This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/jy4XFgCzljZWpXE-riML9DaXkts.roa File: jy4XFgCzljZWpXE-riML9DaXkts.roa (raw, json) Hash identifier: hfp/T5AOfMF/LamC2Ys8fXDrV6Q6STrraxrMeK+mRx8= Subject key identifier: 8F:2E:17:16:00:B3:96:36:56:A5:71:3E:AE:23:0B:F4:36:97:92:DB Certificate issuer: /CN=a7ef66cb7cc350345852be9bdd75455782afe4dd Certificate serial: 019B797E7EA011BB0E4DC84AC9CAA057680D Authority key identifier: A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/jy4XFgCzljZWpXE-riML9DaXkts.roa Signing time: Thu 01 Jan 2026 12:18:11 +0000 ROA not before: Thu 01 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208697 IP address blocks: 193.38.36.0/24 maxlen: 24 193.38.37.0/24 maxlen: 24 193.38.38.0/24 maxlen: 24 193.38.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7e:a0:11:bb:0e:4d:c8:4a:c9:ca:a0:57:68:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ef66cb7cc350345852be9bdd75455782afe4dd Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f2e171600b3963656a5713eae230bf4369792db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:14:8b:6f:c8:a1:a2:6d:bd:55:be:4e:4a: 23:88:16:86:5f:6e:e6:36:ec:26:3a:f8:f4:cb:58: 60:68:71:a9:cb:4c:c5:4d:0f:e2:86:73:8f:26:6f: 34:b9:36:99:f5:05:bb:40:12:8e:aa:d0:5e:d3:54: 7e:11:9f:f0:e0:88:93:72:d7:bf:b1:e3:fe:0c:b4: 2e:ba:cd:a1:31:5e:cc:40:e6:1d:7f:ea:11:e5:70: 00:a3:21:e8:bb:68:a5:86:23:43:1c:0a:23:8c:95: 26:d4:3f:b9:44:37:61:d7:d6:42:14:e6:b8:2f:30: a1:70:90:ff:d8:61:7a:30:87:f4:e7:5c:4b:86:9b: f7:62:0c:ab:1b:46:8d:70:69:b0:ec:f3:25:78:05: 15:19:50:64:e5:d1:ab:3a:8d:fd:9e:d7:74:a7:35: e5:62:cf:43:c9:51:50:d4:07:f0:4b:74:0d:e6:0f: 65:25:ca:cf:76:ff:40:ea:68:d7:ba:f9:56:16:f7: fb:2a:b5:13:29:51:43:1e:18:54:4e:c6:2c:d0:f0: e2:03:82:3f:78:96:bb:2e:2e:80:f3:ab:be:21:69: 02:38:06:66:22:c5:e1:e9:94:aa:98:7e:0c:ad:ba: 9d:2d:db:f0:39:04:fe:46:96:79:88:45:0e:c4:87: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2E:17:16:00:B3:96:36:56:A5:71:3E:AE:23:0B:F4:36:97:92:DB X509v3 Authority Key Identifier: keyid:A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/jy4XFgCzljZWpXE-riML9DaXkts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.36.0/22 Signature Algorithm: sha256WithRSAEncryption c7:90:97:57:cb:1f:a6:7b:7c:f1:42:3c:1c:3a:9a:06:4d:aa: 86:d1:3d:80:5c:aa:da:9b:47:7a:9d:82:71:46:12:de:d3:3f: 82:c9:54:b9:71:c5:47:32:68:1f:9d:66:cb:95:6b:59:82:83: 2d:23:25:f7:79:d1:cd:a3:6e:c0:5a:4e:6b:63:d8:95:f5:8c: d4:68:71:a7:c4:6b:68:cd:64:23:19:a9:e9:12:f6:c0:5b:4e: 82:a2:ee:14:e8:30:ba:2c:1a:7e:ef:a7:0c:77:9a:7b:6a:95: e5:89:f5:34:6c:37:11:ec:d6:77:5f:69:8c:98:fb:7c:fd:e1: 2c:c1:91:39:c3:60:22:35:1b:b6:0b:2f:b7:6f:2e:d6:ad:32: df:f6:22:4c:4b:19:96:0b:69:60:28:a4:f7:5d:11:e8:5d:81: bc:a6:ed:ce:7f:e3:03:2a:be:93:c6:11:9c:ea:37:0d:18:be: 89:0a:18:24:1f:7a:19:bf:12:e9:bc:a4:26:49:ef:c6:c9:47: d3:ed:fe:e6:9f:2e:e6:5d:36:a7:71:d6:8a:84:04:5d:7b:42: 69:57:56:70:dd:4c:95:0e:ca:14:d4:63:c4:32:0d:ec:b6:27: 45:03:97:5b:fb:f8:54:e7:5c:6a:db:b6:4a:66:c4:61:3d:29: 44:c9:fe:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fn6gEbsOTchKycqgV2gNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWY2NmNiN2NjMzUwMzQ1ODUyYmU5YmRkNzU0NTU3ODJh ZmU0ZGQwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjJlMTcxNjAwYjM5NjM2NTZhNTcxM2VhZTIzMGJmNDM2OTc5MmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKAUi2/IoaJtvVW+TkojiBaGX27m NuwmOvj0y1hgaHGpy0zFTQ/ihnOPJm80uTaZ9QW7QBKOqtBe01R+EZ/w4IiTcte/ seP+DLQuus2hMV7MQOYdf+oR5XAAoyHou2ilhiNDHAojjJUm1D+5RDdh19ZCFOa4 LzChcJD/2GF6MIf051xLhpv3YgyrG0aNcGmw7PMleAUVGVBk5dGrOo39ntd0pzXl Ys9DyVFQ1AfwS3QN5g9lJcrPdv9A6mjXuvlWFvf7KrUTKVFDHhhUTsYs0PDiA4I/ eJa7Li6A86u+IWkCOAZmIsXh6ZSqmH4MrbqdLdvwOQT+RpZ5iEUOxIcaBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI8uFxYAs5Y2VqVxPq4jC/Q2l5LbMB8GA1UdIwQY MBaAFKfvZst8w1A0WFK+m911RVeCr+TdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC05bXkzekRVRFJZVXI2YjNYVkZWNEt2NU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kZWFjOGEtODAxMy00YzhjLWI0NzEt OWU1NzNlNzEwOTU4LzEvank0WEZnQ3psalpXcFhFLXJpTUw5RGFYa3RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9kZWFjOGEtODAxMy00YzhjLWI0NzEtOWU1NzNlNzEwOTU4 LzEvcC05bXkzekRVRFJZVXI2YjNYVkZWNEt2NU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSYkMA0G CSqGSIb3DQEBCwUAA4IBAQDHkJdXyx+me3zxQjwcOpoGTaqG0T2AXKram0d6nYJx RhLe0z+CyVS5ccVHMmgfnWbLlWtZgoMtIyX3edHNo27AWk5rY9iV9YzUaHGnxGto zWQjGanpEvbAW06Cou4U6DC6LBp+76cMd5p7apXlifU0bDcR7NZ3X2mMmPt8/eEs wZE5w2AiNRu2Cy+3by7WrTLf9iJMSxmWC2lgKKT3XRHoXYG8pu3Of+MDKr6TxhGc 6jcNGL6JChgkH3oZvxLpvKQmSe/GyUfT7f7mny7mXTancdaKhARde0JpV1Zw3UyV DsoU1GPEMg3stidFA5db+/hU51xq27ZKZsRhPSlEyf7r -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:34 2026 by rpki-client