This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/yWPZuql0MvhSm3JMA1hMhAx0qW8.roa File: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (raw, json) Hash identifier: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM= Subject key identifier: C9:63:D9:BA:A9:74:32:F8:52:9B:72:4C:03:58:4C:84:0C:74:A9:6F Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db Certificate serial: 019B7D5BC2F5BF3742F77B967F8943315D24 Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/yWPZuql0MvhSm3JMA1hMhAx0qW8.roa Signing time: Fri 02 Jan 2026 06:18:44 +0000 ROA not before: Fri 02 Jan 2026 06:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215767 IP address blocks: 195.211.71.0/24 maxlen: 24 2a04:aa00::/29 maxlen: 29 2a04:aa00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:c2:f5:bf:37:42:f7:7b:96:7f:89:43:31:5d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db Validity Not Before: Jan 2 06:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c963d9baa97432f8529b724c03584c840c74a96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:78:d3:84:6f:3f:4a:8f:07:19:6c:c2:cc: af:02:21:0d:b8:3a:92:24:b7:ec:74:03:8d:97:ec: c0:71:4e:ba:40:b6:e4:e8:6b:25:66:2c:9c:d5:7a: c5:4a:09:b9:07:de:50:54:87:50:4d:dc:33:f1:e7: fe:21:51:24:2e:c5:20:08:a1:b2:6f:a2:25:c0:53: 66:7b:3c:19:f3:2c:32:39:af:29:23:50:ed:aa:7f: d5:21:bb:12:27:78:84:01:4c:80:80:bf:9d:ff:ac: ff:43:82:79:b0:30:55:90:56:eb:00:24:4f:93:7a: da:09:c8:a4:b4:12:40:60:da:ee:32:b4:c3:e4:ce: 0e:f4:72:b6:a7:8b:8f:84:e0:f6:a7:08:86:e4:f2: 6f:c9:fb:41:67:0f:e1:bd:2f:52:a4:9a:f8:fb:88: c4:e3:0c:5f:00:05:b6:c6:50:7d:0d:05:5b:62:85: ba:26:74:93:8e:6d:aa:e4:06:97:3a:e7:7b:ed:02: 5b:05:51:3a:a7:7c:a5:c2:54:db:cb:41:a4:f4:dd: 39:85:24:40:f6:9e:60:67:bf:20:93:03:57:68:d5: 93:1f:5b:b2:16:fd:b2:86:3c:b3:a4:56:48:3e:97: 31:2f:a2:1b:00:15:ad:77:84:37:94:c1:aa:4a:4b: 8c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:63:D9:BA:A9:74:32:F8:52:9B:72:4C:03:58:4C:84:0C:74:A9:6F X509v3 Authority Key Identifier: keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/yWPZuql0MvhSm3JMA1hMhAx0qW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.71.0/24 IPv6: 2a04:aa00::/29 Signature Algorithm: sha256WithRSAEncryption 3b:d3:ad:62:ec:b5:3d:f1:65:2a:fa:0e:63:b2:a8:9d:3e:97: 70:c9:9b:3a:92:65:ed:ef:51:89:f4:71:12:84:87:20:8b:63: 7c:93:8b:41:04:48:f1:e1:d5:3d:54:e5:98:1f:16:d5:b7:d9: 04:3b:c0:cc:fb:52:97:71:57:bb:d3:01:0f:84:2b:05:0c:70: 33:8d:43:e5:b7:29:c6:e9:73:6c:74:ce:c4:47:39:e3:05:55: c1:ac:58:18:77:ce:58:b1:a6:6f:05:2e:89:03:63:e3:a9:6e: 0c:8a:98:eb:97:7e:f9:8c:0b:2b:ab:a3:23:4d:ac:8f:d8:b7: be:25:1e:81:84:97:a4:d1:97:dc:71:90:34:13:16:cc:7e:f2: fe:de:ca:fa:30:88:5b:eb:cf:90:09:f4:1b:c1:8a:33:f0:ad: 18:4b:40:18:23:92:59:d5:fd:73:81:bd:4c:ca:b1:33:ed:2e: 26:49:de:48:ec:ef:6b:13:2c:2c:95:b6:e1:99:dd:1f:43:f2: b6:6a:f2:b1:63:e4:7b:fa:1e:a0:00:28:37:b2:f9:fa:5f:a1: 76:93:ff:0d:41:1c:6d:87:8c:28:c3:1b:3b:15:d4:90:c9:4a: 02:4e:10:4a:4f:f7:c1:dd:db:84:30:0f:9a:65:f4:1f:e9:76: 51:03:10:48 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W8L1vzdC93uWf4lDMV0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4M2Y3MjYwNjUwMDI2Yjk3M2ExOGE3ZjNlOTk1OGQzMjFl Y2UxZGIwHhcNMjYwMTAyMDYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTYzZDliYWE5NzQzMmY4NTI5YjcyNGMwMzU4NGM4NDBjNzRhOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYl404RvP0qPBxlswsyvAiENuDqS JLfsdAONl+zAcU66QLbk6GslZiyc1XrFSgm5B95QVIdQTdwz8ef+IVEkLsUgCKGy b6IlwFNmezwZ8ywyOa8pI1Dtqn/VIbsSJ3iEAUyAgL+d/6z/Q4J5sDBVkFbrACRP k3raCciktBJAYNruMrTD5M4O9HK2p4uPhOD2pwiG5PJvyftBZw/hvS9SpJr4+4jE 4wxfAAW2xlB9DQVbYoW6JnSTjm2q5AaXOud77QJbBVE6p3ylwlTby0Gk9N05hSRA 9p5gZ78gkwNXaNWTH1uyFv2yhjyzpFZIPpcxL6IbABWtd4Q3lMGqSkuM3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMlj2bqpdDL4UptyTANYTIQMdKlvMB8GA1UdIwQY MBaAFIg/cmBlACa5c6GKfz6ZWNMh7OHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDkt YzA5ZmYxNmZjMzRiLzEveVdQWnVxbDBNdmhTbTNKTUExaE1oQXgwcVc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDktYzA5ZmYxNmZjMzRi LzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw9NHMA0E AgACMAcDBQMqBKoAMA0GCSqGSIb3DQEBCwUAA4IBAQA7061i7LU98WUq+g5jsqid PpdwyZs6kmXt71GJ9HEShIcgi2N8k4tBBEjx4dU9VOWYHxbVt9kEO8DM+1KXcVe7 0wEPhCsFDHAzjUPltynG6XNsdM7ERznjBVXBrFgYd85YsaZvBS6JA2PjqW4Mipjr l375jAsrq6MjTayP2Le+JR6BhJek0ZfccZA0ExbMfvL+3sr6MIhb68+QCfQbwYoz 8K0YS0AYI5JZ1f1zgb1MyrEz7S4mSd5I7O9rEywslbbhmd0fQ/K2avKxY+R7+h6g ACg3svn6X6F2k/8NQRxth4wowxs7FdSQyUoCThBKT/fB3duEMA+aZfQf6XZRAxBI -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:53 2026 by rpki-client