This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/i_ySwIk4_oB_qg0nYiURCCg789o.roa File: i_ySwIk4_oB_qg0nYiURCCg789o.roa (raw, json) Hash identifier: w4bCsA4ex20veYxkIgEd8lsWejeNsxiMuarIrnJ5Gk0= Subject key identifier: 8B:FC:92:C0:89:38:FE:80:7F:AA:0D:27:62:25:11:08:28:3B:F3:DA Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B361A869594AAC59109531F3F571545 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/i_ySwIk4_oB_qg0nYiURCCg789o.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213937 IP address blocks: 194.32.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1a:86:95:94:aa:c5:91:09:53:1f:3f:57:15:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bfc92c08938fe807faa0d2762251108283bf3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d0:36:7b:35:b7:cd:21:54:0a:ec:de:a0:46: cb:70:88:d3:a7:cb:57:f6:8f:95:e9:a3:c1:c9:64: 4c:1f:77:21:bf:65:b7:49:7e:95:72:29:8a:7d:0b: 4c:66:52:bd:4a:8f:27:d1:b9:e3:e9:7c:77:4c:d2: e1:19:18:ae:80:80:b2:8c:64:c5:8b:7a:81:b0:c1: db:3d:0a:57:18:da:fb:58:a3:9e:03:f1:2a:cd:14: 13:d2:52:69:0b:bc:6b:20:f9:41:ba:ea:0e:60:6e: d4:5b:36:5c:21:08:c2:b0:2f:9c:11:67:13:13:95: bb:0e:9b:5d:d2:e6:bb:96:12:fa:2d:cf:24:77:cb: 3b:ba:e1:c8:b1:72:ce:a5:3c:de:ea:90:12:fa:c8: 19:33:42:45:39:63:cc:6d:0c:04:0d:6d:81:28:b8: c8:d2:5a:7a:42:c8:92:4c:39:89:f7:31:1f:94:04: 41:d9:75:bb:ab:8f:14:5f:38:6e:e5:5f:f9:2e:46: d2:07:78:19:9b:45:b8:e0:5d:f6:3c:85:36:dd:98: f9:98:5a:c6:5a:c3:b7:ad:07:f0:2b:9e:bf:0d:80: 63:bc:75:29:51:ce:81:ea:30:d1:e3:f3:62:76:be: 82:d1:3c:39:75:51:76:33:7f:df:b9:fc:72:d6:c2: 48:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:92:C0:89:38:FE:80:7F:AA:0D:27:62:25:11:08:28:3B:F3:DA X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/i_ySwIk4_oB_qg0nYiURCCg789o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.242.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:06:d6:a3:51:a7:b4:f4:01:a7:61:ba:37:99:36:76:26:7a: 48:c8:3c:dd:60:9e:68:a7:dc:c3:2d:f5:fa:7f:5e:71:06:18: ae:43:e8:ca:f4:9e:ac:49:05:76:e8:1d:1e:99:c6:93:b2:4f: e1:e6:4d:7a:9a:7a:22:c5:e4:8f:a2:b0:18:21:05:6f:88:7e: 69:39:56:95:36:8b:77:7a:48:54:12:da:ca:2b:e9:55:de:ef: 8f:88:d8:ff:e7:6c:9c:3d:b4:80:34:0b:f7:c2:42:2e:1e:4a: b8:5b:a3:61:8a:3c:5e:7a:57:b4:56:63:3f:96:9b:c7:df:52: eb:ba:70:98:5d:41:fa:99:fd:9a:4b:31:a8:68:ae:a5:34:4e: da:d1:54:b8:5a:da:9b:63:aa:ca:fc:00:4d:b5:06:7b:f2:dd: 10:af:d7:91:bb:d3:db:b9:30:43:6a:6c:0b:ac:1a:a5:5a:55: 7c:12:e4:2d:0a:b2:76:da:d2:79:6a:34:21:69:92:0e:e4:d5: d3:7f:2b:2a:47:3d:24:89:0e:25:aa:64:c2:4d:3a:a8:0c:7c: 82:03:a2:4e:f8:68:2c:6a:40:6b:4e:48:27:82:01:e2:fa:b0: 6f:32:d1:02:ac:46:e3:4b:85:e9:d9:69:c1:84:c6:38:e9:6a: b8:cb:10:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhqGlZSqxZEJUx8/VxVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmZjOTJjMDg5MzhmZTgwN2ZhYTBkMjc2MjI1MTEwODI4M2JmM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9A2ezW3zSFUCuzeoEbLcIjTp8tX 9o+V6aPByWRMH3chv2W3SX6VcimKfQtMZlK9So8n0bnj6Xx3TNLhGRiugICyjGTF i3qBsMHbPQpXGNr7WKOeA/EqzRQT0lJpC7xrIPlBuuoOYG7UWzZcIQjCsC+cEWcT E5W7Dptd0ua7lhL6Lc8kd8s7uuHIsXLOpTze6pAS+sgZM0JFOWPMbQwEDW2BKLjI 0lp6QsiSTDmJ9zEflARB2XW7q48UXzhu5V/5LkbSB3gZm0W44F32PIU23Zj5mFrG WsO3rQfwK56/DYBjvHUpUc6B6jDR4/Nidr6C0Tw5dVF2M3/fufxy1sJIqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIv8ksCJOP6Af6oNJ2IlEQgoO/PaMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvaV95U3dJazRfb0JfcWcwbllpVVJDQ2c3ODlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiDyMA0G CSqGSIb3DQEBCwUAA4IBAQBMBtajUae09AGnYbo3mTZ2JnpIyDzdYJ5op9zDLfX6 f15xBhiuQ+jK9J6sSQV26B0emcaTsk/h5k16mnoixeSPorAYIQVviH5pOVaVNot3 ekhUEtrKK+lV3u+PiNj/52ycPbSANAv3wkIuHkq4W6Nhijxeele0VmM/lpvH31Lr unCYXUH6mf2aSzGoaK6lNE7a0VS4WtqbY6rK/ABNtQZ78t0Qr9eRu9PbuTBDamwL rBqlWlV8EuQtCrJ22tJ5ajQhaZIO5NXTfysqRz0kiQ4lqmTCTTqoDHyCA6JO+Ggs akBrTkgnggHi+rBvMtECrEbjS4Xp2WnBhMY46Wq4yxAi -----END CERTIFICATE-----Generated at Thu Jan 15 13:19:23 2026 by rpki-client