This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa File: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (raw, json) Hash identifier: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg= Subject key identifier: C8:56:5E:FF:88:00:BC:A5:C7:3C:FB:35:17:27:EB:62:95:CF:F0:EC Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea Certificate serial: 019B7AC7816A5EE651B88CBE47781257EDB1 Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa Signing time: Thu 01 Jan 2026 18:17:33 +0000 ROA not before: Thu 01 Jan 2026 18:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 195.149.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:81:6a:5e:e6:51:b8:8c:be:47:78:12:57:ed:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea Validity Not Before: Jan 1 18:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8565eff8800bca5c73cfb351727eb6295cff0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:83:33:84:d3:65:74:92:dd:65:e5:d8:98:9c: 58:26:50:0e:8d:f6:bd:2e:bf:e7:e2:f8:c9:7b:88: 95:15:b3:5c:15:18:29:67:4b:49:7b:b0:85:40:32: b5:8e:78:ff:e3:ca:00:02:47:2c:6f:d9:c3:99:f2: 6a:8f:3b:6b:52:a6:ab:1d:60:6f:3e:f0:49:b7:ef: 40:17:46:93:20:63:1d:ac:4b:3e:84:d6:5e:2b:92: 61:c9:61:72:47:d6:94:a2:64:08:ed:62:53:16:e3: 3d:b0:f6:bf:55:3f:e0:a9:52:4f:e9:1a:b5:d6:21: e9:ce:ff:77:6a:3a:de:a1:bb:40:ab:2a:b5:bc:32: 89:39:70:c2:eb:23:ad:57:c2:f0:94:4d:aa:9b:8e: 69:b5:c3:84:af:d0:f3:b5:93:90:1e:c2:03:04:d6: 8c:18:13:2b:65:7b:21:6e:d7:95:68:66:0c:ac:ea: ec:e8:8e:67:8c:11:c3:0f:97:06:84:11:89:20:7b: 6b:56:b7:6b:04:e3:b9:68:8e:93:ee:b3:bd:a3:72: 52:60:6d:34:86:25:e8:5e:ce:1b:3d:46:c4:fc:08: a5:04:4c:e4:83:7b:c8:82:6f:58:25:81:c6:dc:2f: 95:aa:c3:56:cc:1f:98:d0:0c:f4:52:5f:a7:78:90: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:56:5E:FF:88:00:BC:A5:C7:3C:FB:35:17:27:EB:62:95:CF:F0:EC X509v3 Authority Key Identifier: keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.76.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:3a:bd:5f:41:a9:8e:bb:e2:41:2e:d4:53:ff:de:b9:db:f5: c6:2b:68:9e:13:28:5b:54:39:72:25:66:5d:a3:d4:18:d9:5d: 05:96:79:c3:85:80:e7:da:9a:58:2e:65:79:0f:d4:3f:8b:88: de:df:c2:43:97:ad:ee:a0:71:28:6a:21:40:4d:dd:84:61:6d: 64:e5:00:51:ec:5c:0b:42:1f:f2:8c:59:ed:e4:ab:2a:8a:58: b6:fb:54:17:06:67:93:32:9f:db:82:30:05:03:35:24:2e:e3: 4f:a6:82:03:58:2e:71:83:b2:00:f3:69:6c:0d:08:d1:da:67: de:2f:25:cd:73:fc:35:c1:30:eb:f5:64:d1:82:2b:98:be:14: 13:15:2d:f2:1d:a7:76:4e:8b:a1:95:2a:0f:13:65:90:63:7d: b7:10:62:f2:fd:4b:80:a2:98:9d:fd:64:b3:35:e6:df:91:60: 6d:e1:5c:31:2e:e0:cd:d1:1a:e3:01:c1:93:fe:d8:6a:c2:82: d4:3d:dc:5d:0a:e1:eb:15:5f:76:b2:50:4e:0d:d2:89:15:0e: ad:07:e0:77:33:6b:78:09:d4:fb:27:48:aa:39:b7:f1:10:0e: dd:d8:50:ac:14:88:35:1f:8f:a5:bd:c2:03:e7:30:31:9b:d0: 58:55:ea:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4FqXuZRuIy+R3gSV+2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTU5ODIwZGQ3MTgwMDRmYjE1Yzg1YjI3MDc5NmNiNGU4 NGE0ZWEwHhcNMjYwMTAxMTgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODU2NWVmZjg4MDBiY2E1YzczY2ZiMzUxNzI3ZWI2Mjk1Y2ZmMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIMzhNNldJLdZeXYmJxYJlAOjfa9 Lr/n4vjJe4iVFbNcFRgpZ0tJe7CFQDK1jnj/48oAAkcsb9nDmfJqjztrUqarHWBv PvBJt+9AF0aTIGMdrEs+hNZeK5JhyWFyR9aUomQI7WJTFuM9sPa/VT/gqVJP6Rq1 1iHpzv93ajreobtAqyq1vDKJOXDC6yOtV8LwlE2qm45ptcOEr9DztZOQHsIDBNaM GBMrZXshbteVaGYMrOrs6I5njBHDD5cGhBGJIHtrVrdrBOO5aI6T7rO9o3JSYG00 hiXoXs4bPUbE/AilBEzkg3vIgm9YJYHG3C+VqsNWzB+Y0Az0Ul+neJDwiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMhWXv+IALylxzz7NRcn62KVz/DsMB8GA1UdIwQY MBaAFGkVmCDdcYAE+xXIWycHlstOhKTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEt Yzk0OWYwNTkxZjViLzEveUZaZV80Z0F2S1hIUFBzMUZ5ZnJZcFhQOE93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEtYzk0OWYwNTkxZjVi LzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VMMA0G CSqGSIb3DQEBCwUAA4IBAQALOr1fQamOu+JBLtRT/9652/XGK2ieEyhbVDlyJWZd o9QY2V0FlnnDhYDn2ppYLmV5D9Q/i4je38JDl63uoHEoaiFATd2EYW1k5QBR7FwL Qh/yjFnt5Ksqili2+1QXBmeTMp/bgjAFAzUkLuNPpoIDWC5xg7IA82lsDQjR2mfe LyXNc/w1wTDr9WTRgiuYvhQTFS3yHad2TouhlSoPE2WQY323EGLy/UuAopid/WSz NebfkWBt4VwxLuDN0RrjAcGT/thqwoLUPdxdCuHrFV92slBODdKJFQ6tB+B3M2t4 CdT7J0iqObfxEA7d2FCsFIg1H4+lvcID5zAxm9BYVeqk -----END CERTIFICATE-----Generated at Tue Feb 3 06:34:08 2026 by rpki-client