This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Y7hM4v_71uVrwOWdNW7r3Hq9uOA.roa File: Y7hM4v_71uVrwOWdNW7r3Hq9uOA.roa (raw, json) Hash identifier: OXAJxACN3gTV65RZycjNWC7C3gBml0MpoJt49rmRrPM= Subject key identifier: 63:B8:4C:E2:FF:FB:D6:E5:6B:C0:E5:9D:35:6E:EB:DC:7A:BD:B8:E0 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348BCAA1FC5327C9BC4BFF1529287D Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Y7hM4v_71uVrwOWdNW7r3Hq9uOA.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208373 IP address blocks: 194.71.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8b:ca:a1:fc:53:27:c9:bc:4b:ff:15:29:28:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63b84ce2fffbd6e56bc0e59d356eebdc7abdb8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:a8:f0:63:b2:82:04:61:65:34:2a:59:48: bf:00:a9:8d:7a:16:f5:a9:eb:9f:80:47:8f:28:d9: 73:0d:26:42:d7:68:51:90:bb:89:da:0b:d7:ad:5c: 02:d0:6b:64:4d:d7:e1:03:0f:09:e3:94:1f:81:29: cd:6a:db:d2:f2:d4:f7:9e:74:11:64:b3:52:80:de: a8:66:43:0d:cd:0e:77:93:4f:f2:b5:ae:5b:97:7a: a6:aa:3e:53:68:0e:33:1b:b0:27:dc:25:94:a9:84: ca:a1:18:40:e7:0e:66:6c:1b:1d:19:b6:55:3f:ee: a2:31:73:d0:ca:bf:c9:44:c3:8d:2d:37:a6:e0:17: eb:6a:25:45:62:b6:2e:9d:d1:23:ae:6e:bf:b6:05: a5:aa:63:65:6c:76:bb:76:a0:51:61:50:c4:b2:2a: b6:8d:2e:b3:39:1a:29:9a:92:56:64:b0:87:e7:71: fc:e3:1a:7e:5c:a6:da:92:68:c3:81:ff:97:61:08: 81:57:fb:89:69:d1:d1:a9:fa:dd:5e:ed:65:84:13: 74:d1:a6:1b:26:58:a9:3a:eb:92:12:7f:a6:ab:64: 37:ac:be:41:b7:31:a0:01:b1:01:ca:cc:00:96:bf: b5:aa:15:10:08:b5:2c:1e:bb:83:cd:42:a5:7c:ae: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B8:4C:E2:FF:FB:D6:E5:6B:C0:E5:9D:35:6E:EB:DC:7A:BD:B8:E0 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Y7hM4v_71uVrwOWdNW7r3Hq9uOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.71.197.0/24 Signature Algorithm: sha256WithRSAEncryption 04:2d:d4:11:fe:c9:d8:79:07:0d:74:6e:c2:c3:53:63:ad:b8: 64:a1:00:7f:9c:7d:12:c5:7a:ad:12:e3:57:f7:23:de:a2:2a: c4:ec:ef:60:27:a0:8b:2e:e4:23:b9:d9:fe:e7:78:0c:ed:90: 4d:75:6b:71:ac:43:8e:c9:91:58:a1:2b:b2:e4:c4:61:e7:84: 5a:ba:9a:ec:98:f2:d8:34:aa:e3:c4:b1:ed:0f:67:16:8b:dc: 61:a5:9e:9e:07:75:f7:13:76:22:da:45:e2:27:92:b7:77:73: 69:4e:a8:32:6d:26:c9:24:e6:fd:c0:fc:d8:06:65:bb:de:98: e5:6f:bb:59:01:3c:c8:66:31:15:43:b4:23:7c:e9:07:2b:66: 5c:b0:40:23:89:49:c1:78:47:46:c3:7d:83:09:24:b2:5c:90: e6:61:13:2e:4a:c7:f3:12:7e:d0:7b:e0:a6:9d:73:3e:b8:43: 80:3c:c4:f1:aa:52:e8:34:65:6d:bf:49:2b:3f:ed:83:eb:12: 23:ac:44:fb:1f:b6:de:e5:94:8b:9a:b6:b6:06:97:28:74:45: 9b:1e:e2:96:ec:6e:66:6d:5a:2d:ce:e7:60:98:46:40:07:57: 45:6a:d7:60:7d:ae:e3:c6:5a:f9:67:44:0b:e7:ba:a9:52:c1: 42:7e:24:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NIvKofxTJ8m8S/8VKSh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2I4NGNlMmZmZmJkNmU1NmJjMGU1OWQzNTZlZWJkYzdhYmRiOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LGo8GOyggRhZTQqWUi/AKmNehb1 qeufgEePKNlzDSZC12hRkLuJ2gvXrVwC0GtkTdfhAw8J45QfgSnNatvS8tT3nnQR ZLNSgN6oZkMNzQ53k0/yta5bl3qmqj5TaA4zG7An3CWUqYTKoRhA5w5mbBsdGbZV P+6iMXPQyr/JRMONLTem4BfraiVFYrYundEjrm6/tgWlqmNlbHa7dqBRYVDEsiq2 jS6zORopmpJWZLCH53H84xp+XKbakmjDgf+XYQiBV/uJadHRqfrdXu1lhBN00aYb JlipOuuSEn+mq2Q3rL5BtzGgAbEByswAlr+1qhUQCLUsHruDzUKlfK5IPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGO4TOL/+9bla8DlnTVu69x6vbjgMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvWTdoTTR2XzcxdVZyd09XZE5XN3IzSHE5dU9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkfFMA0G CSqGSIb3DQEBCwUAA4IBAQAELdQR/snYeQcNdG7Cw1NjrbhkoQB/nH0SxXqtEuNX 9yPeoirE7O9gJ6CLLuQjudn+53gM7ZBNdWtxrEOOyZFYoSuy5MRh54RauprsmPLY NKrjxLHtD2cWi9xhpZ6eB3X3E3Yi2kXiJ5K3d3NpTqgybSbJJOb9wPzYBmW73pjl b7tZATzIZjEVQ7QjfOkHK2ZcsEAjiUnBeEdGw32DCSSyXJDmYRMuSsfzEn7Qe+Cm nXM+uEOAPMTxqlLoNGVtv0krP+2D6xIjrET7H7be5ZSLmra2BpcodEWbHuKW7G5m bVotzudgmEZAB1dFatdgfa7jxlr5Z0QL57qpUsFCfiTm -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:48 2026 by rpki-client