This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa File: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (raw, json) Hash identifier: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU= Subject key identifier: 63:D0:11:54:6F:E1:02:6E:27:22:B0:93:4F:94:7D:98:D1:36:02:2F Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Certificate serial: 019B7FF20EA0BEB9E5209BB5F27FDACD8AB9 Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa Signing time: Fri 02 Jan 2026 18:22:08 +0000 ROA not before: Fri 02 Jan 2026 18:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.160.155.0/24 maxlen: 24 2a0c:9e40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:0e:a0:be:b9:e5:20:9b:b5:f2:7f:da:cd:8a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Validity Not Before: Jan 2 18:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63d011546fe1026e2722b0934f947d98d136022f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:31:01:76:28:70:e1:e3:4e:aa:1e:d4:a8: 29:62:fd:90:25:d5:97:c9:56:01:0e:65:be:c4:3e: f1:81:af:13:7b:d2:c9:56:1e:d3:7d:92:b9:21:88: 74:a8:3a:62:07:81:96:79:1c:d7:2f:5c:7d:db:53: bb:33:39:02:d4:75:d6:c0:ef:1a:62:12:55:44:c5: 59:cd:0e:08:f7:42:ca:ff:1a:eb:5f:08:1d:55:e8: ba:eb:42:41:16:33:bf:59:26:44:8a:b1:77:0f:46: 94:89:66:bd:b1:9b:93:3c:74:bc:4c:f1:07:e7:ef: 24:3a:c3:16:98:61:3e:02:b7:17:53:aa:61:a0:b5: 0a:dc:24:ec:69:d6:ed:13:bf:31:46:a6:cd:a3:50: 50:35:2a:95:63:54:bd:79:15:af:3d:3b:1a:bc:42: ed:ba:1a:6e:4c:9d:f3:d6:c6:b8:33:ea:7e:7a:08: ea:a8:e4:28:c8:f7:ce:44:5a:94:3a:08:ac:2e:07: 99:07:da:ca:b1:b6:ea:05:30:d6:49:76:52:05:4e: 95:5a:0f:06:d7:fd:dc:21:82:ae:fc:b7:98:d1:6c: 93:16:d7:fa:fc:1f:03:ca:4a:b7:b1:f7:e7:c2:d3: ce:7d:a7:5a:04:85:92:82:cb:68:8f:7b:10:b7:10: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D0:11:54:6F:E1:02:6E:27:22:B0:93:4F:94:7D:98:D1:36:02:2F X509v3 Authority Key Identifier: keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.155.0/24 IPv6: 2a0c:9e40:3::/48 Signature Algorithm: sha256WithRSAEncryption 78:67:1a:0f:cf:bf:03:42:3e:64:67:09:a0:29:14:9a:66:9c: 48:42:5d:1c:1b:5b:3e:dc:d5:db:d8:7c:51:8e:0a:91:9b:35: 98:cb:42:84:bd:60:7f:ae:69:4d:57:6c:fa:ad:99:75:8a:cd: 5e:5e:5c:26:d2:8e:45:2f:8d:96:a2:6f:fd:9c:27:43:46:17: 58:87:8e:0f:41:62:1b:ba:28:f0:84:18:d2:44:d4:7a:b8:60: d9:0d:95:06:6c:d6:65:eb:30:74:a3:a4:52:89:b3:1a:c0:4d: 57:d2:33:32:b5:04:3c:b8:ce:13:1a:9d:31:84:8f:81:96:24: 53:ea:76:be:71:02:1e:24:17:a0:ce:35:95:1f:24:7d:25:2e: 11:5e:80:f7:7b:cb:4d:18:ad:32:60:1f:aa:da:07:3c:e2:6f: e0:e5:b2:4d:31:af:96:51:3a:91:37:e1:50:e4:6d:10:99:e0: b0:91:a0:dc:1b:2b:ee:04:d6:64:c9:c7:3e:fb:57:ee:44:a4: 65:97:a9:80:f9:50:15:bd:b0:86:78:7a:86:9e:20:4a:55:3e: 04:0e:10:60:1c:5b:d7:5a:53:5b:04:3d:a7:b1:e2:ef:61:89: 71:36:dc:38:91:32:30:9c:63:da:27:d3:3e:da:94:d2:06:c0: ed:cb:29:71 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8g6gvrnlIJu18n/azYq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk NmE2ZWIwHhcNMjYwMTAyMTgyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2QwMTE1NDZmZTEwMjZlMjcyMmIwOTM0Zjk0N2Q5OGQxMzYwMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUQxAXYocOHjTqoe1KgpYv2QJdWX yVYBDmW+xD7xga8Te9LJVh7TfZK5IYh0qDpiB4GWeRzXL1x921O7MzkC1HXWwO8a YhJVRMVZzQ4I90LK/xrrXwgdVei660JBFjO/WSZEirF3D0aUiWa9sZuTPHS8TPEH 5+8kOsMWmGE+ArcXU6phoLUK3CTsadbtE78xRqbNo1BQNSqVY1S9eRWvPTsavELt uhpuTJ3z1sa4M+p+egjqqOQoyPfORFqUOgisLgeZB9rKsbbqBTDWSXZSBU6VWg8G 1/3cIYKu/LeY0WyTFtf6/B8Dykq3sffnwtPOfadaBIWSgstoj3sQtxDJLQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGPQEVRv4QJuJyKwk0+UfZjRNgIvMB8GA1UdIwQY MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt ZGIwZGNjMDhmNDUyLzEvWTlBUlZHX2hBbTRuSXJDVFQ1UjltTkUyQWk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwaCbMA8E AgACMAkDBwAqDJ5AAAMwDQYJKoZIhvcNAQELBQADggEBAHhnGg/PvwNCPmRnCaAp FJpmnEhCXRwbWz7c1dvYfFGOCpGbNZjLQoS9YH+uaU1XbPqtmXWKzV5eXCbSjkUv jZaib/2cJ0NGF1iHjg9BYhu6KPCEGNJE1Hq4YNkNlQZs1mXrMHSjpFKJsxrATVfS MzK1BDy4zhManTGEj4GWJFPqdr5xAh4kF6DONZUfJH0lLhFegPd7y00YrTJgH6ra Bzzib+Dlsk0xr5ZROpE34VDkbRCZ4LCRoNwbK+4E1mTJxz77V+5EpGWXqYD5UBW9 sIZ4eoaeIEpVPgQOEGAcW9daU1sEPaex4u9hiXE23DiRMjCcY9on0z7alNIGwO3L KXE= -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:27 2026 by rpki-client