This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/ybXPtjtytnp4awj6RoDLh-SgWqk.roa File: ybXPtjtytnp4awj6RoDLh-SgWqk.roa (raw, json) Hash identifier: yT3G41aEzQUb5MKxunseT7S7bGL9k6nsWABzcpJ77H0= Subject key identifier: C9:B5:CF:B6:3B:72:B6:7A:78:6B:08:FA:46:80:CB:87:E4:A0:5A:A9 Certificate issuer: /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91 Certificate serial: 019B790FF93A5AE67AF6771BD042F99A0EF7 Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/ybXPtjtytnp4awj6RoDLh-SgWqk.roa Signing time: Thu 01 Jan 2026 10:17:28 +0000 ROA not before: Thu 01 Jan 2026 10:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200311 IP address blocks: 194.60.212.0/24 maxlen: 24 194.60.213.0/24 maxlen: 24 194.60.214.0/24 maxlen: 24 194.60.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f9:3a:5a:e6:7a:f6:77:1b:d0:42:f9:9a:0e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91 Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9b5cfb63b72b67a786b08fa4680cb87e4a05aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:03:56:16:81:2d:01:be:0a:65:0e:2e:a2: c2:f1:35:c8:fb:b8:35:27:c6:f0:7d:c5:d5:ee:b5: a8:9a:fe:5e:bd:f6:ff:57:61:36:18:bf:d4:c6:00: 8b:a0:a4:49:f2:ed:45:89:e4:2d:60:4b:bf:ea:73: c7:da:24:cb:a7:fd:29:4b:d7:4e:89:80:14:43:f6: 6f:df:86:b6:8a:24:7e:7c:b7:ae:d1:59:0c:26:ac: 21:6e:72:f1:d0:0a:c4:75:20:61:d6:a2:06:fd:67: 22:19:4b:d6:51:ff:c1:b8:61:7f:36:ab:d2:01:a8: 66:41:90:c5:c0:49:78:19:91:c5:83:b7:06:07:d0: b7:04:cc:98:a5:b9:a2:4a:df:1f:6a:36:9f:d6:35: d8:d2:df:d0:39:23:a2:2e:51:bc:62:5f:8b:e6:67: 2e:35:ae:0e:97:ca:c2:a5:f7:5a:78:c5:f0:68:1b: 8a:47:f8:0a:c5:43:a6:71:50:29:ad:79:4d:e4:c0: e3:81:33:b9:fa:e6:c5:f5:f4:b4:11:0f:96:d5:b3: 57:a4:17:09:97:ae:eb:41:a2:33:14:04:ed:93:24: a7:e5:50:fd:5b:cf:fc:d5:bc:bd:45:44:38:24:11: 1d:d1:9a:08:f9:06:ae:af:8c:45:4f:e3:35:b5:b4: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B5:CF:B6:3B:72:B6:7A:78:6B:08:FA:46:80:CB:87:E4:A0:5A:A9 X509v3 Authority Key Identifier: keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/ybXPtjtytnp4awj6RoDLh-SgWqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.60.212.0/22 Signature Algorithm: sha256WithRSAEncryption 13:e1:b3:ca:58:88:9f:f4:56:01:f4:5d:ce:87:d1:f6:36:e4: 23:93:2d:b0:67:d0:8f:96:de:a3:e0:f3:77:d6:ff:98:99:43: f1:ea:01:91:cc:e7:23:fc:ca:8f:f6:f9:11:dc:c2:e2:c1:f5: 36:f9:0b:35:2b:b5:8f:9e:a6:bc:6f:ce:08:ad:35:f4:04:94: 7f:bc:df:79:3a:26:73:49:bd:98:94:a6:7d:fd:a4:ec:28:0b: cc:da:ff:4c:62:f9:00:38:e7:b0:0e:0a:98:eb:5c:68:20:c7: 2c:24:87:7a:e7:32:89:c3:d5:99:16:d1:ec:fe:da:db:6d:f2: 50:12:26:19:48:91:a7:03:f9:de:de:4b:01:70:fe:d2:8f:7c: a2:14:56:ba:0d:b4:52:9b:93:c0:99:6f:bf:c6:ab:55:44:63: c7:8f:c6:8c:d6:35:86:a7:77:69:07:05:7c:c6:1a:63:27:9c: 00:25:fa:c8:25:9d:53:c5:2a:0c:3a:98:ce:58:1c:95:69:a5: 3c:d4:69:e1:1a:98:f6:65:d3:e0:58:5d:6b:3a:fc:e9:93:8b: ff:5e:d8:6d:b0:95:a8:7b:f8:5a:17:57:ae:8c:80:7c:37:54: f7:c8:2c:c5:ad:a9:f4:3d:df:38:60:99:9a:bd:ed:1b:23:f4: f7:dd:25:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/k6WuZ69ncb0EL5mg73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMmE2MzQ3YjUzMWUzMGY1NTU1MWQwYjZlZGY2MGRjOGI4 MDhiOTEwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWI1Y2ZiNjNiNzJiNjdhNzg2YjA4ZmE0NjgwY2I4N2U0YTA1YWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeoDVhaBLQG+CmUOLqLC8TXI+7g1 J8bwfcXV7rWomv5evfb/V2E2GL/UxgCLoKRJ8u1FieQtYEu/6nPH2iTLp/0pS9dO iYAUQ/Zv34a2iiR+fLeu0VkMJqwhbnLx0ArEdSBh1qIG/WciGUvWUf/BuGF/NqvS AahmQZDFwEl4GZHFg7cGB9C3BMyYpbmiSt8fajaf1jXY0t/QOSOiLlG8Yl+L5mcu Na4Ol8rCpfdaeMXwaBuKR/gKxUOmcVAprXlN5MDjgTO5+ubF9fS0EQ+W1bNXpBcJ l67rQaIzFATtkySn5VD9W8/81by9RUQ4JBEd0ZoI+Qaur4xFT+M1tbSUhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMm1z7Y7crZ6eGsI+kaAy4fkoFqpMB8GA1UdIwQY MBaAFPwqY0e1MeMPVVUdC27fYNyLgIuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zNTQ1ZTYtOGNkZS00NTMzLTk2MDUt ZmFmMmI5ZjA0ZGVmLzEveWJYUHRqdHl0bnA0YXdqNlJvRExoLVNnV3FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zNTQ1ZTYtOGNkZS00NTMzLTk2MDUtZmFmMmI5ZjA0ZGVm LzEvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjzUMA0G CSqGSIb3DQEBCwUAA4IBAQAT4bPKWIif9FYB9F3Oh9H2NuQjky2wZ9CPlt6j4PN3 1v+YmUPx6gGRzOcj/MqP9vkR3MLiwfU2+Qs1K7WPnqa8b84IrTX0BJR/vN95OiZz Sb2YlKZ9/aTsKAvM2v9MYvkAOOewDgqY61xoIMcsJId65zKJw9WZFtHs/trbbfJQ EiYZSJGnA/ne3ksBcP7Sj3yiFFa6DbRSm5PAmW+/xqtVRGPHj8aM1jWGp3dpBwV8 xhpjJ5wAJfrIJZ1TxSoMOpjOWByVaaU81GnhGpj2ZdPgWF1rOvzpk4v/XthtsJWo e/haF1eujIB8N1T3yCzFran0Pd84YJmave0bI/T33SUx -----END CERTIFICATE-----Generated at Mon Feb 9 21:27:00 2026 by rpki-client