This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/yEqniktZbtzkmkZc_KMxAGvhuuU.roa File: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (raw, json) Hash identifier: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs= Subject key identifier: C8:4A:A7:8A:4B:59:6E:DC:E4:9A:46:5C:FC:A3:31:00:6B:E1:BA:E5 Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Certificate serial: 019C057D193E9D08A0BC13F63ADF290BDBA9 Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/yEqniktZbtzkmkZc_KMxAGvhuuU.roa Signing time: Wed 28 Jan 2026 16:43:30 +0000 ROA not before: Wed 28 Jan 2026 16:43:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12695 IP address blocks: 217.78.233.0/24 maxlen: 24 2001:67c:b18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:7d:19:3e:9d:08:a0:bc:13:f6:3a:df:29:0b:db:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Validity Not Before: Jan 28 16:43:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c84aa78a4b596edce49a465cfca331006be1bae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:df:b1:19:03:30:85:42:89:0d:fc:c3:20: fd:81:2f:9b:a4:45:69:5c:99:02:b8:97:71:2d:16: 76:f4:47:35:d7:a9:e9:aa:31:94:6f:4c:74:43:62: 61:e6:fd:35:9b:83:e4:25:04:f2:cb:45:a8:aa:01: ad:f4:71:24:35:2c:c9:8e:35:1e:f8:66:6c:a6:0b: 03:8b:7e:3b:5e:4b:ff:09:ed:c5:66:c2:c2:f5:30: 13:f8:a6:0d:71:7b:31:cf:4d:60:5e:ac:bc:18:8f: 61:c1:10:cb:d4:2a:ea:18:06:0b:8b:c2:79:40:91: 76:49:63:8b:12:75:55:70:18:58:2f:47:6e:00:05: d9:80:36:a8:a3:16:4f:3a:94:95:5a:20:ab:3c:69: f5:21:72:dc:fc:f0:98:58:c5:be:16:bd:95:d7:62: ef:c2:70:b1:65:90:b5:0b:e4:c8:9d:6d:45:5a:92: 84:67:63:c3:de:10:55:15:b7:64:00:e6:b2:4c:65: ce:d9:e1:55:a6:a1:6f:1e:ca:94:be:ff:74:3f:cd: e4:74:10:c3:35:cc:8e:ca:64:2c:fc:be:c4:c3:bd: b3:a4:65:58:2a:91:a4:33:7d:30:cf:6f:41:46:cd: 39:40:0a:29:4f:1f:38:de:4d:5e:cc:7f:0a:78:94: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4A:A7:8A:4B:59:6E:DC:E4:9A:46:5C:FC:A3:31:00:6B:E1:BA:E5 X509v3 Authority Key Identifier: keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/yEqniktZbtzkmkZc_KMxAGvhuuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.78.233.0/24 IPv6: 2001:67c:b18::/48 Signature Algorithm: sha256WithRSAEncryption 35:fe:cd:e0:7b:c7:a3:c8:67:c7:fa:e5:ab:e2:92:07:39:a5: 47:0e:64:be:df:6e:7f:c2:aa:5b:d2:c0:d7:63:b4:ff:02:f6: 35:bb:3e:cc:eb:3b:91:1e:ed:1a:57:6c:c1:0b:4a:bd:f6:87: ee:e5:88:b4:1d:ee:f0:5a:9d:e2:fc:fa:48:a5:48:23:71:0a: 66:71:11:41:8b:9a:2b:c1:73:a3:78:c1:9f:0a:4d:d9:05:18: 22:89:d3:98:5f:c8:5b:3c:d8:90:7f:c5:3b:53:7d:5a:78:a9: 23:0e:93:84:3d:43:f9:2f:f4:e7:cd:6b:85:d9:31:a2:df:87: ab:58:0f:63:c0:6e:42:02:47:e5:e1:4a:e3:72:38:db:c6:25: 52:0c:bf:d5:68:ce:57:51:08:2e:5b:db:5c:0e:e4:02:7b:5a: b2:bf:5e:2a:7e:8c:b6:48:ec:f1:f0:90:01:8d:1d:b9:89:3e: 66:bd:a5:c0:1f:35:82:c4:b4:8c:9e:9f:67:0d:50:37:55:bc: be:14:14:fd:6f:dc:8b:4a:f0:0f:ea:ea:1d:f1:a4:9c:69:4d: 46:e9:02:d8:2b:57:6d:67:ad:c8:6c:ca:95:46:3a:5a:54:60: 76:57:c9:20:01:84:db:ad:2b:45:11:d3:43:7e:a0:2b:2b:db: ae:c2:e1:9a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZwFfRk+nQigvBP2Ot8pC9upMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx YzhjZGQwHhcNMjYwMTI4MTY0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODRhYTc4YTRiNTk2ZWRjZTQ5YTQ2NWNmY2EzMzEwMDZiZTFiYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8nfsRkDMIVCiQ38wyD9gS+bpEVp XJkCuJdxLRZ29Ec116npqjGUb0x0Q2Jh5v01m4PkJQTyy0WoqgGt9HEkNSzJjjUe +GZspgsDi347Xkv/Ce3FZsLC9TAT+KYNcXsxz01gXqy8GI9hwRDL1CrqGAYLi8J5 QJF2SWOLEnVVcBhYL0duAAXZgDaooxZPOpSVWiCrPGn1IXLc/PCYWMW+Fr2V12Lv wnCxZZC1C+TInW1FWpKEZ2PD3hBVFbdkAOayTGXO2eFVpqFvHsqUvv90P83kdBDD NcyOymQs/L7Ew72zpGVYKpGkM30wz29BRs05QAopTx843k1ezH8KeJTdbwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMhKp4pLWW7c5JpGXPyjMQBr4brlMB8GA1UdIwQY MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt YTI2Y2I2NDI5NDg2LzEveUVxbmlrdFpidHprbWtaY19LTXhBR3ZodXVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2 LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2U7pMA8E AgACMAkDBwAgAQZ8CxgwDQYJKoZIhvcNAQELBQADggEBADX+zeB7x6PIZ8f65avi kgc5pUcOZL7fbn/CqlvSwNdjtP8C9jW7PszrO5Ee7RpXbMELSr32h+7liLQd7vBa neL8+kilSCNxCmZxEUGLmivBc6N4wZ8KTdkFGCKJ05hfyFs82JB/xTtTfVp4qSMO k4Q9Q/kv9OfNa4XZMaLfh6tYD2PAbkICR+XhSuNyONvGJVIMv9VozldRCC5b21wO 5AJ7WrK/Xip+jLZI7PHwkAGNHbmJPma9pcAfNYLEtIyen2cNUDdVvL4UFP1v3ItK 8A/q6h3xpJxpTUbpAtgrV21nrchsypVGOlpUYHZXySABhNutK0UR00N+oCsr267C 4Zo= -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:43 2026 by rpki-client