This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/yf4fsCLIG2l9cGmJeTOIIc51YeU.roa File: yf4fsCLIG2l9cGmJeTOIIc51YeU.roa (raw, json) Hash identifier: UF4YxdCOV/UBjXOSABiqqWZqo/WkePyMELF0t7EktlA= Subject key identifier: C9:FE:1F:B0:22:C8:1B:69:7D:70:69:89:79:33:88:21:CE:75:61:E5 Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497 Certificate serial: 019B78A2D7682786D4E9D1ED61E698B316A0 Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/yf4fsCLIG2l9cGmJeTOIIc51YeU.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50117 IP address blocks: 193.104.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d7:68:27:86:d4:e9:d1:ed:61:e6:98:b3:16:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5193d843af193e24875686673c95896eae3497 Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9fe1fb022c81b697d70698979338821ce7561e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1f:fc:f4:3d:bf:de:99:db:3a:84:12:86:fe: fd:b8:2b:b2:81:0d:c4:fe:e2:16:21:64:f3:7b:7c: f8:ca:ee:91:52:3f:b2:20:55:7d:97:2e:ac:8a:26: 79:ff:96:87:82:5c:34:fb:24:19:7f:89:d4:d4:53: 70:b3:d5:0e:d6:d3:50:97:81:78:0b:15:30:65:13: d0:21:05:5c:c3:32:4e:4e:38:02:13:65:95:13:7b: 1d:2b:e0:24:8e:e6:47:ac:a2:ac:77:44:ce:1f:9c: ad:04:52:dc:08:0c:03:fc:55:ff:f8:7b:40:68:10: 5e:db:19:8c:03:d2:6b:d6:51:b4:c7:f0:06:bf:28: 20:d2:90:76:0b:3a:27:99:26:2e:8e:be:2d:bd:9d: 21:09:9b:16:55:55:ba:5b:c1:f5:52:38:bb:2f:ee: 8b:ef:4c:bb:ff:61:a6:60:2e:40:ef:48:7d:f4:a5: 9f:7f:5d:43:db:3d:6d:26:9a:98:96:ff:76:db:3d: 0c:fa:b8:13:76:10:39:36:60:5e:2e:07:92:7f:35: e4:4f:31:e9:cc:aa:6c:51:bd:9e:30:4f:6c:1f:f5: a8:3c:d3:06:16:4e:72:a2:04:b6:5e:f0:7c:ba:3a: 46:5c:1b:7c:84:06:0b:05:04:6d:88:ee:d4:29:ea: 62:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FE:1F:B0:22:C8:1B:69:7D:70:69:89:79:33:88:21:CE:75:61:E5 X509v3 Authority Key Identifier: keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/yf4fsCLIG2l9cGmJeTOIIc51YeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.61.0/24 Signature Algorithm: sha256WithRSAEncryption ab:57:c3:89:79:f6:01:0f:6e:a7:f8:93:d8:46:3b:17:1a:bf: e1:3d:9b:6b:07:12:56:58:70:03:73:49:9f:02:2b:9d:cc:5c: 26:b8:26:4b:76:02:b1:de:bb:f0:7d:90:ea:de:44:84:d1:11: c4:38:ef:43:a7:65:ba:2b:51:ab:da:bc:87:59:9f:cb:89:9f: 85:0f:1a:d8:93:be:6d:4c:64:4c:b6:5f:06:14:4d:a9:d1:06: 56:f9:6b:59:52:75:6e:df:31:49:2c:e5:8d:b5:44:d9:4d:46: 96:2b:48:54:47:bc:4e:11:4b:16:3d:22:61:5c:01:8b:29:54: 74:f6:d7:bb:a3:bb:1c:b7:71:4b:07:a5:20:9b:83:5a:4b:e7: 21:e3:8d:27:82:5e:41:8d:c2:e6:85:21:37:c3:2e:e2:45:d9: 45:1d:bf:33:f6:4b:71:27:af:4a:90:f3:6e:38:30:0b:59:02: d4:06:03:ae:bf:78:53:12:8f:e3:b0:24:e2:0c:83:a8:f3:b0: 32:58:e0:3c:cf:2b:12:8e:82:de:80:7c:cb:47:f8:70:7a:1d: 01:06:1a:fd:6b:94:76:bd:ae:92:0b:96:11:48:2f:8d:36:48: 0e:d8:20:6d:2a:85:99:10:7f:7e:91:67:9c:c2:a5:21:7a:5e: b0:be:4f:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otdoJ4bU6dHtYeaYsxagMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTE5M2Q4NDNhZjE5M2UyNDg3NTY4NjY3M2M5NTg5NmVh ZTM0OTcwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWZlMWZiMDIyYzgxYjY5N2Q3MDY5ODk3OTMzODgyMWNlNzU2MWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B/89D2/3pnbOoQShv79uCuygQ3E /uIWIWTze3z4yu6RUj+yIFV9ly6siiZ5/5aHglw0+yQZf4nU1FNws9UO1tNQl4F4 CxUwZRPQIQVcwzJOTjgCE2WVE3sdK+AkjuZHrKKsd0TOH5ytBFLcCAwD/FX/+HtA aBBe2xmMA9Jr1lG0x/AGvygg0pB2CzonmSYujr4tvZ0hCZsWVVW6W8H1Uji7L+6L 70y7/2GmYC5A70h99KWff11D2z1tJpqYlv922z0M+rgTdhA5NmBeLgeSfzXkTzHp zKpsUb2eME9sH/WoPNMGFk5yogS2XvB8ujpGXBt8hAYLBQRtiO7UKepiiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMn+H7AiyBtpfXBpiXkziCHOdWHlMB8GA1UdIwQY MBaAFJtRk9hDrxk+JIdWhmc8lYlurjSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMt MDAwZWFkMzk3NjVhLzEveWY0ZnNDTElHMmw5Y0dtSmVUT0lJYzUxWWVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMtMDAwZWFkMzk3NjVh LzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWg9MA0G CSqGSIb3DQEBCwUAA4IBAQCrV8OJefYBD26n+JPYRjsXGr/hPZtrBxJWWHADc0mf AiudzFwmuCZLdgKx3rvwfZDq3kSE0RHEOO9Dp2W6K1Gr2ryHWZ/LiZ+FDxrYk75t TGRMtl8GFE2p0QZW+WtZUnVu3zFJLOWNtUTZTUaWK0hUR7xOEUsWPSJhXAGLKVR0 9te7o7sct3FLB6Ugm4NaS+ch440ngl5BjcLmhSE3wy7iRdlFHb8z9ktxJ69KkPNu ODALWQLUBgOuv3hTEo/jsCTiDIOo87AyWOA8zysSjoLegHzLR/hweh0BBhr9a5R2 va6SC5YRSC+NNkgO2CBtKoWZEH9+kWecwqUhel6wvk/i -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:28 2026 by rpki-client