This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/YdHw4YbYFEkeNSYlf30NkeF88-o.roa File: YdHw4YbYFEkeNSYlf30NkeF88-o.roa (raw, json) Hash identifier: SDsP1n3UKbS1sSF5+0pT3pVe1a/wR7/1+fLUZVxF1r8= Subject key identifier: 61:D1:F0:E1:86:D8:14:49:1E:35:26:25:7F:7D:0D:91:E1:7C:F3:EA Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA3FA557B7CE69196C8AFF5C4BCF1D9 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/YdHw4YbYFEkeNSYlf30NkeF88-o.roa Signing time: Thu 01 Jan 2026 22:18:22 +0000 ROA not before: Thu 01 Jan 2026 22:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14576 IP address blocks: 193.0.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fa:55:7b:7c:e6:91:96:c8:af:f5:c4:bc:f1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61d1f0e186d814491e3526257f7d0d91e17cf3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:f5:f5:35:43:d0:38:50:ac:a6:06:c0:f7: 2f:b9:ea:b4:0d:bb:02:2c:e0:2e:9b:6c:06:85:ba: 7c:3f:f5:2f:29:f9:dc:56:04:89:ff:5c:12:a6:73: 0f:57:2a:0b:e6:dd:04:d9:3a:9d:c5:44:f0:5e:9d: e1:7f:fd:95:c7:5f:0e:83:63:79:65:fc:a4:7b:aa: 2e:8e:b1:fa:d7:bd:dc:dd:4f:f6:a6:5c:77:67:15: 1b:6b:19:a7:80:c7:3c:ba:f2:3c:41:ad:09:72:d5: 30:c9:0c:8e:08:a4:30:64:07:29:ff:27:fd:ac:88: 95:4a:20:d9:f5:ef:72:a4:12:31:fd:f0:f4:6e:d1: 88:2e:00:44:c8:19:53:e2:06:c1:ab:3a:03:09:94: 4f:ea:05:6e:8b:0f:9a:25:7c:61:fb:a3:bf:df:07: bc:f9:e4:8b:d6:3e:6c:85:fd:68:5d:78:87:7e:cb: fa:95:3e:f1:db:be:f9:4d:a5:d4:7d:af:0d:1d:2b: e4:65:57:64:af:0f:83:07:8b:4c:60:07:4f:13:da: ed:07:0f:cc:fa:00:a3:a6:2b:ee:a5:b0:ad:1f:bd: a9:f2:2c:41:2e:45:11:98:1b:71:9b:38:68:6c:85: 2d:fb:88:1c:eb:17:2b:16:87:8b:ef:cc:d5:78:7a: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D1:F0:E1:86:D8:14:49:1E:35:26:25:7F:7D:0D:91:E1:7C:F3:EA X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/YdHw4YbYFEkeNSYlf30NkeF88-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.201.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:d9:42:df:e7:8e:8f:f2:5a:f9:b8:a9:26:91:4a:66:a0:9a: 62:75:c9:f8:74:84:70:ed:a8:a6:db:ae:28:e1:43:28:14:14: dc:36:d1:5f:bd:b5:ad:5d:40:73:22:30:df:20:25:4d:5f:03: f6:2c:68:ae:6f:86:ea:12:1c:6c:64:fc:3b:27:93:92:1c:b2: 09:3e:b7:51:d7:ab:8c:65:62:df:65:09:c8:e8:a1:e7:38:af: b7:78:1b:1b:fd:92:da:cb:a9:a9:30:03:56:a7:60:b3:57:73: fe:cc:f1:42:0c:42:76:7e:75:be:ad:15:91:2e:b7:d5:2e:3a: 58:e7:fd:80:67:47:9d:ff:b8:d0:3b:16:b7:e0:70:2e:c7:43: d2:a2:e8:d9:6e:7e:87:26:56:7c:85:6f:a9:22:22:6e:02:b6: 7a:b1:5c:b6:c3:eb:7f:2e:b8:c9:b3:79:51:ec:8a:db:3c:73: c3:fb:d2:c9:d5:60:50:fe:82:76:f6:af:bb:d7:bf:ef:b0:07: 83:af:dc:ab:ed:17:a0:81:11:0d:4a:6e:c2:10:2c:e6:0f:41: 81:f0:0c:47:fe:ad:35:22:a5:3f:78:2e:40:46:5f:e0:ce:f5: 39:34:0e:46:90:d6:bf:f4:7c:6e:b8:37:f6:2c:9f:71:00:97: 1f:91:17:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o/pVe3zmkZbIr/XEvPHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWQxZjBlMTg2ZDgxNDQ5MWUzNTI2MjU3ZjdkMGQ5MWUxN2NmM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx/19TVD0DhQrKYGwPcvueq0DbsC LOAum2wGhbp8P/UvKfncVgSJ/1wSpnMPVyoL5t0E2TqdxUTwXp3hf/2Vx18Og2N5 Zfyke6oujrH6173c3U/2plx3ZxUbaxmngMc8uvI8Qa0JctUwyQyOCKQwZAcp/yf9 rIiVSiDZ9e9ypBIx/fD0btGILgBEyBlT4gbBqzoDCZRP6gVuiw+aJXxh+6O/3we8 +eSL1j5shf1oXXiHfsv6lT7x2775TaXUfa8NHSvkZVdkrw+DB4tMYAdPE9rtBw/M +gCjpivupbCtH72p8ixBLkURmBtxmzhobIUt+4gc6xcrFoeL78zVeHqhfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGHR8OGG2BRJHjUmJX99DZHhfPPqMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvWWRIdzRZYllGRWtlTlNZbGYzME5rZUY4OC1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQDJMA0G CSqGSIb3DQEBCwUAA4IBAQCL2ULf546P8lr5uKkmkUpmoJpidcn4dIRw7aim264o 4UMoFBTcNtFfvbWtXUBzIjDfICVNXwP2LGiub4bqEhxsZPw7J5OSHLIJPrdR16uM ZWLfZQnI6KHnOK+3eBsb/ZLay6mpMANWp2CzV3P+zPFCDEJ2fnW+rRWRLrfVLjpY 5/2AZ0ed/7jQOxa34HAux0PSoujZbn6HJlZ8hW+pIiJuArZ6sVy2w+t/LrjJs3lR 7IrbPHPD+9LJ1WBQ/oJ29q+717/vsAeDr9yr7ReggRENSm7CECzmD0GB8AxH/q01 IqU/eC5ARl/gzvU5NA5GkNa/9HxuuDf2LJ9xAJcfkRem -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:48 2026 by rpki-client