:80:8a:88:1c: 8f:ae:34:1f:42:5b:21:2c:f3:45:33:5c:ca:b5:83: 16:e1:4e:9f:18:82:ba:40:b2:95:7e:bf:05:b8:68: 45:ec:05:3a:33:c8:2e:80:6a:cd:75:a4:b0:1f:fc: 2b:cb:da:ab:c3:a1:1d:d2:7b:63:a5:e0:b6:19:3b: 24:c4:e7:be:73:56:a3:25:95:de:00:97:d9:f2:fd: fc:3f:8b:32:2c:1c:7a:47:78:b3:40:67:ca:0f:09: 55:e4:9f:df:11:ac:79:9a:ce:44:87:91:eb:23:b0: a4:e5:21:db:25:98:e0:22:c5:d6:2d:16:a6:90:b5: e3:98:37:2b:14:70:8c:2e:b3:35:98:19:8f:21:a5: 67:37:bc:87:90:6d:c6:40:5e:2a:1d:d6:2f:2d:a3: f9:b3:cb:04:72:a2:59:75:93:80:a0:8d:03:7c:29: c1:25:78:25:1c:f7:9b:eb:a5:14:d1:95:a9:46:dd: 07:0c:7c:73:19:02:e3:a8:62:6c:eb:0a:00:c7:bd: 28:25:53:f6:c7:05:93:df:97:23:93:76:7c:de:ba: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:05:51:EF:0A:14:23:39:DE:4C:CB:63:7E:EA:22:AD:69:35:F7:A9 X509v3 Authority Key Identifier: keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/ywVR7woUIzneTMtjfuoirWk196k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.90.103.0/24 Signature Algorithm: sha256WithRSAEncryption 92:3c:c8:1c:7a:c0:a1:e0:d7:3d:c8:57:ff:5f:3a:88:ab:4d: 60:bd:f3:31:05:37:c0:21:f9:c4:a2:87:52:de:2f:96:7d:71: e4:e5:29:cd:70:b7:ef:cb:40:86:a9:72:93:0f:e1:af:93:30: 4f:b6:08:65:f5:b7:22:c5:b7:4c:c0:e3:6d:e4:2c:d2:ca:44: 9e:0d:73:f8:8d:51:1b:e2:c5:64:b0:2a:95:b1:71:bf:c7:50: ae:1b:62:be:de:45:c5:29:cb:05:06:81:1f:39:27:1a:d0:bf: 27:01:94:d5:60:98:db:c6:b8:ba:f0:5f:69:e9:80:36:97:d1: a6:e5:e9:77:8a:2c:65:49:76:16:5d:c0:4b:c2:b1:03:87:09: 06:07:62:60:b1:fd:06:6e:a3:36:35:cc:1a:b7:15:6e:f0:23: b6:d8:2c:17:70:da:0c:38:5a:6a:66:bc:05:69:cf:70:71:81: a4:35:1a:d6:ec:06:f0:7f:9c:d9:61:7e:13:29:88:bd:1c:c2: aa:19:e4:99:d6:61:4c:ae:d9:22:97:bf:7f:4b:5d:1a:c3:13: 89:ac:23:dc:2b:b0:23:80:1d:bf:c8:0f:63:f6:33:b8:c5:d4: c4:8c:d0:7d:95:ae:d6:c3:a8:43:e1:9f:02:95:04:65:40:46: 9b:62:de:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKoP70sC7cc/Z/7XbhRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NzZhZTA5YWIxYmM5NGFjZTgzZmE2ZmQzNmFjNTIyODY3 YjkyZWEwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjA1NTFlZjBhMTQyMzM5ZGU0Y2NiNjM3ZWVhMjJhZDY5MzVmN2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IZdqU5L3a1eJJ7M/+JqQMvXqEOI R+OdAfuRdvJYzQLsx15FOHH8/oCKiByPrjQfQlshLPNFM1zKtYMW4U6fGIK6QLKV fr8FuGhF7AU6M8gugGrNdaSwH/wry9qrw6Ed0ntjpeC2GTskxOe+c1ajJZXeAJfZ 8v38P4syLBx6R3izQGfKDwlV5J/fEax5ms5Eh5HrI7Ck5SHbJZjgIsXWLRamkLXj mDcrFHCMLrM1mBmPIaVnN7yHkG3GQF4qHdYvLaP5s8sEcqJZdZOAoI0DfCnBJXgl HPeb66UU0ZWpRt0HDHxzGQLjqGJs6woAx70oJVP2xwWT35cjk3Z83rp03wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMsFUe8KFCM53kzLY37qIq1pNfepMB8GA1UdIwQY MBaAFNd2rgmrG8lKzoP6b9NqxSKGe5LqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYTA5YmItMDFkZS00YmU1LWJjZTEt OTA4NjQ4YTIwYmM4LzEveXdWUjd3b1VJem5lVE10amZ1b2lyV2sxOTZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYTA5YmItMDFkZS00YmU1LWJjZTEtOTA4NjQ4YTIwYmM4 LzEvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1pnMA0G CSqGSIb3DQEBCwUAA4IBAQCSPMgcesCh4Nc9yFf/XzqIq01gvfMxBTfAIfnEoodS 3i+WfXHk5SnNcLfvy0CGqXKTD+GvkzBPtghl9bcixbdMwONt5CzSykSeDXP4jVEb 4sVksCqVsXG/x1CuG2K+3kXFKcsFBoEfOSca0L8nAZTVYJjbxri68F9p6YA2l9Gm 5el3iixlSXYWXcBLwrEDhwkGB2Jgsf0GbqM2NcwatxVu8CO22CwXcNoMOFpqZrwF ac9wcYGkNRrW7Abwf5zZYX4TKYi9HMKqGeSZ1mFMrtkil79/S10awxOJrCPcK7Aj gB2/yA9j9jO4xdTEjNB9la7Ww6hD4Z8ClQRlQEabYt6V -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:24 2026 by rpki-client