This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/yV7jKZqczgrPDGRpe_5ykccZCz0.roa File: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (raw, json) Hash identifier: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw= Subject key identifier: C9:5E:E3:29:9A:9C:CE:0A:CF:0C:64:69:7B:FE:72:91:C7:19:0B:3D Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D1F222F9B9E94554D81AE37E394A7 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/yV7jKZqczgrPDGRpe_5ykccZCz0.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 188.119.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1f:22:2f:9b:9e:94:55:4d:81:ae:37:e3:94:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c95ee3299a9cce0acf0c64697bfe7291c7190b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:72:a1:b0:67:bc:15:37:77:86:f6:e0:21: 50:cb:ed:04:de:35:ca:9b:fa:6c:c4:23:fb:5c:87: 6b:54:cf:ff:f3:c1:19:14:8c:11:6a:4e:e3:54:c0: 44:18:3c:d7:a2:26:0f:29:df:04:49:d7:15:a5:f0: 2f:ae:cc:ca:93:b7:3a:45:ac:7d:b3:65:e5:14:46: e2:ff:fd:f5:bc:b4:3d:c6:42:2a:f4:12:ad:97:31: 92:83:35:0a:e2:5a:f2:a3:63:0d:e6:da:6c:5e:da: 8a:47:d6:0c:24:7c:f8:64:27:20:51:8f:d4:e7:65: 94:87:1d:a9:cd:99:44:03:50:e3:7d:64:db:8e:d9: 46:3a:fb:11:79:d2:18:09:11:9a:ae:9a:69:7c:10: e3:70:88:f6:32:5c:11:5b:d3:b8:37:70:8f:f8:e8: 0d:b2:ff:a6:52:7d:3c:b8:17:98:80:3c:cb:a0:6a: 01:f3:b8:0d:ea:ed:e3:66:5f:ab:b0:96:de:c0:d0: a7:5f:be:bc:c4:0c:e0:ae:af:6e:bf:7d:cd:92:e7: 3c:54:a5:29:37:47:b1:23:26:ab:9d:11:51:6f:2e: 3d:57:17:59:a6:ae:1c:6f:e7:a4:0c:49:ad:0f:3e: 82:91:d0:db:62:f5:7d:54:01:8f:4d:d4:90:40:68: 6c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5E:E3:29:9A:9C:CE:0A:CF:0C:64:69:7B:FE:72:91:C7:19:0B:3D X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/yV7jKZqczgrPDGRpe_5ykccZCz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.119.122.0/24 Signature Algorithm: sha256WithRSAEncryption b6:96:3d:4a:72:d8:8d:a6:a1:44:b3:68:7d:98:79:4d:d1:cc: da:76:8a:b7:06:d1:9b:74:e7:72:fa:5d:9e:2e:09:c2:f8:6d: 8a:b4:b2:d9:d5:eb:5e:27:7c:77:21:de:6c:8d:f6:e7:39:68: 06:f6:c9:80:c5:d2:d4:d2:9d:ef:a7:22:8b:74:6b:63:f6:1c: bc:90:04:eb:06:d1:7f:27:6e:11:f7:db:54:79:e8:a0:56:28: 0e:23:60:4b:34:b4:7c:20:fc:bf:2d:49:8a:db:b1:9f:3b:50: ea:00:1d:48:43:77:a9:a1:dc:f9:47:5b:06:14:74:be:d9:2f: df:29:4e:f8:e8:87:7e:61:59:56:b9:92:bd:2b:ed:5f:7d:2b: 5e:af:7d:d3:fb:d9:01:62:08:32:cf:0e:c7:88:bb:13:ee:9d: c7:46:d3:3e:52:5f:e8:0b:fa:a0:9f:43:b9:b8:5a:bb:32:d3: 9f:89:33:b5:c1:06:f6:4c:e0:da:99:cf:a1:1c:29:1f:50:87: 11:54:fc:68:71:14:fc:d0:3a:03:63:69:9d:f2:88:2b:4c:c2: 48:6d:2f:23:88:77:fc:d3:06:61:ea:92:a0:48:6e:f5:a5:98: 18:4d:9a:6e:12:ec:ea:d6:81:cb:39:0a:51:89:c2:f9:b3:88: 9c:95:24:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XR8iL5uelFVNga4345SnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTVlZTMyOTlhOWNjZTBhY2YwYzY0Njk3YmZlNzI5MWM3MTkwYjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVlyobBnvBU3d4b24CFQy+0E3jXK m/psxCP7XIdrVM//88EZFIwRak7jVMBEGDzXoiYPKd8ESdcVpfAvrszKk7c6Rax9 s2XlFEbi//31vLQ9xkIq9BKtlzGSgzUK4lryo2MN5tpsXtqKR9YMJHz4ZCcgUY/U 52WUhx2pzZlEA1DjfWTbjtlGOvsRedIYCRGarpppfBDjcIj2MlwRW9O4N3CP+OgN sv+mUn08uBeYgDzLoGoB87gN6u3jZl+rsJbewNCnX768xAzgrq9uv33Nkuc8VKUp N0exIyarnRFRby49VxdZpq4cb+ekDEmtDz6CkdDbYvV9VAGPTdSQQGhsLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMle4ymanM4KzwxkaXv+cpHHGQs9MB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEveVY3aktacWN6Z3JQREdScGVfNXlrY2NaQ3owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHd6MA0G CSqGSIb3DQEBCwUAA4IBAQC2lj1KctiNpqFEs2h9mHlN0czadoq3BtGbdOdy+l2e LgnC+G2KtLLZ1eteJ3x3Id5sjfbnOWgG9smAxdLU0p3vpyKLdGtj9hy8kATrBtF/ J24R99tUeeigVigOI2BLNLR8IPy/LUmK27GfO1DqAB1IQ3epodz5R1sGFHS+2S/f KU746Id+YVlWuZK9K+1ffSter33T+9kBYggyzw7HiLsT7p3HRtM+Ul/oC/qgn0O5 uFq7MtOfiTO1wQb2TODamc+hHCkfUIcRVPxocRT80DoDY2md8ogrTMJIbS8jiHf8 0wZh6pKgSG71pZgYTZpuEuzq1oHLOQpRicL5s4iclSRS -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:20 2026 by rpki-client