This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/DuGvljbMKyTFuZTU-M_3hPbhqok.roa File: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (raw, json) Hash identifier: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs= Subject key identifier: 0E:E1:AF:96:36:CC:2B:24:C5:B9:94:D4:F8:CF:F7:84:F6:E1:AA:89 Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Certificate serial: 019B7AC913F85F87DDD7484F2953AE678839 Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/DuGvljbMKyTFuZTU-M_3hPbhqok.roa Signing time: Thu 01 Jan 2026 18:19:16 +0000 ROA not before: Thu 01 Jan 2026 18:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207645 IP address blocks: 193.28.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:13:f8:5f:87:dd:d7:48:4f:29:53:ae:67:88:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ee1af9636cc2b24c5b994d4f8cff784f6e1aa89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:d6:06:65:80:f7:c6:04:7a:7d:85:75:37: 7f:2b:e5:d8:c3:e8:73:f3:77:99:e9:38:e3:21:f3: 2e:be:70:33:31:bb:d5:9e:1f:8c:f1:4e:30:2d:be: b2:d6:ac:0b:57:7f:32:4c:46:44:37:e2:2d:d9:b7: fa:01:9c:05:5d:ac:06:85:5b:93:ef:f9:f4:61:74: 7f:27:60:97:a3:c2:bc:a5:d6:61:ec:1c:c7:d0:0b: 9c:45:c8:02:bc:fc:fd:e1:b6:0c:db:2f:c6:70:8f: c3:da:f3:ac:43:69:56:a7:57:a3:43:d2:f2:91:02: 2d:53:ac:fe:83:e1:aa:93:e8:b5:62:7c:f3:1a:7b: 90:52:c1:f2:05:c7:0d:12:98:29:e2:a8:45:c9:30: 86:71:b7:95:d1:c7:1a:95:8d:1a:53:ac:02:bd:07: 68:eb:2a:d3:5c:e8:c3:4d:82:6d:ac:bd:2d:46:9b: cd:5d:c4:6c:09:f1:c0:70:df:57:4c:7c:ba:32:15: af:0a:e8:12:2e:34:cf:2b:44:0c:a3:23:cc:81:dd: 0d:e4:67:e5:72:d3:f1:db:b1:88:f3:0b:9e:6d:5d: 85:55:c6:87:7e:f2:23:16:45:13:57:27:e2:8f:51: e0:26:74:f7:30:ec:41:83:e8:2c:27:8c:4b:64:a4: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E1:AF:96:36:CC:2B:24:C5:B9:94:D4:F8:CF:F7:84:F6:E1:AA:89 X509v3 Authority Key Identifier: keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/DuGvljbMKyTFuZTU-M_3hPbhqok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.11.0/24 Signature Algorithm: sha256WithRSAEncryption 28:f9:33:a5:87:78:b1:31:9d:0d:6f:ff:ad:23:1f:8d:29:6c: 8b:75:6f:27:37:9f:00:8a:3b:0a:67:43:de:cd:fb:89:1a:bb: b9:20:53:58:5a:05:e3:43:a4:47:ad:e3:ba:c3:b6:53:0e:ce: f2:c4:c8:c8:af:08:29:70:12:7a:4e:df:7c:b5:5a:7c:ad:80: ee:e7:84:e8:66:34:85:dc:03:ab:32:26:69:55:52:7e:d7:ce: 66:0f:b3:88:26:ee:41:88:c0:4e:67:f0:12:60:34:0e:10:37: cd:42:e7:36:38:f7:34:c0:0c:11:fe:50:bb:db:00:cf:dc:59: fb:7f:a9:a8:ef:9f:14:d5:12:e6:22:61:2c:f9:8c:94:01:ea: c2:bc:21:79:66:94:b3:0d:38:2e:ef:bf:c6:5b:f0:f0:c9:1b: 71:00:eb:8e:07:44:fd:2e:d4:5c:cc:eb:ab:e6:0d:d2:ae:09: c3:d0:c8:a3:7d:14:b8:f9:8c:33:ab:0e:85:8d:fd:8a:65:86: 74:ef:34:76:af:96:74:7d:c8:f9:1f:27:04:dd:95:82:50:3b: 2f:0f:ee:b9:ce:5d:c7:8d:4b:b5:22:62:80:92:9b:1b:b4:76: b2:6e:42:79:c2:94:1f:2a:31:11:8d:62:e5:d9:42:8b:7f:71: 5f:96:aa:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRP4X4fd10hPKVOuZ4g5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy NGU2YTYwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWUxYWY5NjM2Y2MyYjI0YzViOTk0ZDRmOGNmZjc4NGY2ZTFhYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKzWBmWA98YEen2FdTd/K+XYw+hz 83eZ6TjjIfMuvnAzMbvVnh+M8U4wLb6y1qwLV38yTEZEN+It2bf6AZwFXawGhVuT 7/n0YXR/J2CXo8K8pdZh7BzH0AucRcgCvPz94bYM2y/GcI/D2vOsQ2lWp1ejQ9Ly kQItU6z+g+Gqk+i1YnzzGnuQUsHyBccNEpgp4qhFyTCGcbeV0ccalY0aU6wCvQdo 6yrTXOjDTYJtrL0tRpvNXcRsCfHAcN9XTHy6MhWvCugSLjTPK0QMoyPMgd0N5Gfl ctPx27GI8wuebV2FVcaHfvIjFkUTVyfij1HgJnT3MOxBg+gsJ4xLZKTIaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7hr5Y2zCskxbmU1PjP94T24aqJMB8GA1UdIwQY MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut ZDJkMTIwOWM0ODI1LzEvRHVHdmxqYk1LeVRGdVpUVS1NXzNoUGJocW9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1 LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRwLMA0G CSqGSIb3DQEBCwUAA4IBAQAo+TOlh3ixMZ0Nb/+tIx+NKWyLdW8nN58AijsKZ0Pe zfuJGru5IFNYWgXjQ6RHreO6w7ZTDs7yxMjIrwgpcBJ6Tt98tVp8rYDu54ToZjSF 3AOrMiZpVVJ+185mD7OIJu5BiMBOZ/ASYDQOEDfNQuc2OPc0wAwR/lC72wDP3Fn7 f6mo758U1RLmImEs+YyUAerCvCF5ZpSzDTgu77/GW/DwyRtxAOuOB0T9LtRczOur 5g3SrgnD0MijfRS4+Ywzqw6Fjf2KZYZ07zR2r5Z0fcj5HycE3ZWCUDsvD+65zl3H jUu1ImKAkpsbtHaybkJ5wpQfKjERjWLl2UKLf3FflqpC -----END CERTIFICATE-----Generated at Thu Feb 5 01:23:46 2026 by rpki-client