This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/y8aS9NjGoMwtiWTSfAPqlGnxCWs.roa File: y8aS9NjGoMwtiWTSfAPqlGnxCWs.roa (raw, json) Hash identifier: ZuvgKYnV+P1b5dUwqqoJerGmgiPYibNQHqD2j8CfPTc= Subject key identifier: CB:C6:92:F4:D8:C6:A0:CC:2D:89:64:D2:7C:03:EA:94:69:F1:09:6B Certificate issuer: /CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e Certificate serial: 019B77592053AF412C0E17DD1C8215E73697 Authority key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/y8aS9NjGoMwtiWTSfAPqlGnxCWs.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50507 IP address blocks: 193.106.180.0/22 maxlen: 22 193.106.180.0/23 maxlen: 23 193.106.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:20:53:af:41:2c:0e:17:dd:1c:82:15:e7:36:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbc692f4d8c6a0cc2d8964d27c03ea9469f1096b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:11:46:de:5e:8a:e9:b0:aa:1e:19:8d:8f: 88:33:cf:3e:8d:03:32:19:9f:8f:6f:d1:b7:29:0c: 01:cd:4b:73:b5:f5:1c:f5:af:80:1a:39:57:3d:64: a6:a1:f5:e9:28:44:95:8b:32:b8:67:a7:7e:f9:44: fb:40:05:dd:7b:b9:39:95:90:a7:01:ef:c6:73:03: 08:b1:a1:e8:71:b7:17:87:42:98:c9:3f:54:57:db: ab:73:1d:77:89:93:b3:c3:7f:4e:ce:ca:5b:7e:72: bc:14:f3:a3:88:ef:a5:19:8a:f2:04:bd:03:ca:6a: 89:aa:b3:72:35:97:1e:1e:71:c1:50:cc:60:c0:a2: c4:8e:b2:8d:43:2e:95:59:13:21:10:f6:83:77:5f: ae:0a:5a:7c:d2:f6:ee:a5:8a:6c:f7:73:50:72:48: 79:40:ed:0b:b5:2d:da:4c:cf:66:11:07:ea:87:1e: 36:fc:a0:c1:89:74:d8:e2:49:f6:8b:98:1c:f8:9f: 0b:d0:c7:ab:45:db:8b:79:ea:ae:a7:dd:88:bb:85: bf:0f:6a:59:08:8d:26:75:e3:1e:09:c6:19:53:b4: 92:32:8c:b3:16:e8:7b:94:1a:a9:55:87:07:61:0c: a2:e7:1b:fd:65:08:03:ee:6b:0e:07:2c:64:3a:16: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C6:92:F4:D8:C6:A0:CC:2D:89:64:D2:7C:03:EA:94:69:F1:09:6B X509v3 Authority Key Identifier: keyid:5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/y8aS9NjGoMwtiWTSfAPqlGnxCWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.180.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:60:90:1c:f3:da:84:05:e4:83:0e:9d:42:6d:5e:60:c6:d0: f2:52:f3:22:b8:77:3f:42:44:7d:0d:f4:9f:ec:cf:fe:94:ea: 74:71:e8:0c:e5:99:b8:49:39:56:7b:b1:69:73:59:0a:a1:41: e6:d8:7f:f4:2e:c0:43:95:97:22:ec:86:3d:27:55:d5:7e:1e: 89:f8:04:8d:cc:86:9e:db:06:40:ec:27:13:c6:bd:d5:59:61: ba:ab:38:95:dc:6f:e8:75:33:fe:73:d1:34:1d:1c:a2:a8:ff: 4c:42:39:59:e5:08:c1:de:53:52:5b:50:0b:5f:84:b5:8e:66: 0c:c3:5e:a0:92:6e:8b:c8:75:54:5f:6d:4b:1e:ae:90:81:a6: 5a:f4:fb:47:dd:f9:c1:e8:eb:bf:8d:02:c1:b5:26:b8:ad:bd: d0:12:0b:1b:73:d5:7f:d2:56:ab:a1:45:7d:d9:9f:0f:4b:05: a7:71:74:40:bb:08:8e:39:86:95:54:d6:84:60:7a:ff:00:e1: 43:1c:e6:c4:6a:8d:a8:78:2c:29:51:a0:13:70:71:c1:2d:78: c9:85:87:46:7f:c2:d9:24:a7:41:2c:cd:84:2e:96:82:62:27: 1c:0b:bb:28:1c:79:ca:76:9d:f4:f3:98:e5:64:c8:ac:02:2b: 3c:e1:be:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSBTr0EsDhfdHIIV5zaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjUzZDA3ZGVkMWU4ZDdmNGYyZWEwNGJkMzY4NDJjNWIx MmYxNWUwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmM2OTJmNGQ4YzZhMGNjMmQ4OTY0ZDI3YzAzZWE5NDY5ZjEwOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA078RRt5eiumwqh4ZjY+IM88+jQMy GZ+Pb9G3KQwBzUtztfUc9a+AGjlXPWSmofXpKESVizK4Z6d++UT7QAXde7k5lZCn Ae/GcwMIsaHocbcXh0KYyT9UV9urcx13iZOzw39OzspbfnK8FPOjiO+lGYryBL0D ymqJqrNyNZceHnHBUMxgwKLEjrKNQy6VWRMhEPaDd1+uClp80vbupYps93NQckh5 QO0LtS3aTM9mEQfqhx42/KDBiXTY4kn2i5gc+J8L0MerRduLeequp92Iu4W/D2pZ CI0mdeMeCcYZU7SSMoyzFuh7lBqpVYcHYQyi5xv9ZQgD7msOByxkOhbVkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMvGkvTYxqDMLYlk0nwD6pRp8QlrMB8GA1UdIwQY MBaAFF1lPQfe0ejX9PLqBL02hCxbEvFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdVOUI5N1I2TmYwOHVvRXZUYUVMRnNTOFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hMDQ3NWYtY2E5Ny00YjE2LTk2ZGIt MjE0NWNhNzVlMzgzLzEveThhUzlOakdvTXd0aVdUU2ZBUHFsR254Q1dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hMDQ3NWYtY2E5Ny00YjE2LTk2ZGItMjE0NWNhNzVlMzgz LzEvWFdVOUI5N1I2TmYwOHVvRXZUYUVMRnNTOFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWq0MA0G CSqGSIb3DQEBCwUAA4IBAQCOYJAc89qEBeSDDp1CbV5gxtDyUvMiuHc/QkR9DfSf 7M/+lOp0cegM5Zm4STlWe7Fpc1kKoUHm2H/0LsBDlZci7IY9J1XVfh6J+ASNzIae 2wZA7CcTxr3VWWG6qziV3G/odTP+c9E0HRyiqP9MQjlZ5QjB3lNSW1ALX4S1jmYM w16gkm6LyHVUX21LHq6QgaZa9PtH3fnB6Ou/jQLBtSa4rb3QEgsbc9V/0laroUV9 2Z8PSwWncXRAuwiOOYaVVNaEYHr/AOFDHObEao2oeCwpUaATcHHBLXjJhYdGf8LZ JKdBLM2ELpaCYiccC7soHHnKdp3085jlZMisAis84b62 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:36 2026 by rpki-client