This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f67cba-461c-4e49-87d4-95d82085620a/1/YXTkxJwZlwWbPa0oznkPyYHQqXA.roa File: YXTkxJwZlwWbPa0oznkPyYHQqXA.roa (raw, json) Hash identifier: gCi+NB32vLIqR/zPhhfJUbg1+zSpdBO6Zb6IS59h5To= Subject key identifier: 61:74:E4:C4:9C:19:97:05:9B:3D:AD:28:CE:79:0F:C9:81:D0:A9:70 Certificate issuer: /CN=6fb69b87f5008d27fbda0da6610ce4a68add924f Certificate serial: 019BB745F741BB244ADE58087E8A2C26C8A9 Authority key identifier: 6F:B6:9B:87:F5:00:8D:27:FB:DA:0D:A6:61:0C:E4:A6:8A:DD:92:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7abh_UAjSf72g2mYQzkpordkk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f67cba-461c-4e49-87d4-95d82085620a/1/YXTkxJwZlwWbPa0oznkPyYHQqXA.roa Signing time: Tue 13 Jan 2026 12:12:54 +0000 ROA not before: Tue 13 Jan 2026 12:12:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29052 IP address blocks: 194.110.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f67cba-461c-4e49-87d4-95d82085620a/1/b7abh_UAjSf72g2mYQzkpordkk8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f67cba-461c-4e49-87d4-95d82085620a/1/b7abh_UAjSf72g2mYQzkpordkk8.mft rsync://rpki.ripe.net/repository/DEFAULT/b7abh_UAjSf72g2mYQzkpordkk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:45:f7:41:bb:24:4a:de:58:08:7e:8a:2c:26:c8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fb69b87f5008d27fbda0da6610ce4a68add924f Validity Not Before: Jan 13 12:12:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6174e4c49c1997059b3dad28ce790fc981d0a970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cb:cc:6e:21:37:ab:c4:f7:93:12:3c:a0:c7: ce:bd:83:8a:71:90:c8:35:64:d4:38:2d:f6:82:c2: 4b:7c:7c:6a:37:03:d4:d4:04:d7:c1:f2:95:6b:81: 23:91:3c:4b:d9:77:35:6a:40:2b:7d:54:d9:96:82: 60:4c:97:63:09:d1:0a:e1:93:78:bb:7f:77:fc:de: 7c:90:2c:85:71:63:dd:86:e0:35:33:ae:55:3a:54: 6d:93:58:aa:0e:b5:b2:4b:b0:b4:25:f8:5e:0d:17: 96:de:4b:b1:ff:6a:27:b6:61:29:ee:93:c4:68:f1: a2:79:22:e8:7c:cf:cb:0c:0c:45:a1:28:b5:a6:fd: 8c:f1:b4:6c:39:82:77:5d:e4:79:7f:04:2a:8b:ce: 38:c5:16:d0:bd:a5:75:30:b0:d1:95:0e:33:7c:9e: 9d:39:48:ac:c2:8a:71:3b:f0:9b:8f:40:53:14:7e: 8a:ff:dd:12:c1:b8:f2:1c:c6:fe:4e:f3:2d:8c:f1: 54:10:92:68:3c:4e:cc:dd:bb:7f:19:cb:e0:e9:57: ac:15:af:90:b4:7b:82:f5:b0:79:f9:bc:14:94:99: 27:2f:2e:5f:a5:26:ce:ba:78:0f:a1:d8:8e:73:86: da:5e:dc:9f:ca:67:c8:79:c0:1a:bd:82:58:76:14: f5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:E4:C4:9C:19:97:05:9B:3D:AD:28:CE:79:0F:C9:81:D0:A9:70 X509v3 Authority Key Identifier: keyid:6F:B6:9B:87:F5:00:8D:27:FB:DA:0D:A6:61:0C:E4:A6:8A:DD:92:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7abh_UAjSf72g2mYQzkpordkk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f67cba-461c-4e49-87d4-95d82085620a/1/YXTkxJwZlwWbPa0oznkPyYHQqXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f67cba-461c-4e49-87d4-95d82085620a/1/b7abh_UAjSf72g2mYQzkpordkk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.218.0/24 