This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/YWzwe319rfYXpYuP3IvXqCx8tZo.roa File: YWzwe319rfYXpYuP3IvXqCx8tZo.roa (raw, json) Hash identifier: 1w3/nvkpGpApD4pL14BdnheXsuPZSDSH4dgaXoYHNHo= Subject key identifier: 61:6C:F0:7B:7D:7D:AD:F6:17:A5:8B:8F:DC:8B:D7:A8:2C:7C:B5:9A Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Certificate serial: 019B77C6B3D08A064464DC45C6F25769CA10 Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/YWzwe319rfYXpYuP3IvXqCx8tZo.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.33.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b3:d0:8a:06:44:64:dc:45:c6:f2:57:69:ca:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=616cf07b7d7dadf617a58b8fdc8bd7a82c7cb59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:af:55:39:1d:fe:3a:fe:67:6e:bc:6e:e1: c1:c5:6c:d8:dd:ad:29:15:8a:a4:06:85:2a:62:98: 2a:a7:86:41:53:52:8a:5c:c1:80:b3:d1:5d:98:5a: 3e:06:3f:f1:e0:f8:5d:ca:cc:77:23:41:2a:bb:f4: 1c:e3:d5:9f:58:22:22:79:3f:81:80:e2:16:fc:9c: d5:0a:d5:10:b2:37:b2:f8:3f:53:00:32:0d:10:3b: a6:4f:0f:e3:ed:11:88:8c:30:40:d9:c7:ad:f9:03: ae:d2:e8:59:31:48:97:f0:9f:63:80:cb:7d:e6:6f: 22:c7:0f:13:e1:0e:1f:16:86:bd:85:7e:6f:39:39: a2:a0:31:c0:82:27:56:02:01:04:3c:4e:65:ac:f6: 43:8e:ce:a7:d9:8a:1c:d0:1f:0a:84:0f:a3:f0:d8: 5d:7f:4e:65:f5:0a:1d:3c:65:2e:6e:23:71:16:51: dc:e5:5b:11:76:5e:61:89:bc:f6:43:db:8d:21:65: 6e:54:88:36:ce:fd:4e:c9:81:39:c3:1f:74:8a:24: f9:6e:3b:f4:3b:9a:8f:3e:b6:d6:d5:60:10:d7:2e: f7:98:c7:2c:1d:9c:a9:1d:b9:85:d4:05:e8:c7:54: 16:c6:32:8e:75:7e:4c:ec:de:7a:45:32:5b:69:9b: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6C:F0:7B:7D:7D:AD:F6:17:A5:8B:8F:DC:8B:D7:A8:2C:7C:B5:9A X509v3 Authority Key Identifier: keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/YWzwe319rfYXpYuP3IvXqCx8tZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.137.0/24 Signature Algorithm: sha256WithRSAEncryption 56:8d:3b:87:2d:ea:ed:90:5a:6e:04:70:63:46:68:8c:3f:97: 2f:b5:c2:4f:41:50:c0:25:38:cd:5b:ea:64:b8:90:96:65:67: 7b:a2:af:63:10:57:8c:9d:13:68:4e:91:2b:f7:b3:9c:52:b4: 6c:d0:dd:a4:d0:dc:d8:93:ec:64:17:86:78:89:4e:48:a1:15: ec:15:24:4f:65:5a:cd:b5:2b:0a:9f:81:63:cd:80:e5:ab:7e: ab:46:d8:23:23:3d:ae:a6:ba:49:ce:8f:7b:de:9a:68:50:00: 38:42:2f:ce:2e:60:3b:c4:23:c8:f1:eb:9a:6d:b1:d6:cb:08: 64:e1:c5:3e:26:b4:85:16:b3:13:a8:ec:8d:0d:00:cc:ae:cd: 34:4e:4b:33:9a:40:6b:84:df:be:03:de:e5:eb:23:40:73:34: 14:e1:3d:5f:70:db:0b:ac:32:de:ca:32:4f:92:38:ff:51:bf: 4a:3f:9b:de:3d:cb:d4:c2:ee:50:fb:5b:3a:67:76:b0:6d:87: 82:db:07:6e:04:f6:1b:76:a0:33:79:b9:27:98:25:51:17:bf: 66:a2:cf:af:97:f2:94:21:0e:ba:60:55:bd:eb:e3:78:1a:0e: 34:d9:36:07:42:6d:27:1a:e7:ce:43:4f:d4:78:e9:a9:dc:40: 0c:6c:67:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrPQigZEZNxFxvJXacoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMWJkOTczMmU2Y2RkNmU3NDk0ZDc5MTg3ZmNhODU1YjUx OTk5MDkwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTZjZjA3YjdkN2RhZGY2MTdhNThiOGZkYzhiZDdhODJjN2NiNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVivVTkd/jr+Z268buHBxWzY3a0p FYqkBoUqYpgqp4ZBU1KKXMGAs9FdmFo+Bj/x4Phdysx3I0Equ/Qc49WfWCIieT+B gOIW/JzVCtUQsjey+D9TADINEDumTw/j7RGIjDBA2cet+QOu0uhZMUiX8J9jgMt9 5m8ixw8T4Q4fFoa9hX5vOTmioDHAgidWAgEEPE5lrPZDjs6n2Yoc0B8KhA+j8Nhd f05l9QodPGUubiNxFlHc5VsRdl5hibz2Q9uNIWVuVIg2zv1OyYE5wx90iiT5bjv0 O5qPPrbW1WAQ1y73mMcsHZypHbmF1AXox1QWxjKOdX5M7N56RTJbaZvNRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFs8Ht9fa32F6WLj9yL16gsfLWaMB8GA1UdIwQY MBaAFJ8b2XMubN1udJTXkYf8qFW1GZkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTct ZDhiODIwMmQ3Nzg2LzEvWVd6d2UzMTlyZllYcFl1UDNJdlhxQ3g4dFpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTctZDhiODIwMmQ3Nzg2 LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSGJMA0G CSqGSIb3DQEBCwUAA4IBAQBWjTuHLertkFpuBHBjRmiMP5cvtcJPQVDAJTjNW+pk uJCWZWd7oq9jEFeMnRNoTpEr97OcUrRs0N2k0NzYk+xkF4Z4iU5IoRXsFSRPZVrN tSsKn4FjzYDlq36rRtgjIz2uprpJzo973ppoUAA4Qi/OLmA7xCPI8euabbHWywhk 4cU+JrSFFrMTqOyNDQDMrs00TkszmkBrhN++A97l6yNAczQU4T1fcNsLrDLeyjJP kjj/Ub9KP5vePcvUwu5Q+1s6Z3awbYeC2wduBPYbdqAzebknmCVRF79mos+vl/KU IQ66YFW96+N4Gg402TYHQm0nGufOQ0/UeOmp3EAMbGfP -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:13 2026 by rpki-client