This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/yA5b7maJfHU0NcBkIvFx-c8-I54.roa File: yA5b7maJfHU0NcBkIvFx-c8-I54.roa (raw, json) Hash identifier: XFcePeHchpjbLRec04pqboXS3/LtfvbSEVpXlPE0ESo= Subject key identifier: C8:0E:5B:EE:66:89:7C:75:34:35:C0:64:22:F1:71:F9:CF:3E:23:9E Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Certificate serial: 019B79ECFC17C7C458FA988257B92C7D66B9 Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/yA5b7maJfHU0NcBkIvFx-c8-I54.roa Signing time: Thu 01 Jan 2026 14:18:52 +0000 ROA not before: Thu 01 Jan 2026 14:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60976 IP address blocks: 185.192.112.0/24 maxlen: 24 185.192.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fc:17:c7:c4:58:fa:98:82:57:b9:2c:7d:66:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Validity Not Before: Jan 1 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c80e5bee66897c753435c06422f171f9cf3e239e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:52:38:31:d6:8f:13:75:d7:40:c2:c7:2b: c5:a9:cc:d0:c0:b4:4f:ae:5b:77:63:11:bc:87:7c: 0d:dc:39:eb:47:34:2f:19:15:8d:43:d5:8b:70:35: 87:b6:3b:80:44:bd:3c:55:40:13:fb:b9:8b:c5:9d: e5:95:14:75:d4:75:3d:f7:25:47:89:03:d8:42:13: df:08:30:ad:23:28:1e:a7:a0:c0:38:13:79:84:cd: a0:76:a8:e7:e5:68:a5:7b:f0:44:8e:80:d1:ea:22: 34:bd:4d:86:ef:32:75:d2:79:b6:cd:4f:5c:2b:1d: bf:1e:da:1a:8e:1a:c6:66:b6:0a:35:7a:23:37:10: ea:23:ff:a5:f6:45:c4:76:1d:0f:cd:47:83:4c:9f: 29:aa:70:16:87:54:68:82:e7:40:d7:76:06:fb:1c: 64:f4:ec:dd:8b:c0:02:0b:80:ad:6b:56:47:cc:c4: 68:1e:43:4e:cc:af:91:de:11:3c:ee:9a:66:fa:d9: 60:f2:10:5d:48:05:bb:35:47:46:51:2c:a6:18:49: 42:30:3a:30:27:97:0b:45:ae:e2:39:be:02:67:58: ee:f3:16:c9:49:55:ad:b4:49:b1:7a:b8:2e:20:4e: 7d:5d:99:db:4a:fa:0d:26:0a:e7:03:c3:32:9e:2a: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0E:5B:EE:66:89:7C:75:34:35:C0:64:22:F1:71:F9:CF:3E:23:9E X509v3 Authority Key Identifier: keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/yA5b7maJfHU0NcBkIvFx-c8-I54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.112.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:64:88:74:25:98:20:d6:38:73:24:24:8c:84:07:d6:20:a4: 95:3e:93:f1:a5:69:6f:0e:25:ec:84:bb:76:24:b5:88:9b:f4: 31:c9:39:d9:fb:ed:ed:5a:fa:e9:ea:72:6c:f8:26:0c:70:0b: 13:81:c9:a5:e8:c5:2e:c4:a7:4c:03:53:8e:b8:81:65:ce:c0: d6:67:99:02:1c:96:30:f6:43:c6:d6:fe:3d:b3:af:e9:d7:59: 66:89:14:28:7a:81:37:b9:06:a9:b0:ab:f4:31:44:fb:ef:0f: 96:1d:0a:57:62:25:70:8f:31:6f:c3:ca:b8:ea:70:63:cb:5e: 18:06:6c:8c:c4:68:41:60:ee:af:56:be:c0:7b:24:45:73:7e: fe:cd:9c:26:87:99:be:e4:f0:b1:7d:9d:ff:ae:e9:8e:05:b2: 20:b1:4d:c6:2c:f8:7b:61:8b:c5:25:57:39:cc:15:b2:04:54: 6e:d1:42:40:80:a7:2c:c0:26:ab:16:a7:af:98:43:0e:79:82: d3:24:6a:40:24:4a:2f:86:6f:6b:40:4e:da:e7:8b:0d:6e:4c: 2f:4b:6d:c7:ab:43:6c:bd:73:f0:58:46:f1:4e:dd:42:5c:bd: cd:fa:1a:cc:19:17:04:d2:40:01:6f:fb:96:6a:ff:e7:a9:b9: c5:b1:09:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PwXx8RY+piCV7ksfWa5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTFmZThjNTQwYzQ0ZTIzNGY5YmM2NjhmOGEzYjE2NDdh Y2RiMDYwHhcNMjYwMTAxMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODBlNWJlZTY2ODk3Yzc1MzQzNWMwNjQyMmYxNzFmOWNmM2UyMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVNSODHWjxN110DCxyvFqczQwLRP rlt3YxG8h3wN3DnrRzQvGRWNQ9WLcDWHtjuARL08VUAT+7mLxZ3llRR11HU99yVH iQPYQhPfCDCtIygep6DAOBN5hM2gdqjn5Wile/BEjoDR6iI0vU2G7zJ10nm2zU9c Kx2/HtoajhrGZrYKNXojNxDqI/+l9kXEdh0PzUeDTJ8pqnAWh1RogudA13YG+xxk 9Ozdi8ACC4Cta1ZHzMRoHkNOzK+R3hE87ppm+tlg8hBdSAW7NUdGUSymGElCMDow J5cLRa7iOb4CZ1ju8xbJSVWttEmxerguIE59XZnbSvoNJgrnA8MyniqoKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgOW+5miXx1NDXAZCLxcfnPPiOeMB8GA1UdIwQY MBaAFNCR/oxUDETiNPm8Zo+KOxZHrNsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgt MDRlNmY1NzY0YzUyLzEveUE1YjdtYUpmSFUwTmNCa0l2RngtYzgtSTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgtMDRlNmY1NzY0YzUy LzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucBwMA0G CSqGSIb3DQEBCwUAA4IBAQAdZIh0JZgg1jhzJCSMhAfWIKSVPpPxpWlvDiXshLt2 JLWIm/QxyTnZ++3tWvrp6nJs+CYMcAsTgcml6MUuxKdMA1OOuIFlzsDWZ5kCHJYw 9kPG1v49s6/p11lmiRQoeoE3uQapsKv0MUT77w+WHQpXYiVwjzFvw8q46nBjy14Y BmyMxGhBYO6vVr7AeyRFc37+zZwmh5m+5PCxfZ3/rumOBbIgsU3GLPh7YYvFJVc5 zBWyBFRu0UJAgKcswCarFqevmEMOeYLTJGpAJEovhm9rQE7a54sNbkwvS23Hq0Ns vXPwWEbxTt1CXL3N+hrMGRcE0kABb/uWav/nqbnFsQkv -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:07 2026 by rpki-client