This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/y8l-GZaij3nY_lsT-zDKBTkrGss.roa File: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (raw, json) Hash identifier: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM= Subject key identifier: CB:C9:7E:19:96:A2:8F:79:D8:FE:5B:13:FB:30:CA:05:39:2B:1A:CB Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538 Certificate serial: 019B7F8319B235954363C92DD921D4DA2EB4 Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/y8l-GZaij3nY_lsT-zDKBTkrGss.roa Signing time: Fri 02 Jan 2026 16:20:56 +0000 ROA not before: Fri 02 Jan 2026 16:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208023 IP address blocks: 193.194.130.0/24 maxlen: 24 193.194.131.0/24 maxlen: 24 193.194.142.0/24 maxlen: 24 193.194.143.0/24 maxlen: 24 2a0f:9d40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:19:b2:35:95:43:63:c9:2d:d9:21:d4:da:2e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538 Validity Not Before: Jan 2 16:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbc97e1996a28f79d8fe5b13fb30ca05392b1acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:a6:ee:ed:4e:26:29:aa:9a:e9:43:c0:5b: cb:8f:b7:db:09:13:f6:bb:39:dc:9e:63:e9:22:94: 0d:6c:f9:a5:f5:f3:a3:1b:c1:d0:28:5d:9b:46:1d: 55:ee:18:38:d2:31:6d:94:83:7e:d3:70:e2:f2:09: b6:39:e6:0f:4c:57:d4:b3:a9:28:7d:af:a3:10:88: 30:96:bd:19:19:db:d7:67:35:45:32:4f:56:6d:18: a8:d7:59:74:ea:ce:8a:7d:91:75:af:83:f2:97:18: 96:e6:62:f2:2e:fb:97:ba:93:6d:07:a7:60:14:01: dd:03:30:d8:dd:18:8b:7e:fd:4e:f4:46:c3:9b:2c: c1:33:58:a2:c5:e0:78:ca:d3:07:49:51:b2:50:f7: b9:c9:f3:b4:fa:3a:b4:18:7b:ed:cd:c6:65:02:2c: 91:62:47:e7:bd:fc:98:8c:fa:67:fb:76:ba:6d:1e: a4:8d:49:69:52:32:e8:b7:c2:be:d8:cf:fb:61:0d: b6:a5:0c:d7:66:97:3f:71:95:2e:d6:51:11:e0:1c: cd:54:d2:a7:1d:9b:f4:e5:47:e2:e7:a5:ab:58:0c: 0d:8b:e5:c4:bb:fa:12:0b:af:c9:d4:19:e2:fa:74: 5e:5a:b0:f0:4e:96:a0:39:dc:6e:f0:d5:86:bc:2b: 99:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C9:7E:19:96:A2:8F:79:D8:FE:5B:13:FB:30:CA:05:39:2B:1A:CB X509v3 Authority Key Identifier: keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/y8l-GZaij3nY_lsT-zDKBTkrGss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.130.0/23 193.194.142.0/23 IPv6: 2a0f:9d40::/29 Signature Algorithm: sha256WithRSAEncryption 72:64:a4:9c:9b:4a:9f:ed:77:ca:ef:1e:69:c8:a2:92:f4:f6: 26:38:5b:63:05:9c:73:1e:68:b0:df:c4:c5:57:ce:76:b8:0b: 1a:50:11:87:d3:fc:08:86:e3:54:83:3e:b3:8b:9f:00:f7:d0: 58:3c:8d:98:c5:dd:a8:55:74:4f:b2:57:8c:b3:07:3f:10:fc: 24:a8:fa:d1:7e:5e:74:b5:45:81:63:48:42:20:4f:c2:04:5d: 87:b4:e0:b0:e0:aa:ff:c2:cf:b5:ef:fa:6b:25:ca:21:ef:4f: 15:66:cb:4e:04:c4:14:aa:f1:f2:13:7b:4a:fc:b2:ca:e9:8a: 30:3a:82:9d:c3:9a:39:64:7b:97:29:65:f1:27:6b:37:10:8c: 4a:1e:dd:67:c6:22:9d:e0:76:91:04:e8:28:8b:95:b9:fa:44: b5:4d:3d:46:82:84:a9:34:c7:73:7c:77:84:72:14:f5:54:35: c4:ff:48:e5:b7:a5:b0:10:7e:04:db:c7:b0:f0:a0:f3:fe:3f: 37:57:fe:d5:a6:37:de:a9:44:f0:8a:91:51:41:88:7a:7e:b9: cb:b6:fc:12:05:96:79:88:96:c7:3c:70:8f:b0:08:4d:a4:5b: 84:2a:28:4b:52:6d:16:3a:ef:00:6b:3f:8f:eb:98:9a:1b:76: fb:51:61:f8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gxmyNZVDY8kt2SHU2i60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYmU1MTdlNzQ3NWUxN2MwNjk2NDM5MTBmZDZmNzdiMzE3 Yjg1MzgwHhcNMjYwMTAyMTYyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmM5N2UxOTk2YTI4Zjc5ZDhmZTViMTNmYjMwY2EwNTM5MmIxYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwem7u1OJimqmulDwFvLj7fbCRP2 uzncnmPpIpQNbPml9fOjG8HQKF2bRh1V7hg40jFtlIN+03Di8gm2OeYPTFfUs6ko fa+jEIgwlr0ZGdvXZzVFMk9WbRio11l06s6KfZF1r4PylxiW5mLyLvuXupNtB6dg FAHdAzDY3RiLfv1O9EbDmyzBM1iixeB4ytMHSVGyUPe5yfO0+jq0GHvtzcZlAiyR YkfnvfyYjPpn+3a6bR6kjUlpUjLot8K+2M/7YQ22pQzXZpc/cZUu1lER4BzNVNKn HZv05Ufi56WrWAwNi+XEu/oSC6/J1Bni+nReWrDwTpagOdxu8NWGvCuZkQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMvJfhmWoo952P5bE/swygU5KxrLMB8GA1UdIwQY MBaAFN6+UX50deF8BpZDkQ/W93sxe4U4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAt ODlmNWM0ZjMyOTcwLzEveThsLUdaYWlqM25ZX2xzVC16REtCVGtyR3NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAtODlmNWM0ZjMyOTcw LzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwcKCAwQB wcKOMA0EAgACMAcDBQMqD51AMA0GCSqGSIb3DQEBCwUAA4IBAQByZKScm0qf7XfK 7x5pyKKS9PYmOFtjBZxzHmiw38TFV852uAsaUBGH0/wIhuNUgz6zi58A99BYPI2Y xd2oVXRPsleMswc/EPwkqPrRfl50tUWBY0hCIE/CBF2HtOCw4Kr/ws+17/prJcoh 708VZstOBMQUqvHyE3tK/LLK6YowOoKdw5o5ZHuXKWXxJ2s3EIxKHt1nxiKd4HaR BOgoi5W5+kS1TT1GgoSpNMdzfHeEchT1VDXE/0jlt6WwEH4E28ew8KDz/j83V/7V pjfeqUTwipFRQYh6frnLtvwSBZZ5iJbHPHCPsAhNpFuEKihLUm0WOu8Aaz+P65ia G3b7UWH4 -----END CERTIFICATE-----Generated at Tue Feb 10 05:48:53 2026 by rpki-client