This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/yA4t8VFR5w-UawfByzFjfg16sDc.roa File: yA4t8VFR5w-UawfByzFjfg16sDc.roa (raw, json) Hash identifier: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8= Subject key identifier: C8:0E:2D:F1:51:51:E7:0F:94:6B:07:C1:CB:31:63:7E:0D:7A:B0:37 Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Certificate serial: 019B7F14EB1189D6344C3C2E8A774980F4AC Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/yA4t8VFR5w-UawfByzFjfg16sDc.roa Signing time: Fri 02 Jan 2026 14:20:35 +0000 ROA not before: Fri 02 Jan 2026 14:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29037 IP address blocks: 185.9.12.0/22 maxlen: 22 193.47.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:eb:11:89:d6:34:4c:3c:2e:8a:77:49:80:f4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Validity Not Before: Jan 2 14:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c80e2df15151e70f946b07c1cb31637e0d7ab037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:7b:4b:ff:e8:1b:fd:d9:43:c6:70:80:c8: 25:d6:a9:c5:60:aa:e1:89:36:e5:42:52:6f:80:bf: 52:be:85:e4:68:66:a1:05:e9:ee:73:9d:fd:99:a0: 18:11:c5:f5:c5:38:16:2a:5e:73:93:c7:34:ac:99: 05:ae:9b:e2:9a:57:50:ae:10:0f:ae:29:39:ee:e5: cb:6a:9d:76:0c:d0:fb:29:af:9a:6b:90:9c:25:df: ee:9d:f3:3b:26:94:b7:f4:2d:f8:1f:13:99:9f:a3: f3:90:c1:58:ea:61:b9:de:10:c7:89:e7:85:6b:6b: a9:18:11:22:86:bf:68:2a:7c:07:28:04:37:ba:3d: 69:65:6f:30:81:46:c1:b1:83:5e:a4:42:9b:a3:da: 8c:ec:b1:91:14:62:ae:9f:60:20:05:c4:47:45:47: be:bc:cf:7c:12:2e:b1:91:a6:c3:86:38:8b:00:ab: db:12:b4:5a:0a:0f:f8:de:67:32:00:73:c9:f5:0f: 29:a7:b1:12:22:73:42:2d:e9:69:96:7d:1d:67:35: ab:05:82:dd:80:ff:94:d7:ed:84:dc:8b:8f:62:19: 47:87:e3:17:f0:1e:1a:47:72:f8:94:e0:53:d1:79: f9:35:d8:a4:09:01:c8:8c:10:13:b2:9f:64:0c:64: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0E:2D:F1:51:51:E7:0F:94:6B:07:C1:CB:31:63:7E:0D:7A:B0:37 X509v3 Authority Key Identifier: keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/yA4t8VFR5w-UawfByzFjfg16sDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.12.0/22 193.47.161.0/24 Signature Algorithm: sha256WithRSAEncryption 41:c5:d6:d6:93:d1:75:a1:cd:c9:02:d9:32:a0:5d:c0:ea:c9: 47:f6:0c:da:a1:21:95:e0:58:f3:78:0e:7e:c5:d1:85:10:98: e6:b8:c5:fe:7c:bf:a7:f6:b2:ad:42:3e:00:7b:e7:88:e3:0f: 84:cf:17:9f:da:d7:aa:04:a8:2e:45:14:ac:15:4f:b4:4c:fe: 44:db:39:6d:ea:ac:c8:a5:0d:08:83:56:3d:15:2e:0f:8b:a3: bd:cd:2d:44:b7:ec:77:7f:f0:e6:2e:a9:a9:50:a9:8a:db:2a: 21:e6:d5:6d:61:d9:e2:94:e5:70:1e:fb:40:dd:bd:c6:2b:df: 5f:4a:ee:2d:d6:aa:25:22:71:74:b2:e4:09:3f:00:fc:86:7f: d0:31:68:10:ac:7d:b3:63:f4:6c:9e:e9:81:73:a6:5c:f4:7d: 6c:c6:75:11:6c:b2:f2:e0:a4:ea:b1:67:94:63:a1:4b:5d:30: 8a:f2:01:e2:c0:ac:09:c0:fe:b1:f4:ac:37:e7:a9:b1:4c:0e: 26:e1:25:18:85:3d:03:f8:40:61:f7:10:da:e4:cc:6e:ce:20: 2a:aa:89:18:57:5a:f0:1c:45:c9:45:48:4e:53:d8:f3:6e:6f: ac:42:7b:80:61:f9:47:b5:3c:28:b8:54:d2:d8:d2:f2:93:72: 18:e6:ba:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FOsRidY0TDwuindJgPSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZmIwNzRkNDdiN2UwYmM4OTFlZDA2ZWE4ZmM2N2UzOGVj ZjUwYTEwHhcNMjYwMTAyMTQyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODBlMmRmMTUxNTFlNzBmOTQ2YjA3YzFjYjMxNjM3ZTBkN2FiMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykZ7S//oG/3ZQ8ZwgMgl1qnFYKrh iTblQlJvgL9SvoXkaGahBenuc539maAYEcX1xTgWKl5zk8c0rJkFrpvimldQrhAP rik57uXLap12DND7Ka+aa5CcJd/unfM7JpS39C34HxOZn6PzkMFY6mG53hDHieeF a2upGBEihr9oKnwHKAQ3uj1pZW8wgUbBsYNepEKbo9qM7LGRFGKun2AgBcRHRUe+ vM98Ei6xkabDhjiLAKvbErRaCg/43mcyAHPJ9Q8pp7ESInNCLelpln0dZzWrBYLd gP+U1+2E3IuPYhlHh+MX8B4aR3L4lOBT0Xn5NdikCQHIjBATsp9kDGS/KQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMgOLfFRUecPlGsHwcsxY34NerA3MB8GA1UdIwQY MBaAFF37B01Ht+C8iR7Qbqj8Z+OOz1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQt Y2Y2YTYzZTRlZmI2LzEveUE0dDhWRlI1dy1VYXdmQnl6RmpmZzE2c0RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQtY2Y2YTYzZTRlZmI2 LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQkMAwQA wS+hMA0GCSqGSIb3DQEBCwUAA4IBAQBBxdbWk9F1oc3JAtkyoF3A6slH9gzaoSGV 4FjzeA5+xdGFEJjmuMX+fL+n9rKtQj4Ae+eI4w+Ezxef2teqBKguRRSsFU+0TP5E 2zlt6qzIpQ0Ig1Y9FS4Pi6O9zS1Et+x3f/DmLqmpUKmK2yoh5tVtYdnilOVwHvtA 3b3GK99fSu4t1qolInF0suQJPwD8hn/QMWgQrH2zY/RsnumBc6Zc9H1sxnURbLLy 4KTqsWeUY6FLXTCK8gHiwKwJwP6x9Kw356mxTA4m4SUYhT0D+EBh9xDa5MxuziAq qokYV1rwHEXJRUhOU9jzbm+sQnuAYflHtTwouFTS2NLyk3IY5rpD -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:37 2026 by rpki-client