This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yGYh74wop5UTFYZn2h-iBFkqn10.roa File: yGYh74wop5UTFYZn2h-iBFkqn10.roa (raw, json) Hash identifier: C440phT4ry8bjsB/GXH9nG9ChIjBFWRcGcmpCMNo0k8= Subject key identifier: C8:66:21:EF:8C:28:A7:95:13:15:86:67:DA:1F:A2:04:59:2A:9F:5D Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3619100B952C45B686D4B47A92FD61 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yGYh74wop5UTFYZn2h-iBFkqn10.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212913 IP address blocks: 193.3.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:19:10:0b:95:2c:45:b6:86:d4:b4:7a:92:fd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c86621ef8c28a79513158667da1fa204592a9f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:63:02:0b:06:54:40:25:69:25:97:d7:62: 97:40:6d:01:c1:41:2b:11:3d:45:a3:81:e0:03:2f: 35:86:40:ff:34:30:cd:48:1a:dd:69:32:de:2e:87: 11:f8:ae:05:20:07:34:f2:70:57:1c:fe:04:18:61: ae:80:3e:23:2e:7a:1d:c6:17:ca:9c:08:98:31:0a: 5e:d4:c8:76:6c:8d:59:10:43:9a:c2:a0:87:25:7d: 71:5d:cc:17:cc:e1:8b:0d:a0:32:14:8f:9c:8b:3f: 06:a2:2d:a0:09:a5:37:c8:a2:7f:5a:20:0f:47:33: 92:a6:70:b5:e4:3d:95:f4:30:d4:34:30:e7:2c:86: 57:4d:0b:a6:a4:ac:ce:cd:53:98:4a:77:85:ea:c2: 47:e6:66:b3:a8:cd:c1:3d:36:a8:33:05:1b:04:95: 7f:9c:f1:45:ac:b6:f4:2b:e9:98:34:0e:08:72:0e: 99:49:b1:f1:15:5d:a9:19:ce:90:73:69:b8:40:97: 40:98:0e:a6:1c:1c:63:98:ad:0a:37:bb:3e:f2:71: bc:ce:a3:14:14:1b:ef:13:d5:c1:e1:a1:e4:62:16: 24:87:b4:1d:e2:b0:41:92:87:01:5a:b9:3e:a5:ad: a8:ae:38:5f:1e:6a:c6:94:da:94:fd:34:28:ef:d4: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:66:21:EF:8C:28:A7:95:13:15:86:67:DA:1F:A2:04:59:2A:9F:5D X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yGYh74wop5UTFYZn2h-iBFkqn10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.23.0/24 Signature Algorithm: sha256WithRSAEncryption a5:8b:18:59:fe:96:ca:f2:41:eb:10:37:7d:74:7d:56:9b:ce: 8f:53:a3:63:2b:62:b4:72:54:3a:8f:e0:3d:15:3e:bf:6f:54: c8:ea:6e:19:db:95:92:b7:00:2b:11:5c:71:8f:fb:2b:28:f9: ea:f5:77:0d:a1:32:92:97:a8:5b:c1:42:31:d1:02:ef:70:6d: 67:06:9b:89:25:2c:d6:65:46:55:43:0f:51:d2:42:45:b9:0a: 5c:2f:41:f0:0e:37:40:90:9a:58:d8:b3:3b:6b:fa:d4:f4:19: 12:1d:d6:79:b1:b9:46:1d:f8:89:5b:75:38:97:0b:8e:2e:1c: 1e:8c:03:29:25:c5:f6:5b:16:3f:86:cb:57:2c:13:aa:04:a8: 8e:e6:31:78:e8:c5:72:53:02:44:48:ca:07:9b:df:23:00:97: a0:91:22:fe:60:95:be:c2:aa:64:28:cc:a3:7e:11:4b:24:4f: d1:74:b9:ef:a5:ce:e7:6c:37:5a:1d:07:b4:c0:0f:3f:ec:bd: 9e:a6:b7:fe:12:8e:84:fd:d9:17:da:f6:61:66:51:d7:07:57: 57:8c:64:2a:40:50:8d:c7:3c:74:76:8e:65:67:a9:ac:a5:e6: 01:a6:6f:53:14:26:d3:15:ce:83:94:fa:39:48:0a:b9:36:0a: 72:39:b1:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhkQC5UsRbaG1LR6kv1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODY2MjFlZjhjMjhhNzk1MTMxNTg2NjdkYTFmYTIwNDU5MmE5ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoThjAgsGVEAlaSWX12KXQG0BwUEr ET1Fo4HgAy81hkD/NDDNSBrdaTLeLocR+K4FIAc08nBXHP4EGGGugD4jLnodxhfK nAiYMQpe1Mh2bI1ZEEOawqCHJX1xXcwXzOGLDaAyFI+ciz8Goi2gCaU3yKJ/WiAP RzOSpnC15D2V9DDUNDDnLIZXTQumpKzOzVOYSneF6sJH5mazqM3BPTaoMwUbBJV/ nPFFrLb0K+mYNA4Icg6ZSbHxFV2pGc6Qc2m4QJdAmA6mHBxjmK0KN7s+8nG8zqMU FBvvE9XB4aHkYhYkh7Qd4rBBkocBWrk+pa2orjhfHmrGlNqU/TQo79RWQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMhmIe+MKKeVExWGZ9ofogRZKp9dMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEveUdZaDc0d29wNVVURllabjJoLWlCRmtxbjEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMXMA0G CSqGSIb3DQEBCwUAA4IBAQClixhZ/pbK8kHrEDd9dH1Wm86PU6NjK2K0clQ6j+A9 FT6/b1TI6m4Z25WStwArEVxxj/srKPnq9XcNoTKSl6hbwUIx0QLvcG1nBpuJJSzW ZUZVQw9R0kJFuQpcL0HwDjdAkJpY2LM7a/rU9BkSHdZ5sblGHfiJW3U4lwuOLhwe jAMpJcX2WxY/hstXLBOqBKiO5jF46MVyUwJESMoHm98jAJegkSL+YJW+wqpkKMyj fhFLJE/RdLnvpc7nbDdaHQe0wA8/7L2eprf+Eo6E/dkX2vZhZlHXB1dXjGQqQFCN xzx0do5lZ6mspeYBpm9TFCbTFc6DlPo5SAq5NgpyObHZ -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:46 2026 by rpki-client