This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa File: y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa (raw, json) Hash identifier: hK90cOpXZcr7Ami6NbNqe49Tz8xd4CBkB2ANlYx8mv0= Subject key identifier: CB:C0:EF:B7:AF:62:A4:79:35:F4:FB:FE:9D:F6:1F:CC:2D:40:02:D9 Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Certificate serial: 019B7A5B5470F02666149C3B547CE8D16EF7 Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa Signing time: Thu 01 Jan 2026 16:19:24 +0000 ROA not before: Thu 01 Jan 2026 16:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 193.73.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:54:70:f0:26:66:14:9c:3b:54:7c:e8:d1:6e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbc0efb7af62a47935f4fbfe9df61fcc2d4002d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:93:fd:f7:4c:47:88:40:40:dd:d8:f3:e2: 06:4a:e4:45:c7:31:e2:57:3c:41:1d:0a:d2:b2:a2: 96:ac:88:72:c2:13:02:b8:d2:ab:ad:5a:77:87:fb: 1e:4e:b5:d2:b8:4c:8a:e5:c0:90:e7:df:96:17:1d: 73:41:26:c5:d1:4a:cf:39:f8:6e:ea:6d:c7:0a:2c: ee:ae:76:e0:b6:6d:d3:97:6a:6a:28:d6:5f:d4:68: 71:7e:d6:4c:c8:c5:f8:f2:26:d0:b0:05:bd:e5:c5: 28:7d:6f:d7:18:ef:1a:b5:0f:c2:1b:2f:89:93:c0: e9:c5:fb:db:7f:d5:44:de:22:39:37:47:ad:7e:78: 8b:f9:ad:17:f5:82:bc:b8:be:49:22:5e:29:81:9f: c4:bb:02:2c:18:f9:d5:44:5b:cb:7f:12:89:b1:ab: 0f:f6:6f:dc:7e:ba:2b:f9:29:40:c6:9b:70:0e:d3: 01:49:8a:5f:36:cb:ae:dd:e4:51:a9:fb:30:d3:a2: fa:e5:b6:4e:f8:7e:3f:25:c1:92:22:d8:bd:61:88: de:6e:b9:54:02:30:54:8a:79:4e:c5:cd:38:ff:35: 4b:c5:be:22:f3:21:27:22:67:5f:fe:61:08:02:f4: d7:f6:d0:e1:84:3a:41:16:45:be:0b:d5:26:e1:11: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C0:EF:B7:AF:62:A4:79:35:F4:FB:FE:9D:F6:1F:CC:2D:40:02:D9 X509v3 Authority Key Identifier: keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.73.238.0/24 Signature Algorithm: sha256WithRSAEncryption 35:e1:79:f6:66:4a:c7:2e:d1:fc:04:b1:dc:54:a9:9c:6c:f0: 03:29:4d:da:13:7f:4b:6d:c1:1a:29:b6:ff:ed:36:7a:b7:2c: 4f:61:b5:09:ed:21:c3:75:42:14:70:42:92:ee:66:bd:b8:e3: ae:ed:42:a5:bb:72:97:9a:b8:2f:0e:1b:ba:01:d8:9d:5c:80: 78:08:38:55:9e:34:12:34:b0:ff:a1:f1:ee:8d:8e:ba:2e:14: 49:33:9c:86:1c:6b:48:2f:f4:6e:a8:c9:71:c0:af:f4:3e:18: ed:aa:00:fc:2b:d5:4b:b5:87:c7:34:86:97:05:5f:ee:34:23: 5f:d2:23:c6:be:b6:e9:f8:a9:ac:a5:81:83:cb:9e:30:1d:cb: 91:dc:d0:77:de:e1:28:b7:27:21:d6:01:46:3d:58:50:4c:29: bb:02:e9:48:e9:76:5b:3a:8c:fd:e2:d6:c9:6a:dc:c4:9a:b2: 4b:42:2f:70:6e:9f:e0:c8:35:ec:e6:0d:77:b7:a2:59:2c:cf: 36:aa:2c:c5:33:70:ac:45:77:6a:4e:83:3c:72:89:6e:39:aa: 33:82:a1:da:21:80:db:cd:5d:60:ca:ae:98:4b:33:19:33:90: c3:5b:4b:9c:b2:02:e1:db:f2:d7:e2:05:d1:5e:ae:81:3c:c4: 13:87:49:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1Rw8CZmFJw7VHzo0W73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmM2UwYjI3YjhlNGQ3OThmOTJiOWRlMTU3ZjFkYTVhNDNj ZDQ5ZTUwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmMwZWZiN2FmNjJhNDc5MzVmNGZiZmU5ZGY2MWZjYzJkNDAwMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaWT/fdMR4hAQN3Y8+IGSuRFxzHi VzxBHQrSsqKWrIhywhMCuNKrrVp3h/seTrXSuEyK5cCQ59+WFx1zQSbF0UrPOfhu 6m3HCizurnbgtm3Tl2pqKNZf1GhxftZMyMX48ibQsAW95cUofW/XGO8atQ/CGy+J k8Dpxfvbf9VE3iI5N0etfniL+a0X9YK8uL5JIl4pgZ/EuwIsGPnVRFvLfxKJsasP 9m/cfror+SlAxptwDtMBSYpfNsuu3eRRqfsw06L65bZO+H4/JcGSIti9YYjebrlU AjBUinlOxc04/zVLxb4i8yEnImdf/mEIAvTX9tDhhDpBFkW+C9Um4RHaLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMvA77evYqR5NfT7/p32H8wtQALZMB8GA1UdIwQY MBaAFH8+Cye45NeY+Sud4Vfx2lpDzUnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUt YTQyZWM4Nzc2ZmJiLzEveThEdnQ2OWlwSGsxOVB2LW5mWWZ6QzFBQXRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUtYTQyZWM4Nzc2ZmJi LzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUnuMA0G CSqGSIb3DQEBCwUAA4IBAQA14Xn2ZkrHLtH8BLHcVKmcbPADKU3aE39LbcEaKbb/ 7TZ6tyxPYbUJ7SHDdUIUcEKS7ma9uOOu7UKlu3KXmrgvDhu6AdidXIB4CDhVnjQS NLD/ofHujY66LhRJM5yGHGtIL/RuqMlxwK/0PhjtqgD8K9VLtYfHNIaXBV/uNCNf 0iPGvrbp+KmspYGDy54wHcuR3NB33uEotych1gFGPVhQTCm7AulI6XZbOoz94tbJ atzEmrJLQi9wbp/gyDXs5g13t6JZLM82qizFM3CsRXdqToM8coluOaozgqHaIYDb zV1gyq6YSzMZM5DDW0ucsgLh2/LX4gXRXq6BPMQTh0lT -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:48 2026 by rpki-client