This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/y8oZ66nLHzO58eQvPIRpmWAPl7c.roa File: y8oZ66nLHzO58eQvPIRpmWAPl7c.roa (raw, json) Hash identifier: L/V2Ozu3PD9MBYyFc1nynxKrWqd8IdYQzQ81hC8pp8E= Subject key identifier: CB:CA:19:EB:A9:CB:1F:33:B9:F1:E4:2F:3C:84:69:99:60:0F:97:B7 Certificate issuer: /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81 Certificate serial: 019B78A2EB14288D478B4835D1BDCB6B234E Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/y8oZ66nLHzO58eQvPIRpmWAPl7c.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24920 IP address blocks: 193.111.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:eb:14:28:8d:47:8b:48:35:d1:bd:cb:6b:23:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81 Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbca19eba9cb1f33b9f1e42f3c846999600f97b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:c7:72:c0:fa:c2:e4:1c:33:d7:b4:1c:d6: 57:80:24:4c:c4:ce:0d:cb:5b:95:bb:0f:da:9d:ca: a5:c9:a4:df:83:60:07:4b:ab:05:54:51:2a:52:39: a6:da:01:f0:58:07:0f:92:4d:e3:24:98:d8:04:3e: 64:54:6e:e3:c1:97:bd:08:66:20:c5:e5:f5:51:2a: f6:33:5e:31:80:cf:d1:4a:7f:de:14:a3:f9:ee:9d: 39:1d:33:ee:ce:83:f6:77:ee:f1:cf:5d:ff:40:88: 7f:bd:02:a6:0c:8d:aa:6b:1b:6d:c7:f7:8c:2d:f9: 05:3d:e7:19:c0:dc:15:7a:50:6a:b6:8f:5e:4d:b9: 08:3c:a2:6a:e8:9c:6b:d9:a0:f3:6f:28:21:f5:e9: b7:6d:f4:54:be:96:38:e0:a6:8f:51:6e:fb:46:d1: 80:a8:11:25:0e:52:b7:07:ca:4d:b2:08:6c:13:42: 42:4a:5b:37:61:59:13:76:1d:69:84:36:c7:a7:70: 82:72:03:d2:08:67:cd:59:ab:83:84:2c:5f:af:7f: 10:71:70:d8:cb:76:dc:51:b9:86:63:91:04:03:17: 1c:0e:96:16:99:63:84:7c:31:ab:27:8c:17:a9:8f: 47:11:b6:ee:f4:12:37:bc:44:be:92:3a:9c:d7:dd: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CA:19:EB:A9:CB:1F:33:B9:F1:E4:2F:3C:84:69:99:60:0F:97:B7 X509v3 Authority Key Identifier: keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/y8oZ66nLHzO58eQvPIRpmWAPl7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.122.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:3b:3b:8f:03:6c:af:22:72:f9:66:77:f3:a2:e8:69:fc:a4: 11:be:93:e5:8c:ea:b6:03:41:c0:9b:f7:49:0e:86:f8:8b:ff: 05:12:8c:a8:15:95:19:4f:ee:f4:93:23:7e:84:cc:ae:e5:10: ed:a2:a9:84:88:33:19:39:3a:9f:88:fb:b1:8e:cd:63:a2:0d: f1:24:bb:0a:6b:7a:2d:bb:8b:73:70:8e:00:64:46:5b:c0:fc: c3:44:37:29:20:48:ce:64:4c:aa:84:68:b9:03:ce:b5:3a:bc: ed:b6:e8:16:07:bf:df:42:d3:13:f6:f6:50:35:60:2f:36:b4: bf:ba:55:40:1d:cc:85:39:b7:11:93:0c:ac:86:5a:2d:79:11: 6c:0b:d4:3d:b4:e3:3c:1f:12:cc:f8:34:22:d9:d8:86:2c:10: 85:b9:f3:26:8b:68:16:41:3e:a1:54:ff:ca:5e:b3:fc:39:30: 31:b0:6e:88:b7:44:0c:90:6b:2b:49:38:bd:71:e0:0d:d1:df: 6e:dc:b4:33:a7:c9:d8:15:0d:4e:ea:7e:f0:7a:7e:f2:4a:35: 60:e9:b4:38:c4:d3:cb:70:9d:e2:2d:16:ec:7f:61:20:a3:96: a5:4c:a3:8d:a8:9a:df:69:5f:55:e0:af:f1:54:ac:41:77:e2: 19:28:7c:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ousUKI1Hi0g10b3LayNOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWEyODM2MzVjYjNiZDE1MjNhODVkZGM5Y2FmNTMwNTY4 ZDJmODEwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmNhMTllYmE5Y2IxZjMzYjlmMWU0MmYzYzg0Njk5OTYwMGY5N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiXHcsD6wuQcM9e0HNZXgCRMxM4N y1uVuw/ancqlyaTfg2AHS6sFVFEqUjmm2gHwWAcPkk3jJJjYBD5kVG7jwZe9CGYg xeX1USr2M14xgM/RSn/eFKP57p05HTPuzoP2d+7xz13/QIh/vQKmDI2qaxttx/eM LfkFPecZwNwVelBqto9eTbkIPKJq6Jxr2aDzbygh9em3bfRUvpY44KaPUW77RtGA qBElDlK3B8pNsghsE0JCSls3YVkTdh1phDbHp3CCcgPSCGfNWauDhCxfr38QcXDY y3bcUbmGY5EEAxccDpYWmWOEfDGrJ4wXqY9HEbbu9BI3vES+kjqc1931IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMvKGeupyx8zufHkLzyEaZlgD5e3MB8GA1UdIwQY MBaAFJXqKDY1yzvRUjqF3cnK9TBWjS+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVvb05qWExPOUZTT29YZHljcjFNRmFOTDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi81YjQ2YmItMGFmNC00N2Q2LWE0Yjgt N2JhMjY4NmVhNTE4LzEveThvWjY2bkxIek81OGVRdlBJUnBtV0FQbDdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi81YjQ2YmItMGFmNC00N2Q2LWE0YjgtN2JhMjY4NmVhNTE4 LzEvbGVvb05qWExPOUZTT29YZHljcjFNRmFOTDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW96MA0G CSqGSIb3DQEBCwUAA4IBAQBqOzuPA2yvInL5Znfzouhp/KQRvpPljOq2A0HAm/dJ Dob4i/8FEoyoFZUZT+70kyN+hMyu5RDtoqmEiDMZOTqfiPuxjs1jog3xJLsKa3ot u4tzcI4AZEZbwPzDRDcpIEjOZEyqhGi5A861OrzttugWB7/fQtMT9vZQNWAvNrS/ ulVAHcyFObcRkwyshloteRFsC9Q9tOM8HxLM+DQi2diGLBCFufMmi2gWQT6hVP/K XrP8OTAxsG6It0QMkGsrSTi9ceAN0d9u3LQzp8nYFQ1O6n7wen7ySjVg6bQ4xNPL cJ3iLRbsf2Ego5alTKONqJrfaV9V4K/xVKxBd+IZKHwJ -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:22 2026 by rpki-client