This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_yJ6y_aHi-guGB02va4zrTDyHLk.roa File: _yJ6y_aHi-guGB02va4zrTDyHLk.roa (raw, json) Hash identifier: peko+Zaz8RZgMNQL2TbQDX+/dI2iSmnUUa9ky/tD5DE= Subject key identifier: FF:22:7A:CB:F6:87:8B:E8:2E:18:1D:36:BD:AE:33:AD:30:F2:1C:B9 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8559DC27EE3E7119063E8152B33A00 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_yJ6y_aHi-guGB02va4zrTDyHLk.roa Signing time: Fri 02 Jan 2026 16:23:24 +0000 ROA not before: Fri 02 Jan 2026 16:23:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198037 IP address blocks: 192.124.189.0/24 maxlen: 24 194.58.41.0/24 maxlen: 24 194.87.25.0/24 maxlen: 24 195.133.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:59:dc:27:ee:3e:71:19:06:3e:81:52:b3:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff227acbf6878be82e181d36bdae33ad30f21cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:bc:3f:2f:0c:bc:56:23:a5:03:ca:d8:37: a0:37:e4:2b:34:3e:58:af:24:c2:bc:8d:61:7e:ca: 1c:c2:85:b7:c2:fa:65:a2:df:11:5a:77:ab:ba:8c: 07:2e:f4:6f:5c:ec:90:7f:34:ae:6e:93:59:0e:5f: 6f:f2:dd:a3:03:8b:d4:64:eb:d7:66:65:fd:dd:0f: d6:6f:7a:bc:0b:6e:8a:0c:f7:c8:c3:2e:72:49:0a: 3c:8e:5f:de:86:44:b3:c0:f8:04:43:a4:92:93:dc: a9:86:bc:e1:c2:56:1e:61:b2:2f:7d:31:7b:a2:e8: c3:d2:9a:ff:14:21:a8:2e:29:1b:6c:28:13:8e:a5: 1e:07:f6:8b:68:6a:c8:60:98:a7:87:26:d6:e3:1e: 9e:88:34:7f:2f:96:71:4e:2c:30:8c:c6:71:4d:f2: 20:63:09:fd:02:f1:e3:73:cf:61:1d:cf:58:ad:37: c8:52:0e:71:8e:7a:61:f4:ed:94:34:53:80:6a:0f: 13:f1:a9:9a:15:eb:04:47:c4:cc:78:3d:94:77:f6: 4b:dc:bd:ac:65:58:cd:23:1e:a1:da:84:3f:fa:64: ac:7b:7a:8b:62:ee:de:88:63:e3:ea:b2:1b:d8:ae: 7b:88:cf:b3:48:33:54:71:4a:81:c0:ce:9d:d8:ed: 38:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:22:7A:CB:F6:87:8B:E8:2E:18:1D:36:BD:AE:33:AD:30:F2:1C:B9 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_yJ6y_aHi-guGB02va4zrTDyHLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.189.0/24 194.58.41.0/24 194.87.25.0/24 195.133.84.0/24 Signature Algorithm: sha256WithRSAEncryption 06:b3:ba:6f:bf:62:b2:54:f0:1d:c8:0d:9d:db:7f:d9:15:25: da:da:7b:68:1d:4f:3f:7f:33:ee:0e:8b:dd:af:7a:ae:5a:22: cb:ca:51:65:5f:e3:be:4a:2a:03:a4:d8:37:cb:61:8d:d8:ac: 38:99:d3:92:33:22:a1:0a:2a:1e:34:b8:ea:30:89:b2:a6:68: f3:e0:56:c3:6e:76:5e:f5:00:c4:79:ef:19:2e:a9:55:39:1d: b8:d7:0f:28:59:13:14:82:6a:d1:bf:bf:82:a4:d0:66:eb:69: 78:60:71:46:3e:42:d3:90:1c:a8:c6:a7:b8:ff:66:5c:f2:76: 8d:6c:38:c1:74:5a:70:5a:08:51:75:ac:54:bf:62:77:86:70: 67:6f:34:e2:31:12:b7:eb:ff:f3:df:96:ed:b0:db:6c:69:46: 53:d9:67:9c:3d:09:e8:c2:80:e9:0a:c7:e4:a6:65:cf:0c:f1: b2:0e:f0:d1:f3:b9:da:ea:be:78:1e:d1:ba:49:73:df:59:c8: 0e:1c:b4:c0:37:1b:3b:5f:9e:42:a4:e8:9a:8e:67:1a:fc:71: 66:c0:c0:e2:4d:91:c8:49:a3:01:77:71:01:7f:6e:2f:92:17: f4:e7:6d:75:76:42:82:2b:f8:aa:87:6a:44:4a:09:af:83:40: 09:f6:9a:5a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hVncJ+4+cRkGPoFSszoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjIyN2FjYmY2ODc4YmU4MmUxODFkMzZiZGFlMzNhZDMwZjIxY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RC8Py8MvFYjpQPK2DegN+QrND5Y ryTCvI1hfsocwoW3wvplot8RWneruowHLvRvXOyQfzSubpNZDl9v8t2jA4vUZOvX ZmX93Q/Wb3q8C26KDPfIwy5ySQo8jl/ehkSzwPgEQ6SSk9yphrzhwlYeYbIvfTF7 oujD0pr/FCGoLikbbCgTjqUeB/aLaGrIYJinhybW4x6eiDR/L5ZxTiwwjMZxTfIg Ywn9AvHjc89hHc9YrTfIUg5xjnph9O2UNFOAag8T8amaFesER8TMeD2Ud/ZL3L2s ZVjNIx6h2oQ/+mSse3qLYu7eiGPj6rIb2K57iM+zSDNUcUqBwM6d2O04LwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFP8iesv2h4voLhgdNr2uM60w8hy5MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvX3lKNnlfYUhpLWd1R0IwMnZhNHpyVER5SExrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwHy9AwQA wjopAwQAwlcZAwQAw4VUMA0GCSqGSIb3DQEBCwUAA4IBAQAGs7pvv2KyVPAdyA2d 23/ZFSXa2ntoHU8/fzPuDovdr3quWiLLylFlX+O+SioDpNg3y2GN2Kw4mdOSMyKh CioeNLjqMImypmjz4FbDbnZe9QDEee8ZLqlVOR241w8oWRMUgmrRv7+CpNBm62l4 YHFGPkLTkByoxqe4/2Zc8naNbDjBdFpwWghRdaxUv2J3hnBnbzTiMRK36//z35bt sNtsaUZT2WecPQnowoDpCsfkpmXPDPGyDvDR87na6r54HtG6SXPfWcgOHLTANxs7 X55CpOiajmca/HFmwMDiTZHISaMBd3EBf24vkhf05211dkKCK/iqh2pESgmvg0AJ 9ppa -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:59 2026 by rpki-client