This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/YrqYNM1Pym45hQFacw7cbC8M_eA.roa File: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (raw, json) Hash identifier: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44= Subject key identifier: 62:BA:98:34:CD:4F:CA:6E:39:85:01:5A:73:0E:DC:6C:2F:0C:FD:E0 Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974 Certificate serial: 019B791106D1291E51C3F1911E2E601D43AF Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/YrqYNM1Pym45hQFacw7cbC8M_eA.roa Signing time: Thu 01 Jan 2026 10:18:37 +0000 ROA not before: Thu 01 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39120 IP address blocks: 176.126.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:06:d1:29:1e:51:c3:f1:91:1e:2e:60:1d:43:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62ba9834cd4fca6e3985015a730edc6c2f0cfde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:23:85:73:80:a9:4d:90:14:4e:ca:4e:80: 74:aa:04:9a:53:5d:eb:08:13:f4:49:7f:92:8b:c8: 18:4a:f8:f0:d9:d9:70:0a:1f:52:28:03:d8:c6:2d: 17:ba:64:cf:5f:87:ff:a8:c5:01:a0:47:31:33:ca: 51:0e:48:95:8e:9c:2a:ba:58:02:1c:85:dc:18:9c: 94:4d:a0:03:23:61:1e:5a:e0:24:2a:92:f5:60:d0: 7c:91:d7:fc:8c:9c:90:e5:ef:70:b1:5f:3f:2e:d1: d7:65:9e:82:b3:3e:2b:a7:6d:e0:45:ed:17:6e:61: 45:be:24:47:c8:fa:d6:da:99:d7:d7:cd:a6:37:02: 7d:12:7e:24:b3:d2:01:ce:e1:d9:2f:e1:f9:00:9b: 2a:14:61:a7:e1:85:37:00:63:df:49:1f:6b:5b:f4: 70:3d:d7:54:ff:85:a3:4f:e6:37:aa:3a:e0:92:ab: de:89:a1:a6:06:fd:68:8b:cd:de:67:2e:5c:55:cb: d3:19:f2:b9:0b:f6:76:3d:56:a7:a4:8a:06:2d:d5: e8:a4:d3:46:ba:4b:0b:a5:ee:61:f4:44:a2:99:16: 29:55:7d:43:2e:22:cb:b1:cf:e1:9c:f4:2a:f9:ff: f2:c3:b4:cf:05:79:c2:f5:ba:20:b7:17:0a:f7:b7: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BA:98:34:CD:4F:CA:6E:39:85:01:5A:73:0E:DC:6C:2F:0C:FD:E0 X509v3 Authority Key Identifier: keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/YrqYNM1Pym45hQFacw7cbC8M_eA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.107.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:9e:b3:0a:5f:dd:d6:04:ff:30:df:67:eb:91:73:ec:f4:b4: bb:73:cb:26:28:b9:ce:3c:83:59:09:eb:1c:e9:51:cd:5f:e5: cb:e2:88:3e:26:0b:28:9b:e7:73:28:34:9c:40:1a:b4:c1:39: e8:5a:c0:b1:14:bb:93:ed:16:a7:4e:ef:7c:cf:cd:ad:06:6f: c2:bf:90:bd:38:fa:22:91:81:83:f3:e1:9c:e4:3b:fb:0d:71: 08:33:da:62:8e:46:6b:ad:4b:16:b8:7e:44:bf:94:78:2a:2d: bb:cc:75:1e:72:13:97:a4:8f:19:72:f2:ce:d8:e7:6f:0a:43: b7:ae:ab:12:59:7c:d8:4f:07:88:0f:9e:ed:b8:ca:2c:f5:43: 2f:32:1f:74:b8:d7:3f:4d:c1:42:39:af:e6:ea:be:fa:f2:7a: a0:01:6d:de:59:98:99:42:96:a8:49:20:62:a0:09:fe:c9:bf: 9e:53:61:8e:c8:dd:f5:29:02:38:88:5b:82:a6:27:32:ae:9e: e0:f7:7e:4c:5f:34:01:19:c0:16:2a:f6:8f:d5:52:83:c4:e8: fc:4a:b2:78:d3:52:c2:7d:38:24:cf:43:d5:b0:95:05:25:63: cc:bf:4e:db:7c:a8:ac:e7:bc:73:ce:e9:ba:32:32:a1:16:c8: 81:ad:b2:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQbRKR5Rw/GRHi5gHUOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGYwNjNkMjllOTEwZjAzM2JlY2I2NTZlOGI5OTAxZjY5 ZWM5NzQwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmJhOTgzNGNkNGZjYTZlMzk4NTAxNWE3MzBlZGM2YzJmMGNmZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArakjhXOAqU2QFE7KToB0qgSaU13r CBP0SX+Si8gYSvjw2dlwCh9SKAPYxi0XumTPX4f/qMUBoEcxM8pRDkiVjpwqulgC HIXcGJyUTaADI2EeWuAkKpL1YNB8kdf8jJyQ5e9wsV8/LtHXZZ6Csz4rp23gRe0X bmFFviRHyPrW2pnX182mNwJ9En4ks9IBzuHZL+H5AJsqFGGn4YU3AGPfSR9rW/Rw PddU/4WjT+Y3qjrgkqveiaGmBv1oi83eZy5cVcvTGfK5C/Z2PVanpIoGLdXopNNG uksLpe5h9ESimRYpVX1DLiLLsc/hnPQq+f/yw7TPBXnC9bogtxcK97fycwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGK6mDTNT8puOYUBWnMO3GwvDP3gMB8GA1UdIwQY MBaAFLSPBj0p6RDwM77LZW6LmQH2nsl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDct M2M0M2MzZDM1ZWYzLzEvWXJxWU5NMVB5bTQ1aFFGYWN3N2NiQzhNX2VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDctM2M0M2MzZDM1ZWYz LzEvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH5rMA0G CSqGSIb3DQEBCwUAA4IBAQANnrMKX93WBP8w32frkXPs9LS7c8smKLnOPINZCesc 6VHNX+XL4og+Jgsom+dzKDScQBq0wTnoWsCxFLuT7RanTu98z82tBm/Cv5C9OPoi kYGD8+Gc5Dv7DXEIM9pijkZrrUsWuH5Ev5R4Ki27zHUechOXpI8ZcvLO2OdvCkO3 rqsSWXzYTweID57tuMos9UMvMh90uNc/TcFCOa/m6r768nqgAW3eWZiZQpaoSSBi oAn+yb+eU2GOyN31KQI4iFuCpicyrp7g935MXzQBGcAWKvaP1VKDxOj8SrJ401LC fTgkz0PVsJUFJWPMv07bfKis57xzzum6MjKhFsiBrbJE -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:21 2026 by rpki-client