This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lYiPSQZB4r6h-pLf7OY4CAWBN2o.roa File: lYiPSQZB4r6h-pLf7OY4CAWBN2o.roa (raw, json) Hash identifier: It8ZAXrlU7ejH5mJWVbL2MG/R5XfrGdxnMVpgYeIw2s= Subject key identifier: 95:88:8F:49:06:41:E2:BE:A1:FA:92:DF:EC:E6:38:08:05:81:37:6A Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DF6905F6F676389CB6C45EC1D22B9 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lYiPSQZB4r6h-pLf7OY4CAWBN2o.roa Signing time: Thu 01 Jan 2026 12:17:36 +0000 ROA not before: Thu 01 Jan 2026 12:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203647 IP address blocks: 194.135.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f6:90:5f:6f:67:63:89:cb:6c:45:ec:1d:22:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95888f490641e2bea1fa92dfece638080581376a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:2d:62:40:ae:68:eb:ac:b1:88:63:34:76: de:c4:65:19:3b:9c:2d:8c:6b:6d:ba:60:0d:91:c1: 20:68:3e:37:21:a9:23:66:fc:a8:99:6d:90:53:0c: b2:74:dc:a8:63:06:27:e2:53:4f:5e:fe:0d:ad:d9: a8:a4:40:c4:bd:27:52:e9:fb:ee:aa:30:8b:d6:a4: 88:df:9e:ea:43:1a:c0:ef:68:83:97:82:19:89:7d: 74:bc:6e:f9:4c:9b:40:e6:6d:cd:96:28:30:20:0c: 9d:05:89:cc:4c:0b:66:61:a3:37:cb:bb:2e:cd:ed: 85:45:58:c9:ca:5c:58:6f:4d:47:c1:9c:73:10:ca: 41:7e:90:75:e6:a5:b2:da:ad:77:42:50:d9:03:1f: 54:e2:d7:e1:6b:ed:c8:d7:38:46:ef:10:e3:7a:47: fc:7e:35:39:2a:5c:5b:1b:65:b8:02:26:b3:35:0c: 3d:9b:d0:bd:99:17:28:6e:37:f5:05:08:dc:5f:bf: 6a:a6:e4:eb:d7:f3:30:0e:93:47:40:cf:58:47:3b: 6e:70:c6:86:e2:22:1d:b7:ee:13:77:7c:6b:3c:43: ea:96:fa:7a:be:3d:ff:64:8d:04:bc:d2:47:ed:eb: bf:3f:ca:1f:7b:70:2b:5a:ed:48:97:08:5d:2c:59: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:88:8F:49:06:41:E2:BE:A1:FA:92:DF:EC:E6:38:08:05:81:37:6A X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lYiPSQZB4r6h-pLf7OY4CAWBN2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.135.119.0/24 Signature Algorithm: sha256WithRSAEncryption 25:b8:c4:d8:e1:1d:b3:3c:28:4b:f2:4c:ff:75:d0:98:c0:09: 80:fe:16:3e:6a:d6:cd:c2:b1:d1:72:f9:6f:82:f3:e3:a6:4a: fa:d2:91:5f:04:de:43:59:3a:59:ea:44:33:3e:60:9f:9c:ad: a6:28:f6:0c:93:d2:8f:db:51:1a:be:ac:4a:05:99:d2:8d:22: 1a:e9:5f:25:db:f5:a9:1e:16:28:45:f8:b7:c6:7d:5c:c5:0e: ab:55:8d:21:0a:2d:e8:4e:11:cc:10:1a:29:ae:d4:01:0f:cd: 3a:76:8a:c2:f5:b9:11:b5:9e:db:18:0d:5d:da:d6:77:1f:e0: 20:7a:a1:64:67:e5:2f:71:a1:23:44:81:c6:14:28:c2:53:ed: 48:a5:29:28:db:85:6e:63:e4:62:d1:97:7e:06:a3:7a:42:99: a4:2a:9c:37:5f:8f:f5:ba:eb:19:45:67:61:34:1d:22:72:78: c7:37:b4:3e:45:59:f7:32:e5:26:70:35:38:bc:a8:25:0f:d0: 4f:fd:67:bf:53:04:0d:9e:5e:41:78:ca:06:94:e6:63:15:3e: 07:6f:ea:17:4e:de:b3:76:f2:df:b7:d4:0c:0d:03:8a:2a:01: 5b:3f:a2:4d:b5:aa:2c:25:a8:f2:10:18:9c:27:e4:b4:fd:3d: 48:1d:f9:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffaQX29nY4nLbEXsHSK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTg4OGY0OTA2NDFlMmJlYTFmYTkyZGZlY2U2MzgwODA1ODEzNzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoEtYkCuaOussYhjNHbexGUZO5wt jGttumANkcEgaD43IakjZvyomW2QUwyydNyoYwYn4lNPXv4NrdmopEDEvSdS6fvu qjCL1qSI357qQxrA72iDl4IZiX10vG75TJtA5m3NligwIAydBYnMTAtmYaM3y7su ze2FRVjJylxYb01HwZxzEMpBfpB15qWy2q13QlDZAx9U4tfha+3I1zhG7xDjekf8 fjU5KlxbG2W4AiazNQw9m9C9mRcobjf1BQjcX79qpuTr1/MwDpNHQM9YRztucMaG 4iIdt+4Td3xrPEPqlvp6vj3/ZI0EvNJH7eu/P8ofe3ArWu1IlwhdLFk6kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWIj0kGQeK+ofqS3+zmOAgFgTdqMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvbFlpUFNRWkI0cjZoLXBMZjdPWTRDQVdCTjJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwod3MA0G CSqGSIb3DQEBCwUAA4IBAQAluMTY4R2zPChL8kz/ddCYwAmA/hY+atbNwrHRcvlv gvPjpkr60pFfBN5DWTpZ6kQzPmCfnK2mKPYMk9KP21EavqxKBZnSjSIa6V8l2/Wp HhYoRfi3xn1cxQ6rVY0hCi3oThHMEBoprtQBD806dorC9bkRtZ7bGA1d2tZ3H+Ag eqFkZ+UvcaEjRIHGFCjCU+1IpSko24VuY+Ri0Zd+BqN6QpmkKpw3X4/1uusZRWdh NB0icnjHN7Q+RVn3MuUmcDU4vKglD9BP/We/UwQNnl5BeMoGlOZjFT4Hb+oXTt6z dvLft9QMDQOKKgFbP6JNtaosJajyEBicJ+S0/T1IHfll -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:56 2026 by rpki-client