This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/yuafb_GLP5geRNFsOXeHzGpXUtw.roa File: yuafb_GLP5geRNFsOXeHzGpXUtw.roa (raw, json) Hash identifier: rNqK+URhLKI6w5EH1rntR8Xc3oY7jxanp2xGnYspLAY= Subject key identifier: CA:E6:9F:6F:F1:8B:3F:98:1E:44:D1:6C:39:77:87:CC:6A:57:52:DC Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E381226668511D466BB8F5401599FDD Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/yuafb_GLP5geRNFsOXeHzGpXUtw.roa Signing time: Fri 02 Jan 2026 10:19:22 +0000 ROA not before: Fri 02 Jan 2026 10:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216024 IP address blocks: 193.38.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:12:26:66:85:11:d4:66:bb:8f:54:01:59:9f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cae69f6ff18b3f981e44d16c397787cc6a5752dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:35:a9:04:bf:f2:56:57:3f:45:9c:da:21: c1:90:0f:d4:81:ba:b4:fb:33:57:3f:a9:1c:9c:51: 4f:1f:fb:00:80:77:a6:7b:c0:fd:81:1b:19:ec:0c: 60:6c:7c:e1:7c:da:ff:2f:82:08:e3:d8:94:e2:e2: d0:05:c7:e9:8b:85:71:68:37:17:94:88:cd:6d:c3: c3:f6:8e:1b:4f:56:2b:24:fd:1b:5e:1f:97:6f:93: 70:af:4d:c0:fb:c0:f4:df:a2:89:f1:4e:32:fd:40: f1:6d:60:36:83:3a:89:fe:a3:d5:3c:4f:18:07:f2: 2d:6f:3b:38:58:19:8b:90:19:f8:b5:a1:f0:44:d2: ea:6b:6a:c6:f9:0a:50:a9:5f:28:12:ce:1a:b9:7f: cf:5d:19:a7:1d:67:ef:ff:e5:30:75:82:28:86:75: 8e:05:ce:e4:20:31:8a:c7:e8:2f:81:0f:7a:36:86: 17:3b:47:5f:de:f2:98:b3:b7:2d:a9:75:d1:1a:04: c1:0f:0e:d1:f2:36:03:c9:6a:c0:59:76:96:fc:99: c2:b1:73:4d:ff:7c:0e:61:6f:9a:df:63:89:5b:f9: d7:85:b8:ec:e9:39:25:92:56:a4:bb:f1:34:7c:dc: 2f:1f:31:c3:4e:f3:3b:e3:3c:77:06:a1:69:2c:99: 05:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E6:9F:6F:F1:8B:3F:98:1E:44:D1:6C:39:77:87:CC:6A:57:52:DC X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/yuafb_GLP5geRNFsOXeHzGpXUtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.235.0/24 Signature Algorithm: sha256WithRSAEncryption 27:db:5a:3c:7d:e7:a6:58:3e:77:5d:ce:a7:dd:95:81:0b:f9: 40:df:9f:24:e1:2a:bd:88:52:cf:92:15:3f:aa:c6:ff:f8:d0: 1e:14:34:a9:0a:25:e9:5c:c3:1e:23:44:be:50:ad:3c:53:1c: 30:ba:ee:02:33:ca:d5:34:07:e2:4e:d1:83:d8:c9:84:5b:75: 98:12:99:24:ff:af:7f:96:4c:fc:5b:e3:47:dd:d0:e0:3c:8b: ea:1c:e4:71:16:58:37:5c:f9:0a:fb:25:3e:10:4a:87:a7:73: 30:c8:7c:3d:91:d7:d6:cb:82:ea:3d:e8:33:ea:88:d4:0f:e7: 8a:e8:6a:b3:78:fc:04:74:7b:f3:98:ae:48:a3:63:44:67:9c: f0:18:5e:38:a2:84:74:23:d3:77:a4:0c:1c:6a:96:c7:1d:83: a3:18:66:10:fb:ff:63:06:13:76:7b:fb:4d:02:03:77:60:59: 93:b4:42:18:27:61:27:e1:5b:22:e7:02:51:9e:3b:0a:26:70: 33:9c:f4:5a:f0:5e:06:58:fd:32:3c:1f:34:f2:bb:0b:58:d9: 39:7e:23:aa:fc:f0:96:57:56:8a:25:05:98:50:48:82:90:8a: 95:b3:8e:2c:12:67:a8:43:22:a4:af:b7:8a:aa:1d:6e:9a:0d: 13:aa:b3:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBImZoUR1Ga7j1QBWZ/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWU2OWY2ZmYxOGIzZjk4MWU0NGQxNmMzOTc3ODdjYzZhNTc1MmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0s1qQS/8lZXP0Wc2iHBkA/Ugbq0 +zNXP6kcnFFPH/sAgHeme8D9gRsZ7AxgbHzhfNr/L4II49iU4uLQBcfpi4VxaDcX lIjNbcPD9o4bT1YrJP0bXh+Xb5Nwr03A+8D036KJ8U4y/UDxbWA2gzqJ/qPVPE8Y B/Itbzs4WBmLkBn4taHwRNLqa2rG+QpQqV8oEs4auX/PXRmnHWfv/+UwdYIohnWO Bc7kIDGKx+gvgQ96NoYXO0df3vKYs7ctqXXRGgTBDw7R8jYDyWrAWXaW/JnCsXNN /3wOYW+a32OJW/nXhbjs6Tklklaku/E0fNwvHzHDTvM74zx3BqFpLJkF9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMrmn2/xiz+YHkTRbDl3h8xqV1LcMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEveXVhZmJfR0xQNWdlUk5Gc09YZUh6R3BYVXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSbrMA0G CSqGSIb3DQEBCwUAA4IBAQAn21o8feemWD53Xc6n3ZWBC/lA358k4Sq9iFLPkhU/ qsb/+NAeFDSpCiXpXMMeI0S+UK08Uxwwuu4CM8rVNAfiTtGD2MmEW3WYEpkk/69/ lkz8W+NH3dDgPIvqHORxFlg3XPkK+yU+EEqHp3MwyHw9kdfWy4LqPegz6ojUD+eK 6GqzePwEdHvzmK5Io2NEZ5zwGF44ooR0I9N3pAwcapbHHYOjGGYQ+/9jBhN2e/tN AgN3YFmTtEIYJ2En4Vsi5wJRnjsKJnAznPRa8F4GWP0yPB808rsLWNk5fiOq/PCW V1aKJQWYUEiCkIqVs44sEmeoQyKkr7eKqh1umg0TqrNN -----END CERTIFICATE-----Generated at Tue Jan 20 19:51:20 2026 by rpki-client