This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/YaqRyIn-AB_tvxqkStw-Njh6W2k.roa File: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (raw, json) Hash identifier: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo= Subject key identifier: 61:AA:91:C8:89:FE:00:1F:ED:BF:1A:A4:4A:DC:3E:36:38:7A:5B:69 Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Certificate serial: 019B7EA6AD8BDDF18FBAB923D5CAC099C9C0 Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/YaqRyIn-AB_tvxqkStw-Njh6W2k.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.147.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ad:8b:dd:f1:8f:ba:b9:23:d5:ca:c0:99:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61aa91c889fe001fedbf1aa44adc3e36387a5b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c6:98:b2:2a:38:b2:d0:a3:b4:75:5a:ad:ed: eb:d4:1d:47:3d:47:82:8d:9a:3f:ef:35:fc:08:6a: aa:d1:35:ff:5c:47:9e:c3:a4:af:68:9d:37:bf:50: ed:37:3f:56:ca:12:48:bd:22:2e:27:9b:c3:3c:86: 84:7b:fc:a7:69:69:95:de:57:7e:5e:83:43:94:06: 77:be:b7:89:fe:2f:80:24:00:ea:eb:ae:ba:91:cc: 34:fa:72:2d:a7:ff:35:4c:2e:ed:ea:ae:cb:27:de: 3d:7f:66:c0:41:b2:37:22:9a:35:ff:74:b5:cb:e3: 0e:62:66:6f:c5:c5:9d:46:01:be:8a:2c:34:9e:05: 27:3f:e7:5c:b0:2a:46:9d:40:ab:72:0a:c8:ad:f1: 90:c4:42:54:0e:0e:6b:d3:73:41:32:df:be:17:d1: 0f:f0:ee:ae:03:0d:d5:80:f7:9c:e9:10:d3:d8:e6: b8:7b:54:09:72:17:a3:a9:27:ea:bb:7a:be:05:31: 04:a6:d7:53:db:a8:fa:20:db:8b:f4:4f:82:af:8a: a1:e4:f5:33:c7:29:62:74:70:ae:69:22:23:73:6d: f0:60:19:c1:4a:5a:2b:af:bb:92:9b:73:ef:43:2f: 1e:94:86:65:88:c8:47:17:63:b6:42:ee:05:ee:54: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AA:91:C8:89:FE:00:1F:ED:BF:1A:A4:4A:DC:3E:36:38:7A:5B:69 X509v3 Authority Key Identifier: keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/YaqRyIn-AB_tvxqkStw-Njh6W2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.102.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:d6:c7:cc:2c:1d:f9:f4:84:dd:c6:1c:b8:45:6a:55:68:11: d0:d0:3a:fa:0b:af:8c:c0:04:68:21:b5:02:15:c7:02:61:c8: 9a:81:27:33:1a:c9:ba:d7:9e:ee:31:10:73:df:20:45:59:f2: 1e:8d:23:7d:4d:81:2e:1c:28:06:b4:0d:f1:9a:5e:07:50:89: df:8a:4e:c1:94:b6:20:cc:2b:e7:3c:f4:2b:4f:be:3b:e7:e0: c3:c0:3d:35:0d:89:85:5e:96:91:83:85:d4:98:19:8c:4c:45: d1:94:0f:dc:59:54:34:86:ce:2a:a0:4e:47:1f:f6:0f:b5:08: ac:92:ba:86:00:11:26:11:1c:ed:73:00:0d:39:f3:21:44:b6: cb:42:c5:33:cc:f4:ec:73:58:fc:4d:82:fa:13:72:db:89:ef: 64:2f:d3:4a:56:d4:01:f1:12:47:38:99:49:2f:8e:4b:9f:00: 39:b6:45:38:8d:a3:ab:24:e7:fa:25:a3:0c:40:48:ae:27:8e: cc:c1:6b:5d:d7:cb:f4:d7:ff:f8:65:44:88:ad:79:fc:4d:00: 08:29:5a:01:f9:0e:ac:fc:10:bb:78:35:4f:cf:d0:97:fe:77: d4:a0:32:2d:89:cd:9b:d5:06:39:47:09:c8:92:29:1b:bf:0e: ba:b1:c6:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pq2L3fGPurkj1crAmcnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1 M2Y4MzgwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWFhOTFjODg5ZmUwMDFmZWRiZjFhYTQ0YWRjM2UzNjM4N2E1YjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8aYsio4stCjtHVare3r1B1HPUeC jZo/7zX8CGqq0TX/XEeew6SvaJ03v1DtNz9WyhJIvSIuJ5vDPIaEe/ynaWmV3ld+ XoNDlAZ3vreJ/i+AJADq6666kcw0+nItp/81TC7t6q7LJ949f2bAQbI3Ipo1/3S1 y+MOYmZvxcWdRgG+iiw0ngUnP+dcsCpGnUCrcgrIrfGQxEJUDg5r03NBMt++F9EP 8O6uAw3VgPec6RDT2Oa4e1QJchejqSfqu3q+BTEEptdT26j6INuL9E+Cr4qh5PUz xylidHCuaSIjc23wYBnBSlorr7uSm3PvQy8elIZliMhHF2O2Qu4F7lQ/OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGGqkciJ/gAf7b8apErcPjY4eltpMB8GA1UdIwQY MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt MjlmMzM0ZTExYTE5LzEvWWFxUnlJbi1BQl90dnhxa1N0dy1Oamg2VzJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5 LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpNmMA0G CSqGSIb3DQEBCwUAA4IBAQAK1sfMLB359ITdxhy4RWpVaBHQ0Dr6C6+MwARoIbUC FccCYciagSczGsm6157uMRBz3yBFWfIejSN9TYEuHCgGtA3xml4HUInfik7BlLYg zCvnPPQrT7475+DDwD01DYmFXpaRg4XUmBmMTEXRlA/cWVQ0hs4qoE5HH/YPtQis krqGABEmERztcwANOfMhRLbLQsUzzPTsc1j8TYL6E3Lbie9kL9NKVtQB8RJHOJlJ L45LnwA5tkU4jaOrJOf6JaMMQEiuJ47MwWtd18v01//4ZUSIrXn8TQAIKVoB+Q6s /BC7eDVPz9CX/nfUoDItic2b1QY5RwnIkikbvw66scYv -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:09 2026 by rpki-client