This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/yh2nwizsFIU9yQ_Riatp8tFdGRE.roa File: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (raw, json) Hash identifier: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw= Subject key identifier: CA:1D:A7:C2:2C:EC:14:85:3D:C9:0F:D1:89:AB:69:F2:D1:5D:19:11 Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af Certificate serial: 019B7F14FF79452E3146EC7118F453D8300A Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/yh2nwizsFIU9yQ_Riatp8tFdGRE.roa Signing time: Fri 02 Jan 2026 14:20:41 +0000 ROA not before: Fri 02 Jan 2026 14:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.105.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 20:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ff:79:45:2e:31:46:ec:71:18:f4:53:d8:30:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af Validity Not Before: Jan 2 14:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca1da7c22cec14853dc90fd189ab69f2d15d1911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:2c:42:c7:db:3f:80:55:e0:7f:99:e0:1b: 8c:cc:96:d1:63:43:c8:9f:39:96:b1:d7:2f:54:c3: 7e:36:4f:e7:df:be:37:f8:e2:3a:d9:a7:7a:c7:ed: 4c:a7:ab:60:02:1b:d5:98:54:99:47:c0:bc:84:5e: 7e:de:af:de:31:1c:fd:f6:ae:2b:b6:81:47:19:5d: c7:e8:43:ab:bd:e7:56:f9:3e:37:61:57:a0:05:b7: 46:74:ba:b6:1d:47:39:20:dd:80:31:22:c9:5a:0c: cd:7e:fe:9e:dd:ff:0d:19:e5:99:63:3b:9c:2f:aa: bc:e5:1b:40:fb:93:82:21:45:c3:6a:3b:0d:60:b3: f8:2f:2b:22:51:8e:43:4c:e2:aa:49:5f:5a:fb:7d: ff:0f:57:15:f4:e5:33:d8:a4:19:d9:27:17:4d:11: 4e:ab:4d:d9:66:01:3a:60:49:e7:c1:4c:77:5c:b1: 1d:89:db:73:94:e7:cc:af:9f:c8:7e:f6:29:55:79: e9:7e:cd:c3:49:26:cc:e6:cf:16:3a:c8:f4:05:af: 61:04:51:60:bd:3b:db:ce:9b:98:a2:93:34:8a:c8: 9a:72:f9:da:94:1c:18:a3:fc:e2:2b:73:01:0e:f6: 9d:6d:97:86:7d:b2:97:92:57:4f:fd:5e:bf:9a:f2: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1D:A7:C2:2C:EC:14:85:3D:C9:0F:D1:89:AB:69:F2:D1:5D:19:11 X509v3 Authority Key Identifier: keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/yh2nwizsFIU9yQ_Riatp8tFdGRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.212.0/24 Signature Algorithm: sha256WithRSAEncryption 11:06:6c:79:85:a5:df:a4:94:57:c3:81:f4:18:17:c7:5f:b4: 6c:14:15:08:66:6b:1c:c0:b7:2c:15:bf:26:4c:bb:2b:c9:c8: 3b:f1:64:dc:da:44:f3:87:ee:80:e9:9a:59:d3:73:c6:71:5c: 4a:d6:7d:95:a7:29:12:86:20:34:a0:32:91:d5:cf:02:f1:8a: b4:8d:6b:82:59:62:fd:2f:11:30:f6:69:65:d9:66:8f:cc:ae: eb:a7:b5:0e:c8:3f:da:9e:93:f9:52:36:41:52:d5:d2:de:a7: ce:3b:0b:96:21:72:83:7b:eb:98:82:9c:b0:cc:1b:2d:66:a7: 8b:a0:c5:5d:84:a9:bf:d4:92:c0:24:d2:ca:15:24:bb:da:1b: 5b:35:d3:85:19:2c:7d:14:58:e8:01:87:c1:df:2a:d0:5c:9e: e8:a1:e2:b4:cf:fb:3f:a0:54:ac:50:ce:8e:38:df:7b:34:35: 09:67:de:5f:8e:05:2d:25:6a:39:c6:77:c5:10:da:cd:22:71: b1:3a:cb:8d:44:4a:b3:01:a7:87:89:99:ef:fe:5b:59:ec:4b: 22:cc:92:b8:bb:20:5a:ea:0f:12:ee:e9:6b:8b:47:44:70:ce: c1:77:d7:f7:ad:dd:71:56:b3:fd:0c:52:99:bb:bd:e5:6b:8f: 95:95:a6:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FP95RS4xRuxxGPRT2DAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3 MDc2YWYwHhcNMjYwMTAyMTQyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFkYTdjMjJjZWMxNDg1M2RjOTBmZDE4OWFiNjlmMmQxNWQxOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qEsQsfbP4BV4H+Z4BuMzJbRY0PI nzmWsdcvVMN+Nk/n3743+OI62ad6x+1Mp6tgAhvVmFSZR8C8hF5+3q/eMRz99q4r toFHGV3H6EOrvedW+T43YVegBbdGdLq2HUc5IN2AMSLJWgzNfv6e3f8NGeWZYzuc L6q85RtA+5OCIUXDajsNYLP4LysiUY5DTOKqSV9a+33/D1cV9OUz2KQZ2ScXTRFO q03ZZgE6YEnnwUx3XLEdidtzlOfMr5/IfvYpVXnpfs3DSSbM5s8WOsj0Ba9hBFFg vTvbzpuYopM0isiacvnalBwYo/ziK3MBDvadbZeGfbKXkldP/V6/mvKqTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFModp8Is7BSFPckP0YmrafLRXRkRMB8GA1UdIwQY MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt ZTBhYTg2ZDI1MGUzLzEveWgybndpenNGSVU5eVFfUmlhdHA4dEZkR1JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnUMA0G CSqGSIb3DQEBCwUAA4IBAQARBmx5haXfpJRXw4H0GBfHX7RsFBUIZmscwLcsFb8m TLsrycg78WTc2kTzh+6A6ZpZ03PGcVxK1n2VpykShiA0oDKR1c8C8Yq0jWuCWWL9 LxEw9mll2WaPzK7rp7UOyD/anpP5UjZBUtXS3qfOOwuWIXKDe+uYgpywzBstZqeL oMVdhKm/1JLAJNLKFSS72htbNdOFGSx9FFjoAYfB3yrQXJ7ooeK0z/s/oFSsUM6O ON97NDUJZ95fjgUtJWo5xnfFENrNInGxOsuNREqzAaeHiZnv/ltZ7EsizJK4uyBa 6g8S7ulri0dEcM7Bd9f3rd1xVrP9DFKZu73la4+VlaYd -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:24 2026 by rpki-client