This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa File: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (raw, json) Hash identifier: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI= Subject key identifier: 63:69:B4:7C:FE:59:D2:61:19:D6:06:7D:56:F9:A9:68:6B:03:50:DA Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Certificate serial: 019B77C6D0D0F63F93375E0391D193655C1E Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13189 IP address blocks: 195.35.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d0:d0:f6:3f:93:37:5e:03:91:d1:93:65:5c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6369b47cfe59d26119d6067d56f9a9686b0350da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:e7:ad:08:f3:38:6f:82:3e:11:88:64:44: 91:93:56:3d:98:f7:2d:b9:dd:5e:5c:f7:8e:fa:5e: 86:76:b2:f7:1c:09:41:78:bd:f4:89:c8:fc:7f:9a: ae:64:b7:d0:10:80:db:d0:a9:57:3a:b0:a9:1c:e3: 2e:33:bc:17:00:10:e2:32:53:6b:c0:1e:be:53:74: d4:40:a3:bd:a6:3a:d1:10:7d:fc:fc:4c:4d:28:78: c8:a1:ee:57:35:70:88:a1:55:25:de:34:0c:1d:8a: 91:e0:f7:6a:4f:d5:80:e4:ba:9c:4b:bc:ac:6a:a8: 62:5a:e7:fa:1f:fb:6b:56:cc:a0:67:bd:90:22:7d: ab:39:fb:c4:5c:fe:14:ba:4a:27:d9:5e:ce:ea:32: 0f:fc:32:42:85:42:2a:f6:4b:3e:05:46:bf:2e:35: dc:9a:da:b6:e9:28:57:f7:b9:90:0f:91:d2:ca:5c: 5e:e5:ed:ef:e5:d2:bf:32:d9:34:c4:78:73:1e:6b: 3c:ca:d3:02:fb:e4:bc:76:79:59:b0:7d:ac:b2:51: d6:dc:10:b2:ee:b0:98:86:29:db:2a:24:2a:6f:b7: 17:b2:dd:5e:fb:5c:7e:3b:26:e6:6a:8c:62:34:ae: 95:3b:16:37:e5:3f:b7:7f:ff:ed:e4:b0:3f:33:44: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:69:B4:7C:FE:59:D2:61:19:D6:06:7D:56:F9:A9:68:6B:03:50:DA X509v3 Authority Key Identifier: keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.35.101.0/24 Signature Algorithm: sha256WithRSAEncryption b3:af:3d:64:db:00:b1:5e:78:fb:5f:28:db:11:bf:16:7f:05: 64:03:3a:0f:24:94:d0:5e:01:bc:23:7c:06:87:a9:aa:b4:17: 0c:8e:c9:1c:c8:22:4c:b2:9e:26:12:4f:6d:2c:fb:69:af:6a: c4:fa:0b:b7:cf:ab:a0:94:0a:a7:34:81:df:65:0d:f5:b0:2e: f7:fb:86:59:10:48:71:f4:ae:90:55:e9:d7:09:f4:cf:a9:6e: 13:0c:4b:18:a3:66:78:f3:55:b6:a0:e8:66:5b:d4:c6:a7:2b: ff:3b:f3:55:e2:ec:8d:28:3b:d6:aa:70:d1:d6:7e:e2:19:63: 22:d9:ad:8c:3e:95:62:10:a8:e4:3b:a3:e7:8c:f5:73:c0:04: f9:20:2a:ee:3e:7d:cb:90:7a:7e:09:d7:a0:15:a9:c9:d2:6e: 3a:0d:e3:2b:70:ee:d1:ec:70:d1:dc:fb:4c:5c:b5:21:9a:9c: 4b:56:ac:f2:ec:16:da:47:8b:55:fb:67:48:c7:e0:a7:02:32: 65:a2:a7:51:53:97:cf:37:95:01:76:1c:53:d6:1f:f7:c4:ba: c2:38:65:60:81:e1:fc:0b:f8:80:b4:34:61:11:6f:58:be:b3: 9e:74:8b:50:5b:a9:41:71:56:51:17:02:63:88:88:84:6a:a7: 49:f6:2d:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtDQ9j+TN14DkdGTZVweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmUzZGZhNzdlYjAyMDFjODU2ZDFlMWViZjAzMmJjYzhi MTI0ZDgwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzY5YjQ3Y2ZlNTlkMjYxMTlkNjA2N2Q1NmY5YTk2ODZiMDM1MGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08bnrQjzOG+CPhGIZESRk1Y9mPct ud1eXPeO+l6GdrL3HAlBeL30icj8f5quZLfQEIDb0KlXOrCpHOMuM7wXABDiMlNr wB6+U3TUQKO9pjrREH38/ExNKHjIoe5XNXCIoVUl3jQMHYqR4PdqT9WA5LqcS7ys aqhiWuf6H/trVsygZ72QIn2rOfvEXP4Uukon2V7O6jIP/DJChUIq9ks+BUa/LjXc mtq26ShX97mQD5HSylxe5e3v5dK/Mtk0xHhzHms8ytMC++S8dnlZsH2sslHW3BCy 7rCYhinbKiQqb7cXst1e+1x+OybmaoxiNK6VOxY35T+3f//t5LA/M0SLQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGNptHz+WdJhGdYGfVb5qWhrA1DaMB8GA1UdIwQY MBaAFCn+Pfp36wIByFbR4evwMrzIsSTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUt YmViZWMyMzM2ZDQ4LzEvWTJtMGZQNVowbUVaMWdaOVZ2bXBhR3NEVU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUtYmViZWMyMzM2ZDQ4 LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyNlMA0G CSqGSIb3DQEBCwUAA4IBAQCzrz1k2wCxXnj7XyjbEb8WfwVkAzoPJJTQXgG8I3wG h6mqtBcMjskcyCJMsp4mEk9tLPtpr2rE+gu3z6uglAqnNIHfZQ31sC73+4ZZEEhx 9K6QVenXCfTPqW4TDEsYo2Z481W2oOhmW9TGpyv/O/NV4uyNKDvWqnDR1n7iGWMi 2a2MPpViEKjkO6PnjPVzwAT5ICruPn3LkHp+CdegFanJ0m46DeMrcO7R7HDR3PtM XLUhmpxLVqzy7BbaR4tV+2dIx+CnAjJloqdRU5fPN5UBdhxT1h/3xLrCOGVggeH8 C/iAtDRhEW9YvrOedItQW6lBcVZRFwJjiIiEaqdJ9i23 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:26 2026 by rpki-client