This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/SYFy9Ljvj2Lr7aa-htStbRcguPw.roa File: SYFy9Ljvj2Lr7aa-htStbRcguPw.roa (raw, json) Hash identifier: Lptfy7fv2y1tspXhYTvntQY3Ba0mVTLzg9pF8LCcJ2I= Subject key identifier: 49:81:72:F4:B8:EF:8F:62:EB:ED:A6:BE:86:D4:AD:6D:17:20:B8:FC Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C76D4F599EF6FF37547CCB73B0F13F Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/SYFy9Ljvj2Lr7aa-htStbRcguPw.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50222 IP address blocks: 84.204.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6d:4f:59:9e:f6:ff:37:54:7c:cb:73:b0:f1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=498172f4b8ef8f62ebeda6be86d4ad6d1720b8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fa:a4:c7:c1:c7:ac:d7:5b:85:ce:d4:1e:7f: fe:83:28:e5:e6:d6:05:af:f0:54:b3:f4:a9:c8:28: 3c:e9:08:99:30:16:23:e2:17:17:f6:a1:5e:5b:27: 52:59:37:e3:b2:2f:65:62:7b:35:3e:15:5e:67:94: 47:e7:91:77:f9:0b:52:54:f7:f3:8e:fc:45:3b:38: 8e:8c:23:69:59:90:76:b8:e9:68:a2:62:3f:84:84: 98:a7:d6:32:54:96:8d:5b:9a:d7:32:24:a1:55:e5: ad:c6:20:40:a7:f7:c2:fe:1b:aa:e5:1f:ed:d6:7b: 00:f0:5a:df:8b:73:0c:2c:93:c6:d1:1f:e6:77:e1: 1e:1c:33:da:88:b1:32:4a:b4:e8:ce:d6:0b:7a:7b: 8c:79:0e:a0:14:fa:99:7e:95:92:18:ee:05:35:0e: 62:6a:f0:23:04:fd:98:d1:06:bb:25:12:1b:5d:2b: 0f:6a:9b:cd:03:55:c5:29:af:c7:83:2b:96:ff:5d: c2:f7:a6:d0:c1:b4:b1:a6:f0:9f:51:0d:e0:17:ad: 69:c3:f7:ba:34:16:cd:cc:ba:21:28:c8:75:dd:11: e8:0f:ae:eb:84:03:f4:7d:c6:fe:0a:2e:20:01:b9: 09:f7:ca:a0:a5:14:85:17:98:90:0c:9f:77:26:5a: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:81:72:F4:B8:EF:8F:62:EB:ED:A6:BE:86:D4:AD:6D:17:20:B8:FC X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/SYFy9Ljvj2Lr7aa-htStbRcguPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.204.53.0/24 Signature Algorithm: sha256WithRSAEncryption 56:4e:a2:d3:57:b6:fb:02:7a:bd:3e:65:80:f8:48:10:d8:11: 31:9c:ed:04:35:02:d2:0a:3c:48:f7:8f:08:f0:f3:b1:b5:45: e2:89:8d:5e:19:c5:b0:84:da:38:dd:b0:94:56:d1:9f:3f:56: d4:08:26:fc:42:ce:99:84:e4:00:c7:1a:d8:3f:4b:39:31:97: 75:e6:e4:70:84:2c:b2:98:90:4d:b2:02:77:42:7d:5d:a1:f1: 67:51:3d:c5:68:b6:94:64:3d:a6:d6:f7:b2:f3:0c:d7:bf:8b: 54:a9:de:44:55:d3:70:ab:04:b8:71:1b:f4:34:7c:fd:b2:47: 43:cf:18:0e:6a:d9:a7:cb:ee:c6:cc:1b:35:79:0c:97:a3:32: cd:c1:4b:96:df:77:3d:fe:04:1b:64:5b:94:8c:cb:82:ab:e0: 22:5f:c9:46:0a:78:8a:7a:f3:b6:e9:fd:55:aa:25:ff:c6:cd: b4:75:71:e5:a2:e0:be:d8:3b:a9:f8:ce:99:0d:c7:4d:fb:77: dc:71:93:37:9f:a7:bc:95:6f:b5:74:12:85:41:11:77:8f:87: e9:8b:5f:e8:70:10:a5:47:40:28:f9:cc:eb:67:ab:31:1a:be: 4c:25:e1:bd:55:aa:30:c6:78:f5:58:b5:a6:be:e3:fd:a0:57: e6:cd:45:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x21PWZ72/zdUfMtzsPE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTgxNzJmNGI4ZWY4ZjYyZWJlZGE2YmU4NmQ0YWQ2ZDE3MjBiOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/qkx8HHrNdbhc7UHn/+gyjl5tYF r/BUs/SpyCg86QiZMBYj4hcX9qFeWydSWTfjsi9lYns1PhVeZ5RH55F3+QtSVPfz jvxFOziOjCNpWZB2uOloomI/hISYp9YyVJaNW5rXMiShVeWtxiBAp/fC/huq5R/t 1nsA8Frfi3MMLJPG0R/md+EeHDPaiLEySrToztYLenuMeQ6gFPqZfpWSGO4FNQ5i avAjBP2Y0Qa7JRIbXSsPapvNA1XFKa/HgyuW/13C96bQwbSxpvCfUQ3gF61pw/e6 NBbNzLohKMh13RHoD67rhAP0fcb+Ci4gAbkJ98qgpRSFF5iQDJ93JlrWtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEmBcvS4749i6+2mvobUrW0XILj8MB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvU1lGeTlManZqMkxyN2FhLWh0U3RiUmNndVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVMw1MA0G CSqGSIb3DQEBCwUAA4IBAQBWTqLTV7b7Anq9PmWA+EgQ2BExnO0ENQLSCjxI948I 8POxtUXiiY1eGcWwhNo43bCUVtGfP1bUCCb8Qs6ZhOQAxxrYP0s5MZd15uRwhCyy mJBNsgJ3Qn1dofFnUT3FaLaUZD2m1vey8wzXv4tUqd5EVdNwqwS4cRv0NHz9skdD zxgOatmny+7GzBs1eQyXozLNwUuW33c9/gQbZFuUjMuCq+AiX8lGCniKevO26f1V qiX/xs20dXHlouC+2Dup+M6ZDcdN+3fccZM3n6e8lW+1dBKFQRF3j4fpi1/ocBCl R0Ao+czrZ6sxGr5MJeG9Vaowxnj1WLWmvuP9oFfmzUWB -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:03 2026 by rpki-client