This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/yg9CvK7YsVgoTv4cPVX2srKo0uU.roa File: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (raw, json) Hash identifier: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM= Subject key identifier: CA:0F:42:BC:AE:D8:B1:58:28:4E:FE:1C:3D:55:F6:B2:B2:A8:D2:E5 Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019B76EB9592E4D69EEFB5F6D46757E5C1EF Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/yg9CvK7YsVgoTv4cPVX2srKo0uU.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198580 IP address blocks: 193.32.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:95:92:e4:d6:9e:ef:b5:f6:d4:67:57:e5:c1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca0f42bcaed8b158284efe1c3d55f6b2b2a8d2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:68:ad:73:0e:a6:80:11:70:ee:bc:c4:32: 65:67:aa:d1:c9:06:ab:a9:c3:11:c4:ec:d2:f4:53: d0:b3:ba:72:53:f4:3a:5a:a7:76:24:2b:21:e1:f4: aa:fa:7e:d7:ab:e3:21:05:41:42:8c:6a:88:0a:eb: b6:83:75:e8:c5:3c:df:85:a9:c4:d9:30:03:47:39: c1:de:4a:e0:f9:57:82:d5:98:3a:2e:f5:7a:a4:9b: 7e:78:10:f1:3b:fd:a7:32:43:65:59:38:fd:15:c0: 05:5a:32:89:27:ed:c8:61:3b:6b:4a:d4:8b:8a:51: 75:c0:e3:00:08:10:af:be:b6:97:6c:be:f8:80:86: 8c:54:e4:99:29:d6:b5:5b:41:52:bd:a9:a6:b3:63: 88:75:f9:7f:17:ba:a5:ed:54:a6:c1:57:37:a8:51: a6:b7:3f:53:38:0d:c9:4b:ce:e8:ba:2e:7d:04:44: 1c:8c:ae:5d:36:e4:c5:e5:b1:e6:37:7a:77:c3:f8: 60:07:d1:b6:6e:2f:e5:7d:55:69:29:32:e8:f8:f3: 53:22:2b:ca:e1:84:d6:1f:4d:5c:78:a2:bd:59:e4: 8c:68:29:4b:fe:1e:64:7d:dd:a4:84:6a:35:2f:48: 98:f1:3e:f8:1c:95:2b:2a:28:56:dd:d0:b0:82:2b: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0F:42:BC:AE:D8:B1:58:28:4E:FE:1C:3D:55:F6:B2:B2:A8:D2:E5 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/yg9CvK7YsVgoTv4cPVX2srKo0uU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.203.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:7d:0b:c6:f1:be:a2:f2:83:63:8b:a6:43:1f:13:a3:b1:02: 68:2b:9e:cd:8f:52:4f:9f:82:59:69:2c:f9:ba:e1:d3:be:59: 0c:b4:b3:90:ed:86:be:6b:ae:03:cf:19:e4:82:7e:55:6d:17: d3:9b:59:4d:0f:63:94:cf:71:16:ce:09:d8:c3:8f:ac:a5:cf: 7c:b6:7a:a3:1a:f5:e8:8b:71:ad:9d:a0:6f:1c:40:ec:9f:ef: 88:05:1f:61:77:a0:de:65:9c:ff:03:e2:07:24:bd:2b:32:14: 72:d9:b3:ac:25:b6:48:d9:14:2f:95:0e:a5:57:db:20:d4:ef: f7:60:64:4b:9f:11:73:fc:d0:d7:36:89:53:58:aa:ff:a1:66: 5c:44:26:6a:cf:fd:37:07:e1:f3:4d:3e:4a:14:f8:fb:80:6b: 2d:93:d3:7e:37:ab:99:a4:f2:29:e7:1c:9f:40:5a:9f:f1:a4: 76:75:09:47:4b:68:da:98:2d:04:58:8c:f9:09:66:f1:6c:16: bb:5b:74:1f:ac:c7:bc:c1:7a:54:f4:9a:5d:b7:a0:71:ee:c2: ae:2a:d7:53:80:9a:c5:53:5e:3c:12:2c:e4:c2:2e:cd:83:8d: b5:b7:ad:9c:6a:f1:64:11:fa:c4:b8:0a:df:a2:d9:a6:15:f4: 8f:b2:3b:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265WS5Nae77X21GdX5cHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTBmNDJiY2FlZDhiMTU4Mjg0ZWZlMWMzZDU1ZjZiMmIyYThkMmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWZorXMOpoARcO68xDJlZ6rRyQar qcMRxOzS9FPQs7pyU/Q6Wqd2JCsh4fSq+n7Xq+MhBUFCjGqICuu2g3XoxTzfhanE 2TADRznB3krg+VeC1Zg6LvV6pJt+eBDxO/2nMkNlWTj9FcAFWjKJJ+3IYTtrStSL ilF1wOMACBCvvraXbL74gIaMVOSZKda1W0FSvamms2OIdfl/F7ql7VSmwVc3qFGm tz9TOA3JS87oui59BEQcjK5dNuTF5bHmN3p3w/hgB9G2bi/lfVVpKTLo+PNTIivK 4YTWH01ceKK9WeSMaClL/h5kfd2khGo1L0iY8T74HJUrKihW3dCwgit+iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMoPQryu2LFYKE7+HD1V9rKyqNLlMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEveWc5Q3ZLN1lzVmdvVHY0Y1BWWDJzcktvMHVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSDLMA0G CSqGSIb3DQEBCwUAA4IBAQBtfQvG8b6i8oNji6ZDHxOjsQJoK57Nj1JPn4JZaSz5 uuHTvlkMtLOQ7Ya+a64Dzxnkgn5VbRfTm1lND2OUz3EWzgnYw4+spc98tnqjGvXo i3GtnaBvHEDsn++IBR9hd6DeZZz/A+IHJL0rMhRy2bOsJbZI2RQvlQ6lV9sg1O/3 YGRLnxFz/NDXNolTWKr/oWZcRCZqz/03B+HzTT5KFPj7gGstk9N+N6uZpPIp5xyf QFqf8aR2dQlHS2jamC0EWIz5CWbxbBa7W3QfrMe8wXpU9Jpdt6Bx7sKuKtdTgJrF U148Eizkwi7Ng421t62cavFkEfrEuArfotmmFfSPsjsS -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:24 2026 by rpki-client