This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/yc6fB0dTyEp0nOMNxIt14wYewvg.roa File: yc6fB0dTyEp0nOMNxIt14wYewvg.roa (raw, json) Hash identifier: q9oC20lhVIuMqPVEpkCEXpIKxa5TMW49W8VfYHcjYb0= Subject key identifier: C9:CE:9F:07:47:53:C8:4A:74:9C:E3:0D:C4:8B:75:E3:06:1E:C2:F8 Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488 Certificate serial: 019B7EA6E36CC92B985DA9C504700F69A5E8 Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/yc6fB0dTyEp0nOMNxIt14wYewvg.roa Signing time: Fri 02 Jan 2026 12:20:25 +0000 ROA not before: Fri 02 Jan 2026 12:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205305 IP address blocks: 95.181.196.0/24 maxlen: 24 95.181.197.0/24 maxlen: 24 2a01:ba80:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e3:6c:c9:2b:98:5d:a9:c5:04:70:0f:69:a5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488 Validity Not Before: Jan 2 12:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9ce9f074753c84a749ce30dc48b75e3061ec2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:65:ac:99:db:9d:f6:71:f6:27:c7:40:57:75: 8f:88:27:4d:ff:8e:9b:47:01:a6:b8:3d:69:bb:8f: df:f8:dc:ce:8d:28:d0:bf:a2:e5:af:f5:ea:2a:e0: 99:2e:f5:63:38:d4:65:df:38:0a:2b:43:81:d7:b1: 23:ee:8d:2b:f7:55:7f:2c:f3:98:6e:cf:74:18:90: ad:a2:ad:4f:0b:66:2f:c1:41:dd:4d:e2:58:af:c7: 45:3c:ee:3b:bc:45:b2:d5:83:87:2b:2b:3f:79:86: 95:11:80:75:3b:19:d1:c6:ec:03:b7:65:aa:cd:ee: b0:b6:38:36:27:0e:57:52:a9:07:14:91:66:69:ee: 5d:c9:2f:ef:26:8e:aa:f7:1b:23:00:86:43:a3:18: 02:64:49:61:d8:3d:11:29:8d:7c:25:f6:ff:26:74: f5:7c:ef:5d:bf:bb:2f:b1:c6:c5:67:61:7e:72:36: b6:9c:a4:41:fa:d4:88:8c:be:46:38:d8:1a:71:81: d5:3c:fc:76:53:02:f8:31:b0:e5:8e:67:3f:cb:f6: fb:f7:b9:3c:8a:57:f9:7b:d8:b8:1b:60:fb:35:07: e2:c2:5a:22:b4:3b:42:ff:6f:e3:82:e7:80:40:15: 44:23:fb:0d:8a:57:5d:45:75:62:62:8e:d1:6e:a7: 65:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CE:9F:07:47:53:C8:4A:74:9C:E3:0D:C4:8B:75:E3:06:1E:C2:F8 X509v3 Authority Key Identifier: keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/yc6fB0dTyEp0nOMNxIt14wYewvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.196.0/23 IPv6: 2a01:ba80:f::/48 Signature Algorithm: sha256WithRSAEncryption 2f:5b:8a:3f:e3:4a:9a:f3:c6:e7:5c:dd:ed:a9:e8:59:57:a6: 9f:72:d7:f1:1f:2d:f4:19:85:3e:c5:7a:8a:85:cb:33:e9:13: c8:f4:81:a4:4d:f3:17:03:38:84:00:6d:d3:d2:b6:db:ca:6c: 5c:fa:99:94:f1:c8:d5:1e:a5:6c:3f:fd:f2:f9:c7:1c:d2:f2: cc:1f:10:15:19:ab:48:a6:de:18:04:b3:81:28:2b:74:69:c6: aa:a2:34:1c:73:2a:05:7f:98:2b:f0:88:57:ff:47:a8:31:d1: 94:b9:9f:ea:ba:e3:5b:30:33:5a:2e:28:8e:3c:61:14:6d:45: 3c:f4:4c:ce:ce:f9:d2:ed:4f:7d:3c:c6:2d:e3:ee:e5:16:8b: 9b:96:c9:a8:24:83:77:7c:54:69:7c:9d:ad:20:af:77:2c:8e: f9:17:bf:cf:78:3d:19:fa:4b:2b:a7:cb:f6:25:b7:e7:d1:a8: 4f:1f:e4:69:9c:7d:17:c7:76:ce:18:e1:70:1a:f1:16:d1:71: 46:57:43:fe:9d:eb:53:c9:e9:e7:bd:c1:2e:5d:6b:6a:92:dc: 41:86:7b:9f:26:c8:50:64:99:d7:93:a7:7f:0a:2a:47:77:89: 07:f0:35:6f:8b:04:c9:01:c9:f4:7a:08:c0:b8:68:eb:b5:55: 8f:7e:df:a2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+puNsySuYXanFBHAPaaXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZGM1M2QxZGU3YTJlZjdlYjJiOTBjODA5MTU1NDQxNDAw NDI0ODgwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWNlOWYwNzQ3NTNjODRhNzQ5Y2UzMGRjNDhiNzVlMzA2MWVjMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GWsmdud9nH2J8dAV3WPiCdN/46b RwGmuD1pu4/f+NzOjSjQv6Llr/XqKuCZLvVjONRl3zgKK0OB17Ej7o0r91V/LPOY bs90GJCtoq1PC2YvwUHdTeJYr8dFPO47vEWy1YOHKys/eYaVEYB1OxnRxuwDt2Wq ze6wtjg2Jw5XUqkHFJFmae5dyS/vJo6q9xsjAIZDoxgCZElh2D0RKY18Jfb/JnT1 fO9dv7svscbFZ2F+cja2nKRB+tSIjL5GONgacYHVPPx2UwL4MbDljmc/y/b797k8 ilf5e9i4G2D7NQfiwloitDtC/2/jgueAQBVEI/sNilddRXViYo7RbqdlQQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMnOnwdHU8hKdJzjDcSLdeMGHsL4MB8GA1UdIwQY MBaAFB3cU9Heei736yuQyAkVVEFABCSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEt NDg2NzFmYjdkMzgwLzEveWM2ZkIwZFR5RXAwbk9NTnhJdDE0d1lld3ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEtNDg2NzFmYjdkMzgw LzEvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBX7XEMA8E AgACMAkDBwAqAbqAAA8wDQYJKoZIhvcNAQELBQADggEBAC9bij/jSprzxudc3e2p 6FlXpp9y1/EfLfQZhT7FeoqFyzPpE8j0gaRN8xcDOIQAbdPSttvKbFz6mZTxyNUe pWw//fL5xxzS8swfEBUZq0im3hgEs4EoK3RpxqqiNBxzKgV/mCvwiFf/R6gx0ZS5 n+q641swM1ouKI48YRRtRTz0TM7O+dLtT308xi3j7uUWi5uWyagkg3d8VGl8na0g r3csjvkXv894PRn6Syuny/Ylt+fRqE8f5GmcfRfHds4Y4XAa8RbRcUZXQ/6d61PJ 6ee9wS5da2qS3EGGe58myFBkmdeTp38KKkd3iQfwNW+LBMkByfR6CMC4aOu1VY9+ 36I= -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:40 2026 by rpki-client