This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa File: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (raw, json) Hash identifier: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o= Subject key identifier: 62:82:59:F5:EA:68:A2:7A:B0:88:8E:42:CF:F2:18:27:11:42:D0:A4 Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Certificate serial: 019B79EC2B338492376C4F5F1C285B08380F Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa Signing time: Thu 01 Jan 2026 14:17:59 +0000 ROA not before: Thu 01 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15719 IP address blocks: 194.152.232.0/23 maxlen: 23 194.152.232.0/24 maxlen: 24 194.152.233.0/24 maxlen: 24 195.29.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2b:33:84:92:37:6c:4f:5f:1c:28:5b:08:38:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=628259f5ea68a27ab0888e42cff218271142d0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:fb:2d:df:73:3b:71:c4:22:0e:fb:0e:17: c6:1c:3a:80:b4:6c:2c:ae:13:87:43:da:80:c9:32: 76:d6:45:70:85:20:f1:8c:1e:92:fa:c9:61:49:3a: 3d:d0:a4:3f:31:e2:86:ef:71:0c:ce:bb:04:4a:e0: b0:00:bc:68:9b:65:5c:e3:e8:eb:b1:6f:94:28:e5: 27:ec:4f:dc:1d:aa:64:96:01:0b:6b:33:46:3b:43: f8:c1:4e:3f:1a:44:7e:b9:57:a7:27:07:16:d6:61: 85:b3:24:f2:1a:d6:63:42:ad:28:70:10:d0:64:42: 86:71:26:d5:cd:35:24:eb:14:2c:5a:24:87:08:b8: 77:ba:27:c1:f1:9c:b0:02:ed:75:fc:06:40:77:8b: 02:19:34:a6:45:b4:ac:ee:87:15:1c:39:61:f3:07: bd:5b:ac:ad:90:b1:3e:c4:47:ff:f8:f8:12:b1:da: ae:83:18:98:cf:b5:a5:26:6f:4d:99:bc:ad:56:94: 52:a9:4f:79:0e:60:17:46:c7:d0:52:e9:ce:d0:25: c3:ea:31:76:5b:fd:18:b9:6e:b4:b1:c1:31:61:8f: ff:c9:6d:51:73:4d:89:28:77:d5:86:c6:10:61:38: 4c:e0:97:a8:82:c5:f2:e3:92:3b:d5:ee:47:3d:d1: d4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:59:F5:EA:68:A2:7A:B0:88:8E:42:CF:F2:18:27:11:42:D0:A4 X509v3 Authority Key Identifier: keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.152.232.0/23 195.29.139.0/24 Signature Algorithm: sha256WithRSAEncryption 24:8f:ea:cd:d4:51:1c:fd:a6:c1:fd:f2:cc:de:57:4d:f8:0d: c3:95:1b:2d:b1:83:5a:34:a9:61:49:62:c9:af:5b:6c:c6:0d: 89:12:77:b6:27:29:a2:09:bf:ab:f3:6c:e9:4c:ca:de:d5:fb: 45:64:84:bc:19:68:9c:ef:43:a7:cb:21:41:06:57:5b:cb:25: 79:88:66:4e:52:fa:ef:ea:40:ad:c3:e4:5e:56:60:38:3a:d1: de:80:cc:fe:d2:b7:19:7c:2e:5b:67:90:2c:10:4a:44:11:fc: d8:35:55:08:42:ed:a1:24:35:db:36:3f:07:b8:1c:82:99:7a: dd:52:44:84:cf:0c:a8:e7:29:66:66:1d:ea:5a:8c:9c:e9:a7: 23:9c:e3:99:f5:5e:fa:60:12:00:86:22:17:a9:4d:4e:47:43: b4:53:20:f1:c2:80:d1:81:c6:ca:dd:5a:9e:06:b5:99:ce:35: 1c:ff:b6:78:68:c6:d0:b4:42:88:d0:99:6a:c0:7b:b6:13:57: b8:31:2b:70:3a:8a:5c:29:f5:bd:7d:85:f6:ff:37:75:1a:fe: dc:82:10:e1:2e:fb:79:5f:ea:1c:fa:0b:68:75:56:01:ee:d9: bf:00:47:96:6b:a3:e2:d5:0d:5c:f2:99:ac:54:70:15:d3:89: 37:b1:79:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57CszhJI3bE9fHChbCDgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5 YzlhMjMwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjgyNTlmNWVhNjhhMjdhYjA4ODhlNDJjZmYyMTgyNzExNDJkMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsX7Ld9zO3HEIg77DhfGHDqAtGws rhOHQ9qAyTJ21kVwhSDxjB6S+slhSTo90KQ/MeKG73EMzrsESuCwALxom2Vc4+jr sW+UKOUn7E/cHapklgELazNGO0P4wU4/GkR+uVenJwcW1mGFsyTyGtZjQq0ocBDQ ZEKGcSbVzTUk6xQsWiSHCLh3uifB8ZywAu11/AZAd4sCGTSmRbSs7ocVHDlh8we9 W6ytkLE+xEf/+PgSsdqugxiYz7WlJm9NmbytVpRSqU95DmAXRsfQUunO0CXD6jF2 W/0YuW60scExYY//yW1Rc02JKHfVhsYQYThM4JeogsXy45I71e5HPdHUaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGKCWfXqaKJ6sIiOQs/yGCcRQtCkMB8GA1UdIwQY MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt YzAxZjgwYTFjODA1LzEvWW9KWjllcG9vbnF3aUk1Q3pfSVlKeEZDMEtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1 LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwpjoAwQA wx2LMA0GCSqGSIb3DQEBCwUAA4IBAQAkj+rN1FEc/abB/fLM3ldN+A3DlRstsYNa NKlhSWLJr1tsxg2JEne2JymiCb+r82zpTMre1ftFZIS8GWic70OnyyFBBldbyyV5 iGZOUvrv6kCtw+ReVmA4OtHegMz+0rcZfC5bZ5AsEEpEEfzYNVUIQu2hJDXbNj8H uByCmXrdUkSEzwyo5ylmZh3qWoyc6acjnOOZ9V76YBIAhiIXqU1OR0O0UyDxwoDR gcbK3VqeBrWZzjUc/7Z4aMbQtEKI0JlqwHu2E1e4MStwOopcKfW9fYX2/zd1Gv7c ghDhLvt5X+oc+gtodVYB7tm/AEeWa6Pi1Q1c8pmsVHAV04k3sXnp -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:30 2026 by rpki-client