This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/YuZ5WXiv26JqcpRPGf_w1FamtRI.roa File: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (raw, json) Hash identifier: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0= Subject key identifier: 62:E6:79:59:78:AF:DB:A2:6A:72:94:4F:19:FF:F0:D4:56:A6:B5:12 Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c Certificate serial: 019B7D5D271CD9DD456C9F3BF314D1C8BDED Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/YuZ5WXiv26JqcpRPGf_w1FamtRI.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209956 IP address blocks: 194.48.95.0/24 maxlen: 24 217.119.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:27:1c:d9:dd:45:6c:9f:3b:f3:14:d1:c8:bd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62e6795978afdba26a72944f19fff0d456a6b512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:ff:36:48:67:1c:c8:9f:a9:cd:07:1e:9d: 8c:ec:58:ab:32:51:91:51:46:59:ac:ee:f2:47:68: dd:ed:6a:cb:9c:1d:6a:70:ce:ca:fc:7e:7f:96:f3: 24:62:12:73:cf:9f:9c:02:f9:19:eb:1c:c2:71:86: 9d:98:fe:cb:fd:f1:b9:91:ad:e2:25:ee:58:34:74: 27:61:41:17:ae:8a:fb:7b:77:e7:cb:92:62:6c:2e: 1c:0b:78:76:1d:93:8c:6b:ad:e0:9e:07:ba:79:49: 42:a3:e1:44:8c:f8:a8:30:46:df:f2:6d:56:76:b1: 48:6f:8e:71:6d:46:4d:b3:e3:34:24:47:aa:29:6e: e4:ed:22:b2:89:03:b4:b1:09:49:40:f5:3d:73:0c: 47:74:42:2b:b9:29:be:9f:db:7f:a1:72:07:7d:22: 55:18:14:f9:be:18:71:a0:c6:32:88:ae:bd:87:90: 1b:c3:f6:e4:e8:2b:46:b1:a4:cb:ea:15:6d:d8:7d: ca:f3:f0:00:d5:cd:78:3e:c1:62:d1:3f:1f:b4:28: 41:01:b4:02:64:5f:05:2b:1a:fc:8b:d7:4c:e9:58: df:49:b3:23:46:12:96:02:bc:32:21:d3:62:d1:c0: a8:91:c1:16:f8:af:c5:86:f4:33:b3:d1:03:cb:35: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E6:79:59:78:AF:DB:A2:6A:72:94:4F:19:FF:F0:D4:56:A6:B5:12 X509v3 Authority Key Identifier: keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/YuZ5WXiv26JqcpRPGf_w1FamtRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.95.0/24 217.119.134.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f0:37:c9:95:73:c7:7e:21:53:f6:ac:59:c7:b0:52:35:52: f8:41:97:07:01:63:d2:dd:fa:41:72:79:10:b2:df:33:d0:29: be:71:7e:f8:a7:5a:bb:35:92:a3:bf:11:a1:6e:ad:8f:ff:ff: 85:ea:c3:1b:a8:f5:88:f5:46:45:05:d4:a0:b6:cc:4f:82:31: 42:bc:de:88:8c:9d:fc:8e:32:5f:1e:86:41:d7:27:6f:82:65: b3:5c:ec:c0:e7:08:98:e0:e8:be:e9:bb:63:0f:d7:e7:1a:11: bf:7c:ef:c1:f2:0b:3e:f1:0f:a7:7d:f2:30:6c:a6:f0:52:fd: 0d:97:85:5d:ce:f4:9c:86:59:16:7c:99:60:92:74:37:e6:5f: bc:75:58:e7:0b:a0:6b:a2:50:34:4e:a7:00:9f:1e:8c:cd:1c: 63:6d:a8:ae:dd:d2:b3:8b:9e:a9:ce:76:50:9a:fd:d7:02:4b: 23:6f:93:d9:19:1e:be:f2:82:cd:31:a3:cd:22:6b:7c:e4:f2: 38:88:73:c5:9f:e2:99:e9:c6:e9:87:5c:57:c8:c1:f1:77:9c: be:07:73:fd:16:85:16:87:73:2b:86:6d:61:a8:50:07:bd:04: 6f:ac:8a:80:06:31:85:e2:b9:29:bf:6c:ff:3f:38:5b:0e:97: 2f:54:a8:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XScc2d1FbJ878xTRyL3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOGVhYjkzNTMwY2ZkNTBkYTdmYjdkYTVlYmEwYWE0NDBj OWVmMGMwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmU2Nzk1OTc4YWZkYmEyNmE3Mjk0NGYxOWZmZjBkNDU2YTZiNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpD/NkhnHMifqc0HHp2M7FirMlGR UUZZrO7yR2jd7WrLnB1qcM7K/H5/lvMkYhJzz5+cAvkZ6xzCcYadmP7L/fG5ka3i Je5YNHQnYUEXror7e3fny5JibC4cC3h2HZOMa63gnge6eUlCo+FEjPioMEbf8m1W drFIb45xbUZNs+M0JEeqKW7k7SKyiQO0sQlJQPU9cwxHdEIruSm+n9t/oXIHfSJV GBT5vhhxoMYyiK69h5Abw/bk6CtGsaTL6hVt2H3K8/AA1c14PsFi0T8ftChBAbQC ZF8FKxr8i9dM6VjfSbMjRhKWArwyIdNi0cCokcEW+K/FhvQzs9EDyzVQ8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGLmeVl4r9uianKUTxn/8NRWprUSMB8GA1UdIwQY MBaAFB2Oq5NTDP1Q2n+32l66CqRAye8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEt MzJkZDUzNjQwYjljLzEvWXVaNVdYaXYyNkpxY3BSUEdmX3cxRmFtdFJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEtMzJkZDUzNjQwYjlj LzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjBfAwQA 2XeGMA0GCSqGSIb3DQEBCwUAA4IBAQAa8DfJlXPHfiFT9qxZx7BSNVL4QZcHAWPS 3fpBcnkQst8z0Cm+cX74p1q7NZKjvxGhbq2P//+F6sMbqPWI9UZFBdSgtsxPgjFC vN6IjJ38jjJfHoZB1ydvgmWzXOzA5wiY4Oi+6btjD9fnGhG/fO/B8gs+8Q+nffIw bKbwUv0Nl4VdzvSchlkWfJlgknQ35l+8dVjnC6BrolA0TqcAnx6MzRxjbaiu3dKz i56pznZQmv3XAksjb5PZGR6+8oLNMaPNImt85PI4iHPFn+KZ6cbph1xXyMHxd5y+ B3P9FoUWh3Mrhm1hqFAHvQRvrIqABjGF4rkpv2z/PzhbDpcvVKjG -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:45 2026 by rpki-client