This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/Y4BXFDHCLhnrxzHHYEUdyNjKceg.roa File: Y4BXFDHCLhnrxzHHYEUdyNjKceg.roa (raw, json) Hash identifier: RRzC1DJD9tEvba4nsazNebkYMpHPPZr745SZVq6hx5I= Subject key identifier: 63:80:57:14:31:C2:2E:19:EB:C7:31:C7:60:45:1D:C8:D8:CA:71:E8 Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b Certificate serial: 019B7C127E0B92C104BF7949868DB6862317 Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/Y4BXFDHCLhnrxzHHYEUdyNjKceg.roa Signing time: Fri 02 Jan 2026 00:19:05 +0000 ROA not before: Fri 02 Jan 2026 00:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201290 IP address blocks: 193.24.38.0/23 maxlen: 23 193.24.38.0/24 maxlen: 24 193.24.39.0/24 maxlen: 24 2a0f:1bc4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7e:0b:92:c1:04:bf:79:49:86:8d:b6:86:23:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6380571431c22e19ebc731c760451dc8d8ca71e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:f6:77:bc:97:d4:fe:b4:96:8d:5d:83:3e: ab:fb:11:77:2d:84:37:25:f2:9e:79:d4:8b:2f:3d: 49:8b:52:14:a7:0b:14:df:26:86:3f:45:df:0f:b9: 7b:05:3c:75:4d:4e:ab:99:f9:64:dc:d3:f3:c4:1f: ad:4a:b3:c2:c0:1a:97:85:9e:3b:c4:ba:75:65:dd: 58:06:df:c4:a1:06:1a:80:dd:14:24:c7:36:1f:d7: cc:c9:8d:e8:da:a7:31:51:2f:5e:47:73:07:5a:5e: fb:ca:5a:8d:1a:91:9a:17:99:b3:a8:69:a8:9a:8b: f1:4b:56:09:f5:2e:60:f5:16:58:85:f2:63:55:3d: ae:7b:77:0a:60:e8:8d:c7:0c:2c:ff:09:e7:79:01: 6e:da:e4:27:08:27:98:50:32:39:ba:4f:b7:40:51: 43:ee:53:0d:e2:e6:a7:46:ee:c1:78:6d:72:7d:0a: 05:d8:44:4b:7a:a9:26:61:c3:35:41:2d:96:af:c4: f5:55:28:16:33:8a:da:e0:bd:c5:97:11:ff:28:c9: 1a:18:29:14:68:65:cd:3e:a1:52:f7:77:97:42:72: ce:f2:d2:ba:e4:a4:9a:73:a5:15:57:30:ad:22:77: 99:c3:51:7a:c8:e1:df:f0:0b:b4:91:b7:97:dc:ee: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:80:57:14:31:C2:2E:19:EB:C7:31:C7:60:45:1D:C8:D8:CA:71:E8 X509v3 Authority Key Identifier: keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/Y4BXFDHCLhnrxzHHYEUdyNjKceg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.38.0/23 IPv6: 2a0f:1bc4::/32 Signature Algorithm: sha256WithRSAEncryption 21:a0:88:f3:a6:cd:11:dc:01:24:be:5d:ef:a8:80:3a:3f:5a: 48:ce:e7:1b:3e:7c:0f:98:93:44:cd:73:23:9a:2b:23:9b:82: 72:79:c8:fd:09:4d:55:32:a7:51:e7:17:bb:50:09:5c:3c:b5: 8e:07:f4:91:32:79:c0:cf:53:e8:d2:b7:fb:b1:84:97:54:7c: b1:3e:74:9a:5b:6a:35:16:7b:b8:3e:b0:90:6c:eb:01:d4:e1: 14:18:a3:91:ca:42:2f:b1:d4:6e:1d:20:b4:9f:67:4c:db:50: 27:f9:69:d8:c2:c3:28:aa:88:f0:34:f9:a5:6c:6e:7d:d2:11: 8f:2c:8a:93:64:e7:e3:ea:ad:7a:0f:3c:c4:d9:29:20:5a:6c: 1c:d6:87:ba:c5:c3:b9:9b:4d:73:be:24:53:e9:73:69:d8:b1: c8:f2:00:4e:de:de:9d:38:1e:54:c2:c0:f4:69:e4:69:03:00: 92:a1:99:53:0c:65:f2:6b:5d:98:99:35:f6:db:4a:38:d7:16: 14:b1:f5:9f:a3:5f:d3:75:98:2f:0e:c6:ab:64:a1:97:a6:38: 53:53:a3:fa:13:26:55:26:e3:1a:d2:c1:d5:d2:c1:1a:2e:79: 3d:50:4c:33:57:a9:95:bf:20:33:ca:59:6d:1f:72:b4:02:47: 8f:05:ca:9a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8En4LksEEv3lJho22hiMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NjQ1MmEzNDIwZjRmMThkZmEzYTE0ZDI2YjMzNDhmZGZj ZjNkM2IwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzgwNTcxNDMxYzIyZTE5ZWJjNzMxYzc2MDQ1MWRjOGQ4Y2E3MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhT2d7yX1P60lo1dgz6r+xF3LYQ3 JfKeedSLLz1Ji1IUpwsU3yaGP0XfD7l7BTx1TU6rmflk3NPzxB+tSrPCwBqXhZ47 xLp1Zd1YBt/EoQYagN0UJMc2H9fMyY3o2qcxUS9eR3MHWl77ylqNGpGaF5mzqGmo movxS1YJ9S5g9RZYhfJjVT2ue3cKYOiNxwws/wnneQFu2uQnCCeYUDI5uk+3QFFD 7lMN4uanRu7BeG1yfQoF2ERLeqkmYcM1QS2Wr8T1VSgWM4ra4L3FlxH/KMkaGCkU aGXNPqFS93eXQnLO8tK65KSac6UVVzCtIneZw1F6yOHf8Au0kbeX3O5iTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGOAVxQxwi4Z68cxx2BFHcjYynHoMB8GA1UdIwQY MBaAFCVkUqNCD08Y36OhTSazNI/fzz07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTct ZjM4YjI4OWZmOTY5LzEvWTRCWEZESENMaG5yeHpISFlFVWR5TmpLY2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTctZjM4YjI4OWZmOTY5 LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwRgmMA0E AgACMAcDBQAqDxvEMA0GCSqGSIb3DQEBCwUAA4IBAQAhoIjzps0R3AEkvl3vqIA6 P1pIzucbPnwPmJNEzXMjmisjm4Jyecj9CU1VMqdR5xe7UAlcPLWOB/SRMnnAz1Po 0rf7sYSXVHyxPnSaW2o1Fnu4PrCQbOsB1OEUGKORykIvsdRuHSC0n2dM21An+WnY wsMoqojwNPmlbG590hGPLIqTZOfj6q16DzzE2SkgWmwc1oe6xcO5m01zviRT6XNp 2LHI8gBO3t6dOB5UwsD0aeRpAwCSoZlTDGXya12YmTX220o41xYUsfWfo1/TdZgv DsarZKGXpjhTU6P6EyZVJuMa0sHV0sEaLnk9UEwzV6mVvyAzylltH3K0AkePBcqa -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:30 2026 by rpki-client