This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yaBNv6GWT9Csgyz2ciGeoSZQbHg.roa File: yaBNv6GWT9Csgyz2ciGeoSZQbHg.roa (raw, json) Hash identifier: zBq3EZKqhe6PNAX2huLS867sdChOiaV6qHVrHsJEwD8= Subject key identifier: C9:A0:4D:BF:A1:96:4F:D0:AC:83:2C:F6:72:21:9E:A1:26:50:6C:78 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F848D9F80CAA32420F5D71078D4EAFB Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yaBNv6GWT9Csgyz2ciGeoSZQbHg.roa Signing time: Fri 02 Jan 2026 16:22:31 +0000 ROA not before: Fri 02 Jan 2026 16:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198154 IP address blocks: 94.183.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8d:9f:80:ca:a3:24:20:f5:d7:10:78:d4:ea:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9a04dbfa1964fd0ac832cf672219ea126506c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:dc:78:32:fd:db:e2:94:31:8d:dc:8b:76: b1:19:fc:d2:c9:7b:33:96:8e:41:fd:b2:49:4a:ed: 2b:58:6c:51:e5:7e:21:8d:90:24:18:61:19:91:1a: 88:c6:e2:c8:2e:31:6b:24:83:ef:4b:ca:df:7e:62: ff:93:ab:42:51:39:3b:cd:05:6d:08:40:ac:66:f9: 4f:c7:42:f7:f0:f6:d5:89:8a:5b:32:d8:31:9a:02: 6f:1c:6d:c7:e2:5d:0a:3c:01:2e:94:75:cb:39:7d: 1e:98:b5:6f:91:b2:17:85:7d:d4:0f:7d:f9:f2:90: 2b:52:71:15:6b:bf:7d:e0:10:de:2a:6e:0d:28:46: 3e:6e:09:a5:6b:2e:b6:ca:e3:de:dd:c5:72:f0:bc: 04:b6:a2:1f:db:71:4a:b4:99:06:44:50:0c:01:6b: d1:88:fd:f1:2e:be:50:c1:0b:2a:cf:cc:83:f5:d0: 65:d1:25:3b:c6:92:a0:cf:29:41:d8:df:d2:1c:c8: a0:2d:dc:49:8c:24:79:34:ef:32:0c:7f:9c:c9:56: 21:81:d7:c8:58:ea:03:6b:f5:d6:6e:6b:22:52:05: 45:55:30:ee:d0:f2:dd:77:e1:37:40:b1:91:4e:78: f3:5e:89:b3:51:cf:e8:14:5c:8b:18:df:45:5b:90: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A0:4D:BF:A1:96:4F:D0:AC:83:2C:F6:72:21:9E:A1:26:50:6C:78 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yaBNv6GWT9Csgyz2ciGeoSZQbHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.183.167.0/24 Signature Algorithm: sha256WithRSAEncryption 48:51:d4:e7:a9:fa:4b:05:71:b9:43:28:a3:52:de:77:71:30: ed:6a:92:14:dc:bf:68:cc:5f:f8:0c:4e:bb:c0:50:d4:f0:1e: 81:97:7f:eb:93:c8:e3:d4:23:09:8a:9d:fd:fb:14:0a:d0:47: ea:e4:3d:c3:49:ab:da:e3:57:51:70:6c:2c:b2:ed:f2:c6:21: 85:32:ec:ca:2d:ef:f1:a0:f0:8b:fa:4b:86:b5:28:9f:2f:e8: 9a:dc:d5:69:92:43:fd:b7:53:53:d7:21:e1:37:92:b1:73:88: 86:79:ba:02:8d:8a:df:95:31:8b:49:eb:bf:60:09:27:9d:9e: 2a:88:86:bc:ab:b2:32:49:92:17:b7:23:fb:de:f4:66:fd:c1: 6e:04:79:fd:78:dc:e9:77:b5:97:b9:3d:ed:c7:7a:24:ce:80: 99:c9:53:4a:d7:13:2b:c0:15:d9:26:34:9d:a3:ce:f7:08:7d: 64:f3:a8:cb:97:c2:04:f8:d6:6f:81:38:eb:b8:85:0b:e9:42: e3:65:84:e7:b7:d7:9a:56:ac:5e:e1:a4:b6:46:aa:06:45:c0: 69:6b:70:e9:73:7f:82:a2:4b:9c:e9:3a:31:ca:43:57:60:2c: 4c:48:f3:a7:d5:20:47:2e:ad:22:b6:a9:a5:4c:ca:d1:4b:ff: 16:53:b0:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hI2fgMqjJCD11xB41Or7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWEwNGRiZmExOTY0ZmQwYWM4MzJjZjY3MjIxOWVhMTI2NTA2Yzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y/ceDL92+KUMY3ci3axGfzSyXsz lo5B/bJJSu0rWGxR5X4hjZAkGGEZkRqIxuLILjFrJIPvS8rffmL/k6tCUTk7zQVt CECsZvlPx0L38PbViYpbMtgxmgJvHG3H4l0KPAEulHXLOX0emLVvkbIXhX3UD335 8pArUnEVa7994BDeKm4NKEY+bgmlay62yuPe3cVy8LwEtqIf23FKtJkGRFAMAWvR iP3xLr5QwQsqz8yD9dBl0SU7xpKgzylB2N/SHMigLdxJjCR5NO8yDH+cyVYhgdfI WOoDa/XWbmsiUgVFVTDu0PLdd+E3QLGRTnjzXomzUc/oFFyLGN9FW5CEDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmgTb+hlk/QrIMs9nIhnqEmUGx4MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveWFCTnY2R1dUOUNzZ3l6MmNpR2VvU1pRYkhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrenMA0G CSqGSIb3DQEBCwUAA4IBAQBIUdTnqfpLBXG5QyijUt53cTDtapIU3L9ozF/4DE67 wFDU8B6Bl3/rk8jj1CMJip39+xQK0Efq5D3DSava41dRcGwssu3yxiGFMuzKLe/x oPCL+kuGtSifL+ia3NVpkkP9t1NT1yHhN5Kxc4iGeboCjYrflTGLSeu/YAknnZ4q iIa8q7IySZIXtyP73vRm/cFuBHn9eNzpd7WXuT3tx3okzoCZyVNK1xMrwBXZJjSd o873CH1k86jLl8IE+NZvgTjruIUL6ULjZYTnt9eaVqxe4aS2RqoGRcBpa3Dpc3+C okuc6ToxykNXYCxMSPOn1SBHLq0itqmlTMrRS/8WU7AA -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:00 2026 by rpki-client