This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/yJ9ybaChg-Zxfqjs2lQC7d3LB80.roa File: yJ9ybaChg-Zxfqjs2lQC7d3LB80.roa (raw, json) Hash identifier: 7BN0n97fHeHIJvBUToDal+WQQSfxBDcRhYWrymupLPI= Subject key identifier: C8:9F:72:6D:A0:A1:83:E6:71:7E:A8:EC:DA:54:02:ED:DD:CB:07:CD Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79105EDF933EDC04E38CF1C9635E3375 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/yJ9ybaChg-Zxfqjs2lQC7d3LB80.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205953 IP address blocks: 78.135.69.0/24 maxlen: 24 188.132.154.0/24 maxlen: 24 188.132.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5e:df:93:3e:dc:04:e3:8c:f1:c9:63:5e:33:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c89f726da0a183e6717ea8ecda5402edddcb07cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d6:8f:19:fe:8f:46:87:2b:f5:0f:07:1d:26: 03:eb:47:b5:2b:15:9e:b7:bb:ff:ce:ae:0c:f4:56: 5c:36:1d:3f:17:ab:91:05:b0:23:00:69:8e:23:ec: 36:4f:ef:b0:a9:7e:7c:cc:29:5d:3c:dc:88:d0:bc: 5b:c2:1b:e5:3f:f8:8c:a8:04:07:dc:a0:89:0b:cb: 7c:56:9f:67:a6:e3:72:16:98:b2:a9:45:7e:a6:4e: 39:21:49:ac:47:5a:9b:61:be:a2:88:ee:19:fe:e2: 82:18:de:e8:ee:7c:19:44:b0:fe:93:4d:76:37:e4: 5e:2d:92:9b:61:a3:7e:77:96:4b:87:69:ae:50:f0: ba:6f:61:fd:1d:b8:06:0e:0a:ce:99:fc:bc:54:28: 5f:3b:fc:ef:c5:29:d2:5c:a7:dd:35:83:15:28:96: 79:9f:b1:f6:22:87:6f:1f:24:ee:7f:a9:fa:0b:a8: 84:27:fb:2d:f0:3b:41:e0:1b:ed:96:aa:f0:14:15: 97:8f:5d:70:8a:a4:0c:eb:33:c5:8e:a9:d8:6a:f8: c2:76:f8:69:41:9b:36:4d:83:d9:37:54:06:a9:7e: 45:16:63:42:86:ba:45:0a:1d:a3:5f:40:2c:55:9e: f2:68:39:b0:19:5a:58:23:69:be:a0:56:69:51:ff: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9F:72:6D:A0:A1:83:E6:71:7E:A8:EC:DA:54:02:ED:DD:CB:07:CD X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/yJ9ybaChg-Zxfqjs2lQC7d3LB80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.69.0/24 188.132.154.0/24 188.132.161.0/24 Signature Algorithm: sha256WithRSAEncryption 70:6c:bf:ac:fc:bf:87:0e:f8:25:6e:5b:61:b3:a9:5c:54:71: bb:16:af:68:49:ab:a7:99:e4:84:d9:6c:10:7f:33:f6:73:d2: 3f:77:96:aa:01:6d:19:16:e8:a3:d1:fc:54:08:5f:41:ad:2a: 7e:cc:fe:ca:ef:75:e1:06:e6:9c:e5:f7:72:cd:58:c0:1a:f6: ae:83:8a:23:87:88:c8:d8:84:6d:6f:c2:52:5d:29:63:7e:a5: 9d:d6:f4:84:ed:22:19:39:b5:c2:d1:e6:32:26:54:4f:ef:78: 74:82:ea:f2:d9:09:b3:26:c3:1c:8f:66:30:f4:30:7b:cc:51: 4a:5c:5e:b7:b4:2b:1e:05:fa:69:5c:3b:ce:7f:7d:84:f4:2e: 3c:af:14:4e:59:6b:09:fa:20:be:8d:45:d2:28:14:68:0f:7f: a0:3e:52:4f:fb:c8:2f:69:b1:77:f1:38:e9:00:0b:dd:c6:3f: f7:bd:4f:12:55:4d:54:11:79:eb:ca:74:fd:ff:65:99:6b:35: d8:56:99:b0:ac:92:45:7c:c0:b4:a3:4e:4b:cd:02:66:51:5b: c6:5a:5c:66:67:b4:ed:42:db:86:15:04:68:c2:63:af:93:af: e6:26:8d:45:e8:24:6f:08:07:49:0e:d7:51:60:12:c2:0c:31: 48:ed:d1:d3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EF7fkz7cBOOM8cljXjN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODlmNzI2ZGEwYTE4M2U2NzE3ZWE4ZWNkYTU0MDJlZGRkY2IwN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNaPGf6PRocr9Q8HHSYD60e1KxWe t7v/zq4M9FZcNh0/F6uRBbAjAGmOI+w2T++wqX58zCldPNyI0LxbwhvlP/iMqAQH 3KCJC8t8Vp9npuNyFpiyqUV+pk45IUmsR1qbYb6iiO4Z/uKCGN7o7nwZRLD+k012 N+ReLZKbYaN+d5ZLh2muUPC6b2H9HbgGDgrOmfy8VChfO/zvxSnSXKfdNYMVKJZ5 n7H2IodvHyTuf6n6C6iEJ/st8DtB4BvtlqrwFBWXj11wiqQM6zPFjqnYavjCdvhp QZs2TYPZN1QGqX5FFmNChrpFCh2jX0AsVZ7yaDmwGVpYI2m+oFZpUf8tBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMifcm2goYPmcX6o7NpUAu3dywfNMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEveUo5eWJhQ2hnLVp4ZnFqczJsUUM3ZDNMQjgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATodFAwQA vISaAwQAvIShMA0GCSqGSIb3DQEBCwUAA4IBAQBwbL+s/L+HDvglblths6lcVHG7 Fq9oSaunmeSE2WwQfzP2c9I/d5aqAW0ZFuij0fxUCF9BrSp+zP7K73XhBuac5fdy zVjAGvaug4ojh4jI2IRtb8JSXSljfqWd1vSE7SIZObXC0eYyJlRP73h0gury2Qmz JsMcj2Yw9DB7zFFKXF63tCseBfppXDvOf32E9C48rxROWWsJ+iC+jUXSKBRoD3+g PlJP+8gvabF38TjpAAvdxj/3vU8SVU1UEXnrynT9/2WZazXYVpmwrJJFfMC0o05L zQJmUVvGWlxmZ7TtQtuGFQRowmOvk6/mJo1F6CRvCAdJDtdRYBLCDDFI7dHT -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:43 2026 by rpki-client