This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/y9yOPOReUhOjAR9wH_1MAAdpsh8.roa File: y9yOPOReUhOjAR9wH_1MAAdpsh8.roa (raw, json) Hash identifier: Sh2Cfrg3yKSuc0oxH44NL73rniu+Z8OoDzgM+3sdMXg= Subject key identifier: CB:DC:8E:3C:E4:5E:52:13:A3:01:1F:70:1F:FD:4C:00:07:69:B2:1F Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Certificate serial: 019B7AC7FFD7D9667703E488A250B28B9B79 Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/y9yOPOReUhOjAR9wH_1MAAdpsh8.roa Signing time: Thu 01 Jan 2026 18:18:05 +0000 ROA not before: Thu 01 Jan 2026 18:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28785 IP address blocks: 213.222.192.0/19 maxlen: 19 213.222.192.0/21 maxlen: 21 213.222.192.0/24 maxlen: 24 213.222.200.0/21 maxlen: 21 213.222.201.0/24 maxlen: 24 213.222.204.0/24 maxlen: 24 213.222.205.0/24 maxlen: 24 213.222.206.0/24 maxlen: 24 213.222.207.0/24 maxlen: 24 213.222.208.0/21 maxlen: 21 213.222.208.0/24 maxlen: 24 213.222.209.0/24 maxlen: 24 213.222.210.0/24 maxlen: 24 213.222.211.0/24 maxlen: 24 213.222.212.0/24 maxlen: 24 213.222.216.0/24 maxlen: 24 213.222.217.0/24 maxlen: 24 2a03:7580::/32 maxlen: 32 2a03:7580::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ff:d7:d9:66:77:03:e4:88:a2:50:b2:8b:9b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Validity Not Before: Jan 1 18:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbdc8e3ce45e5213a3011f701ffd4c000769b21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:82:9f:42:2c:bb:21:46:be:5a:fe:4a:f5: e9:84:28:59:72:87:13:c7:46:c3:33:c6:11:65:7e: 6e:8d:8a:49:0f:15:78:13:f1:99:ea:b2:e0:9b:d7: 49:52:00:0f:99:5c:9c:f0:56:df:6d:a0:58:36:dc: 4e:ce:c0:3c:18:92:4d:1a:eb:c5:1e:23:83:a6:a6: ad:42:9d:78:db:fa:e8:3e:c1:79:c0:87:d1:f5:2e: a8:c6:bb:94:3e:76:92:63:bc:a6:a5:5d:8a:ed:08: 44:06:8e:be:43:6d:51:ec:b3:9a:2f:9e:ad:6a:1b: bc:38:79:d7:f3:8a:36:ab:1b:73:d4:8d:cd:ef:a6: eb:97:1b:f0:08:3c:36:a7:e8:91:52:07:7f:e1:ef: 0c:ff:a3:6b:9c:08:3f:87:dd:a7:c5:db:68:e6:3c: 4f:bd:b5:49:22:60:94:1c:30:dd:ec:56:62:0f:ef: c9:38:01:05:5c:57:cc:7f:4d:14:3a:83:6e:05:db: c0:e6:10:ea:7d:ca:ba:cf:19:8c:18:9a:a4:e7:b3: a3:65:78:6f:44:ac:7a:8c:a0:91:8b:18:2c:a3:74: 4c:cf:98:80:dd:a3:ff:90:1f:76:a2:6c:03:6a:0e: 5d:ea:1c:eb:3e:c4:a7:28:56:17:9c:ea:95:21:ed: bc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DC:8E:3C:E4:5E:52:13:A3:01:1F:70:1F:FD:4C:00:07:69:B2:1F X509v3 Authority Key Identifier: keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/y9yOPOReUhOjAR9wH_1MAAdpsh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.222.192.0/19 IPv6: 2a03:7580::/32 Signature Algorithm: sha256WithRSAEncryption 94:3b:35:11:50:bb:79:44:17:ca:b5:75:9a:e5:c7:ec:d0:ac: ea:a4:4d:e2:ae:4a:ae:fc:46:de:b2:a3:bf:a0:9d:eb:ce:e4: 34:9c:e2:79:5c:71:3b:c1:65:fb:71:31:cb:25:a5:60:88:52: cb:38:ea:6e:16:7c:6e:25:a3:4f:46:3c:87:fd:9c:c2:e8:20: 86:a7:7d:45:21:e3:72:09:ad:53:00:74:c0:ff:03:a5:9f:aa: 5c:70:77:c7:b0:6b:ad:95:e2:be:35:c8:00:19:ac:ef:4c:ad: 80:6c:0b:c8:20:92:e6:23:07:5b:c1:23:a0:66:1d:e1:52:35: 59:ed:08:28:b0:90:d2:1b:1f:95:36:72:e4:4a:f3:87:ea:b2: c2:0d:8b:bb:29:3f:7f:5f:d7:fd:6c:d3:14:19:26:34:4d:60: fa:a1:67:e8:40:79:c7:e5:b4:48:b3:7d:e2:2b:9e:6e:54:0d: 8a:66:80:3d:67:13:4c:c9:db:14:9e:54:af:35:33:89:33:4b: 3d:89:21:ff:88:74:8e:6d:5c:5b:f1:65:b3:7f:7e:1d:42:c6: 74:d2:e2:3b:ef:c1:37:5c:94:4d:93:3d:12:65:06:b1:17:a6: 7f:eb:3d:4f:9f:5a:99:61:55:0b:66:e6:5f:b4:9a:43:94:b7: fb:47:2c:ef -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x//X2WZ3A+SIolCyi5t5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZTVmYzYzNWExYTc3NTU3NGI3NzlhZWE5Y2NkNjUyNGNj NGQwZjkwHhcNMjYwMTAxMTgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmRjOGUzY2U0NWU1MjEzYTMwMTFmNzAxZmZkNGMwMDA3NjliMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYGCn0IsuyFGvlr+SvXphChZcocT x0bDM8YRZX5ujYpJDxV4E/GZ6rLgm9dJUgAPmVyc8FbfbaBYNtxOzsA8GJJNGuvF HiODpqatQp142/roPsF5wIfR9S6oxruUPnaSY7ympV2K7QhEBo6+Q21R7LOaL56t ahu8OHnX84o2qxtz1I3N76brlxvwCDw2p+iRUgd/4e8M/6NrnAg/h92nxdto5jxP vbVJImCUHDDd7FZiD+/JOAEFXFfMf00UOoNuBdvA5hDqfcq6zxmMGJqk57OjZXhv RKx6jKCRixgso3RMz5iA3aP/kB92omwDag5d6hzrPsSnKFYXnOqVIe28twIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMvcjjzkXlITowEfcB/9TAAHabIfMB8GA1UdIwQY MBaAFKHl/GNaGndVdLd5rqnM1lJMxND5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgt N2VlMGU2MGJiMDUzLzEveTl5T1BPUmVVaE9qQVI5d0hfMU1BQWRwc2g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgtN2VlMGU2MGJiMDUz LzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1d7AMA0E AgACMAcDBQAqA3WAMA0GCSqGSIb3DQEBCwUAA4IBAQCUOzURULt5RBfKtXWa5cfs 0KzqpE3irkqu/EbesqO/oJ3rzuQ0nOJ5XHE7wWX7cTHLJaVgiFLLOOpuFnxuJaNP RjyH/ZzC6CCGp31FIeNyCa1TAHTA/wOln6pccHfHsGutleK+NcgAGazvTK2AbAvI IJLmIwdbwSOgZh3hUjVZ7QgosJDSGx+VNnLkSvOH6rLCDYu7KT9/X9f9bNMUGSY0 TWD6oWfoQHnH5bRIs33iK55uVA2KZoA9ZxNMydsUnlSvNTOJM0s9iSH/iHSObVxb 8WWzf34dQsZ00uI778E3XJRNkz0SZQaxF6Z/6z1Pn1qZYVULZuZftJpDlLf7Ryzv -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:00 2026 by rpki-client