This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/y18u9oMcyFjkgl_LFXqULX8NytA.roa File: y18u9oMcyFjkgl_LFXqULX8NytA.roa (raw, json) Hash identifier: B5vX5oLv2822UN69f2wG7jEHSe1FzIcV1zpP+Ish8P8= Subject key identifier: CB:5F:2E:F6:83:1C:C8:58:E4:82:5F:CB:15:7A:94:2D:7F:0D:CA:D0 Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10 Certificate serial: 019B7E382B9ACB1243CFAF92CDD6EC462A9D Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/y18u9oMcyFjkgl_LFXqULX8NytA.roa Signing time: Fri 02 Jan 2026 10:19:28 +0000 ROA not before: Fri 02 Jan 2026 10:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.24.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2b:9a:cb:12:43:cf:af:92:cd:d6:ec:46:2a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10 Validity Not Before: Jan 2 10:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb5f2ef6831cc858e4825fcb157a942d7f0dcad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:22:81:c6:53:a3:d3:d3:e6:48:36:0d:f0: e2:3f:ba:1c:64:27:f9:62:9c:f9:a8:1b:f8:b6:29: 87:c7:76:ec:31:2b:a2:1a:88:c2:f4:e7:47:5f:b2: e7:92:e4:5c:c6:23:25:90:cb:6e:e1:b8:c2:0e:a5: 04:c5:a9:8a:18:6b:6b:e9:e7:fc:22:90:e7:a6:a5: ab:a9:16:d4:fe:c5:f2:4a:37:f8:ae:2d:37:4d:74: 5e:de:a1:f7:b3:94:b0:1c:fe:78:7c:6e:83:fe:c9: 35:53:dc:c7:67:98:e4:0e:b2:74:c4:5e:9c:44:29: 62:11:bc:e8:f4:3c:b3:7c:09:34:a1:5f:6c:db:d1: ab:dc:6d:d6:76:e3:fd:99:70:a0:1c:5f:cc:4d:75: f6:7e:fb:11:c5:c0:3a:07:0a:5c:2b:72:96:1a:9c: 9a:a4:01:aa:1c:b8:d6:28:7b:92:17:90:51:8d:70: ed:4c:ed:77:e7:c7:fc:c0:65:84:f7:2f:5b:2d:76: 33:68:b2:f1:0e:f6:06:3c:1a:a1:fb:fa:8b:b5:64: ab:6f:24:9f:f5:2f:69:1c:cf:69:6a:e5:d1:44:db: 65:1d:48:93:86:eb:b4:ca:1b:c2:79:81:ff:39:64: a5:5d:71:39:31:6d:a8:9a:2b:b7:36:7e:e1:29:4c: 59:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5F:2E:F6:83:1C:C8:58:E4:82:5F:CB:15:7A:94:2D:7F:0D:CA:D0 X509v3 Authority Key Identifier: keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/y18u9oMcyFjkgl_LFXqULX8NytA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.42.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:d9:07:0a:37:cb:a3:d9:2b:41:cf:4d:63:6e:72:e0:09:0a: f2:ec:df:6c:7a:cb:ef:14:f4:ce:ac:1a:db:88:ac:ff:4b:11: de:ee:51:ef:10:6b:76:31:ee:2e:92:61:7b:ed:17:2f:5c:55: 50:e3:78:27:7e:46:54:08:0d:e9:be:19:90:57:2d:7b:95:71: be:dc:da:fe:7b:21:9d:5b:7d:56:84:9b:09:a3:7f:a0:9f:3a: 1b:11:43:c2:84:72:13:6e:b7:19:9c:3d:4a:f0:39:93:44:a6: 49:0a:8a:b2:21:08:c3:b1:12:38:4b:4f:2e:1b:36:b4:44:5c: 5c:89:d4:57:fe:bd:1d:25:27:14:db:8c:f1:09:31:c4:08:5f: 8f:f7:18:33:24:ab:ca:3c:23:8d:10:19:16:73:1b:77:2d:2a: d5:b5:24:b7:c2:3d:57:7d:76:a5:73:bd:dc:d0:ec:0a:ee:25: 81:bc:bd:ad:56:84:2f:3a:57:37:a5:b2:01:07:7a:60:9b:30: 31:d6:0f:01:89:4c:e8:cf:87:b4:b9:0b:97:8b:51:90:96:37: de:62:a9:8c:43:5f:91:e1:9b:ed:d9:5e:75:d3:40:6e:2e:ca: cd:f3:87:b9:01:7c:48:bc:7d:5f:12:02:16:7b:1e:42:d6:0a: 07:5a:d0:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCuayxJDz6+SzdbsRiqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3 YzBlMTAwHhcNMjYwMTAyMTAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjVmMmVmNjgzMWNjODU4ZTQ4MjVmY2IxNTdhOTQyZDdmMGRjYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu28igcZTo9PT5kg2DfDiP7ocZCf5 Ypz5qBv4timHx3bsMSuiGojC9OdHX7LnkuRcxiMlkMtu4bjCDqUExamKGGtr6ef8 IpDnpqWrqRbU/sXySjf4ri03TXRe3qH3s5SwHP54fG6D/sk1U9zHZ5jkDrJ0xF6c RCliEbzo9DyzfAk0oV9s29Gr3G3WduP9mXCgHF/MTXX2fvsRxcA6BwpcK3KWGpya pAGqHLjWKHuSF5BRjXDtTO1358f8wGWE9y9bLXYzaLLxDvYGPBqh+/qLtWSrbySf 9S9pHM9pauXRRNtlHUiThuu0yhvCeYH/OWSlXXE5MW2omiu3Nn7hKUxZkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMtfLvaDHMhY5IJfyxV6lC1/DcrQMB8GA1UdIwQY MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt MDdlMzZlZmM1ZTQyLzEveTE4dTlvTWN5RmprZ2xfTEZYcVVMWDhOeXRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRgqMA0G CSqGSIb3DQEBCwUAA4IBAQAf2QcKN8uj2StBz01jbnLgCQry7N9sesvvFPTOrBrb iKz/SxHe7lHvEGt2Me4ukmF77RcvXFVQ43gnfkZUCA3pvhmQVy17lXG+3Nr+eyGd W31WhJsJo3+gnzobEUPChHITbrcZnD1K8DmTRKZJCoqyIQjDsRI4S08uGza0RFxc idRX/r0dJScU24zxCTHECF+P9xgzJKvKPCONEBkWcxt3LSrVtSS3wj1XfXalc73c 0OwK7iWBvL2tVoQvOlc3pbIBB3pgmzAx1g8BiUzoz4e0uQuXi1GQljfeYqmMQ1+R 4Zvt2V5100BuLsrN84e5AXxIvH1fEgIWex5C1goHWtCo -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:36 2026 by rpki-client