This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa File: yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa (raw, json) Hash identifier: lGR73TawMx4j8TSEDhTCJjGn0TUFsHE7aBJ2N1mIm20= Subject key identifier: C9:9A:40:7E:92:84:F8:68:AD:A5:D4:A5:1D:F0:53:FD:95:37:5C:56 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15C7F25385651E2CBCB6F231BBF5CE Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211191 IP address blocks: 88.214.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c7:f2:53:85:65:1e:2c:bc:b6:f2:31:bb:f5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c99a407e9284f868ada5d4a51df053fd95375c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:12:29:c7:a7:4b:c3:f8:75:72:ef:47:52: 31:8d:4a:dc:02:0c:bf:57:c5:18:7a:c2:d3:a7:5b: 45:ce:08:9c:b0:bd:98:15:fa:c1:52:b0:0d:30:0e: 47:98:e0:06:20:81:8f:51:cd:70:5a:cb:0a:39:a7: 82:17:4b:ee:51:2b:7f:6f:ba:f1:76:e4:93:ed:0e: a4:5a:72:ae:32:0d:1d:d8:14:da:73:3f:bd:2e:ec: c1:3f:90:ec:b6:c1:0a:58:2e:e6:32:e6:e2:60:68: 05:46:e3:d6:37:4b:bf:c8:73:91:09:7c:15:b9:a0: 0d:10:1b:fa:8d:b1:e4:07:13:ed:01:9c:a8:a1:f9: ef:a9:a3:6c:e1:0a:32:3c:73:a3:ae:42:de:00:e3: 98:d7:ac:c2:fd:df:2a:61:79:5d:6e:1a:37:c8:87: f0:d5:e5:93:4b:00:f2:f1:17:ba:2f:73:55:cc:03: 17:88:ae:24:39:fb:a7:cb:2f:5d:d5:fa:e9:ad:b3: eb:a0:48:48:9e:00:22:2b:cf:27:7c:91:f8:9d:de: 8e:64:2f:b7:e3:34:32:4c:31:95:b5:6c:3f:91:4f: 61:26:da:7e:9b:5e:de:11:5c:77:4d:c3:7f:95:e0: 13:9c:8b:08:9e:1a:09:35:d8:99:c5:48:83:3c:1f: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9A:40:7E:92:84:F8:68:AD:A5:D4:A5:1D:F0:53:FD:95:37:5C:56 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.54.0/24 Signature Algorithm: sha256WithRSAEncryption 59:b6:45:9c:be:10:cb:a8:96:76:f4:c2:39:eb:59:69:0b:42: b7:c2:ef:6f:b3:54:71:6e:52:08:f1:37:64:f5:10:c1:e1:d7: c8:c5:dc:db:c3:07:9a:4b:24:7e:0c:be:59:5c:7b:1d:7f:03: 74:b8:f7:b2:eb:76:e8:68:84:c2:1e:96:27:05:34:80:3e:53: 3f:c1:a6:27:00:b8:9a:f0:5c:37:8d:45:bc:f1:a3:11:4e:00: b8:0c:21:dc:9a:6f:92:3d:65:63:a4:0b:82:74:b3:1a:a4:67: aa:69:2a:2c:4f:0d:a7:ac:59:75:77:d1:7f:fa:e3:53:63:2a: 90:df:d6:75:06:27:f7:35:32:13:e5:34:b3:40:68:81:9d:1b: 2e:4d:0e:f4:52:fa:25:ec:b3:ee:c1:02:05:dd:34:91:73:78: 86:e4:b1:b6:fd:25:b5:48:6b:0b:46:d9:78:42:d4:01:8e:a6: ed:23:18:d6:04:98:5c:f7:e3:f3:7f:48:84:67:92:55:82:76: 9c:48:cd:70:f2:41:43:17:af:68:a4:73:2a:d2:69:a4:79:56: e4:e1:23:9d:0a:12:86:b2:3a:e8:fa:a3:b6:62:1c:42:11:28: b9:ad:da:4a:c7:47:66:e0:58:c2:0e:05:79:94:69:f4:dd:51: 18:1e:e3:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcfyU4VlHiy8tvIxu/XOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTlhNDA3ZTkyODRmODY4YWRhNWQ0YTUxZGYwNTNmZDk1Mzc1YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmgSKcenS8P4dXLvR1IxjUrcAgy/ V8UYesLTp1tFzgicsL2YFfrBUrANMA5HmOAGIIGPUc1wWssKOaeCF0vuUSt/b7rx duST7Q6kWnKuMg0d2BTacz+9LuzBP5DstsEKWC7mMubiYGgFRuPWN0u/yHORCXwV uaANEBv6jbHkBxPtAZyoofnvqaNs4QoyPHOjrkLeAOOY16zC/d8qYXldbho3yIfw 1eWTSwDy8Re6L3NVzAMXiK4kOfunyy9d1frprbProEhIngAiK88nfJH4nd6OZC+3 4zQyTDGVtWw/kU9hJtp+m17eEVx3TcN/leATnIsInhoJNdiZxUiDPB9i+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmaQH6ShPhoraXUpR3wU/2VN1xWMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEveVpwQWZwS0UtR2l0cGRTbEhmQlRfWlUzWEZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNY2MA0G CSqGSIb3DQEBCwUAA4IBAQBZtkWcvhDLqJZ29MI561lpC0K3wu9vs1RxblII8Tdk 9RDB4dfIxdzbwweaSyR+DL5ZXHsdfwN0uPey63boaITCHpYnBTSAPlM/waYnALia 8Fw3jUW88aMRTgC4DCHcmm+SPWVjpAuCdLMapGeqaSosTw2nrFl1d9F/+uNTYyqQ 39Z1Bif3NTIT5TSzQGiBnRsuTQ70Uvol7LPuwQIF3TSRc3iG5LG2/SW1SGsLRtl4 QtQBjqbtIxjWBJhc9+Pzf0iEZ5JVgnacSM1w8kFDF69opHMq0mmkeVbk4SOdChKG sjro+qO2YhxCESi5rdpKx0dm4FjCDgV5lGn03VEYHuNB -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:59 2026 by rpki-client