This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/RY3gtGJUikJjvAv0lx45qrDHyp0.roa File: RY3gtGJUikJjvAv0lx45qrDHyp0.roa (raw, json) Hash identifier: 76j4Lek2Mb/IIJEFcGb75gTBWRvx5a0x7KTV09dxAg4= Subject key identifier: 45:8D:E0:B4:62:54:8A:42:63:BC:0B:F4:97:1E:39:AA:B0:C7:CA:9D Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a Certificate serial: 019B7DCB65089862483CC905C9157C9F3BB4 Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/RY3gtGJUikJjvAv0lx45qrDHyp0.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 131222 IP address blocks: 193.219.98.0/24 maxlen: 24 194.5.252.0/24 maxlen: 24 195.5.190.0/24 maxlen: 24 212.104.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:65:08:98:62:48:3c:c9:05:c9:15:7c:9f:3b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=458de0b462548a4263bc0bf4971e39aab0c7ca9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:54:71:a1:09:cd:ab:1e:fa:67:f0:f7:15:d5: 41:be:75:2c:40:2f:1b:da:e4:27:19:fa:27:54:dc: f8:9b:1f:03:12:50:cd:e6:f0:54:88:f6:45:b5:b8: 6f:ff:3c:f4:70:91:04:bf:c9:f2:6a:fd:56:9b:c4: 26:ba:87:30:a6:b1:c2:58:5a:c0:8b:4e:56:e2:e6: dc:d9:52:46:1c:30:96:f4:29:00:d2:5a:b4:76:a5: b7:83:3c:49:1d:bd:15:17:50:ab:19:4a:5a:73:a6: b5:ca:5a:be:f0:df:f8:f8:f6:47:fd:98:b9:42:c4: a7:a8:3c:70:4d:9d:5a:8b:87:e5:7f:f9:d9:34:99: cd:9b:f6:e0:f4:0a:34:0c:d5:7d:2b:a3:9d:35:31: 0d:ab:d5:ad:d8:f5:0c:3e:6a:96:cd:94:88:2e:ec: cf:21:4c:a0:62:39:60:85:7b:58:47:ff:7f:91:2b: 31:3e:e1:c7:53:8a:56:86:22:fe:57:a2:2e:01:fc: 78:d5:b3:f0:3d:88:8a:a4:0e:6d:b3:8d:18:a9:a8: fd:bf:09:04:95:33:b9:3b:47:a8:51:76:23:50:32: 98:08:ca:77:dc:cf:9d:44:fe:20:79:53:6d:4b:01: 2c:82:3b:2c:47:ec:cb:b6:ac:cf:2b:f4:de:63:76: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8D:E0:B4:62:54:8A:42:63:BC:0B:F4:97:1E:39:AA:B0:C7:CA:9D X509v3 Authority Key Identifier: keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/RY3gtGJUikJjvAv0lx45qrDHyp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.219.98.0/24 194.5.252.0/24 195.5.190.0/24 212.104.148.0/24 Signature Algorithm: sha256WithRSAEncryption a2:d7:e1:3c:8b:bd:42:ae:4c:9f:66:70:00:d9:d7:2f:ab:76: 9c:b0:2b:4b:bc:78:c6:78:8e:98:c7:8b:2d:33:85:60:fc:89: ee:69:61:a4:0f:3c:05:bf:3f:ca:52:d7:29:ea:fc:4f:48:0a: 2d:35:2d:1c:b7:3c:88:24:06:ba:22:c9:c8:83:47:f7:a5:f9: 6a:e4:ed:0d:56:62:69:76:ad:02:d9:70:bc:b2:07:aa:b2:67: 81:67:c2:bf:4f:77:dd:3e:15:10:10:8d:82:13:7d:e4:29:63: f0:12:df:14:73:64:5e:40:5f:cc:f8:98:b8:44:97:38:b3:7d: 02:70:16:22:fa:bc:9d:7c:47:31:7e:29:84:67:5b:94:a8:be: 60:4d:2b:e2:21:8f:28:32:8d:00:61:fc:82:1d:23:c7:eb:da: db:b3:51:b3:9f:ef:7e:2c:1e:7b:a5:f8:8a:61:7c:3e:0e:b9: 0f:c3:5d:d7:db:2b:62:f9:00:2a:53:cb:e0:bc:5c:4d:04:fc: f5:77:26:f8:bb:fd:51:7d:ba:dd:1c:e3:48:a6:18:b9:5d:78: 10:78:c0:00:63:df:99:a6:68:13:fd:20:30:94:29:d0:78:73: 21:5f:49:0c:a6:63:29:57:86:3b:65:1a:d0:f0:f6:f2:28:0b: 5c:39:d5:60 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9y2UImGJIPMkFyRV8nzu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGQxMGQxMDlkZDkxMjU1Yzg0ZGQ2MjMwNzY0MTAwMjM3 NGZjM2EwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NThkZTBiNDYyNTQ4YTQyNjNiYzBiZjQ5NzFlMzlhYWIwYzdjYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VRxoQnNqx76Z/D3FdVBvnUsQC8b 2uQnGfonVNz4mx8DElDN5vBUiPZFtbhv/zz0cJEEv8nyav1Wm8QmuocwprHCWFrA i05W4ubc2VJGHDCW9CkA0lq0dqW3gzxJHb0VF1CrGUpac6a1ylq+8N/4+PZH/Zi5 QsSnqDxwTZ1ai4flf/nZNJnNm/bg9Ao0DNV9K6OdNTENq9Wt2PUMPmqWzZSILuzP IUygYjlghXtYR/9/kSsxPuHHU4pWhiL+V6IuAfx41bPwPYiKpA5ts40Yqaj9vwkE lTO5O0eoUXYjUDKYCMp33M+dRP4geVNtSwEsgjssR+zLtqzPK/TeY3aU2wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEWN4LRiVIpCY7wL9JceOaqwx8qdMB8GA1UdIwQY MBaAFCaNENEJ3ZElXITdYjB2QQAjdPw6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83ZmI3YTAtMmViOC00N2M2LTg2ZTQt OWVhMjg2YmQ1NWZiLzEvUlkzZ3RHSlVpa0pqdkF2MGx4NDVxckRIeXAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy83ZmI3YTAtMmViOC00N2M2LTg2ZTQtOWVhMjg2YmQ1NWZi LzEvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwdtiAwQA wgX8AwQAwwW+AwQA1GiUMA0GCSqGSIb3DQEBCwUAA4IBAQCi1+E8i71CrkyfZnAA 2dcvq3acsCtLvHjGeI6Yx4stM4Vg/InuaWGkDzwFvz/KUtcp6vxPSAotNS0ctzyI JAa6IsnIg0f3pflq5O0NVmJpdq0C2XC8sgeqsmeBZ8K/T3fdPhUQEI2CE33kKWPw Et8Uc2ReQF/M+Ji4RJc4s30CcBYi+rydfEcxfimEZ1uUqL5gTSviIY8oMo0AYfyC HSPH69rbs1Gzn+9+LB57pfiKYXw+DrkPw13X2yti+QAqU8vgvFxNBPz1dyb4u/1R fbrdHONIphi5XXgQeMAAY9+ZpmgT/SAwlCnQeHMhX0kMpmMpV4Y7ZRrQ8PbyKAtc OdVg -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:35 2026 by rpki-client