This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa File: Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa (raw, json) Hash identifier: uwh0eGpdwABlDZD41+Scf8Ln/xjqhnaIPzab/PqpacI= Subject key identifier: 62:DD:55:70:21:23:9A:54:03:28:A7:6C:9A:51:7D:34:D0:80:39:5A Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773 Certificate serial: 019B77C6F54536CD2A23996C667DB62D030D Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44919 IP address blocks: 188.92.144.0/21 maxlen: 24 193.46.73.0/24 maxlen: 24 2a02:d58::/29 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f5:45:36:cd:2a:23:99:6c:66:7d:b6:2d:03:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62dd557021239a540328a76c9a517d34d080395a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:66:76:57:f8:0b:76:57:57:10:e9:84:19: c5:85:03:a0:d3:62:8b:c7:1c:60:b5:02:ec:fd:f7: 80:0a:b7:2c:00:bf:12:a8:bf:3a:78:77:e3:32:92: 55:ad:4b:7b:e2:98:ac:c4:f6:2e:0c:ae:ff:05:06: 3a:51:a5:d2:58:c2:04:d3:4a:71:21:6b:3e:b7:4c: d7:66:a7:f6:38:59:37:5e:97:3c:36:f4:06:fc:ba: 9c:cf:cb:bd:27:3c:4c:3a:b5:45:ab:2b:97:b5:26: 1c:fa:c1:0a:d6:ec:fc:1a:a6:17:00:c0:4d:a6:c6: a9:33:bc:d7:34:ab:47:6d:c9:71:3d:41:01:61:55: f3:a6:ca:85:83:87:63:8b:fd:6b:16:8b:ac:63:db: 58:50:6c:f3:89:54:9f:42:dc:b8:81:09:e8:fa:72: b0:0b:8a:77:de:be:3c:29:31:cb:71:5b:1f:6a:47: 52:fc:91:17:72:55:53:84:00:2b:84:44:ec:36:02: ae:4f:18:48:57:a1:70:0a:15:05:ce:c2:a5:f4:cd: 94:25:5e:89:73:79:45:2c:57:e0:63:d1:9a:c7:d1: d8:cd:c2:1a:60:05:e4:41:39:8b:07:21:56:46:60: dc:a1:bc:f3:1e:37:ff:3a:b5:24:46:6a:b1:40:f3: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DD:55:70:21:23:9A:54:03:28:A7:6C:9A:51:7D:34:D0:80:39:5A X509v3 Authority Key Identifier: keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.92.144.0/21 193.46.73.0/24 IPv6: 2a02:d58::/29 Signature Algorithm: sha256WithRSAEncryption 4a:d8:a0:b0:16:01:0f:fd:ce:e2:e6:d2:24:d7:8c:ee:8b:f3: d0:a4:c8:e6:62:cf:04:ee:03:2e:3e:4a:02:ab:5d:f0:dc:fc: cb:f0:29:f3:11:fb:5c:13:87:d1:d2:17:f6:c1:bc:0d:7a:12: 39:8e:8b:a6:34:d7:a0:b6:bb:47:e0:cc:74:4c:c5:49:2c:ed: 38:ab:d5:86:2c:f3:99:7a:6b:bc:34:ef:87:c3:77:a4:2e:a7: 4c:d6:42:22:7a:5b:90:e3:61:f1:3c:48:5c:68:0f:cd:68:92: 35:bc:24:aa:70:40:fd:97:49:01:1f:bb:7c:91:c8:6b:e8:52: 76:63:5e:13:27:19:e2:eb:42:a5:c8:e3:36:3d:d3:51:44:eb: 53:1d:04:43:2d:ab:b2:28:56:24:1c:4a:53:74:4e:68:1c:a2: 9e:b2:ee:03:7d:09:7f:1f:63:0e:22:b3:76:84:2c:8b:f0:82: 14:3c:e7:8e:6d:93:18:be:c9:bf:1e:c4:12:43:db:ce:9a:97: de:ec:b0:f1:0f:f0:d5:95:7d:57:b7:9a:40:67:3f:d3:8d:53: 95:17:8c:17:1d:37:fe:f7:d2:3b:fd:cb:a5:46:9b:59:9b:2d: c8:18:da:64:2b:cd:a4:09:92:81:ba:2b:30:68:13:23:50:b3: 7d:b3:c3:e2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xvVFNs0qI5lsZn22LQMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGNmYWJlNDdlOTI4NWY2NWYxZjJkNjg2YmFhZjE1Yjhi NDE3NzMwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmRkNTU3MDIxMjM5YTU0MDMyOGE3NmM5YTUxN2QzNGQwODAzOTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS9mdlf4C3ZXVxDphBnFhQOg02KL xxxgtQLs/feACrcsAL8SqL86eHfjMpJVrUt74pisxPYuDK7/BQY6UaXSWMIE00px IWs+t0zXZqf2OFk3Xpc8NvQG/Lqcz8u9JzxMOrVFqyuXtSYc+sEK1uz8GqYXAMBN psapM7zXNKtHbclxPUEBYVXzpsqFg4dji/1rFousY9tYUGzziVSfQty4gQno+nKw C4p33r48KTHLcVsfakdS/JEXclVThAArhETsNgKuTxhIV6FwChUFzsKl9M2UJV6J c3lFLFfgY9Gax9HYzcIaYAXkQTmLByFWRmDcobzzHjf/OrUkRmqxQPP8twIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGLdVXAhI5pUAyinbJpRfTTQgDlaMB8GA1UdIwQY MBaAFAtM+r5H6ShfZfHy1oa6rxW4tBdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDct NjgwNmUzZDRjZTRmLzEvWXQxVmNDRWptbFFES0tkc21sRjlOTkNBT1ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDctNjgwNmUzZDRjZTRm LzEvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDvFyQAwQA wS5JMA0EAgACMAcDBQMqAg1YMA0GCSqGSIb3DQEBCwUAA4IBAQBK2KCwFgEP/c7i 5tIk14zui/PQpMjmYs8E7gMuPkoCq13w3PzL8CnzEftcE4fR0hf2wbwNehI5joum NNegtrtH4Mx0TMVJLO04q9WGLPOZemu8NO+Hw3ekLqdM1kIieluQ42HxPEhcaA/N aJI1vCSqcED9l0kBH7t8kchr6FJ2Y14TJxni60KlyOM2PdNRROtTHQRDLauyKFYk HEpTdE5oHKKesu4DfQl/H2MOIrN2hCyL8IIUPOeObZMYvsm/HsQSQ9vOmpfe7LDx D/DVlX1Xt5pAZz/TjVOVF4wXHTf+99I7/culRptZmy3IGNpkK82kCZKBuiswaBMj ULN9s8Pi -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:40 2026 by rpki-client