This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/yhoQSW5m0HxnhBThODAYvKmDatA.roa File: yhoQSW5m0HxnhBThODAYvKmDatA.roa (raw, json) Hash identifier: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U= Subject key identifier: CA:1A:10:49:6E:66:D0:7C:67:84:14:E1:38:30:18:BC:A9:83:6A:D0 Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Certificate serial: 019B7AC8DB6B37EF9306C3C1D0A3723EAC1D Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/yhoQSW5m0HxnhBThODAYvKmDatA.roa Signing time: Thu 01 Jan 2026 18:19:02 +0000 ROA not before: Thu 01 Jan 2026 18:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50887 IP address blocks: 188.214.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:db:6b:37:ef:93:06:c3:c1:d0:a3:72:3e:ac:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Validity Not Before: Jan 1 18:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca1a10496e66d07c678414e1383018bca9836ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:57:27:e7:e9:ba:2e:ce:1f:e8:2f:80:b1: 50:1b:92:13:9a:1b:de:27:0b:b7:d0:0f:2a:4c:54: 5c:69:2d:26:b0:b1:60:cd:d3:fa:50:b2:ae:67:08: 07:61:c4:00:ef:bb:1d:6f:ef:b5:96:e9:5a:40:d0: 1c:24:5f:0d:b5:a0:7c:3a:ef:af:ab:da:43:f6:70: 05:b8:03:7a:1b:59:a1:9d:49:21:9c:71:f4:05:b7: 50:bd:37:07:bb:ed:a4:67:13:ce:97:5a:e1:d2:5d: 15:7c:a7:87:29:5c:de:9f:32:57:d5:c4:cb:e8:20: de:63:64:d1:d1:e8:61:d0:db:80:bd:3f:71:97:0b: 27:5e:2e:7d:d4:b1:15:d5:b2:0b:88:97:0c:64:5a: 44:f4:31:0a:81:b0:63:9f:46:e6:92:eb:97:6e:53: 9b:64:ee:49:86:34:8e:da:61:b4:0b:8f:0d:55:92: 08:f8:e7:3b:b0:09:3f:61:1d:3b:a3:42:f2:97:c1: cc:97:60:88:58:83:41:10:e9:5b:ea:f8:46:55:21: 09:bb:b9:01:49:cb:1f:9c:51:24:c0:fb:aa:0c:d5: 0e:aa:27:9c:3a:2a:18:c0:3e:55:f9:ec:d0:6c:bc: 5e:c4:69:4c:16:dd:b5:15:5c:f5:84:b1:74:14:55: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1A:10:49:6E:66:D0:7C:67:84:14:E1:38:30:18:BC:A9:83:6A:D0 X509v3 Authority Key Identifier: keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/yhoQSW5m0HxnhBThODAYvKmDatA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.214.31.0/24 Signature Algorithm: sha256WithRSAEncryption 64:a1:12:95:9f:9c:bd:f9:c8:20:75:31:a3:46:2e:0a:f2:9d: 1a:5a:67:3c:c0:a8:a7:22:82:db:18:3b:b4:e7:d6:f4:66:7d: e6:a0:d2:c0:19:7c:fb:5d:e1:03:34:6a:aa:b8:6b:c9:1f:7c: 68:f3:1a:6b:12:7a:a1:89:5e:d9:fd:3a:d4:99:6c:77:bc:bd: b4:18:db:ab:0e:f3:59:03:4c:32:f3:7e:06:b5:4c:39:eb:11: fd:1f:8c:78:67:db:07:c8:1b:68:11:cb:69:72:28:80:7a:bc: b8:76:72:db:13:1b:3a:32:db:8f:84:cc:d7:db:e7:81:db:35: 06:a1:2a:28:f8:59:e5:cc:be:e3:38:c5:6a:89:1b:2f:66:95: c1:f7:d5:2f:43:62:78:10:c8:c1:b9:96:28:d6:ac:d7:b4:7e: 1d:eb:3a:ec:7d:11:58:8f:38:cd:95:26:61:8c:8d:1f:c9:f8: 5c:11:ab:d2:01:95:4a:df:3c:c5:2c:85:01:1c:7d:af:bc:e7: 3c:48:c4:64:4d:b0:e1:e1:a2:e0:95:81:eb:de:77:9f:d1:3f: cf:37:41:29:2d:e8:98:02:8f:bc:42:d7:b0:9d:16:19:9e:81: e6:47:fb:a8:9f:73:b8:e4:aa:fe:68:60:c7:c5:81:85:96:8f: 40:6e:2e:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNtrN++TBsPB0KNyPqwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz M2ZjMTIwHhcNMjYwMTAxMTgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFhMTA0OTZlNjZkMDdjNjc4NDE0ZTEzODMwMThiY2E5ODM2YWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyFXJ+fpui7OH+gvgLFQG5ITmhve Jwu30A8qTFRcaS0msLFgzdP6ULKuZwgHYcQA77sdb++1lulaQNAcJF8NtaB8Ou+v q9pD9nAFuAN6G1mhnUkhnHH0BbdQvTcHu+2kZxPOl1rh0l0VfKeHKVzenzJX1cTL 6CDeY2TR0ehh0NuAvT9xlwsnXi591LEV1bILiJcMZFpE9DEKgbBjn0bmkuuXblOb ZO5JhjSO2mG0C48NVZII+Oc7sAk/YR07o0Lyl8HMl2CIWINBEOlb6vhGVSEJu7kB ScsfnFEkwPuqDNUOqiecOioYwD5V+ezQbLxexGlMFt21FVz1hLF0FFUw1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMoaEEluZtB8Z4QU4TgwGLypg2rQMB8GA1UdIwQY MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt MTgxNDIyM2Q5MmNlLzEveWhvUVNXNW0wSHhuaEJUaE9EQVl2S21EYXRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNYfMA0G CSqGSIb3DQEBCwUAA4IBAQBkoRKVn5y9+cggdTGjRi4K8p0aWmc8wKinIoLbGDu0 59b0Zn3moNLAGXz7XeEDNGqquGvJH3xo8xprEnqhiV7Z/TrUmWx3vL20GNurDvNZ A0wy834GtUw56xH9H4x4Z9sHyBtoEctpciiAery4dnLbExs6MtuPhMzX2+eB2zUG oSoo+FnlzL7jOMVqiRsvZpXB99UvQ2J4EMjBuZYo1qzXtH4d6zrsfRFYjzjNlSZh jI0fyfhcEavSAZVK3zzFLIUBHH2vvOc8SMRkTbDh4aLglYHr3nef0T/PN0EpLeiY Ao+8QtewnRYZnoHmR/uon3O45Kr+aGDHxYGFlo9Abi4p -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:25 2026 by rpki-client