This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/yW8TWZLrtFaFqiAuiN0m0gWF_fI.roa File: yW8TWZLrtFaFqiAuiN0m0gWF_fI.roa (raw, json) Hash identifier: 9L+sA1TE/tnPgnqt0eplM+GhjWLDs24P3usFFtq4BoU= Subject key identifier: C9:6F:13:59:92:EB:B4:56:85:AA:20:2E:88:DD:26:D2:05:85:FD:F2 Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067 Certificate serial: 019B7C7F69082B202E527680C04CAEFC98E7 Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/yW8TWZLrtFaFqiAuiN0m0gWF_fI.roa Signing time: Fri 02 Jan 2026 02:18:03 +0000 ROA not before: Fri 02 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44451 IP address blocks: 93.92.8.0/21 maxlen: 21 94.247.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:69:08:2b:20:2e:52:76:80:c0:4c:ae:fc:98:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067 Validity Not Before: Jan 2 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c96f135992ebb45685aa202e88dd26d20585fdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:ed:13:96:3f:81:29:7c:77:71:1e:0e:ac: 1f:ba:38:d9:01:b8:eb:e0:f5:63:82:1f:b8:c9:4a: 76:75:80:1c:19:8c:35:6b:e7:b8:92:a1:95:a6:7a: 7b:b6:45:e3:0c:02:85:dc:38:98:1e:dc:52:02:06: f1:f4:2f:80:d8:66:75:fa:d6:bf:81:16:d8:02:e9: 8e:81:1d:0f:ae:92:63:da:bf:db:61:6f:de:2d:ad: df:af:47:50:61:6c:d8:20:eb:12:b1:10:34:16:ec: 67:5b:f1:4a:4f:69:2f:ee:e7:ac:36:7d:fe:c1:ae: 12:77:a7:a2:67:3c:5e:72:02:4c:27:0d:e1:20:e2: 3d:49:7c:5d:64:9e:75:dc:3c:e3:cf:7a:9e:2c:50: 09:3e:69:13:00:cd:bc:fd:01:2f:c9:c7:f0:46:a9: a7:da:d1:f8:5e:35:e7:d8:ad:68:56:5e:33:42:7d: f3:57:47:e7:db:55:b2:f3:54:7d:b9:cf:fa:6f:99: e4:fa:68:c1:68:ef:26:38:d9:1c:9a:5f:52:27:1c: 1b:ab:ea:47:38:2a:a5:5c:64:96:c5:3f:7c:b3:c9: 0d:4d:ed:90:49:0a:72:ea:5c:a5:a7:d0:c4:c6:00: 8b:7b:4d:70:b5:0f:62:6a:9a:16:5e:1c:0f:b2:74: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6F:13:59:92:EB:B4:56:85:AA:20:2E:88:DD:26:D2:05:85:FD:F2 X509v3 Authority Key Identifier: keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/yW8TWZLrtFaFqiAuiN0m0gWF_fI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.92.8.0/21 94.247.48.0/21 Signature Algorithm: sha256WithRSAEncryption 43:72:39:0d:ab:f5:ad:f8:32:c4:9f:b4:28:f5:27:1b:cf:49: a5:8b:f7:a8:39:66:0e:a7:a3:a1:de:59:9e:67:9a:59:fc:95: 3c:85:f3:8c:5c:a9:f5:87:80:87:22:a6:6b:0a:f4:5a:0b:73: bb:02:20:47:f3:c7:1d:70:18:8b:14:47:1b:fc:de:69:b7:49: 2f:9e:0f:51:87:be:c6:04:9b:e0:c1:b2:e3:c0:5b:3e:ad:b6: 15:9c:0e:4d:1f:1a:46:98:e1:9a:de:2d:3c:a5:3e:52:9e:2b: c9:45:6e:d0:55:b1:98:45:a7:8f:62:7f:33:50:36:4d:8d:9d: 97:87:d8:a3:5a:84:86:6c:af:88:09:8e:92:b1:d7:65:27:05: 2d:6b:65:31:e1:6b:99:43:a6:4a:f9:ca:22:4d:d2:35:62:f2: 9d:f6:8d:6b:58:d6:ae:2d:fa:cf:b1:31:9f:d9:cb:b2:00:f4: 9e:74:aa:85:e4:1f:19:eb:6c:5b:39:fc:94:bb:8c:1d:12:32: e8:44:0d:39:1f:91:54:b3:98:da:5e:c1:0d:f6:45:7b:56:db: ad:fd:c3:13:59:29:0f:8d:20:40:bc:d0:b5:19:af:9f:5f:93: db:9f:93:6d:01:c8:a5:7d:e4:c7:dd:9b:42:ba:7b:86:e7:01: e5:c9:62:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f2kIKyAuUnaAwEyu/JjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk MzcwNjcwHhcNMjYwMTAyMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTZmMTM1OTkyZWJiNDU2ODVhYTIwMmU4OGRkMjZkMjA1ODVmZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulftE5Y/gSl8d3EeDqwfujjZAbjr 4PVjgh+4yUp2dYAcGYw1a+e4kqGVpnp7tkXjDAKF3DiYHtxSAgbx9C+A2GZ1+ta/ gRbYAumOgR0PrpJj2r/bYW/eLa3fr0dQYWzYIOsSsRA0FuxnW/FKT2kv7uesNn3+ wa4Sd6eiZzxecgJMJw3hIOI9SXxdZJ513Dzjz3qeLFAJPmkTAM28/QEvycfwRqmn 2tH4XjXn2K1oVl4zQn3zV0fn21Wy81R9uc/6b5nk+mjBaO8mONkcml9SJxwbq+pH OCqlXGSWxT98s8kNTe2QSQpy6lylp9DExgCLe01wtQ9iapoWXhwPsnRgkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMlvE1mS67RWhaogLojdJtIFhf3yMB8GA1UdIwQY MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt MTgyMjg2N2UxNTk2LzEveVc4VFdaTHJ0RmFGcWlBdWlOMG0wZ1dGX2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2 LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXVwIAwQD XvcwMA0GCSqGSIb3DQEBCwUAA4IBAQBDcjkNq/Wt+DLEn7Qo9Scbz0mli/eoOWYO p6Oh3lmeZ5pZ/JU8hfOMXKn1h4CHIqZrCvRaC3O7AiBH88cdcBiLFEcb/N5pt0kv ng9Rh77GBJvgwbLjwFs+rbYVnA5NHxpGmOGa3i08pT5SnivJRW7QVbGYRaePYn8z UDZNjZ2Xh9ijWoSGbK+ICY6SsddlJwUta2Ux4WuZQ6ZK+coiTdI1YvKd9o1rWNau LfrPsTGf2cuyAPSedKqF5B8Z62xbOfyUu4wdEjLoRA05H5FUs5jaXsEN9kV7Vtut /cMTWSkPjSBAvNC1Ga+fX5Pbn5NtAcilfeTH3ZtCunuG5wHlyWLV -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:06 2026 by rpki-client