This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VY6IAzTfd5Ro8wXUyfI_SezAQdo.roa File: VY6IAzTfd5Ro8wXUyfI_SezAQdo.roa (raw, json) Hash identifier: 44/WWoiCgVEH7oS36/OUVwsrkS5e3zjqbIps6GadmB4= Subject key identifier: 55:8E:88:03:34:DF:77:94:68:F3:05:D4:C9:F2:3F:49:EC:C0:41:DA Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C136DD7DBE1CF35D7DDCB734EC38123 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VY6IAzTfd5Ro8wXUyfI_SezAQdo.roa Signing time: Fri 02 Jan 2026 00:20:06 +0000 ROA not before: Fri 02 Jan 2026 00:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 193.8.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:6d:d7:db:e1:cf:35:d7:dd:cb:73:4e:c3:81:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=558e880334df779468f305d4c9f23f49ecc041da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:2f:6e:71:85:20:9d:42:d3:93:cb:cd:80: 24:9b:e4:dc:f5:5b:af:08:8a:fb:84:17:62:26:70: 43:97:d6:a5:cd:0d:7a:f6:d9:2b:29:bc:05:68:d6: 80:05:5d:45:cd:a7:4e:6d:ab:e9:49:8f:89:4d:07: b1:54:ce:70:38:5a:b7:ff:31:1c:07:9f:4b:04:03: 76:dc:53:81:e5:25:78:93:5d:38:29:e1:11:11:e0: 37:71:69:a1:16:be:f1:c3:3e:01:d1:88:7f:a1:86: b8:0a:1f:9e:0a:bc:87:16:d2:75:58:57:3a:cf:b0: 76:ec:5d:6a:16:12:26:e3:4a:32:a8:e5:5d:2f:97: b8:21:a8:1c:27:71:ce:e8:fd:a1:e4:38:ca:c9:a3: b0:20:4d:0f:5e:5f:31:eb:8c:59:0e:e5:76:60:59: 46:a5:74:db:c0:64:b4:e1:54:97:5c:04:37:78:97: d2:66:19:08:31:2c:db:9d:93:af:d6:a5:c7:c9:90: ba:e9:00:63:34:11:7b:b8:dc:b4:63:5c:2c:34:c5: 00:39:b5:21:fc:6e:fb:51:db:d7:65:f4:b6:05:2c: 3b:1f:12:0f:80:c6:a2:1c:d7:b3:07:58:1f:e4:a1: 45:b1:d8:35:5b:70:c4:fd:17:b6:e6:17:c2:51:ff: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8E:88:03:34:DF:77:94:68:F3:05:D4:C9:F2:3F:49:EC:C0:41:DA X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VY6IAzTfd5Ro8wXUyfI_SezAQdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.115.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:60:e5:26:3f:73:b9:40:21:4d:d4:78:ef:fa:e1:f3:fc:84: 92:08:10:dc:37:ec:1a:f5:eb:74:3a:e6:04:cf:05:ba:f2:19: 76:6b:be:c0:0c:ae:ce:c7:0e:b6:95:1c:3c:4e:0e:6e:dd:49: 55:25:e7:1b:24:d5:cf:b0:6d:11:ae:fb:11:d8:3c:7f:f6:b6: 1b:1e:6c:5a:22:0c:25:3b:6e:17:7c:80:8f:41:df:3d:51:f8: 24:df:a8:56:a4:15:2c:74:89:4d:68:f1:fd:f6:f5:85:a0:64: d6:86:2b:38:2b:61:09:96:ab:fc:8d:bb:d4:ec:42:39:95:dc: 98:75:a2:ac:6c:37:4f:be:4f:69:c6:57:6d:72:36:5a:9b:00: 3d:fc:b9:77:7f:7b:45:d0:98:d3:2e:91:2f:70:3e:5a:42:f8: 63:21:1b:68:02:18:86:4e:f2:37:5d:c6:d3:ba:c4:a1:33:23: f7:4d:12:2a:f3:d0:47:1e:d3:f1:ef:f9:01:b0:92:b3:99:e4: 1a:7e:21:48:40:94:96:52:ec:26:80:9c:8c:dd:b3:67:b4:aa: b8:2b:cd:29:92:6d:d7:80:40:df:e6:a5:2b:89:ff:c9:54:e2: e1:bb:e2:97:ba:e6:ea:23:db:78:de:7d:0a:57:9a:21:43:d7: 61:dc:ca:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E23X2+HPNdfdy3NOw4EjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NThlODgwMzM0ZGY3Nzk0NjhmMzA1ZDRjOWYyM2Y0OWVjYzA0MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszcvbnGFIJ1C05PLzYAkm+Tc9Vuv CIr7hBdiJnBDl9alzQ169tkrKbwFaNaABV1FzadObavpSY+JTQexVM5wOFq3/zEc B59LBAN23FOB5SV4k104KeEREeA3cWmhFr7xwz4B0Yh/oYa4Ch+eCryHFtJ1WFc6 z7B27F1qFhIm40oyqOVdL5e4IagcJ3HO6P2h5DjKyaOwIE0PXl8x64xZDuV2YFlG pXTbwGS04VSXXAQ3eJfSZhkIMSzbnZOv1qXHyZC66QBjNBF7uNy0Y1wsNMUAObUh /G77UdvXZfS2BSw7HxIPgMaiHNezB1gf5KFFsdg1W3DE/Re25hfCUf+ShwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWOiAM033eUaPMF1MnyP0nswEHaMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvVlk2SUF6VGZkNVJvOHdYVXlmSV9TZXpBUWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQhzMA0G CSqGSIb3DQEBCwUAA4IBAQCOYOUmP3O5QCFN1Hjv+uHz/ISSCBDcN+wa9et0OuYE zwW68hl2a77ADK7Oxw62lRw8Tg5u3UlVJecbJNXPsG0RrvsR2Dx/9rYbHmxaIgwl O24XfICPQd89Ufgk36hWpBUsdIlNaPH99vWFoGTWhis4K2EJlqv8jbvU7EI5ldyY daKsbDdPvk9pxldtcjZamwA9/Ll3f3tF0JjTLpEvcD5aQvhjIRtoAhiGTvI3XcbT usShMyP3TRIq89BHHtPx7/kBsJKzmeQafiFIQJSWUuwmgJyM3bNntKq4K80pkm3X gEDf5qUrif/JVOLhu+KXuubqI9t43n0KV5ohQ9dh3Mrc -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:23 2026 by rpki-client