This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Yx1XtpdEw_5ZUBZf4wyVPyooyXM.roa File: Yx1XtpdEw_5ZUBZf4wyVPyooyXM.roa (raw, json) Hash identifier: D1tigqhRjZq6vQO8p371Z+bbNJNuqwwsfrwjINtWA74= Subject key identifier: 63:1D:57:B6:97:44:C3:FE:59:50:16:5F:E3:0C:95:3F:2A:28:C9:73 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B1640787E64C1B3FEB96E7F52FC1 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Yx1XtpdEw_5ZUBZf4wyVPyooyXM.roa Signing time: Fri 02 Jan 2026 16:20:30 +0000 ROA not before: Fri 02 Jan 2026 16:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5638 IP address blocks: 194.50.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b1:64:07:87:e6:4c:1b:3f:eb:96:e7:f5:2f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=631d57b69744c3fe5950165fe30c953f2a28c973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e0:1c:e4:3a:fe:31:af:b3:3a:02:29:c7:f5: 4f:b5:91:3f:74:dd:67:75:55:27:8b:b3:b8:cf:a3: 6d:a0:2c:12:b8:fb:82:af:2b:2b:dc:3d:14:7b:b3: 0e:96:52:17:ca:73:c0:39:5f:d7:7a:76:d1:78:c1: 11:07:bb:af:f9:81:05:31:21:32:75:d0:5a:c8:52: 5f:10:b5:66:de:a9:5a:57:1a:77:3e:4f:ad:7c:ff: e5:df:2d:a5:75:2e:9f:e9:e1:1e:e7:0f:1b:bb:36: 06:3c:0d:d7:66:d7:c0:01:25:0f:8b:8a:a6:36:e4: b4:d2:2e:f7:2c:3b:39:8f:24:d2:cf:39:07:a8:c2: 9e:52:9a:46:f5:4c:ca:1e:96:69:34:69:c3:39:4c: db:74:ab:06:b2:89:97:37:bd:00:f9:aa:07:42:58: fc:ef:ff:84:fb:23:3d:be:0c:43:48:29:7b:76:c1: 92:19:65:b9:c3:d0:05:26:49:43:2f:82:04:6d:ed: 55:ff:3d:8a:cd:8b:4a:d9:be:d4:03:46:ea:58:0f: e6:ff:c3:37:61:35:ce:6a:2f:da:14:eb:08:74:86: 78:7e:f5:0f:82:0b:9a:15:cb:c0:e4:de:be:23:83: a5:b2:59:a8:b7:cb:c9:cc:ab:6e:b2:14:60:cd:58: e6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1D:57:B6:97:44:C3:FE:59:50:16:5F:E3:0C:95:3F:2A:28:C9:73 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Yx1XtpdEw_5ZUBZf4wyVPyooyXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.19.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:7a:03:60:ea:64:1b:7a:38:f5:0c:b4:0b:69:4b:86:83:af: 66:91:8e:7c:fd:20:73:31:ab:76:2d:b8:2c:60:c0:87:5e:1e: c4:0d:58:68:dd:e8:b5:09:9c:82:79:56:a9:c0:f0:e1:ea:03: 5b:29:04:ae:01:0a:69:3a:4a:26:fd:54:65:6a:6e:09:9f:cf: d0:3d:37:fa:d5:c1:a2:cc:78:c2:b1:3f:f9:c3:ae:ea:8a:b5: da:dd:5a:b1:e6:d8:94:0d:a4:7f:22:1d:7b:26:1a:f1:f0:13: c6:9e:76:72:83:09:ed:86:bd:f3:49:1c:e1:06:71:4b:ac:53: 8c:ed:7c:3c:60:ad:47:02:ba:b9:a8:22:52:3e:3f:db:cd:7d: da:84:18:1f:ec:52:0d:e1:f1:9d:34:6c:22:70:91:30:a6:3a: 8f:1e:42:d8:54:b9:b7:1a:8d:ad:11:61:9c:30:f2:d2:f6:14: b4:65:41:73:2c:3e:9f:1c:d8:ec:91:a8:ee:3c:74:89:6f:53: db:52:e8:c3:cc:57:b7:0f:9b:31:ea:99:a9:17:3d:55:4b:c8: 9f:b3:73:a7:9d:47:ee:9f:17:7d:47:47:13:fb:80:f7:da:57: ec:84:89:12:41:b2:8a:17:9a:70:f0:a9:5b:4a:31:0d:b5:cb: d5:0a:87:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grFkB4fmTBs/65bn9S/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzFkNTdiNjk3NDRjM2ZlNTk1MDE2NWZlMzBjOTUzZjJhMjhjOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+Ac5Dr+Ma+zOgIpx/VPtZE/dN1n dVUni7O4z6NtoCwSuPuCrysr3D0Ue7MOllIXynPAOV/XenbReMERB7uv+YEFMSEy ddBayFJfELVm3qlaVxp3Pk+tfP/l3y2ldS6f6eEe5w8buzYGPA3XZtfAASUPi4qm NuS00i73LDs5jyTSzzkHqMKeUppG9UzKHpZpNGnDOUzbdKsGsomXN70A+aoHQlj8 7/+E+yM9vgxDSCl7dsGSGWW5w9AFJklDL4IEbe1V/z2KzYtK2b7UA0bqWA/m/8M3 YTXOai/aFOsIdIZ4fvUPgguaFcvA5N6+I4Olslmot8vJzKtushRgzVjmNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMdV7aXRMP+WVAWX+MMlT8qKMlzMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvWXgxWHRwZEV3XzVaVUJaZjR3eVZQeW9veVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjITMA0G CSqGSIb3DQEBCwUAA4IBAQAPegNg6mQbejj1DLQLaUuGg69mkY58/SBzMat2Lbgs YMCHXh7EDVho3ei1CZyCeVapwPDh6gNbKQSuAQppOkom/VRlam4Jn8/QPTf61cGi zHjCsT/5w67qirXa3Vqx5tiUDaR/Ih17Jhrx8BPGnnZygwnthr3zSRzhBnFLrFOM 7Xw8YK1HArq5qCJSPj/bzX3ahBgf7FIN4fGdNGwicJEwpjqPHkLYVLm3Go2tEWGc MPLS9hS0ZUFzLD6fHNjskajuPHSJb1PbUujDzFe3D5sx6pmpFz1VS8ifs3OnnUfu nxd9R0cT+4D32lfshIkSQbKKF5pw8KlbSjENtcvVCode -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:19 2026 by rpki-client