This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa File: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (raw, json) Hash identifier: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE= Subject key identifier: 61:6B:01:71:78:2C:3B:C8:19:16:E6:40:81:7A:9C:F2:64:33:20:F4 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B6AB9978D2B780A990D79FD6539CD Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa Signing time: Fri 02 Jan 2026 06:18:21 +0000 ROA not before: Fri 02 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207241 IP address blocks: 193.200.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6a:b9:97:8d:2b:78:0a:99:0d:79:fd:65:39:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=616b0171782c3bc81916e640817a9cf2643320f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:19:36:48:08:9d:a3:ce:6a:4b:15:c8:9d: bd:ef:d5:60:f9:ff:a0:82:78:9a:b8:fd:96:3c:d7: 39:5b:e1:f2:b6:bc:f1:7a:96:df:5b:25:03:4b:b7: 4c:a9:5b:07:4d:7b:46:90:de:5d:1a:ca:d6:89:4a: 58:a0:99:c2:aa:f9:33:da:c3:7f:9b:d4:c9:cc:6e: 3c:e1:1f:03:31:fe:77:8a:cd:53:95:73:2e:fe:c9: b2:dd:d5:ef:06:8f:80:05:21:c1:9e:e6:69:1e:ea: 3a:74:1e:67:50:13:b9:ee:6f:fa:6d:8a:0d:03:47: 9b:43:ff:28:aa:19:03:5b:60:5d:f3:d9:df:8d:5f: da:ce:0e:03:5c:d6:8f:6f:9d:76:b2:18:3c:5d:01: 16:2b:26:bd:80:7a:ef:24:b6:50:84:f1:ca:24:a7: 63:ec:94:1b:97:f0:42:55:69:7c:3d:5f:e3:c0:64: dd:ab:69:48:d6:30:06:fa:06:dd:3f:ad:41:2f:6f: 5e:96:bd:2b:45:12:6b:80:1e:aa:35:85:57:01:fb: 70:2d:23:c0:d4:4a:33:c2:6b:67:01:e2:90:eb:7c: 6c:f2:42:8b:cc:18:b9:82:5f:4e:e3:0f:e5:ec:b2: f5:e4:f9:7c:5f:83:01:07:6d:5b:70:dd:d9:f3:d4: b0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6B:01:71:78:2C:3B:C8:19:16:E6:40:81:7A:9C:F2:64:33:20:F4 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.181.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:88:b8:24:fc:1e:dc:96:8d:60:d9:14:08:e8:97:13:77:31: 4b:2f:8a:99:86:db:20:5b:b4:9e:5e:77:19:fe:db:6d:31:92: bd:d6:a4:26:9f:63:e1:01:a5:84:65:3b:b2:49:01:45:3b:a2: 66:67:07:52:74:de:2f:b6:6f:19:64:3c:c1:3a:61:b3:cc:06: 96:1d:84:33:7d:43:06:71:57:35:db:92:ac:87:15:8d:09:f5: 7a:74:18:b1:1e:82:df:7f:71:52:d2:5d:87:e3:87:8a:aa:22: af:ed:e3:5a:a6:91:da:b2:2c:e1:ea:a4:b5:57:6a:21:d3:9a: 98:31:ca:a1:ec:9c:dd:50:bf:51:8e:1f:d4:03:09:c7:19:ba: 7a:a8:69:6d:95:75:5f:a7:9b:77:49:21:5e:17:07:b4:48:34: d1:a3:e0:00:bc:53:ad:11:8c:d2:11:d8:23:7b:e3:75:3c:d4: 02:63:d0:b8:c6:cf:d6:7e:d2:29:92:93:c4:e8:6c:b3:dd:28: f3:dd:79:c7:6e:49:ed:9f:f6:e2:81:b9:97:08:80:45:21:a7: a0:ee:cb:4a:04:00:d7:78:5e:b9:86:9e:08:26:ff:65:f1:36: 1f:4f:c3:c2:e1:1c:c1:e4:53:f9:cb:a5:21:96:07:98:88:10: d8:63:5a:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W2q5l40reAqZDXn9ZTnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTZiMDE3MTc4MmMzYmM4MTkxNmU2NDA4MTdhOWNmMjY0MzMyMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/IZNkgInaPOaksVyJ2979Vg+f+g gniauP2WPNc5W+HytrzxepbfWyUDS7dMqVsHTXtGkN5dGsrWiUpYoJnCqvkz2sN/ m9TJzG484R8DMf53is1TlXMu/smy3dXvBo+ABSHBnuZpHuo6dB5nUBO57m/6bYoN A0ebQ/8oqhkDW2Bd89nfjV/azg4DXNaPb512shg8XQEWKya9gHrvJLZQhPHKJKdj 7JQbl/BCVWl8PV/jwGTdq2lI1jAG+gbdP61BL29elr0rRRJrgB6qNYVXAftwLSPA 1EozwmtnAeKQ63xs8kKLzBi5gl9O4w/l7LL15Pl8X4MBB21bcN3Z89SwtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFrAXF4LDvIGRbmQIF6nPJkMyD0MB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvWVdzQmNYZ3NPOGdaRnVaQWdYcWM4bVF6SVBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwci1MA0G CSqGSIb3DQEBCwUAA4IBAQBPiLgk/B7clo1g2RQI6JcTdzFLL4qZhtsgW7SeXncZ /tttMZK91qQmn2PhAaWEZTuySQFFO6JmZwdSdN4vtm8ZZDzBOmGzzAaWHYQzfUMG cVc125KshxWNCfV6dBixHoLff3FS0l2H44eKqiKv7eNappHasizh6qS1V2oh05qY Mcqh7JzdUL9Rjh/UAwnHGbp6qGltlXVfp5t3SSFeFwe0SDTRo+AAvFOtEYzSEdgj e+N1PNQCY9C4xs/WftIpkpPE6Gyz3Sjz3XnHbkntn/bigbmXCIBFIaeg7stKBADX eF65hp4IJv9l8TYfT8PC4RzB5FP5y6UhlgeYiBDYY1r0 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:23 2026 by rpki-client