This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Yi3htSxilAdbXs5P_6cWiNEB0FI.roa File: Yi3htSxilAdbXs5P_6cWiNEB0FI.roa (raw, json) Hash identifier: Vc/v+UXUXWkGROGy4hgM9AyyCuD4sS8hKmRKGG1RiZI= Subject key identifier: 62:2D:E1:B5:2C:62:94:07:5B:5E:CE:4F:FF:A7:16:88:D1:01:D0:52 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F857C8F4C7D78ABD660206DE95CE62E Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Yi3htSxilAdbXs5P_6cWiNEB0FI.roa Signing time: Fri 02 Jan 2026 16:23:32 +0000 ROA not before: Fri 02 Jan 2026 16:23:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398343 IP address blocks: 193.124.24.0/24 maxlen: 24 194.135.104.0/24 maxlen: 24 212.193.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:7c:8f:4c:7d:78:ab:d6:60:20:6d:e9:5c:e6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=622de1b52c6294075b5ece4fffa71688d101d052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2c:44:95:c9:5f:33:b8:e4:a8:4b:5b:e2:ff: 4e:98:38:34:67:2a:1e:0c:81:a2:8b:e4:a6:b6:b0: 70:41:64:11:eb:99:7a:84:bf:b7:e7:33:a9:1b:19: 26:21:51:34:10:53:1c:96:6f:a5:f6:00:97:83:74: df:64:89:c3:f4:ed:c0:cf:44:1a:0d:91:4e:16:16: 14:d7:5c:40:48:e6:33:8b:45:ce:6d:95:91:27:9e: ec:a0:ad:f3:a0:7c:f5:a7:42:25:52:bf:bc:97:28: cf:ea:d4:f3:6e:f8:ec:c5:91:da:9a:14:74:00:10: ff:d5:84:81:66:d8:49:71:d0:5b:39:3f:fa:ab:42: 02:31:be:4a:d5:a6:73:16:f6:e2:c8:04:93:3c:e3: f6:da:39:6d:8b:5b:9c:fc:d2:e3:b1:de:2c:ab:8d: 97:d8:30:e3:15:98:a1:dc:0c:2e:fd:43:4a:fc:22: c7:74:f9:52:ed:62:32:4f:45:c4:1c:e7:c0:10:3d: 8e:72:54:dd:48:4e:e0:53:c7:8e:94:4c:78:e3:6b: e2:97:09:b6:51:4e:cd:58:9a:3a:93:65:34:b9:e3: 42:34:d9:13:6b:14:9e:6b:8f:a3:72:21:a1:42:5d: 02:f1:d6:9a:ac:88:b8:87:76:09:59:4c:50:86:46: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:E1:B5:2C:62:94:07:5B:5E:CE:4F:FF:A7:16:88:D1:01:D0:52 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Yi3htSxilAdbXs5P_6cWiNEB0FI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.124.24.0/24 194.135.104.0/24 212.193.25.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:cc:c2:61:75:e8:38:89:c4:db:e2:20:09:14:7f:0d:4e:e0: 1e:dd:69:9f:60:c0:78:08:38:06:4d:36:54:9d:ff:39:6c:be: 70:df:80:6f:72:0f:0e:24:2f:95:11:4f:db:a0:0e:ca:e8:9c: fb:2e:14:9e:d3:92:7a:a8:29:36:be:1c:08:01:52:9b:97:c3: 88:79:98:0f:cb:86:df:f8:fe:e5:44:15:7d:e6:36:5a:35:96: 42:07:bd:27:2a:10:79:1f:e3:e1:1f:a8:93:19:40:fa:54:2a: 6a:17:b8:e5:af:31:31:c4:d2:46:97:7a:c3:91:7c:4c:a2:ad: 48:9a:a9:48:16:c3:a2:fe:49:08:57:46:14:3b:90:20:a3:41: 4b:4f:5a:62:58:4c:0d:99:43:54:e4:3a:84:98:0a:a0:1f:a8: ab:c1:21:d8:13:01:1a:08:d3:f4:70:99:4c:ce:80:2d:66:91: c3:c5:52:3e:bc:7e:e1:8b:fb:4e:be:77:49:14:49:6c:fb:31: b2:03:ff:d5:b8:9b:75:ba:44:eb:bf:b2:79:07:1c:0a:ca:cb: 02:84:40:37:09:b1:79:ea:95:ba:6a:db:60:0e:c3:08:28:23: bd:a6:d6:f2:3f:d9:50:a7:d2:d8:07:55:3b:29:e1:c9:35:6f: a1:ee:1a:81 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hXyPTH14q9ZgIG3pXOYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjJkZTFiNTJjNjI5NDA3NWI1ZWNlNGZmZmE3MTY4OGQxMDFkMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SxElclfM7jkqEtb4v9OmDg0Zyoe DIGii+SmtrBwQWQR65l6hL+35zOpGxkmIVE0EFMclm+l9gCXg3TfZInD9O3Az0Qa DZFOFhYU11xASOYzi0XObZWRJ57soK3zoHz1p0IlUr+8lyjP6tTzbvjsxZHamhR0 ABD/1YSBZthJcdBbOT/6q0ICMb5K1aZzFvbiyASTPOP22jlti1uc/NLjsd4sq42X 2DDjFZih3Awu/UNK/CLHdPlS7WIyT0XEHOfAED2OclTdSE7gU8eOlEx442vilwm2 UU7NWJo6k2U0ueNCNNkTaxSea4+jciGhQl0C8daarIi4h3YJWUxQhka8UwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGIt4bUsYpQHW17OT/+nFojRAdBSMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvWWkzaHRTeGlsQWRiWHM1UF82Y1dpTkVCMEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwXwYAwQA wodoAwQA1MEZMA0GCSqGSIb3DQEBCwUAA4IBAQANzMJhdeg4icTb4iAJFH8NTuAe 3WmfYMB4CDgGTTZUnf85bL5w34Bvcg8OJC+VEU/boA7K6Jz7LhSe05J6qCk2vhwI AVKbl8OIeZgPy4bf+P7lRBV95jZaNZZCB70nKhB5H+PhH6iTGUD6VCpqF7jlrzEx xNJGl3rDkXxMoq1ImqlIFsOi/kkIV0YUO5Ago0FLT1piWEwNmUNU5DqEmAqgH6ir wSHYEwEaCNP0cJlMzoAtZpHDxVI+vH7hi/tOvndJFEls+zGyA//VuJt1ukTrv7J5 BxwKyssChEA3CbF56pW6attgDsMIKCO9ptbyP9lQp9LYB1U7KeHJNW+h7hqB -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:28 2026 by rpki-client