This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/yHx7U3h6JZL7GjJtXadc-tvTWag.roa File: yHx7U3h6JZL7GjJtXadc-tvTWag.roa (raw, json) Hash identifier: bHjlqHL1rl0Vu0vK21UaruHUNcXQbTCMAh8NovcebO4= Subject key identifier: C8:7C:7B:53:78:7A:25:92:FB:1A:32:6D:5D:A7:5C:FA:DB:D3:59:A8 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B76EB2E512F1394650B2977C375B3AB28 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/yHx7U3h6JZL7GjJtXadc-tvTWag.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35608 IP address blocks: 193.19.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2e:51:2f:13:94:65:0b:29:77:c3:75:b3:ab:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c87c7b53787a2592fb1a326d5da75cfadbd359a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:53:9a:0d:81:f5:60:93:52:3e:b9:6f:49: 72:85:33:96:4e:9a:61:06:1e:9a:99:53:d0:f2:fe: db:3e:50:51:ee:fc:28:f3:49:26:a6:37:2c:49:51: 55:4f:a2:dc:8e:ca:f8:2e:fc:02:8d:01:6a:f1:6b: 93:72:17:80:2d:d8:aa:6c:9a:3b:03:96:0a:34:31: 71:df:c1:1b:f5:2e:79:57:4a:86:f6:e5:0f:d7:ef: 08:a3:17:a7:06:d5:3d:81:50:75:8c:3c:06:3c:a7: 39:11:b2:a0:31:d7:0c:87:81:9b:9b:05:69:cf:8a: 93:13:ba:50:fc:48:97:15:9f:35:d0:55:ff:e7:b2: 94:7d:4e:21:34:f8:fc:f9:3f:46:aa:bc:f9:26:38: 11:a1:ea:5e:a3:e3:ff:b5:9e:93:a7:28:82:f5:b6: 4f:ee:4f:91:df:43:13:8f:00:7e:8f:0c:fe:b9:15: 8d:bb:96:38:1c:75:10:db:29:9d:a6:17:4a:89:61: de:47:12:82:e8:bc:92:dd:09:6c:a6:c6:a8:7a:ae: 48:34:0d:f6:7c:d9:9a:8d:c0:02:e0:f7:e7:42:e3: e5:7a:e7:ec:dd:1f:ed:da:67:b0:47:48:e0:a3:17: 61:42:5d:57:9a:79:81:a4:f4:95:00:bc:a2:2a:33: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7C:7B:53:78:7A:25:92:FB:1A:32:6D:5D:A7:5C:FA:DB:D3:59:A8 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/yHx7U3h6JZL7GjJtXadc-tvTWag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.111.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:10:e3:c5:0b:11:95:d9:d4:e4:97:2e:b5:a8:5d:9b:58:b0: 4d:46:06:ed:2c:b5:1b:4d:b6:b4:39:b4:26:cf:76:40:c1:24: 3f:b2:58:0a:2c:4f:df:82:98:04:6c:5b:6b:c6:fd:ac:7b:b3: 06:67:b2:ad:f2:26:62:2f:82:20:1f:c8:f0:b4:64:03:0f:2e: 0b:73:cc:32:b9:b3:e3:7a:53:c6:85:36:6c:21:24:83:04:0b: b1:7c:02:89:a1:85:82:23:a0:66:9c:56:1d:a8:0d:d4:f8:56: f6:08:21:da:4d:85:ea:e9:ff:2a:88:40:dc:92:26:70:7d:77: 48:f4:6d:84:fe:6a:cf:a8:b2:6c:9a:4a:94:cd:1c:ae:d1:80: 9e:b1:a0:24:09:20:3b:3b:02:f8:81:48:50:1e:ac:d9:16:33: bc:da:19:6e:0e:a0:2d:88:fe:bd:93:fc:b8:f3:81:e8:be:ef: 39:7a:6f:42:d7:9f:b9:1c:0d:58:cb:20:03:34:df:b1:70:a2: b3:f3:af:d0:c8:ec:c2:e6:6c:45:39:e0:6a:f4:b9:b7:7b:71: 34:f1:46:ce:5d:f6:b9:7a:51:47:41:e1:57:bb:d8:aa:41:91: a4:9e:37:11:3a:55:53:de:27:8e:63:ca:56:fd:19:a4:bf:36: c1:dc:27:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26y5RLxOUZQspd8N1s6soMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODdjN2I1Mzc4N2EyNTkyZmIxYTMyNmQ1ZGE3NWNmYWRiZDM1OWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNdTmg2B9WCTUj65b0lyhTOWTpph Bh6amVPQ8v7bPlBR7vwo80kmpjcsSVFVT6Lcjsr4LvwCjQFq8WuTcheALdiqbJo7 A5YKNDFx38Eb9S55V0qG9uUP1+8IoxenBtU9gVB1jDwGPKc5EbKgMdcMh4GbmwVp z4qTE7pQ/EiXFZ810FX/57KUfU4hNPj8+T9Gqrz5JjgRoepeo+P/tZ6TpyiC9bZP 7k+R30MTjwB+jwz+uRWNu5Y4HHUQ2ymdphdKiWHeRxKC6LyS3Qlspsaoeq5INA32 fNmajcAC4PfnQuPleufs3R/t2mewR0jgoxdhQl1XmnmBpPSVALyiKjP5wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMh8e1N4eiWS+xoybV2nXPrb01moMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEveUh4N1UzaDZKWkw3R2pKdFhhZGMtdHZUV2FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRNvMA0G CSqGSIb3DQEBCwUAA4IBAQA6EOPFCxGV2dTkly61qF2bWLBNRgbtLLUbTba0ObQm z3ZAwSQ/slgKLE/fgpgEbFtrxv2se7MGZ7Kt8iZiL4IgH8jwtGQDDy4Lc8wyubPj elPGhTZsISSDBAuxfAKJoYWCI6BmnFYdqA3U+Fb2CCHaTYXq6f8qiEDckiZwfXdI 9G2E/mrPqLJsmkqUzRyu0YCesaAkCSA7OwL4gUhQHqzZFjO82hluDqAtiP69k/y4 84Hovu85em9C15+5HA1YyyADNN+xcKKz86/QyOzC5mxFOeBq9Lm3e3E08UbOXfa5 elFHQeFXu9iqQZGknjcROlVT3ieOY8pW/RmkvzbB3CdW -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:02 2026 by rpki-client