This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa File: yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa (raw, json) Hash identifier: UXD6Z2ZYC62V3GCh/SczjWuD8By0eruoWG1wzac/bwU= Subject key identifier: C9:89:E3:31:20:43:D0:DD:46:75:48:56:F1:BD:E0:90:2B:DC:05:36 Certificate issuer: /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123 Certificate serial: 019B7C1145B12A4F7629E2B57AAD81F47AA1 Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa Signing time: Fri 02 Jan 2026 00:17:45 +0000 ROA not before: Fri 02 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 66496 IP address blocks: 195.184.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:45:b1:2a:4f:76:29:e2:b5:7a:ad:81:f4:7a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123 Validity Not Before: Jan 2 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c989e3312043d0dd46754856f1bde0902bdc0536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:08:e8:b4:51:7d:6d:8b:9d:58:a2:14:28:22: 17:ce:08:2c:62:13:f8:cc:f3:56:0a:e8:a4:04:16: e6:fa:94:66:57:6b:0a:6a:e7:64:e1:21:f1:64:82: bb:7d:5b:a6:6b:28:30:61:41:23:8b:45:4b:5c:6d: c5:da:2e:af:80:17:7b:33:c3:ee:fd:ff:3d:be:58: 7e:56:7e:76:1a:a5:b0:f5:c5:c9:2b:f3:04:e4:df: 6d:5d:ec:5e:07:66:fd:1a:0d:fc:ae:5f:7f:ef:32: d7:b8:5f:10:42:24:e9:17:77:0f:26:1d:3e:e7:48: da:82:ae:76:9b:c8:1c:29:38:5b:81:30:c2:02:2f: 97:c5:7c:98:f8:a3:81:d1:85:d7:07:b6:11:0b:08: b1:ec:19:2e:49:a4:5b:ed:c6:be:9d:b2:2e:8a:43: 24:42:d6:ce:ef:8d:11:6e:ad:3b:d6:6e:2b:fc:3c: b4:05:0b:65:b5:c5:47:cf:b3:b0:93:cf:6d:14:03: cf:b2:2e:5e:71:d5:d2:9e:72:6f:3d:c8:64:29:4a: 03:f0:67:cd:64:c8:49:e1:66:a8:fa:d7:02:57:09: 7c:9b:64:c9:43:a2:d3:e8:7e:a0:df:13:ad:98:66: 41:a3:b9:75:8f:35:b1:b1:42:71:95:00:cf:70:b8: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:89:E3:31:20:43:D0:DD:46:75:48:56:F1:BD:E0:90:2B:DC:05:36 X509v3 Authority Key Identifier: keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.184.249.0/24 Signature Algorithm: sha256WithRSAEncryption 06:97:c6:13:6f:83:e4:af:f6:d9:95:8e:ea:99:ad:28:a4:38: e8:54:1f:6f:03:66:ea:f2:c9:d4:66:dd:60:5b:fd:31:dc:34: d8:8b:62:6d:4c:00:04:c1:a6:65:e1:9c:a4:c1:11:c4:8c:d3: dc:8a:2f:8b:48:80:e7:35:88:fe:3c:1e:b0:0c:da:6b:b0:4d: 18:03:f0:0f:a0:87:75:94:da:45:11:af:04:09:b7:c3:19:a3: d1:76:31:4f:3f:5a:4f:d9:ba:e7:4c:b2:ec:df:b9:c9:4e:70: 3f:c7:72:93:19:d9:b0:60:ab:3e:50:25:4b:0b:d6:e2:65:98: eb:a7:1c:be:31:b9:66:4a:92:73:5e:a4:fa:c9:76:14:10:d6: 59:c9:06:4c:e7:b2:a8:0d:b2:7a:cb:69:1c:91:41:94:e8:48: 8e:15:61:56:97:f9:11:20:ed:ef:c9:89:6f:e7:6e:a4:47:e6: 87:61:6f:fe:a6:82:80:15:6b:a1:78:52:cf:b8:84:92:b6:08: 33:14:b4:c4:41:78:77:61:d9:93:97:f3:10:e8:b0:7b:2c:83: 9b:03:fb:02:06:d8:0b:10:7a:3d:d4:66:44:70:e0:91:b6:30: 3f:c4:c6:da:c7:0e:e2:75:8c:16:87:1f:c6:72:43:09:1f:44: c6:c5:f0:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EUWxKk92KeK1eq2B9HqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTYwYTFmYzYyODJmNTc4MmE3YThhN2VhMGVkMjA2Yjk0 NDQxMjMwHhcNMjYwMTAyMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTg5ZTMzMTIwNDNkMGRkNDY3NTQ4NTZmMWJkZTA5MDJiZGMwNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAjotFF9bYudWKIUKCIXzggsYhP4 zPNWCuikBBbm+pRmV2sKaudk4SHxZIK7fVumaygwYUEji0VLXG3F2i6vgBd7M8Pu /f89vlh+Vn52GqWw9cXJK/ME5N9tXexeB2b9Gg38rl9/7zLXuF8QQiTpF3cPJh0+ 50jagq52m8gcKThbgTDCAi+XxXyY+KOB0YXXB7YRCwix7BkuSaRb7ca+nbIuikMk QtbO740Rbq071m4r/Dy0BQtltcVHz7Owk89tFAPPsi5ecdXSnnJvPchkKUoD8GfN ZMhJ4Wao+tcCVwl8m2TJQ6LT6H6g3xOtmGZBo7l1jzWxsUJxlQDPcLiAcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmJ4zEgQ9DdRnVIVvG94JAr3AU2MB8GA1UdIwQY MBaAFDAWCh/GKC9Xgqeop+oO0ga5REEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYt NGIzOWZjYWJjMzcxLzEveVluak1TQkQwTjFHZFVoVzhiM2drQ3ZjQlRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYtNGIzOWZjYWJjMzcx LzEvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7j5MA0G CSqGSIb3DQEBCwUAA4IBAQAGl8YTb4Pkr/bZlY7qma0opDjoVB9vA2bq8snUZt1g W/0x3DTYi2JtTAAEwaZl4ZykwRHEjNPcii+LSIDnNYj+PB6wDNprsE0YA/APoId1 lNpFEa8ECbfDGaPRdjFPP1pP2brnTLLs37nJTnA/x3KTGdmwYKs+UCVLC9biZZjr pxy+MblmSpJzXqT6yXYUENZZyQZM57KoDbJ6y2kckUGU6EiOFWFWl/kRIO3vyYlv 526kR+aHYW/+poKAFWuheFLPuISStggzFLTEQXh3YdmTl/MQ6LB7LIObA/sCBtgL EHo91GZEcOCRtjA/xMbaxw7idYwWhx/GckMJH0TGxfCF -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:38 2026 by rpki-client