Signature Algorithm: sha256WithRSAEncryption b7:bb:52:d7:7f:ec:c0:e1:bf:67:f7:66:50:68:0c:26:4a:ad: dd:9d:6f:50:7e:c9:d9:36:ea:a3:e4:62:6b:93:22:26:b3:e3: 88:9a:74:2b:98:a6:34:bf:4e:77:41:2f:ba:a1:1b:f4:b2:26: 02:52:3c:62:df:cd:cd:20:ef:07:8f:f9:ff:98:f0:74:51:9a: 4b:26:2d:1d:51:41:69:0b:0d:ec:b4:3b:e9:de:86:30:50:e5: f3:4c:e7:13:e0:90:8f:c2:7e:bc:e8:67:8d:4c:65:30:aa:40: f4:54:28:9d:ae:5b:e6:52:b7:c6:4d:2f:b0:c8:50:fa:41:0f: d2:cd:60:b8:77:2b:54:db:4e:12:32:63:c4:91:bd:52:c5:2a: 53:1e:e1:c5:0c:b0:c1:83:33:51:72:bb:e0:0e:73:e0:a2:d9: b8:a8:ad:3f:c2:c5:96:29:d7:9c:25:75:06:81:e6:0f:4e:4a: 8b:7a:f7:42:cc:68:49:32:14:77:3c:db:6d:fa:c7:03:bb:ca: 9a:1f:02:ca:3a:22:a7:9a:ea:69:10:14:1e:7d:82:3a:15:7e: 76:c3:78:50:25:fc:c5:a6:9a:03:b7:c8:be:87:1d:4e:b3:ca: 08:54:c0:0f:29:0a:e1:69:5d:c0:54:f8:87:2e:29:55:4d:46: 6e:83:41:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu3RfdBuyRK3lgIfoosJsipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYjY5Yjg3ZjUwMDhkMjdmYmRhMGRhNjYxMGNlNGE2OGFk ZDkyNGYwHhcNMjYwMTEzMTIxMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTc0ZTRjNDljMTk5NzA1OWIzZGFkMjhjZTc5MGZjOTgxZDBhOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58vMbiE3q8T3kxI8oMfOvYOKcZDI NWTUOC32gsJLfHxqNwPU1ATXwfKVa4EjkTxL2Xc1akArfVTZloJgTJdjCdEK4ZN4 u393/N58kCyFcWPdhuA1M65VOlRtk1iqDrWyS7C0JfheDReW3kux/2ontmEp7pPE aPGieSLofM/LDAxFoSi1pv2M8bRsOYJ3XeR5fwQqi844xRbQvaV1MLDRlQ4zfJ6d OUiswopxO/Cbj0BTFH6K/90SwbjyHMb+TvMtjPFUEJJoPE7M3bt/Gcvg6VesFa+Q tHuC9bB5+bwUlJknLy5fpSbOungPodiOc4baXtyfymfIecAavYJYdhT1OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGF05MScGZcFmz2tKM55D8mB0KlwMB8GA1UdIwQY MBaAFG+2m4f1AI0n+9oNpmEM5KaK3ZJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjdhYmhfVUFqU2Y3MmcybVlRemtwb3Jka2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mNjdjYmEtNDYxYy00ZTQ5LTg3ZDQt OTVkODIwODU2MjBhLzEvWVhUa3hKd1psd1diUGEwb3pua1B5WUhRcVhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mNjdjYmEtNDYxYy00ZTQ5LTg3ZDQtOTVkODIwODU2MjBh LzEvYjdhYmhfVUFqU2Y3MmcybVlRemtwb3Jka2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm7aMA0G CSqGSIb3DQEBCwUAA4IBAQC3u1LXf+zA4b9n92ZQaAwmSq3dnW9QfsnZNuqj5GJr kyIms+OImnQrmKY0v053QS+6oRv0siYCUjxi383NIO8Hj/n/mPB0UZpLJi0dUUFp Cw3stDvp3oYwUOXzTOcT4JCPwn686GeNTGUwqkD0VCidrlvmUrfGTS+wyFD6QQ/S zWC4dytU204SMmPEkb1SxSpTHuHFDLDBgzNRcrvgDnPgotm4qK0/wsWWKdecJXUG geYPTkqLevdCzGhJMhR3PNtt+scDu8qaHwLKOiKnmuppEBQefYI6FX52w3hQJfzF ppoDt8i+hx1Os8oIVMAPKQrhaV3AVPiHLilVTUZug0FW -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:21 2026 by rpki-client