This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/YBlXMzY_o8NxG8wYA6JetviSjUw.roa File: YBlXMzY_o8NxG8wYA6JetviSjUw.roa (raw, json) Hash identifier: sNZ8ni5Bw4xxpyjPdVnKnwOKcRZ7NUTSBZF/qsjw4VU= Subject key identifier: 60:19:57:33:36:3F:A3:C3:71:1B:CC:18:03:A2:5E:B6:F8:92:8D:4C Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B791083A566AF4FD66BA226C43DB0A99B Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/YBlXMzY_o8NxG8wYA6JetviSjUw.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13763 IP address blocks: 194.163.80.0/22 maxlen: 24 195.180.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:83:a5:66:af:4f:d6:6b:a2:26:c4:3d:b0:a9:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60195733363fa3c3711bcc1803a25eb6f8928d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:23:8f:37:ca:d4:c3:84:05:81:d1:5d:1f: 34:12:a8:7b:30:f3:43:41:ab:95:30:a1:41:47:5e: 50:23:e0:75:ff:b6:09:c6:0d:d8:4b:25:d4:e2:41: b9:16:da:f2:ab:c4:a9:f5:b6:66:92:36:ba:c3:0b: 0f:a7:b7:e5:a1:9b:e0:1c:69:06:fe:db:d1:a0:59: c5:1f:2b:da:71:7f:fc:9c:c2:a2:01:63:30:90:9a: f4:45:cd:d5:fa:ee:a6:a9:ec:22:82:83:85:42:9a: e8:16:42:b0:40:39:86:ad:e3:bc:a7:29:8d:53:38: 1a:b0:25:17:6b:9e:fe:22:45:bf:c7:fc:9f:2c:ba: b5:60:18:94:bf:91:f7:95:6e:fc:cf:f9:8b:c9:a9: 63:7f:71:7d:ce:a9:ef:f7:43:41:91:72:df:0b:c9: 6a:6d:d7:62:e9:9d:52:6e:db:81:7a:7e:d4:8d:e0: 2f:c8:81:16:47:77:7c:4f:2a:55:4a:e2:04:ed:dd: 35:77:7e:1e:27:37:d7:33:6d:16:51:57:a1:b9:fc: 08:12:c2:3e:70:6b:8b:80:ef:dc:74:1f:41:c9:5e: 5c:46:a5:7b:9b:c2:84:01:aa:18:22:e0:c5:00:d1: fd:d1:c7:17:97:30:40:e8:50:37:2e:7a:f1:e8:33: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:19:57:33:36:3F:A3:C3:71:1B:CC:18:03:A2:5E:B6:F8:92:8D:4C X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/YBlXMzY_o8NxG8wYA6JetviSjUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.163.80.0/22 195.180.150.0/23 Signature Algorithm: sha256WithRSAEncryption a7:4a:af:26:08:6e:6e:3a:bf:97:cd:76:69:94:d3:58:3e:be: 07:14:4b:8b:4a:98:cb:52:ce:63:56:9c:82:17:74:7c:ac:26: d2:00:bb:07:9d:e0:90:a6:73:b7:09:13:1a:36:b1:97:4d:48: 61:ca:d8:e5:38:43:d6:dd:5f:bd:c7:35:cb:3e:60:ea:58:1c: 99:45:53:a6:05:81:62:20:74:ae:c7:f5:5b:68:88:87:8f:d5: bd:1e:70:a8:2f:79:aa:ed:54:52:1f:c2:be:c2:25:df:9d:70: c4:26:7f:b7:ed:dd:d8:08:f5:e5:64:ea:07:aa:11:8a:b0:8e: 8e:d9:d1:8a:13:3b:10:37:03:c2:97:cb:3a:8f:e6:b6:27:6c: de:15:c5:9b:da:bc:29:32:c1:ed:b4:08:35:41:7e:c8:a2:c9: 42:5f:b6:c2:62:e3:a3:03:c5:23:a5:3a:3a:b3:51:20:84:d4: e6:71:52:cd:be:bd:30:79:55:00:98:c1:e3:7a:21:01:74:dc: 12:3a:98:73:6a:fa:de:bc:7b:6c:59:82:f8:e1:27:b4:14:79: 83:a5:3b:94:a6:de:12:09:f2:31:3f:7e:2b:58:f1:f0:e2:a7: ba:af:bc:2e:aa:90:32:71:b5:f7:ac:f1:09:5d:8b:98:6b:fc: 45:ad:13:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EIOlZq9P1muiJsQ9sKmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDE5NTczMzM2M2ZhM2MzNzExYmNjMTgwM2EyNWViNmY4OTI4ZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8YjjzfK1MOEBYHRXR80Eqh7MPND QauVMKFBR15QI+B1/7YJxg3YSyXU4kG5Ftryq8Sp9bZmkja6wwsPp7floZvgHGkG /tvRoFnFHyvacX/8nMKiAWMwkJr0Rc3V+u6mqewigoOFQproFkKwQDmGreO8pymN UzgasCUXa57+IkW/x/yfLLq1YBiUv5H3lW78z/mLyaljf3F9zqnv90NBkXLfC8lq bddi6Z1SbtuBen7UjeAvyIEWR3d8TypVSuIE7d01d34eJzfXM20WUVehufwIEsI+ cGuLgO/cdB9ByV5cRqV7m8KEAaoYIuDFANH90ccXlzBA6FA3Lnrx6DMmnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGAZVzM2P6PDcRvMGAOiXrb4ko1MMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvWUJsWE16WV9vOE54Rzh3WUE2SmV0dmlTalV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwqNQAwQB w7SWMA0GCSqGSIb3DQEBCwUAA4IBAQCnSq8mCG5uOr+XzXZplNNYPr4HFEuLSpjL Us5jVpyCF3R8rCbSALsHneCQpnO3CRMaNrGXTUhhytjlOEPW3V+9xzXLPmDqWByZ RVOmBYFiIHSux/VbaIiHj9W9HnCoL3mq7VRSH8K+wiXfnXDEJn+37d3YCPXlZOoH qhGKsI6O2dGKEzsQNwPCl8s6j+a2J2zeFcWb2rwpMsHttAg1QX7IoslCX7bCYuOj A8UjpTo6s1EghNTmcVLNvr0weVUAmMHjeiEBdNwSOphzavrevHtsWYL44Se0FHmD pTuUpt4SCfIxP34rWPHw4qe6r7wuqpAycbX3rPEJXYuYa/xFrRNu -----END CERTIFICATE-----Generated at Wed Jan 21 18:43:37 2026 by rpki-client