This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/yclEt1JNJDBhPPdjW9WERFXCEk0.roa File: yclEt1JNJDBhPPdjW9WERFXCEk0.roa (raw, json) Hash identifier: 1C/HRqa6c4qK7pb+ge5om9xDk+yETr9/xoZaxBuFlmg= Subject key identifier: C9:C9:44:B7:52:4D:24:30:61:3C:F7:63:5B:D5:84:44:55:C2:12:4D Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65 Certificate serial: 019B78A2DEC24E500939C0C42F38BD687A71 Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/yclEt1JNJDBhPPdjW9WERFXCEk0.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 193.200.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:de:c2:4e:50:09:39:c0:c4:2f:38:bd:68:7a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65 Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9c944b7524d2430613cf7635bd5844455c2124d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:3a:3e:64:6c:1f:ef:74:14:6c:02:68:21: 70:5f:79:d8:af:1a:fe:65:ec:b9:b1:a8:54:c5:a6: 1c:17:bb:d0:aa:1b:da:15:aa:e8:7f:a1:5a:77:af: 87:e4:f8:59:0d:b2:2b:7f:a0:20:30:fb:87:97:94: 17:6c:d0:83:81:6b:46:6b:01:2f:97:02:9f:b8:de: a0:0c:e3:e5:0e:2b:9f:f0:21:43:57:c8:45:29:3d: 15:dc:92:f2:c0:17:83:5c:e8:99:5e:f5:83:b5:ef: 2d:f7:fc:75:2d:c5:3e:5d:37:16:82:0c:d8:2e:30: 16:16:19:42:1e:f7:ef:25:e3:cd:76:7b:cf:d1:a9: d8:a7:51:cb:7d:0e:f3:e9:b0:c2:a0:7e:b7:e1:f5: 90:b3:6c:00:4e:23:94:0c:96:06:b3:eb:9b:bc:cd: 2b:c9:ac:cb:46:52:f8:37:f7:af:9f:ac:2e:68:0a: 16:8c:b6:90:ef:90:f2:2a:a6:ab:41:c9:f2:44:7f: 89:8a:62:3a:47:cc:30:7b:c3:39:7b:e7:4d:58:10: 9f:ae:49:bd:1c:26:95:fe:c5:ff:74:bc:7a:22:d1: de:1f:1b:2c:69:4a:7c:f3:65:7d:35:bf:39:6c:84: 44:ce:07:3f:e2:40:46:8a:67:49:a2:a7:dc:4e:89: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C9:44:B7:52:4D:24:30:61:3C:F7:63:5B:D5:84:44:55:C2:12:4D X509v3 Authority Key Identifier: keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/yclEt1JNJDBhPPdjW9WERFXCEk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.78.0/24 Signature Algorithm: sha256WithRSAEncryption 74:00:1a:68:e3:95:8c:ff:d6:7b:55:2a:60:2a:e1:58:47:61: f7:fd:5e:e3:e1:07:eb:f3:ad:8b:23:37:f0:fa:f4:16:ea:e8: ec:a5:a4:51:04:6f:05:5e:78:0f:bd:a6:8b:72:0f:07:74:cd: c3:3c:e7:43:ac:17:f3:9d:5a:07:89:8e:de:6d:50:93:a2:d6: a5:c5:c2:e3:c0:a3:02:8b:a5:c8:26:53:98:c2:db:ef:d7:dc: 12:b2:18:d9:b1:87:8c:a7:9f:35:46:8a:ed:7c:1b:e4:4d:d4: 9c:8a:42:28:94:a7:6a:15:ed:a9:bd:0f:8d:86:64:c0:6a:5e: 15:ee:2e:51:45:19:fd:a3:eb:44:41:3b:f0:34:e8:6c:ba:2c: 9a:f9:24:70:77:0f:50:98:15:e9:03:91:77:ed:51:93:06:8e: 73:8e:fe:27:fe:e2:fc:ed:1d:04:81:c6:7e:b5:db:87:3d:d2: 56:de:2e:35:f1:a8:39:bc:b7:99:9c:f9:41:e2:a0:08:55:2b: 1e:61:78:7a:dd:af:c7:39:60:d4:11:4a:25:fa:10:8d:c8:42: d7:cb:cc:d0:39:c5:5a:84:58:d9:ea:69:eb:0d:9a:37:8b:08: 7c:a7:f3:b0:a4:a4:1d:ac:66:5c:42:e3:0d:9e:ae:d6:cc:ce: 4e:10:44:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ot7CTlAJOcDELzi9aHpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwM2M3M2I2MGYyMTAzZWUzYjJhMmMzY2JlOTIwZTIxMmE5 MmVlNjUwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWM5NDRiNzUyNGQyNDMwNjEzY2Y3NjM1YmQ1ODQ0NDU1YzIxMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCg6PmRsH+90FGwCaCFwX3nYrxr+ Zey5sahUxaYcF7vQqhvaFarof6Fad6+H5PhZDbIrf6AgMPuHl5QXbNCDgWtGawEv lwKfuN6gDOPlDiuf8CFDV8hFKT0V3JLywBeDXOiZXvWDte8t9/x1LcU+XTcWggzY LjAWFhlCHvfvJePNdnvP0anYp1HLfQ7z6bDCoH634fWQs2wATiOUDJYGs+ubvM0r yazLRlL4N/evn6wuaAoWjLaQ75DyKqarQcnyRH+JimI6R8wwe8M5e+dNWBCfrkm9 HCaV/sX/dLx6ItHeHxssaUp882V9Nb85bIREzgc/4kBGimdJoqfcTolpBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnJRLdSTSQwYTz3Y1vVhERVwhJNMB8GA1UdIwQY MBaAFNA8c7YPIQPuOyosPL6SDiEqku5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAt NDZmMDA0YTE5NTkxLzEveWNsRXQxSk5KREJoUFBkalc5V0VSRlhDRWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAtNDZmMDA0YTE5NTkx LzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwchOMA0G CSqGSIb3DQEBCwUAA4IBAQB0ABpo45WM/9Z7VSpgKuFYR2H3/V7j4Qfr862LIzfw +vQW6ujspaRRBG8FXngPvaaLcg8HdM3DPOdDrBfznVoHiY7ebVCTotalxcLjwKMC i6XIJlOYwtvv19wSshjZsYeMp581RortfBvkTdScikIolKdqFe2pvQ+NhmTAal4V 7i5RRRn9o+tEQTvwNOhsuiya+SRwdw9QmBXpA5F37VGTBo5zjv4n/uL87R0EgcZ+ tduHPdJW3i418ag5vLeZnPlB4qAIVSseYXh63a/HOWDUEUol+hCNyELXy8zQOcVa hFjZ6mnrDZo3iwh8p/OwpKQdrGZcQuMNnq7WzM5OEETR -----END CERTIFICATE-----Generated at Mon Jan 19 11:47:20 2026 by rpki-client