This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/YP7bPwhKGVXsKKqQqu7mNp-ACXE.roa File: YP7bPwhKGVXsKKqQqu7mNp-ACXE.roa (raw, json) Hash identifier: 2GiCR9DrlMnPAIy8JqmZChy4i3F7srvzAZEvAEhTiWk= Subject key identifier: 60:FE:DB:3F:08:4A:19:55:EC:28:AA:90:AA:EE:E6:36:9F:80:09:71 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C12326629BD7DF7E03CC956B806102B Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/YP7bPwhKGVXsKKqQqu7mNp-ACXE.roa Signing time: Fri 02 Jan 2026 00:18:45 +0000 ROA not before: Fri 02 Jan 2026 00:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13102 IP address blocks: 194.27.149.0/24 maxlen: 24 194.27.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:32:66:29:bd:7d:f7:e0:3c:c9:56:b8:06:10:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60fedb3f084a1955ec28aa90aaeee6369f800971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:29:5f:91:19:bf:9a:2c:51:a0:7d:ee:0d: 1d:cd:e0:67:d1:08:0d:40:ce:97:f3:98:d4:31:05: b7:41:ef:b5:79:e2:94:fc:af:07:ea:9c:09:bd:25: 7b:0a:46:c7:c2:21:20:73:54:a8:c5:6e:45:6f:81: b2:be:90:47:fe:68:de:1f:67:2e:24:06:7c:ca:f0: d1:3d:65:4b:12:ef:e3:e8:ce:c5:76:ef:c4:e4:e6: 5c:a1:fe:53:e5:06:ce:7c:a6:89:d1:15:b9:98:d8: ba:4e:6c:af:aa:67:0a:e6:ca:4e:b4:e5:5c:fd:65: 59:d5:3d:7a:5f:1c:0e:ab:0f:e4:a2:48:b7:3e:bc: 2b:d2:5f:2a:60:67:08:f2:cd:74:06:fe:6e:b1:40: e7:3a:f1:ac:32:39:4d:b0:82:3b:82:14:dc:b0:28: f0:c2:be:d5:32:38:ff:b7:2d:80:1f:39:57:98:7b: 81:a8:fe:28:c4:57:2b:3a:15:6e:23:38:02:15:9f: ad:d1:c0:0c:3d:05:54:6f:68:cd:f5:dc:2e:63:00: 56:e8:27:3e:01:fa:01:90:20:fa:05:07:47:32:2c: 22:87:b6:f5:42:13:fa:a4:cb:eb:43:90:c9:9d:41: 04:8d:16:c9:86:a1:19:fa:29:ad:df:92:64:1b:96: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FE:DB:3F:08:4A:19:55:EC:28:AA:90:AA:EE:E6:36:9F:80:09:71 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/YP7bPwhKGVXsKKqQqu7mNp-ACXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.27.149.0-194.27.150.255 Signature Algorithm: sha256WithRSAEncryption 3b:f3:ef:f3:91:03:c2:2e:65:bd:59:da:74:1f:18:b8:d5:72: 0d:6a:67:1d:2c:ce:2e:ae:c4:a4:f0:c6:2a:b0:97:dd:36:df: 46:23:5c:93:59:af:63:1e:ed:9a:b4:82:f0:b0:b8:ee:e3:e9: 8d:95:89:a6:88:ef:25:8a:db:02:7e:73:b1:32:46:e7:b1:6c: d1:e8:65:67:fc:9f:7f:06:ba:21:60:57:9c:f4:b7:87:f4:1b: 00:eb:a7:1b:fd:59:33:67:b5:40:09:f9:83:2e:12:1d:96:2c: 44:f8:92:23:f9:9f:69:e7:bf:0e:32:52:f6:e9:c7:0b:27:ec: 4d:11:51:3a:eb:a4:f8:05:fe:e1:bb:d4:29:97:90:47:8f:6d: aa:06:65:14:4c:49:7e:9a:81:6a:66:d4:58:e0:d2:55:49:f5: 0a:a8:c7:3f:85:ac:f5:c0:1b:88:e1:18:51:6f:8e:02:7e:38: 32:c0:0a:00:95:e5:16:b7:73:66:c9:bc:0d:95:4f:5a:80:fd: 51:ef:0f:ee:3a:9e:b9:0e:2b:d1:5d:d5:0d:cb:b2:63:9a:95: 19:39:e1:d4:c2:c7:f0:58:79:b8:07:2b:6e:95:6f:2a:57:a4: d3:8b:ec:35:9a:1f:cb:82:ca:95:88:2e:87:f1:03:b1:c0:20: 41:f6:43:d3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EjJmKb199+A8yVa4BhArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGZlZGIzZjA4NGExOTU1ZWMyOGFhOTBhYWVlZTYzNjlmODAwOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo4pX5EZv5osUaB97g0dzeBn0QgN QM6X85jUMQW3Qe+1eeKU/K8H6pwJvSV7CkbHwiEgc1SoxW5Fb4GyvpBH/mjeH2cu JAZ8yvDRPWVLEu/j6M7Fdu/E5OZcof5T5QbOfKaJ0RW5mNi6TmyvqmcK5spOtOVc /WVZ1T16XxwOqw/koki3Prwr0l8qYGcI8s10Bv5usUDnOvGsMjlNsII7ghTcsCjw wr7VMjj/ty2AHzlXmHuBqP4oxFcrOhVuIzgCFZ+t0cAMPQVUb2jN9dwuYwBW6Cc+ AfoBkCD6BQdHMiwih7b1QhP6pMvrQ5DJnUEEjRbJhqEZ+imt35JkG5ZNJwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGD+2z8IShlV7CiqkKru5jafgAlxMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvWVA3YlB3aEtHVlhzS0txUXF1N21OcC1BQ1hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCG5UD BADCG5YwDQYJKoZIhvcNAQELBQADggEBADvz7/ORA8IuZb1Z2nQfGLjVcg1qZx0s zi6uxKTwxiqwl90230YjXJNZr2Me7Zq0gvCwuO7j6Y2ViaaI7yWK2wJ+c7EyRuex bNHoZWf8n38GuiFgV5z0t4f0GwDrpxv9WTNntUAJ+YMuEh2WLET4kiP5n2nnvw4y Uvbpxwsn7E0RUTrrpPgF/uG71CmXkEePbaoGZRRMSX6agWpm1Fjg0lVJ9Qqoxz+F rPXAG4jhGFFvjgJ+ODLACgCV5Ra3c2bJvA2VT1qA/VHvD+46nrkOK9Fd1Q3LsmOa lRk54dTCx/BYebgHK26VbypXpNOL7DWaH8uCypWILofxA7HAIEH2Q9M= -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:58 2026 by rpki-client