This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/YNrAk_rW-_hv_7y0q7L07WQbD3k.roa File: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (raw, json) Hash identifier: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4= Subject key identifier: 60:DA:C0:93:FA:D6:FB:F8:6F:FF:BC:B4:AB:B2:F4:ED:64:1B:0F:79 Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1 Certificate serial: 019B7D5BD496B0D706A5BB1DF8B2445721EE Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/YNrAk_rW-_hv_7y0q7L07WQbD3k.roa Signing time: Fri 02 Jan 2026 06:18:48 +0000 ROA not before: Fri 02 Jan 2026 06:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 195.230.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d4:96:b0:d7:06:a5:bb:1d:f8:b2:44:57:21:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1 Validity Not Before: Jan 2 06:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60dac093fad6fbf86fffbcb4abb2f4ed641b0f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:7e:a5:2c:67:ae:30:a8:74:bc:98:d6:6d: 6b:50:2c:4e:73:5a:78:2e:86:dd:d4:34:5c:02:aa: 7d:2a:36:e5:92:44:1d:f1:fb:98:82:18:1f:62:a4: 8a:3b:6d:40:ea:04:f0:bf:11:52:e7:66:b2:cc:64: e1:d3:ed:16:99:dc:ea:77:d0:5a:00:cd:2b:c1:82: a4:34:45:88:72:af:3b:66:d7:60:7c:40:86:02:b9: 2d:a2:0f:13:11:12:00:35:90:d7:76:a5:2c:b6:27: f2:09:4f:ed:01:9d:05:04:97:d5:80:a6:70:1e:25: bd:25:10:24:a9:a5:9c:9f:c1:87:a9:72:ba:a0:79: 37:56:a4:b5:80:84:f3:7d:67:07:37:9b:3c:4f:0c: db:4b:a1:42:a5:9e:6a:b9:9d:29:e0:1f:33:dc:bf: 7c:87:63:5c:42:5a:c3:e0:07:4e:f3:00:b3:b3:a2: cc:3d:c6:8f:eb:21:db:4b:07:66:94:d2:f0:39:59: a2:a7:ee:51:bd:36:10:1a:e6:cd:56:27:ac:79:31: 8e:f3:61:16:f6:86:01:3d:f7:90:08:1a:d6:b5:f1: 66:bc:3e:57:92:21:88:ee:b0:97:5b:6d:80:c9:b7: f8:29:51:56:d9:fb:b0:a1:ef:e3:fd:d9:4b:27:ff: 8d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DA:C0:93:FA:D6:FB:F8:6F:FF:BC:B4:AB:B2:F4:ED:64:1B:0F:79 X509v3 Authority Key Identifier: keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/YNrAk_rW-_hv_7y0q7L07WQbD3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.117.0/24 Signature Algorithm: sha256WithRSAEncryption 97:23:ac:5d:23:07:c0:42:b8:ca:3f:f9:1e:ef:ad:ea:30:41: 2a:d6:34:b1:a5:16:ab:36:a9:32:76:5b:e1:22:4f:9c:97:ac: 22:7c:8e:23:03:80:68:71:98:e8:aa:44:fd:17:97:cb:9a:e6: 52:4d:d5:33:60:e6:43:7d:d8:01:70:b6:eb:e5:96:fb:9d:33: 89:3e:87:44:dd:de:f5:7b:7a:a3:c7:1a:82:e2:e9:0a:e5:b2: ae:15:03:ca:b2:88:54:99:12:d7:47:53:4a:6e:e8:f2:0b:e0: ce:ae:b7:a9:58:17:28:38:d3:e8:b1:71:0c:6d:bb:b9:7c:04: 69:c1:33:4c:ef:85:6b:a5:b8:20:4e:d5:47:55:97:c4:78:44: b7:39:48:99:46:ca:27:6b:11:d7:0a:64:49:e0:a6:ce:29:5a: 0e:48:93:9c:2d:4d:14:b0:5c:1f:85:1a:30:bd:71:5e:55:ce: 7f:db:c6:a3:06:b4:cb:f2:8d:45:b2:44:64:4e:fb:17:ec:ca: 0e:74:f6:dc:da:6c:03:bd:2b:cf:35:9d:6e:85:b7:76:aa:48: 1a:81:8a:b1:5c:64:75:00:66:02:01:70:ec:e7:f5:b7:7f:23: 0a:70:38:3a:5e:a8:78:1f:4a:3e:49:05:90:5a:4c:a3:09:8e: e2:ad:da:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W9SWsNcGpbsd+LJEVyHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2MxM2Y1ZmYxNjlhZmVkODI1Yjc1ZDhmYzA3N2FmY2E1 MGQ2YTEwHhcNMjYwMTAyMDYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGRhYzA5M2ZhZDZmYmY4NmZmZmJjYjRhYmIyZjRlZDY0MWIwZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWl+pSxnrjCodLyY1m1rUCxOc1p4 Lobd1DRcAqp9KjblkkQd8fuYghgfYqSKO21A6gTwvxFS52ayzGTh0+0Wmdzqd9Ba AM0rwYKkNEWIcq87ZtdgfECGArktog8TERIANZDXdqUstifyCU/tAZ0FBJfVgKZw HiW9JRAkqaWcn8GHqXK6oHk3VqS1gITzfWcHN5s8TwzbS6FCpZ5quZ0p4B8z3L98 h2NcQlrD4AdO8wCzs6LMPcaP6yHbSwdmlNLwOVmip+5RvTYQGubNVieseTGO82EW 9oYBPfeQCBrWtfFmvD5XkiGI7rCXW22Aybf4KVFW2fuwoe/j/dlLJ/+NowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGDawJP61vv4b/+8tKuy9O1kGw95MB8GA1UdIwQY MBaAFF58E/X/Fpr+2CW3XY/Ad6/KUNahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQt OWU1OWMxMTFhYTM4LzEvWU5yQWtfclctX2h2Xzd5MHE3TDA3V1FiRDNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQtOWU1OWMxMTFhYTM4 LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+Z1MA0G CSqGSIb3DQEBCwUAA4IBAQCXI6xdIwfAQrjKP/ke763qMEEq1jSxpRarNqkydlvh Ik+cl6wifI4jA4BocZjoqkT9F5fLmuZSTdUzYOZDfdgBcLbr5Zb7nTOJPodE3d71 e3qjxxqC4ukK5bKuFQPKsohUmRLXR1NKbujyC+DOrrepWBcoONPosXEMbbu5fARp wTNM74VrpbggTtVHVZfEeES3OUiZRsonaxHXCmRJ4KbOKVoOSJOcLU0UsFwfhRow vXFeVc5/28ajBrTL8o1FskRkTvsX7MoOdPbc2mwDvSvPNZ1uhbd2qkgagYqxXGR1 AGYCAXDs5/W3fyMKcDg6Xqh4H0o+SQWQWkyjCY7irdq4 -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:46 2026 by rpki-client