This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yYpgAESnbxxGrQUST7WRu5hP368.roa File: yYpgAESnbxxGrQUST7WRu5hP368.roa (raw, json) Hash identifier: lBB6cXAO6iM329AXKQMtDqVD1cgdeYP7FG8zKCAcB84= Subject key identifier: C9:8A:60:00:44:A7:6F:1C:46:AD:05:12:4F:B5:91:BB:98:4F:DF:AF Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7812B464EB65946CEAE62FD980BF1 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yYpgAESnbxxGrQUST7WRu5hP368.roa Signing time: Fri 02 Jan 2026 12:21:05 +0000 ROA not before: Fri 02 Jan 2026 12:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196894 IP address blocks: 178.185.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:81:2b:46:4e:b6:59:46:ce:ae:62:fd:98:0b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c98a600044a76f1c46ad05124fb591bb984fdfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:cb:6a:ad:09:db:54:c0:c6:21:05:28:aa: 70:a6:b7:a2:be:f8:d3:94:9f:49:3e:04:23:e8:db: 25:06:d3:58:19:a6:37:15:54:8b:40:66:99:1f:d6: e3:06:c4:4e:f9:41:69:a1:02:89:d3:11:45:29:e0: 85:a2:22:39:ef:be:47:b9:3a:1c:9a:91:df:48:a5: c2:00:f1:0a:00:32:e8:10:82:8f:12:1e:49:83:48: 1f:a3:7f:6d:d1:45:6c:1c:76:14:36:79:12:90:b4: 52:da:a8:b9:80:e4:88:68:3e:8a:82:dc:7f:ac:d2: a5:9f:a5:4f:f6:f5:57:d8:a5:55:43:9c:41:4c:42: 31:d4:55:a4:b1:6d:08:17:46:cf:e5:85:4e:b4:c5: cb:36:8c:34:ef:6e:de:f1:ab:87:cc:fd:58:4d:7a: 26:98:8b:9a:20:ab:4e:3a:15:58:68:39:7b:2a:57: 74:b0:7f:b8:74:1f:8d:ee:be:3e:00:e3:b1:47:85: 54:9a:8f:70:86:b0:ea:a6:df:c5:56:a8:6d:71:96: 2f:8e:f6:59:4e:09:9d:f5:4e:51:03:17:79:13:cd: 35:12:b9:08:3f:c5:2c:69:d2:27:31:e7:05:02:ca: 9d:13:95:1d:91:cd:78:8c:66:c8:ca:3b:30:6b:6a: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:60:00:44:A7:6F:1C:46:AD:05:12:4F:B5:91:BB:98:4F:DF:AF X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yYpgAESnbxxGrQUST7WRu5hP368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.185.243.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:c1:11:90:fe:07:b7:e4:58:ab:48:da:fe:f4:61:e6:62:93: ce:be:d9:6a:8d:fc:12:2e:5a:93:69:c4:67:3d:34:4f:d6:40: 17:0b:12:20:e0:6f:a9:fa:8b:cd:5c:8f:b5:ba:cb:56:46:73: db:00:ac:f2:0c:d2:5d:00:92:f7:51:2f:8b:58:1a:47:50:44: 8c:6b:61:e3:71:59:0d:5f:3f:d6:73:25:49:e2:07:08:92:88: 95:49:ed:00:42:61:16:06:55:a0:64:7a:ca:e3:c7:45:a2:8a: ba:68:e6:96:27:0f:c4:cc:d1:03:d4:af:a7:d4:6e:91:21:fb: e6:3e:ae:b4:00:a3:16:5f:a9:e7:29:74:16:6a:4b:0d:9a:84: 86:94:ce:40:f3:93:e3:26:49:0d:65:4b:0c:a2:b8:9b:7d:3d: 54:f3:d3:93:24:b4:26:7c:8d:e3:f4:51:fb:a0:8d:9d:92:ed: b6:75:02:06:50:f2:d5:7f:49:c5:77:2c:0c:3a:f7:ec:d9:de: 52:9c:43:39:a0:f1:bf:5a:8e:cc:6d:27:28:44:76:a0:8b:ec: 49:e4:5e:71:ae:08:11:a9:ca:ba:4d:08:45:9b:d7:09:f1:85: 3f:9c:ca:d1:0b:79:a2:42:ca:4a:21:95:0b:35:0e:b2:08:76: b3:f0:63:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4ErRk62WUbOrmL9mAvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOThhNjAwMDQ0YTc2ZjFjNDZhZDA1MTI0ZmI1OTFiYjk4NGZkZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXXLaq0J21TAxiEFKKpwpreivvjT lJ9JPgQj6NslBtNYGaY3FVSLQGaZH9bjBsRO+UFpoQKJ0xFFKeCFoiI5775HuToc mpHfSKXCAPEKADLoEIKPEh5Jg0gfo39t0UVsHHYUNnkSkLRS2qi5gOSIaD6Kgtx/ rNKln6VP9vVX2KVVQ5xBTEIx1FWksW0IF0bP5YVOtMXLNow0727e8auHzP1YTXom mIuaIKtOOhVYaDl7Kld0sH+4dB+N7r4+AOOxR4VUmo9whrDqpt/FVqhtcZYvjvZZ Tgmd9U5RAxd5E801ErkIP8UsadInMecFAsqdE5Udkc14jGbIyjswa2oYJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmKYABEp28cRq0FEk+1kbuYT9+vMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEveVlwZ0FFU25ieHhHclFVU1Q3V1J1NWhQMzY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsrnzMA0G CSqGSIb3DQEBCwUAA4IBAQBPwRGQ/ge35FirSNr+9GHmYpPOvtlqjfwSLlqTacRn PTRP1kAXCxIg4G+p+ovNXI+1ustWRnPbAKzyDNJdAJL3US+LWBpHUESMa2HjcVkN Xz/WcyVJ4gcIkoiVSe0AQmEWBlWgZHrK48dFooq6aOaWJw/EzNED1K+n1G6RIfvm Pq60AKMWX6nnKXQWaksNmoSGlM5A85PjJkkNZUsMoribfT1U89OTJLQmfI3j9FH7 oI2dku22dQIGUPLVf0nFdywMOvfs2d5SnEM5oPG/Wo7MbScoRHagi+xJ5F5xrggR qcq6TQhFm9cJ8YU/nMrRC3miQspKIZULNQ6yCHaz8GOT -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:55 2026 by rpki-client