This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/YFekMV6k_znI9JX_sw8Tv3F6sTI.roa File: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (raw, json) Hash identifier: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac= Subject key identifier: 60:57:A4:31:5E:A4:FF:39:C8:F4:95:FF:B3:0F:13:BF:71:7A:B1:32 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105D638E0D222FA38DC582B043303D Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/YFekMV6k_znI9JX_sw8Tv3F6sTI.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209474 IP address blocks: 188.191.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5d:63:8e:0d:22:2f:a3:8d:c5:82:b0:43:30:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6057a4315ea4ff39c8f495ffb30f13bf717ab132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:5e:2d:24:50:fe:e3:4d:a5:99:3c:3c:ba: aa:33:22:83:a0:72:3b:7b:7f:39:de:ea:83:4b:9b: 27:c8:57:79:c5:71:6d:d3:c2:60:82:d9:f5:12:5f: b1:1d:90:a2:2a:ba:45:f6:2c:1d:7a:08:33:b7:17: 53:68:76:ae:2e:08:e1:4c:d1:2b:e3:75:e6:68:15: a6:b3:31:47:0a:03:e1:53:40:82:ec:28:05:0a:7a: 4a:39:f5:9b:6a:1e:fb:b6:94:ec:9a:7b:72:02:06: 15:34:6a:bc:1d:0e:c3:70:e6:c3:54:1d:56:df:ac: ce:b5:55:60:35:4b:ff:63:99:17:f2:16:d9:55:c0: 82:dc:97:14:5e:36:61:b1:f2:00:ec:e1:64:00:3b: e7:08:e3:3c:85:67:f9:6f:5e:5b:40:49:01:f0:5f: a2:76:6b:4c:0a:bc:5a:18:92:04:05:16:c2:7a:81: 7a:6f:b9:b7:a3:1b:cc:76:1b:c5:e7:37:7b:99:c3: cc:ed:60:7a:51:a5:7a:9a:d0:8c:81:58:97:f0:80: 2c:cc:6c:02:57:f5:e8:12:89:68:d0:3f:49:92:b8: ac:c8:64:46:45:b7:16:c5:a2:73:14:9f:00:3a:77: bb:d3:0b:77:96:17:65:d8:b7:21:88:2c:c2:b7:29: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:57:A4:31:5E:A4:FF:39:C8:F4:95:FF:B3:0F:13:BF:71:7A:B1:32 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/YFekMV6k_znI9JX_sw8Tv3F6sTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.191.107.0/24 Signature Algorithm: sha256WithRSAEncryption 86:4f:9f:9d:d4:6b:2a:ed:01:1d:02:90:4e:b2:fd:3e:72:d7: 11:bd:58:96:8e:a7:81:c4:53:ed:8b:35:b6:67:fc:4b:2a:89: a4:65:03:27:83:ae:75:32:0e:14:c0:3f:60:7e:24:22:c0:f9: 9f:05:28:6a:d1:5d:b9:0b:5a:a0:43:93:a7:8d:25:85:25:8c: 17:af:82:8a:f0:2e:2d:fd:9e:42:4c:39:6b:e0:b1:87:8e:07: b7:04:27:bb:11:25:a9:3e:dd:4e:f6:97:4c:6d:4e:2c:99:20: ec:7e:2b:a6:0c:a6:a0:3e:65:39:0f:14:f3:1e:7d:98:c9:e6: 59:38:3e:f4:a6:2e:f6:b9:18:ca:24:fb:27:54:5c:36:0d:ad: 55:a6:31:98:aa:ce:06:55:2d:6c:e2:44:5e:33:89:5c:88:a2: 13:f1:de:b2:f5:eb:43:f1:f1:5f:8e:5a:a1:57:73:58:0f:e8: 69:66:21:37:37:37:c0:ee:2f:e0:c0:00:31:6f:58:32:a5:6b: 4b:ed:70:97:8c:7c:50:cd:74:70:07:47:a2:2e:f3:7a:b8:ab: 06:23:69:b1:c4:f4:7e:66:ef:eb:4a:dc:eb:56:1b:95:6b:86: 20:c5:0d:17:7a:07:61:9d:b9:e2:be:66:1f:ed:58:0d:71:00: 5d:11:02:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EF1jjg0iL6ONxYKwQzA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDU3YTQzMTVlYTRmZjM5YzhmNDk1ZmZiMzBmMTNiZjcxN2FiMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmJeLSRQ/uNNpZk8PLqqMyKDoHI7 e3853uqDS5snyFd5xXFt08Jggtn1El+xHZCiKrpF9iwdeggztxdTaHauLgjhTNEr 43XmaBWmszFHCgPhU0CC7CgFCnpKOfWbah77tpTsmntyAgYVNGq8HQ7DcObDVB1W 36zOtVVgNUv/Y5kX8hbZVcCC3JcUXjZhsfIA7OFkADvnCOM8hWf5b15bQEkB8F+i dmtMCrxaGJIEBRbCeoF6b7m3oxvMdhvF5zd7mcPM7WB6UaV6mtCMgViX8IAszGwC V/XoEolo0D9JkrisyGRGRbcWxaJzFJ8AOne70wt3lhdl2LchiCzCtyn03QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBXpDFepP85yPSV/7MPE79xerEyMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvWUZla01WNmtfem5JOUpYX3N3OFR2M0Y2c1RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9rMA0G CSqGSIb3DQEBCwUAA4IBAQCGT5+d1Gsq7QEdApBOsv0+ctcRvViWjqeBxFPtizW2 Z/xLKomkZQMng651Mg4UwD9gfiQiwPmfBShq0V25C1qgQ5OnjSWFJYwXr4KK8C4t /Z5CTDlr4LGHjge3BCe7ESWpPt1O9pdMbU4smSDsfiumDKagPmU5DxTzHn2YyeZZ OD70pi72uRjKJPsnVFw2Da1VpjGYqs4GVS1s4kReM4lciKIT8d6y9etD8fFfjlqh V3NYD+hpZiE3NzfA7i/gwAAxb1gypWtL7XCXjHxQzXRwB0eiLvN6uKsGI2mxxPR+ Zu/rStzrVhuVa4YgxQ0XegdhnbnivmYf7VgNcQBdEQLX -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:11 2026 by rpki-client