This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa File: sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa (raw, json) Hash identifier: OEBAEu1SEBwrWfciVaKHy8l9XFDNXjoEFOCceQeIsnI= Subject key identifier: B1:8D:59:D1:DE:14:3F:59:34:32:D3:2F:EA:6B:BD:3E:C7:18:48:8A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA85470F82704E674A5587253F7FEE Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 194.59.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:85:47:0f:82:70:4e:67:4a:55:87:25:3f:7f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b18d59d1de143f593432d32fea6bbd3ec718488a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:55:e5:15:97:33:90:11:0b:2b:f5:35:3f: 88:72:d3:b5:d3:4b:13:6f:0d:29:67:4c:3b:e8:5f: 82:85:43:9b:06:7b:31:fc:f6:0a:5c:67:2b:52:21: eb:93:58:d4:95:f8:b2:2b:0a:a6:8f:b4:14:de:59: 80:aa:cf:4f:89:73:68:be:eb:59:e6:58:b2:47:4a: dd:74:1c:df:7d:e6:cb:82:92:1c:09:46:76:0e:8b: 6a:75:f6:d7:6f:78:aa:85:fc:c1:87:72:df:53:db: a1:f5:e3:e5:fb:28:64:8a:b2:a1:1e:b6:08:92:b7: 3f:e3:b3:cb:0c:57:7f:91:e6:28:3f:33:b3:a8:04: 6a:03:28:f0:d2:44:09:26:a8:1b:2c:69:36:df:53: 9f:87:21:eb:e2:5b:d0:ad:93:36:1f:b7:c9:b0:7d: b7:55:de:8d:ef:cf:1b:0e:69:01:34:ce:f8:d7:86: 59:ea:ae:79:9a:c5:51:47:b8:f1:a1:9e:ab:44:80: 06:82:28:1b:ad:eb:09:50:a6:52:67:7a:93:b7:a1: a9:13:30:0e:2c:6d:06:25:61:f1:94:ed:3c:38:f1: 60:e9:92:63:60:4a:02:74:a9:57:2e:0a:2d:c8:b1: fd:99:e9:45:19:02:57:c7:06:e5:d7:76:37:33:96: 07:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8D:59:D1:DE:14:3F:59:34:32:D3:2F:EA:6B:BD:3E:C7:18:48:8A X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.9.0/24 Signature Algorithm: sha256WithRSAEncryption 56:aa:2b:9a:e1:1a:49:c8:81:13:42:94:29:ef:31:cf:e6:7d: 2c:92:6b:db:6e:ff:c0:18:6a:42:a9:b8:43:79:97:1b:5b:18: cb:1d:50:72:1f:c6:1b:fe:ab:bf:f4:c1:70:9d:05:d2:40:25: 6b:41:63:b1:78:e7:a1:a9:90:0c:d8:7f:38:a2:e6:98:69:d4: dd:36:21:a5:34:5b:d6:c0:3a:d5:49:c2:39:0f:38:c6:35:86: b7:3c:52:f1:e5:55:b8:6f:c9:59:9e:ef:75:08:bc:a8:2c:48: 2b:af:a5:27:c4:8e:09:ec:e6:a1:8a:77:93:6b:1d:ff:26:18: c2:43:5b:63:b6:52:44:6a:5f:71:b5:16:95:df:6d:47:cd:7f: 18:83:37:83:29:a9:d5:ab:93:e2:ac:d5:1a:be:db:e2:81:44: 64:5f:ac:42:07:aa:b0:0c:d7:0e:b8:0f:db:a7:9e:f8:22:76: 77:f1:1b:82:58:b9:25:b8:4f:b7:0f:d0:cd:36:01:47:ae:81: ef:b5:a2:e8:60:b3:60:69:1c:53:54:bc:d4:d2:2a:3d:0b:6c: 8e:95:ac:99:6a:ae:df:78:f3:94:4f:be:2f:ab:5d:e1:c2:0d: 2d:1d:04:ce:be:26:df:ae:a6:7d:ee:20:ee:b6:1c:56:7d:5d: 14:43:a3:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoVHD4JwTmdKVYclP3/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMThkNTlkMWRlMTQzZjU5MzQzMmQzMmZlYTZiYmQzZWM3MTg0ODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ZV5RWXM5ARCyv1NT+IctO100sT bw0pZ0w76F+ChUObBnsx/PYKXGcrUiHrk1jUlfiyKwqmj7QU3lmAqs9PiXNovutZ 5liyR0rddBzffebLgpIcCUZ2DotqdfbXb3iqhfzBh3LfU9uh9ePl+yhkirKhHrYI krc/47PLDFd/keYoPzOzqARqAyjw0kQJJqgbLGk231OfhyHr4lvQrZM2H7fJsH23 Vd6N788bDmkBNM7414ZZ6q55msVRR7jxoZ6rRIAGgigbresJUKZSZ3qTt6GpEzAO LG0GJWHxlO08OPFg6ZJjYEoCdKlXLgotyLH9melFGQJXxwbl13Y3M5YHsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGNWdHeFD9ZNDLTL+prvT7HGEiKMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvc1kxWjBkNFVQMWswTXRNdjZtdTlQc2NZU0lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsJMA0G CSqGSIb3DQEBCwUAA4IBAQBWqiua4RpJyIETQpQp7zHP5n0skmvbbv/AGGpCqbhD eZcbWxjLHVByH8Yb/qu/9MFwnQXSQCVrQWOxeOehqZAM2H84ouaYadTdNiGlNFvW wDrVScI5DzjGNYa3PFLx5VW4b8lZnu91CLyoLEgrr6UnxI4J7OahineTax3/JhjC Q1tjtlJEal9xtRaV321HzX8YgzeDKanVq5PirNUavtvigURkX6xCB6qwDNcOuA/b p574InZ38RuCWLkluE+3D9DNNgFHroHvtaLoYLNgaRxTVLzU0io9C2yOlayZaq7f ePOUT74vq13hwg0tHQTOvibfrqZ97iDuthxWfV0UQ6M3 -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:31 2026 by rpki-client