This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/yc7G-ROKb-E3Qa_pTySk_r80ExA.roa File: yc7G-ROKb-E3Qa_pTySk_r80ExA.roa (raw, json) Hash identifier: Oq1bVdBMV8pMHPuNlBGQjQUpA0Eb9NSaz7n09Cauln4= Subject key identifier: C9:CE:C6:F9:13:8A:6F:E1:37:41:AF:E9:4F:24:A4:FE:BF:34:13:10 Certificate issuer: /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6 Certificate serial: 019B78A3100E0B9E5FE785A7164A8CCE2375 Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/yc7G-ROKb-E3Qa_pTySk_r80ExA.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206926 IP address blocks: 194.1.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:10:0e:0b:9e:5f:e7:85:a7:16:4a:8c:ce:23:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9cec6f9138a6fe13741afe94f24a4febf341310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:11:cc:23:92:b7:6a:1b:c5:a7:fd:e2:3d: 44:62:cd:98:c7:46:3d:a8:64:c0:05:c2:e9:63:17: 5a:09:d8:eb:4f:8c:1d:eb:89:5a:4c:36:3a:b4:0a: cb:ce:7e:de:b6:df:13:da:64:bf:7a:0b:08:e9:7c: 81:06:81:7c:a5:d3:53:94:76:85:aa:25:db:29:d9: c2:8e:1d:19:de:34:88:01:89:ad:d2:fc:62:96:85: 33:00:ad:10:e6:0b:8b:ad:92:ef:99:b4:02:78:ec: be:f8:5f:cc:d8:7e:42:26:2a:43:85:9f:44:c8:7e: cd:8d:d9:9a:bb:50:09:2c:d9:a2:88:8b:f2:3d:8d: 80:87:e7:46:55:4f:64:ba:49:32:59:a7:e6:9e:cf: b4:84:30:8b:1a:0c:50:c1:77:13:d9:3f:03:b6:71: 70:eb:a7:75:9b:22:aa:cc:41:39:c9:23:d5:08:d2: d0:00:70:cd:60:14:a0:83:84:7a:b1:be:96:69:27: f6:9c:42:01:0a:a9:da:72:a0:a2:3d:94:c3:ff:e7: b4:8d:c6:2d:83:d1:24:62:b8:c0:b8:b7:38:3c:1f: 56:85:67:21:0f:a9:22:4f:a0:3d:69:52:73:ae:9b: e2:c4:c2:cf:07:75:58:b9:43:ea:0f:d3:41:79:22: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CE:C6:F9:13:8A:6F:E1:37:41:AF:E9:4F:24:A4:FE:BF:34:13:10 X509v3 Authority Key Identifier: keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/yc7G-ROKb-E3Qa_pTySk_r80ExA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.145.0/24 Signature Algorithm: sha256WithRSAEncryption 87:44:d1:17:e1:40:48:f1:2a:90:af:2a:86:d4:3d:50:2c:68: d3:f7:f2:bc:ab:05:5a:f0:d1:f4:0c:1a:81:4a:6e:2a:68:51: e8:f4:d4:fa:23:5a:d5:2b:9b:be:03:52:25:4d:eb:ec:e6:b6: 8b:96:ae:69:44:d2:44:6d:25:b5:89:ab:32:d5:22:65:1b:1d: 3f:a9:42:6f:c1:bb:31:86:57:28:9a:54:50:27:75:c9:8c:ff: 2e:37:33:9e:84:5b:8d:d3:00:ae:40:49:a7:7b:54:cc:ff:58: 32:9d:a0:20:52:5f:d5:9c:e6:58:71:20:6b:b8:f2:78:c2:76: 73:73:53:4b:ad:57:81:5d:49:4b:ae:d5:83:0f:f2:14:86:2a: 86:f5:12:c5:89:b5:63:65:e6:e2:4a:a6:48:10:95:70:cc:a4: 04:3c:35:90:01:59:85:9a:6a:f8:ab:dd:c4:47:6f:28:16:90: 82:2e:20:18:be:fa:b3:e7:83:51:6d:af:75:11:f4:0c:fd:da: 3f:6e:00:72:04:b9:05:80:3e:c5:12:0b:0e:d9:f1:d3:5d:61: 3d:1b:36:4b:6f:f0:a1:08:6a:24:86:01:7d:20:02:3e:f0:82: 61:77:c4:8a:5e:40:8b:6f:b2:e9:8b:0d:15:15:06:9f:51:01: 8e:d4:e9:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxAOC55f54WnFkqMziN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTE1MzQxZDJhZmM2YTg1N2E1ODQxOTlmYzdmYjA3YzE3 MDFmYzYwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWNlYzZmOTEzOGE2ZmUxMzc0MWFmZTk0ZjI0YTRmZWJmMzQxMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u0RzCOSt2obxaf94j1EYs2Yx0Y9 qGTABcLpYxdaCdjrT4wd64laTDY6tArLzn7ett8T2mS/egsI6XyBBoF8pdNTlHaF qiXbKdnCjh0Z3jSIAYmt0vxiloUzAK0Q5guLrZLvmbQCeOy++F/M2H5CJipDhZ9E yH7Njdmau1AJLNmiiIvyPY2Ah+dGVU9kukkyWafmns+0hDCLGgxQwXcT2T8DtnFw 66d1myKqzEE5ySPVCNLQAHDNYBSgg4R6sb6WaSf2nEIBCqnacqCiPZTD/+e0jcYt g9EkYrjAuLc4PB9WhWchD6kiT6A9aVJzrpvixMLPB3VYuUPqD9NBeSId2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnOxvkTim/hN0Gv6U8kpP6/NBMQMB8GA1UdIwQY MBaAFO/hU0HSr8aoV6WEGZ/H+wfBcB/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84MWU5NDUtNzY5Ni00MTZmLWFmMmYt NjViMDczM2ZlZGQzLzEveWM3Ry1ST0tiLUUzUWFfcFR5U2tfcjgwRXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy84MWU5NDUtNzY5Ni00MTZmLWFmMmYtNjViMDczM2ZlZGQz LzEvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgGRMA0G CSqGSIb3DQEBCwUAA4IBAQCHRNEX4UBI8SqQryqG1D1QLGjT9/K8qwVa8NH0DBqB Sm4qaFHo9NT6I1rVK5u+A1IlTevs5raLlq5pRNJEbSW1iasy1SJlGx0/qUJvwbsx hlcomlRQJ3XJjP8uNzOehFuN0wCuQEmne1TM/1gynaAgUl/VnOZYcSBruPJ4wnZz c1NLrVeBXUlLrtWDD/IUhiqG9RLFibVjZebiSqZIEJVwzKQEPDWQAVmFmmr4q93E R28oFpCCLiAYvvqz54NRba91EfQM/do/bgByBLkFgD7FEgsO2fHTXWE9GzZLb/Ch CGokhgF9IAI+8IJhd8SKXkCLb7Lpiw0VFQafUQGO1OmH -----END CERTIFICATE-----Generated at Tue Jan 27 03:00:56 2026 by rpki-client