This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/YYu8PcJiZ57zW8rOm-arVpXZBbg.roa File: YYu8PcJiZ57zW8rOm-arVpXZBbg.roa (raw, json) Hash identifier: eqwCwu1MzVDZdWaXNaBCbefCJXm5WCbP5sfz+hrEswk= Subject key identifier: 61:8B:BC:3D:C2:62:67:9E:F3:5B:CA:CE:9B:E6:AB:56:95:D9:05:B8 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BCCA16852D36C7787A72CFA229A4 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/YYu8PcJiZ57zW8rOm-arVpXZBbg.roa Signing time: Fri 02 Jan 2026 16:20:33 +0000 ROA not before: Fri 02 Jan 2026 16:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43357 IP address blocks: 194.50.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bc:ca:16:85:2d:36:c7:78:7a:72:cf:a2:29:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=618bbc3dc262679ef35bcace9be6ab5695d905b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:1e:f1:0c:cf:d6:f5:b9:ad:88:2b:6b:99: 54:77:b4:3c:a2:19:89:90:3c:7d:2d:05:97:03:24: 96:43:fe:d7:49:63:c3:45:cb:af:f4:68:c0:ac:ce: 4f:e2:2f:86:22:23:32:12:e8:a8:e6:d1:eb:e4:51: 9d:48:92:b1:20:96:3f:a9:62:a1:96:50:09:ca:85: 27:2b:60:64:d3:4d:9f:62:c4:ae:9f:b5:b4:ee:aa: d6:ea:75:f0:46:91:16:0a:68:0a:8c:17:fc:50:02: 68:e8:fc:cc:72:bd:7c:b4:3e:6a:1e:20:ee:f9:e8: 84:f7:83:fe:c3:d0:af:71:b7:e7:fb:38:c6:64:d6: 70:85:3c:ff:20:02:4e:fc:64:3a:77:a3:84:60:a6: 8d:5c:34:e5:27:51:9a:1e:f4:d1:ad:97:4d:1b:5a: 6a:62:cd:c0:da:ca:35:34:05:4c:d1:cd:15:d1:8b: 71:5d:34:b0:7d:ff:dc:4b:a0:08:19:3a:76:eb:b9: 3d:db:fe:f8:d9:a4:09:77:59:ae:af:79:23:62:74: 69:1f:65:4e:f2:53:51:89:c8:d2:db:37:45:01:ee: 17:ce:85:2a:08:b3:90:e6:a5:6d:60:4b:8c:2a:37: ec:cc:84:84:11:26:c7:c4:1f:31:03:03:91:3b:d1: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8B:BC:3D:C2:62:67:9E:F3:5B:CA:CE:9B:E6:AB:56:95:D9:05:B8 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/YYu8PcJiZ57zW8rOm-arVpXZBbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.18.0/24 Signature Algorithm: sha256WithRSAEncryption 54:f6:e6:34:b9:9a:cb:2e:88:3c:12:18:76:67:7c:06:a6:f2: 34:b3:19:a2:8d:1e:ef:38:a9:b8:77:c3:a7:6b:83:ea:07:46: c6:b0:59:6c:ef:f2:2e:fe:2b:24:c8:ea:6f:7e:8a:cc:85:cd: ca:cc:bc:a0:05:60:a2:7d:6b:c0:0b:4a:40:5a:d8:ba:ba:27: 04:53:0f:5b:1b:e7:a4:5d:81:b9:de:d9:22:9e:0d:38:1f:fc: 47:a0:49:12:c7:3a:b0:31:d5:2c:f8:0b:81:a2:1b:29:8d:c6: 32:29:6a:ea:11:c5:46:98:41:f0:5b:1f:08:63:c7:15:c0:33: 00:24:ed:03:31:59:53:89:94:12:c7:fc:de:dc:c3:a3:08:36: 2a:74:c9:89:cb:26:4f:74:9b:ec:9e:83:43:4b:ad:8d:44:60: e5:4d:b9:7e:ba:ba:73:fb:39:c3:ce:3a:a7:22:c7:c1:bb:c4: 28:d2:3e:af:72:3e:69:b6:a9:d5:91:1a:55:96:d8:38:dc:a7: 17:29:69:77:b6:33:e1:4e:58:d0:fb:21:0e:70:8d:4f:c2:de: 97:79:d6:4f:a1:91:9f:f2:8e:7c:e5:6a:b8:f6:2a:ac:23:9e: e8:b7:d9:0e:e6:c2:6b:22:a8:75:e4:a2:d3:c7:36:61:23:04: c4:de:09:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grzKFoUtNsd4enLPoimkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MThiYmMzZGMyNjI2NzllZjM1YmNhY2U5YmU2YWI1Njk1ZDkwNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBAe8QzP1vW5rYgra5lUd7Q8ohmJ kDx9LQWXAySWQ/7XSWPDRcuv9GjArM5P4i+GIiMyEuio5tHr5FGdSJKxIJY/qWKh llAJyoUnK2Bk002fYsSun7W07qrW6nXwRpEWCmgKjBf8UAJo6PzMcr18tD5qHiDu +eiE94P+w9Cvcbfn+zjGZNZwhTz/IAJO/GQ6d6OEYKaNXDTlJ1GaHvTRrZdNG1pq Ys3A2so1NAVM0c0V0YtxXTSwff/cS6AIGTp267k92/742aQJd1mur3kjYnRpH2VO 8lNRicjS2zdFAe4XzoUqCLOQ5qVtYEuMKjfszISEESbHxB8xAwORO9GbaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGGLvD3CYmee81vKzpvmq1aV2QW4MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvWVl1OFBjSmlaNTd6VzhyT20tYXJWcFhaQmJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjISMA0G CSqGSIb3DQEBCwUAA4IBAQBU9uY0uZrLLog8Ehh2Z3wGpvI0sxmijR7vOKm4d8On a4PqB0bGsFls7/Iu/iskyOpvforMhc3KzLygBWCifWvAC0pAWti6uicEUw9bG+ek XYG53tking04H/xHoEkSxzqwMdUs+AuBohspjcYyKWrqEcVGmEHwWx8IY8cVwDMA JO0DMVlTiZQSx/ze3MOjCDYqdMmJyyZPdJvsnoNDS62NRGDlTbl+urpz+znDzjqn IsfBu8Qo0j6vcj5ptqnVkRpVltg43KcXKWl3tjPhTljQ+yEOcI1Pwt6XedZPoZGf 8o585Wq49iqsI57ot9kO5sJrIqh15KLTxzZhIwTE3gmb -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:06 2026 by rpki-client