This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/y9Rdyj0H9umW1gas2ci_H7vHV80.roa File: y9Rdyj0H9umW1gas2ci_H7vHV80.roa (raw, json) Hash identifier: fMjeZmQWT7xUsWFTIwsY1p7CQr5KOCxJXZGt0dVbHlc= Subject key identifier: CB:D4:5D:CA:3D:07:F6:E9:96:D6:06:AC:D9:C8:BF:1F:BB:C7:57:CD Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d Certificate serial: 019B79110DDD6B630FEFF0272EB0B7F0BE2B Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/y9Rdyj0H9umW1gas2ci_H7vHV80.roa Signing time: Thu 01 Jan 2026 10:18:39 +0000 ROA not before: Thu 01 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25318 IP address blocks: 193.47.162.0/24 maxlen: 24 195.234.177.0/24 maxlen: 24 2001:67c:154::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0d:dd:6b:63:0f:ef:f0:27:2e:b0:b7:f0:be:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbd45dca3d07f6e996d606acd9c8bf1fbbc757cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:40:eb:16:ac:e5:9e:ed:9b:2d:5c:6c:7e: f9:55:ce:1c:4b:75:63:91:e3:4c:e6:5a:99:c9:eb: 7d:ec:c6:53:09:a7:f6:b3:28:0c:59:44:27:f5:b4: b0:cc:d2:f6:08:d0:a3:d1:26:7e:2f:81:d6:05:3b: 3f:3b:49:d7:4e:f2:51:5a:d4:ee:8b:95:3e:ff:8a: 96:e3:ba:98:56:8b:f9:33:df:5a:d4:7d:dc:84:37: f9:54:38:23:d5:55:cf:37:b4:2b:68:41:12:39:97: f7:56:f9:50:96:12:45:89:c2:aa:56:6b:00:ba:e5: 80:dd:17:8d:48:80:de:8c:a9:cd:15:2d:bc:19:d9: 1c:5e:ca:ea:35:7f:37:eb:ab:a7:ea:c4:c9:af:11: 01:f8:57:6b:33:bb:92:e0:f1:74:fe:e4:b3:d1:e1: 3e:84:3f:f3:27:ab:24:e2:6d:d6:d1:c1:5b:d2:7d: 5d:e7:cd:47:96:5a:d1:bd:21:17:6a:10:3a:6c:e7: 1d:40:b2:38:8f:f2:0c:84:39:16:e6:9d:09:64:91: 2f:72:bd:0e:bf:ec:ac:74:1b:e9:1a:f7:21:25:76: 3f:49:9e:a5:fa:31:f8:ba:8f:be:f9:a3:c8:3e:55: 76:a7:6a:f9:2e:03:ef:62:86:b4:71:7e:16:ba:6f: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D4:5D:CA:3D:07:F6:E9:96:D6:06:AC:D9:C8:BF:1F:BB:C7:57:CD X509v3 Authority Key Identifier: keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/y9Rdyj0H9umW1gas2ci_H7vHV80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.162.0/24 195.234.177.0/24 IPv6: 2001:67c:154::/48 Signature Algorithm: sha256WithRSAEncryption 31:3c:13:85:d7:f3:2a:ee:62:ef:b3:fb:0e:13:61:52:47:10: 06:1d:f4:0c:89:50:9f:9e:91:29:b9:2a:55:fc:21:7d:14:f2: 61:6a:64:9f:4f:26:63:8a:c4:75:04:14:35:25:8b:e3:af:00: 1c:57:d3:4f:d8:5b:e5:b8:91:12:1c:94:66:0c:4c:b2:fe:c8: 47:c8:19:e5:18:a0:f7:f3:e4:42:d5:b1:30:84:c1:e8:b5:55: 76:62:a4:72:c7:22:c5:0c:d6:de:3d:0d:e5:42:5a:44:fb:62: 64:b1:55:40:9d:5c:10:f3:ae:f8:3f:c6:4b:52:31:38:a8:47: 96:9d:2b:aa:44:b3:10:e2:68:ab:0f:34:87:1d:e1:7f:4b:16: 84:d3:92:61:60:76:60:0b:59:14:63:27:20:28:cf:c8:ff:a9: 9c:4a:8c:46:1d:22:44:27:83:de:d5:7b:b6:75:a4:83:53:d9: fa:eb:27:5e:28:08:09:26:c5:64:f9:8a:07:09:2e:3c:14:04: 1d:aa:38:34:96:fb:24:93:70:1d:93:9f:7b:f8:4c:23:8c:f0: 44:e0:e4:39:ac:30:48:0d:f8:87:09:4b:35:e9:15:28:ae:19: 0d:42:41:5c:70:5d:14:2c:76:f8:5c:87:52:c1:1f:49:58:d2: 24:a7:1a:76 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5EQ3da2MP7/AnLrC38L4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmViOWIzMDJjZWI2ZjU4ZDMyN2I0OTRkODE0NTk0MzNi ZTczOGQwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmQ0NWRjYTNkMDdmNmU5OTZkNjA2YWNkOWM4YmYxZmJiYzc1N2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxshA6xas5Z7tmy1cbH75Vc4cS3Vj keNM5lqZyet97MZTCaf2sygMWUQn9bSwzNL2CNCj0SZ+L4HWBTs/O0nXTvJRWtTu i5U+/4qW47qYVov5M99a1H3chDf5VDgj1VXPN7QraEESOZf3VvlQlhJFicKqVmsA uuWA3ReNSIDejKnNFS28GdkcXsrqNX8366un6sTJrxEB+FdrM7uS4PF0/uSz0eE+ hD/zJ6sk4m3W0cFb0n1d581HllrRvSEXahA6bOcdQLI4j/IMhDkW5p0JZJEvcr0O v+ysdBvpGvchJXY/SZ6l+jH4uo+++aPIPlV2p2r5LgPvYoa0cX4Wum+eewIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFMvUXco9B/bpltYGrNnIvx+7x1fNMB8GA1UdIwQY MBaAFPy+ubMCzrb1jTJ7SU2BRZQzvnONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUt MzdhZmJkZjRkODQ3LzEveTlSZHlqMEg5dW1XMWdhczJjaV9IN3ZIVjgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUtMzdhZmJkZjRkODQ3 LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwS+iAwQA w+qxMA8EAgACMAkDBwAgAQZ8AVQwDQYJKoZIhvcNAQELBQADggEBADE8E4XX8yru Yu+z+w4TYVJHEAYd9AyJUJ+ekSm5KlX8IX0U8mFqZJ9PJmOKxHUEFDUli+OvABxX 00/YW+W4kRIclGYMTLL+yEfIGeUYoPfz5ELVsTCEwei1VXZipHLHIsUM1t49DeVC WkT7YmSxVUCdXBDzrvg/xktSMTioR5adK6pEsxDiaKsPNIcd4X9LFoTTkmFgdmAL WRRjJyAoz8j/qZxKjEYdIkQng97Ve7Z1pINT2frrJ14oCAkmxWT5igcJLjwUBB2q ODSW+ySTcB2Tn3v4TCOM8ETg5DmsMEgN+IcJSzXpFSiuGQ1CQVxwXRQsdvhch1LB H0lY0iSnGnY= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:49 2026 by rpki-client