This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/YIp8U7durT_VOWJi51t_EhaEZmc.roa File: YIp8U7durT_VOWJi51t_EhaEZmc.roa (raw, json) Hash identifier: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs= Subject key identifier: 60:8A:7C:53:B7:6E:AD:3F:D5:39:62:62:E7:5B:7F:12:16:84:66:67 Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c Certificate serial: 019B7A5B12B2643F763B604F0FD6451019DF Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/YIp8U7durT_VOWJi51t_EhaEZmc.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51696 IP address blocks: 93.115.9.0/24 maxlen: 32 94.142.134.0/23 maxlen: 32 2a0c:1000::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:12:b2:64:3f:76:3b:60:4f:0f:d6:45:10:19:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=608a7c53b76ead3fd5396262e75b7f1216846667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:35:d1:27:66:36:a6:28:5c:48:4d:cf:ff: 75:94:3e:89:60:ea:1b:67:56:b5:e7:b5:f3:e9:f4: 8b:ee:34:2e:2b:20:f1:4c:a7:9e:6e:27:1f:f3:fa: b1:94:67:1f:5b:5d:fb:90:1f:dd:6e:95:1d:d9:8a: 3d:ec:73:33:fa:80:9f:ff:8c:6d:9d:22:db:c9:d2: f7:51:b0:4c:04:7a:a6:90:83:a4:91:28:14:b9:ba: 14:57:88:2f:68:99:d1:0c:0d:3e:55:ee:38:1b:14: 9b:76:2c:61:f9:88:43:c7:c3:90:76:76:b7:d2:74: 50:ba:0a:70:1a:b1:56:dd:ac:eb:19:df:cd:97:7c: 96:48:00:3b:de:37:c9:40:b9:a8:a9:bb:08:99:a2: 79:a4:2c:60:9a:0a:e2:3d:bb:cc:5c:2c:38:ec:31: 36:ca:51:14:d5:44:bc:a0:00:16:78:10:ff:b9:ec: bb:bb:83:1e:0c:c8:27:16:e1:32:e0:0d:9b:a1:e5: 5c:5a:1d:4c:60:7c:92:82:b2:3f:b8:b8:67:a6:2d: a2:7c:87:49:af:81:2c:3c:58:d1:3a:2b:15:75:08: 0f:c9:f4:56:92:88:83:83:6a:2b:34:43:bb:da:59: 46:1e:0b:49:c9:02:59:44:f5:9e:7b:b3:bc:b5:65: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8A:7C:53:B7:6E:AD:3F:D5:39:62:62:E7:5B:7F:12:16:84:66:67 X509v3 Authority Key Identifier: keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/YIp8U7durT_VOWJi51t_EhaEZmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.115.9.0/24 94.142.134.0/23 IPv6: 2a0c:1000::/29 Signature Algorithm: sha256WithRSAEncryption 7e:b5:67:2b:13:19:9d:66:3f:ba:f9:e1:c1:e9:e1:02:24:97: 1b:5c:4c:af:d8:88:3f:48:80:2f:2e:98:38:8a:10:a8:19:9e: 6f:1c:fd:a8:14:7c:75:e4:26:7b:79:64:d8:64:bb:b6:80:00: 4e:e8:f9:b6:42:97:c1:0c:97:ff:fe:0a:9a:a1:c0:6c:8b:63: 66:bd:54:31:3f:28:52:a3:51:a6:99:37:b7:bd:41:11:3a:20: 65:35:e4:21:20:12:4f:b9:7e:b8:7c:ed:72:cc:45:40:26:04: 45:62:c0:7a:be:0c:d3:38:18:31:de:cf:ab:ce:f4:e6:1f:9f: 27:0c:68:30:52:26:ba:80:38:43:28:8f:45:c8:25:bf:80:2f: a0:04:15:67:53:c8:e1:5b:22:88:27:ee:e5:9f:ed:cf:1c:50: 60:20:52:14:d2:60:4f:ed:be:41:cf:67:3c:11:ca:9f:86:56: eb:7e:c1:c7:18:55:4f:83:af:dd:bc:3f:a2:70:79:39:1c:7b: 91:e9:39:25:36:ea:a2:f7:ad:50:be:3b:d0:a0:4b:5b:4b:17: ba:a4:65:a7:f5:28:c9:27:2c:98:62:1a:b7:1a:66:d3:28:bd: fe:17:91:06:24:87:5f:e4:75:fc:67:90:df:71:14:96:78:7e: 0f:a0:22:2f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WxKyZD92O2BPD9ZFEBnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm ZTQ2OWMwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDhhN2M1M2I3NmVhZDNmZDUzOTYyNjJlNzViN2YxMjE2ODQ2NjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmc10SdmNqYoXEhNz/91lD6JYOob Z1a157Xz6fSL7jQuKyDxTKeebicf8/qxlGcfW137kB/dbpUd2Yo97HMz+oCf/4xt nSLbydL3UbBMBHqmkIOkkSgUuboUV4gvaJnRDA0+Ve44GxSbdixh+YhDx8OQdna3 0nRQugpwGrFW3azrGd/Nl3yWSAA73jfJQLmoqbsImaJ5pCxgmgriPbvMXCw47DE2 ylEU1US8oAAWeBD/uey7u4MeDMgnFuEy4A2boeVcWh1MYHySgrI/uLhnpi2ifIdJ r4EsPFjROisVdQgPyfRWkoiDg2orNEO72llGHgtJyQJZRPWee7O8tWUCkQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGCKfFO3bq0/1TliYudbfxIWhGZnMB8GA1UdIwQY MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt NDQ2OTJkYmNjYjMyLzEvWUlwOFU3ZHVyVF9WT1dKaTUxdF9FaGFFWm1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXXMJAwQB Xo6GMA0EAgACMAcDBQMqDBAAMA0GCSqGSIb3DQEBCwUAA4IBAQB+tWcrExmdZj+6 +eHB6eECJJcbXEyv2Ig/SIAvLpg4ihCoGZ5vHP2oFHx15CZ7eWTYZLu2gABO6Pm2 QpfBDJf//gqaocBsi2NmvVQxPyhSo1GmmTe3vUEROiBlNeQhIBJPuX64fO1yzEVA JgRFYsB6vgzTOBgx3s+rzvTmH58nDGgwUia6gDhDKI9FyCW/gC+gBBVnU8jhWyKI J+7ln+3PHFBgIFIU0mBP7b5Bz2c8EcqfhlbrfsHHGFVPg6/dvD+icHk5HHuR6Tkl Nuqi961QvjvQoEtbSxe6pGWn9SjJJyyYYhq3GmbTKL3+F5EGJIdf5HX8Z5DfcRSW eH4PoCIv -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:40 2026 by rpki-client