This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/yS8cmTmj8meagVhPwVIDXg74ndI.roa File: yS8cmTmj8meagVhPwVIDXg74ndI.roa (raw, json) Hash identifier: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY= Subject key identifier: C9:2F:1C:99:39:A3:F2:67:9A:81:58:4F:C1:52:03:5E:0E:F8:9D:D2 Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Certificate serial: 019B7B36F99233956352038B1807D8FFBBF9 Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/yS8cmTmj8meagVhPwVIDXg74ndI.roa Signing time: Thu 01 Jan 2026 20:19:18 +0000 ROA not before: Thu 01 Jan 2026 20:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 193.30.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f9:92:33:95:63:52:03:8b:18:07:d8:ff:bb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Validity Not Before: Jan 1 20:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c92f1c9939a3f2679a81584fc152035e0ef89dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:26:89:63:e5:fc:98:1d:56:42:e1:7a:23:b2: a2:47:1b:c0:8b:52:4d:78:f1:2e:a4:aa:87:e9:0d: 65:2f:2e:c5:55:f6:4c:c9:60:86:3b:03:ff:92:59: 16:5f:81:00:92:ed:77:67:2e:bb:b5:9d:bb:6f:18: 42:30:05:94:2b:c7:5e:a8:ba:fd:e7:1d:3c:2b:17: 3e:e2:69:1b:c3:75:9b:e3:4b:2a:b1:ea:df:ae:f5: c3:62:fb:9b:8b:8d:a8:fa:0e:6e:4f:37:51:15:eb: b6:70:aa:d0:84:bb:a3:46:71:a4:45:cf:6a:b5:a5: c7:c3:a1:8f:38:51:09:82:bd:f8:f0:0c:c2:7f:64: a4:2f:2b:76:d0:fc:55:1d:48:13:b1:c3:fe:10:c3: a8:17:c8:ad:8c:2a:c4:6a:2d:b8:5d:e3:cc:88:8a: fb:a0:3a:06:96:d8:f1:a8:ad:cd:0e:01:d8:ee:34: 92:7f:8f:9f:bf:e8:68:f2:d1:1b:a1:95:4e:65:c1: a5:10:75:3a:07:ff:77:a4:9d:db:13:8a:aa:61:90: 15:d3:47:a6:e3:a9:da:25:7d:74:2c:f4:e8:5f:64: 16:79:d5:ac:29:c9:66:32:f1:fa:01:a9:d6:c2:b3: 70:9e:74:16:55:82:cc:dd:c9:c3:e8:61:a6:b7:3f: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2F:1C:99:39:A3:F2:67:9A:81:58:4F:C1:52:03:5E:0E:F8:9D:D2 X509v3 Authority Key Identifier: keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/yS8cmTmj8meagVhPwVIDXg74ndI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.102.0/24 Signature Algorithm: sha256WithRSAEncryption 41:10:0e:4b:17:31:6f:19:40:44:91:f3:4b:a6:a8:ab:e0:7e: 57:0a:12:be:1f:1f:b8:c9:5d:77:2a:2d:24:ec:fd:77:3b:5e: d2:49:0a:ff:c1:b5:a1:d1:5d:4f:01:1b:b0:fe:c1:ab:58:56: cc:7b:44:bb:07:06:ab:2b:d4:f3:74:eb:3c:f4:d6:4c:23:60: a9:95:51:bc:77:00:97:64:14:f7:49:2f:5a:c8:59:02:46:8e: 88:4a:bd:ed:8c:a2:08:fb:e6:38:16:2c:ac:4a:16:dd:47:78: bf:a0:f7:c6:85:89:32:60:20:b1:4a:1f:c1:16:11:0b:86:d2: ec:a6:9e:b7:d6:07:fd:20:9c:0c:e4:ab:3b:1f:a7:47:07:71: f5:0b:54:15:6a:c2:c0:56:20:ae:7b:ce:6e:fa:94:69:dc:f1: 13:36:ee:ae:a9:32:28:2c:28:a5:2b:b7:2f:f4:46:dd:2c:85: 3c:ee:a8:f9:ef:1a:b9:1e:bb:9b:72:0c:d7:65:b2:bf:9c:c7: 17:90:47:8f:43:19:9c:ae:a4:4a:8e:28:99:15:61:96:ca:09: bc:3f:d6:53:8c:89:cc:4b:75:7d:e2:26:c8:c1:69:77:d8:2c: f4:60:45:7e:7d:27:02:08:7e:8b:55:f6:fa:6d:bb:29:75:12: 65:a0:d2:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NvmSM5VjUgOLGAfY/7v5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk NDE1OGEwHhcNMjYwMTAxMjAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTJmMWM5OTM5YTNmMjY3OWE4MTU4NGZjMTUyMDM1ZTBlZjg5ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iaJY+X8mB1WQuF6I7KiRxvAi1JN ePEupKqH6Q1lLy7FVfZMyWCGOwP/klkWX4EAku13Zy67tZ27bxhCMAWUK8deqLr9 5x08Kxc+4mkbw3Wb40sqserfrvXDYvubi42o+g5uTzdRFeu2cKrQhLujRnGkRc9q taXHw6GPOFEJgr348AzCf2SkLyt20PxVHUgTscP+EMOoF8itjCrEai24XePMiIr7 oDoGltjxqK3NDgHY7jSSf4+fv+ho8tEboZVOZcGlEHU6B/93pJ3bE4qqYZAV00em 46naJX10LPToX2QWedWsKclmMvH6AanWwrNwnnQWVYLM3cnD6GGmtz+JHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMkvHJk5o/JnmoFYT8FSA14O+J3SMB8GA1UdIwQY MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt MDc1MTAzODE0MjBhLzEveVM4Y21UbWo4bWVhZ1ZoUHdWSURYZzc0bmRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR5mMA0G CSqGSIb3DQEBCwUAA4IBAQBBEA5LFzFvGUBEkfNLpqir4H5XChK+Hx+4yV13Ki0k 7P13O17SSQr/wbWh0V1PARuw/sGrWFbMe0S7BwarK9TzdOs89NZMI2CplVG8dwCX ZBT3SS9ayFkCRo6ISr3tjKII++Y4FiysShbdR3i/oPfGhYkyYCCxSh/BFhELhtLs pp631gf9IJwM5Ks7H6dHB3H1C1QVasLAViCue85u+pRp3PETNu6uqTIoLCilK7cv 9EbdLIU87qj57xq5HrubcgzXZbK/nMcXkEePQxmcrqRKjiiZFWGWygm8P9ZTjInM S3V94ibIwWl32Cz0YEV+fScCCH6LVfb6bbspdRJloNJX -----END CERTIFICATE-----Generated at Fri Jan 2 14:45:39 2026 by rpki-client