This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/ybipZwfesbQV__aPxuV5d5A89PY.roa File: ybipZwfesbQV__aPxuV5d5A89PY.roa (raw, json) Hash identifier: Y2ObOEWw+FxcDxPbeDirQ1ndGcwUsmZzdYgHyDiU8K8= Subject key identifier: C9:B8:A9:67:07:DE:B1:B4:15:FF:F6:8F:C6:E5:79:77:90:3C:F4:F6 Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc Certificate serial: 019B7C134B3A0725513A76B9E537B6473C34 Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/ybipZwfesbQV__aPxuV5d5A89PY.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 193.203.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4b:3a:07:25:51:3a:76:b9:e5:37:b6:47:3c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9b8a96707deb1b415fff68fc6e57977903cf4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:88:49:49:2f:36:5d:e2:c9:dc:5f:cb:91: e1:87:e1:9b:c1:80:8b:3e:a7:b3:d0:f9:1a:9a:4b: 48:10:03:15:f2:e6:73:d9:7c:b4:c3:15:3f:21:e7: 0b:5c:74:14:f7:19:4d:a0:d9:68:4d:79:9b:d1:6a: c4:06:89:36:89:d7:18:66:50:00:f3:ae:8d:44:6b: ad:b6:bd:69:81:8b:b0:0d:75:64:ae:ab:ee:f8:d0: 53:b6:25:87:7a:7b:df:af:07:5b:e5:c8:4a:5e:e9: ac:8c:ce:1f:02:36:c2:1f:b1:d7:a4:67:da:8b:8d: d0:23:b8:a8:3b:91:91:0e:f1:2a:52:14:eb:e2:cd: c0:66:80:e5:97:7b:1a:7c:75:6e:cc:d8:6c:b3:31: 66:d2:99:c6:f1:3a:2c:f2:f0:73:f0:83:1c:c2:fb: 05:80:2d:ba:84:39:e7:23:5f:ef:36:27:04:7a:2e: 0b:2a:e5:ff:6a:73:22:15:da:d0:f3:9c:da:2b:44: 1c:b5:36:40:92:07:61:e3:cd:f6:9f:bc:aa:c5:a7: ca:d5:cc:90:2e:d0:36:b0:d3:92:5b:00:09:15:35: e5:8b:05:e6:14:cd:8b:d5:ef:c6:1e:f3:3d:ea:8e: 4c:f8:09:a8:21:f2:e3:8f:80:ff:ab:27:b7:a4:0f: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B8:A9:67:07:DE:B1:B4:15:FF:F6:8F:C6:E5:79:77:90:3C:F4:F6 X509v3 Authority Key Identifier: keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/ybipZwfesbQV__aPxuV5d5A89PY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.111.0/24 Signature Algorithm: sha256WithRSAEncryption 58:10:1b:fe:f7:a0:1e:85:6f:a7:ee:d0:5d:95:bb:ec:96:01: c7:bf:84:ab:be:81:9e:11:05:1b:37:c6:e6:0d:f8:9d:7d:91: e7:fd:45:4f:5f:34:7c:f5:4f:cc:7c:ef:86:a5:3b:6e:cc:6a: 39:f0:00:4d:82:8b:62:40:f6:9c:d4:c1:6d:8b:9e:9e:71:09: e7:32:8d:ab:a7:7b:90:ff:28:4c:77:9d:3f:8f:94:ac:19:e4: c4:c6:e3:11:5b:08:a6:10:b0:cd:ea:bc:c1:33:e3:e5:fe:23: f2:af:04:10:e6:6e:be:20:d6:45:3a:64:6d:25:41:ec:35:26: af:a1:95:e1:d8:36:07:52:d0:30:f1:1e:87:25:21:6a:c5:41: 17:36:0e:fe:af:14:b4:fc:78:aa:a7:88:67:2b:6c:44:31:87: 2f:ba:0e:0e:7f:47:c7:ea:c7:98:5f:2a:e3:b3:75:6e:87:77: 25:94:50:ea:be:9f:84:41:e2:6c:54:13:a7:b7:5a:5f:cb:cf: f4:93:8a:a1:4d:ec:e1:8a:42:82:01:33:7f:90:36:f9:a8:dd: f6:e4:c1:65:6e:df:ff:ec:9f:b3:08:3d:5a:4d:d2:b0:11:2f: 85:b8:c1:b6:73:fb:44:30:19:4d:a8:02:bb:8a:ff:7d:97:bf: ab:1c:a2:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0s6ByVROna55Te2Rzw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDg3ZDFkYzk4ZTI2ZTRjOTU5ZDA5ZjYxNDZkN2ZkZjg2 OWU0ZmMwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWI4YTk2NzA3ZGViMWI0MTVmZmY2OGZjNmU1Nzk3NzkwM2NmNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt42ISUkvNl3iydxfy5Hhh+GbwYCL Pqez0PkamktIEAMV8uZz2Xy0wxU/IecLXHQU9xlNoNloTXmb0WrEBok2idcYZlAA 866NRGuttr1pgYuwDXVkrqvu+NBTtiWHenvfrwdb5chKXumsjM4fAjbCH7HXpGfa i43QI7ioO5GRDvEqUhTr4s3AZoDll3safHVuzNhsszFm0pnG8Tos8vBz8IMcwvsF gC26hDnnI1/vNicEei4LKuX/anMiFdrQ85zaK0QctTZAkgdh4832n7yqxafK1cyQ LtA2sNOSWwAJFTXliwXmFM2L1e/GHvM96o5M+AmoIfLjj4D/qye3pA/X2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMm4qWcH3rG0Ff/2j8bleXeQPPT2MB8GA1UdIwQY MBaAFFsIfR3JjibkyVnQn2FG1/34aeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMt MDlkYmQwOGNiZTJkLzEveWJpcFp3ZmVzYlFWX19hUHh1VjVkNUE4OVBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMtMDlkYmQwOGNiZTJk LzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwctvMA0G CSqGSIb3DQEBCwUAA4IBAQBYEBv+96AehW+n7tBdlbvslgHHv4SrvoGeEQUbN8bm DfidfZHn/UVPXzR89U/MfO+GpTtuzGo58ABNgotiQPac1MFti56ecQnnMo2rp3uQ /yhMd50/j5SsGeTExuMRWwimELDN6rzBM+Pl/iPyrwQQ5m6+INZFOmRtJUHsNSav oZXh2DYHUtAw8R6HJSFqxUEXNg7+rxS0/Hiqp4hnK2xEMYcvug4Of0fH6seYXyrj s3Vuh3cllFDqvp+EQeJsVBOnt1pfy8/0k4qhTezhikKCATN/kDb5qN325MFlbt// 7J+zCD1aTdKwES+FuMG2c/tEMBlNqAK7iv99l7+rHKKp -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:45 2026 by rpki-client