This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/yCVPi-PAEcORtbmsty5UvUZaZu0.roa File: yCVPi-PAEcORtbmsty5UvUZaZu0.roa (raw, json) Hash identifier: yBlhR7LIxNNpuS2dfkekCG28fIsE0eDQixOz/izuOyw= Subject key identifier: C8:25:4F:8B:E3:C0:11:C3:91:B5:B9:AC:B7:2E:54:BD:46:5A:66:ED Certificate issuer: /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d Certificate serial: 019B7F846B4A4643AC2383B4BAC44E927061 Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/yCVPi-PAEcORtbmsty5UvUZaZu0.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29121 IP address blocks: 195.69.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6b:4a:46:43:ac:23:83:b4:ba:c4:4e:92:70:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8254f8be3c011c391b5b9acb72e54bd465a66ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:6b:dd:0b:32:79:83:81:1f:0f:66:0f:bf: 3d:17:88:8b:1c:7d:11:17:30:27:a6:ac:04:91:c3: 41:10:83:04:e1:57:73:4d:92:bf:c0:df:2c:a8:01: 10:ac:3b:dd:a6:5d:d3:dd:e4:f5:90:04:6c:35:ed: 49:82:cb:55:d5:10:ab:b2:61:44:35:9a:b7:e9:82: 95:c6:fd:b1:3a:63:09:20:2a:e6:c8:57:6b:50:93: 04:2a:89:92:b3:fe:7d:a7:d6:aa:52:e1:c5:70:31: 40:6a:28:99:e6:47:24:e6:76:38:71:7e:be:61:f6: 40:8d:df:35:e1:2f:4f:3b:14:df:4e:dc:c7:bf:4e: 03:ef:0b:a7:59:cd:62:95:ef:dd:6f:d7:7a:1a:f0: a4:d0:45:58:3e:b0:02:2b:3b:56:e0:a7:86:11:ac: 02:58:53:33:55:fc:89:3e:df:ed:38:60:da:9b:46: a8:ba:7b:d5:6f:a0:f3:a4:5f:67:e0:b2:8b:83:76: 6c:6c:ba:57:b1:5b:1a:79:40:af:46:2c:d5:ae:a3: 36:9c:64:89:cb:a0:d7:f0:9b:5a:a6:7d:de:44:e5: a0:08:df:26:81:d3:8b:88:f2:dd:a4:69:fb:a0:30: ed:5c:87:42:6e:5f:d3:de:03:c6:ab:f0:21:28:5e: 6a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:25:4F:8B:E3:C0:11:C3:91:B5:B9:AC:B7:2E:54:BD:46:5A:66:ED X509v3 Authority Key Identifier: keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/yCVPi-PAEcORtbmsty5UvUZaZu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.96.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:82:2b:7c:70:0c:98:b3:e9:83:f1:5b:80:83:62:4d:a8:04: 09:5d:6c:c4:63:1c:e3:bb:4e:8b:2c:af:73:99:6c:25:c4:87: b4:b0:2c:7a:24:5a:7c:3e:c9:c8:8c:f1:c3:21:42:96:d2:be: 6a:e1:a3:e9:c2:76:59:d6:c7:5f:05:c0:87:8e:ac:61:9e:90: 00:24:8e:48:5b:24:03:fb:3f:53:25:51:5e:3a:b5:ec:53:6b: b7:9c:3c:12:0d:68:46:20:95:ca:36:d1:b3:ed:92:74:91:50: f1:fb:73:92:00:be:69:f6:9b:46:ff:6f:3f:13:12:98:89:1b: 30:f1:ca:98:43:b5:62:af:71:af:73:c6:57:a8:e4:6e:5b:e1: ab:f9:50:a4:36:6d:c3:be:06:b9:7a:ed:17:6a:ed:f5:9a:c6: 53:b3:5a:62:92:79:50:7e:dc:09:c0:06:ae:e9:6c:be:d4:c4: ef:98:6b:ea:8a:d5:47:f2:29:d4:32:37:14:5e:49:c9:7d:60: 10:b5:99:3b:97:7b:28:41:ef:29:3c:78:67:11:e3:10:18:d4: e9:79:d4:94:aa:da:ca:5a:f4:b9:0c:c9:19:d3:24:18:3d:66: 55:27:4e:66:36:21:25:5d:69:9d:28:6c:64:a7:9f:87:ce:98: 1a:5b:2a:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGtKRkOsI4O0usROknBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZmJhNjgyZDY5YzFkMTA3MDhlZDdiNmFlYWEyMzJlZTg5 YjkwMWQwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODI1NGY4YmUzYzAxMWMzOTFiNWI5YWNiNzJlNTRiZDQ2NWE2NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Vr3QsyeYOBHw9mD789F4iLHH0R FzAnpqwEkcNBEIME4VdzTZK/wN8sqAEQrDvdpl3T3eT1kARsNe1JgstV1RCrsmFE NZq36YKVxv2xOmMJICrmyFdrUJMEKomSs/59p9aqUuHFcDFAaiiZ5kck5nY4cX6+ YfZAjd814S9POxTfTtzHv04D7wunWc1ile/db9d6GvCk0EVYPrACKztW4KeGEawC WFMzVfyJPt/tOGDam0aounvVb6DzpF9n4LKLg3ZsbLpXsVsaeUCvRizVrqM2nGSJ y6DX8Jtapn3eROWgCN8mgdOLiPLdpGn7oDDtXIdCbl/T3gPGq/AhKF5qfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMglT4vjwBHDkbW5rLcuVL1GWmbtMB8GA1UdIwQY MBaAFHP7poLWnB0QcI7Xtq6qIy7om5AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2Qt ZjZjNjQ0Yzk0NjA4LzEveUNWUGktUEFFY09SdGJtc3R5NVV2VVphWnUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2QtZjZjNjQ0Yzk0NjA4 LzEvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw0VgMA0G CSqGSIb3DQEBCwUAA4IBAQAOgit8cAyYs+mD8VuAg2JNqAQJXWzEYxzju06LLK9z mWwlxIe0sCx6JFp8PsnIjPHDIUKW0r5q4aPpwnZZ1sdfBcCHjqxhnpAAJI5IWyQD +z9TJVFeOrXsU2u3nDwSDWhGIJXKNtGz7ZJ0kVDx+3OSAL5p9ptG/28/ExKYiRsw 8cqYQ7Vir3Gvc8ZXqORuW+Gr+VCkNm3Dvga5eu0Xau31msZTs1piknlQftwJwAau 6Wy+1MTvmGvqitVH8inUMjcUXknJfWAQtZk7l3soQe8pPHhnEeMQGNTpedSUqtrK WvS5DMkZ0yQYPWZVJ05mNiElXWmdKGxkp5+HzpgaWyqn -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:44 2026 by rpki-client