This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/yP76kKTB1GrEa0atsho4_hZD6JM.roa File: yP76kKTB1GrEa0atsho4_hZD6JM.roa (raw, json) Hash identifier: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM= Subject key identifier: C8:FE:FA:90:A4:C1:D4:6A:C4:6B:46:AD:B2:1A:38:FE:16:43:E8:93 Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Certificate serial: 019B7AC8A068848968B900F6F8A95CA9B7AE Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/yP76kKTB1GrEa0atsho4_hZD6JM.roa Signing time: Thu 01 Jan 2026 18:18:47 +0000 ROA not before: Thu 01 Jan 2026 18:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29037 IP address blocks: 195.160.160.0/23 maxlen: 24 2001:67c:19ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a0:68:84:89:68:b9:00:f6:f8:a9:5c:a9:b7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8fefa90a4c1d46ac46b46adb21a38fe1643e893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:66:0a:c9:aa:19:ea:3d:d9:61:4a:37:86: 47:87:71:de:f4:75:c7:8d:b4:c6:7d:7e:e2:e2:61: c9:e4:cd:b0:db:a8:86:fc:8d:77:a8:08:b3:05:fd: c4:39:00:67:b5:b2:54:7a:76:d5:8c:e5:af:ab:f9: 5d:6a:ea:83:e8:3f:a7:8c:2b:bc:9d:28:29:2f:6a: 5d:c3:1b:c6:d9:c1:31:10:41:03:e3:04:32:43:1b: 77:2d:c0:8d:af:19:65:42:d1:d8:a9:c4:8d:49:36: dc:b5:d0:36:f8:c1:27:81:30:0f:05:93:c6:1c:64: 7c:29:c2:7c:02:d6:2a:13:f8:0c:da:48:79:67:70: eb:58:0c:8a:29:3e:2e:9e:fe:85:cf:7e:68:f1:2c: 6e:61:f9:2d:99:00:43:4a:52:18:ed:cc:27:30:58: 39:34:b4:6c:3a:14:b5:ab:79:63:72:db:68:11:ba: 5f:7c:93:68:4a:3c:e9:9a:6d:27:4f:c7:fe:6f:38: 97:fe:10:84:58:08:65:96:49:64:be:0f:2c:6b:05: 16:a0:b6:f6:05:bc:83:bc:46:db:50:34:4f:3a:5e: ac:9a:a8:e3:34:03:08:51:83:a2:ab:6c:c2:27:7e: 61:3e:bf:c1:08:d6:2d:8b:a6:64:b1:e9:1c:27:7c: 05:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FE:FA:90:A4:C1:D4:6A:C4:6B:46:AD:B2:1A:38:FE:16:43:E8:93 X509v3 Authority Key Identifier: keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/yP76kKTB1GrEa0atsho4_hZD6JM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.160.0/23 IPv6: 2001:67c:19ec::/48 Signature Algorithm: sha256WithRSAEncryption 5b:db:67:99:ff:0f:bc:61:ec:33:f8:52:db:22:e9:17:ed:fd: 04:d0:e3:b7:e4:2c:58:8f:79:7f:ce:73:13:29:79:8e:d9:cb: b2:61:28:ed:ed:6d:b6:c8:37:eb:42:be:77:66:cf:48:96:6b: a3:39:a8:60:b6:dd:fe:0e:94:83:ae:86:b8:e2:f9:23:4c:fc: 3c:ca:6b:7f:da:ae:4d:e6:b8:87:b1:4f:61:4c:4c:8c:5c:24: 29:b6:98:9c:d7:8e:e8:de:fc:3a:ed:d3:cf:15:a0:13:93:05: 8e:4c:2a:55:95:ff:b9:64:27:7d:2e:fa:ae:67:9b:5d:31:77: 37:b7:7f:24:eb:75:bb:c9:03:30:e3:86:f0:05:3d:c9:98:6c: a9:12:be:88:93:34:55:7c:d1:4d:db:8e:0b:00:2d:c2:9b:42: 22:8b:54:87:38:c7:55:58:e4:b8:02:d6:29:65:df:d7:77:32: 51:46:55:7b:35:e5:7d:3a:2a:3e:21:5b:d0:e9:7d:a4:47:40: 60:7f:e2:82:2f:ad:61:81:2f:34:c8:d1:67:10:7e:20:4e:81: 69:aa:82:3e:66:63:39:0d:39:d0:01:76:18:8d:31:77:b2:e7: 6f:b8:27:63:c5:93:18:9d:74:a8:74:f8:75:02:98:46:7a:fd: e2:8b:48:43 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yKBohIlouQD2+KlcqbeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2 YjFmYWIwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGZlZmE5MGE0YzFkNDZhYzQ2YjQ2YWRiMjFhMzhmZTE2NDNlODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEVmCsmqGeo92WFKN4ZHh3He9HXH jbTGfX7i4mHJ5M2w26iG/I13qAizBf3EOQBntbJUenbVjOWvq/ldauqD6D+njCu8 nSgpL2pdwxvG2cExEEED4wQyQxt3LcCNrxllQtHYqcSNSTbctdA2+MEngTAPBZPG HGR8KcJ8AtYqE/gM2kh5Z3DrWAyKKT4unv6Fz35o8SxuYfktmQBDSlIY7cwnMFg5 NLRsOhS1q3ljcttoEbpffJNoSjzpmm0nT8f+bziX/hCEWAhllklkvg8sawUWoLb2 BbyDvEbbUDRPOl6smqjjNAMIUYOiq2zCJ35hPr/BCNYti6ZksekcJ3wF5wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMj++pCkwdRqxGtGrbIaOP4WQ+iTMB8GA1UdIwQY MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct MDlhYWMwNzg5YjkzLzEveVA3NmtLVEIxR3JFYTBhdHNobzRfaFpENkpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw6CgMA8E AgACMAkDBwAgAQZ8GewwDQYJKoZIhvcNAQELBQADggEBAFvbZ5n/D7xh7DP4Utsi 6Rft/QTQ47fkLFiPeX/OcxMpeY7Zy7JhKO3tbbbIN+tCvndmz0iWa6M5qGC23f4O lIOuhrji+SNM/DzKa3/ark3muIexT2FMTIxcJCm2mJzXjuje/Drt088VoBOTBY5M KlWV/7lkJ30u+q5nm10xdze3fyTrdbvJAzDjhvAFPcmYbKkSvoiTNFV80U3bjgsA LcKbQiKLVIc4x1VY5LgC1ill39d3MlFGVXs15X06Kj4hW9DpfaRHQGB/4oIvrWGB LzTI0WcQfiBOgWmqgj5mYzkNOdABdhiNMXey52+4J2PFkxiddKh0+HUCmEZ6/eKL SEM= -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:36 2026 by rpki-client