This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YD8O7lKVyhzCTfznNs5esj5QZck.roa File: YD8O7lKVyhzCTfznNs5esj5QZck.roa (raw, json) Hash identifier: 20Wv57wl3TXCsx9IPGHsJ5OIMAf+Ps3POwkjAQ8fW/c= Subject key identifier: 60:3F:0E:EE:52:95:CA:1C:C2:4D:FC:E7:36:CE:5E:B2:3E:50:65:C9 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E43A428C2990DD4C62F11500CEF04 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YD8O7lKVyhzCTfznNs5esj5QZck.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215081 IP address blocks: 193.22.157.0/24 maxlen: 32 193.22.158.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:43:a4:28:c2:99:0d:d4:c6:2f:11:50:0c:ef:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=603f0eee5295ca1cc24dfce736ce5eb23e5065c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:65:56:07:54:cb:d7:15:6a:f2:9f:05:9c: 83:1d:a5:a5:57:99:d7:74:45:7c:02:7b:8b:47:14: bb:bf:a9:9d:11:9f:8c:10:b1:b7:4f:eb:58:27:f8: 60:51:3f:9e:c3:3a:65:e5:88:31:71:71:c3:e4:cc: 77:f6:b6:92:47:8b:25:22:27:91:64:60:ab:0b:6b: 06:63:51:e9:17:99:37:dd:e8:59:ac:e2:72:27:a2: 07:13:1c:de:e5:8a:80:2d:03:f7:3f:3a:bf:8c:a0: 9d:28:28:45:3d:3f:6a:05:de:1a:b1:1b:ca:2c:83: 73:c7:e0:6b:4b:1f:0a:15:63:81:f5:c5:6c:04:ee: 65:4d:6b:c7:90:4e:32:07:63:c7:e6:e2:43:f3:30: 4b:84:a9:53:75:8d:bd:ed:23:42:d9:e5:ec:fb:c8: 60:14:17:90:62:c4:6c:30:ec:54:03:47:cc:3e:00: ab:75:a6:a3:8e:6e:c8:f4:17:51:7f:62:13:b1:fa: 10:9d:16:88:25:72:1e:48:e4:16:3e:32:de:a6:0b: 1c:cb:db:87:35:a9:f6:8a:58:c8:60:52:f5:7b:67: 9e:46:7f:50:5b:10:64:1b:e5:b2:7a:4f:ec:33:52: dd:5d:fe:4f:16:64:fb:1d:b7:e9:6e:35:bb:1e:f1: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3F:0E:EE:52:95:CA:1C:C2:4D:FC:E7:36:CE:5E:B2:3E:50:65:C9 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YD8O7lKVyhzCTfznNs5esj5QZck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.157.0-193.22.158.255 Signature Algorithm: sha256WithRSAEncryption 52:9d:34:b5:fb:cf:46:19:fc:a1:39:e3:6d:18:dc:d0:8e:39: bb:0c:6d:91:9c:f4:3c:b3:ad:fd:65:41:ab:47:71:64:9e:d2: b5:3c:00:e5:f5:ab:d3:d6:b3:a9:f7:7d:67:13:cb:e2:3a:8d: bb:4f:e9:b0:06:76:6e:20:49:62:66:4e:4f:94:a2:f9:4b:ef: 89:9f:85:d9:c0:fd:28:cd:ff:b6:57:7a:38:b4:d6:bb:75:96: bd:f8:06:5c:a2:37:6b:95:46:20:b4:6e:b5:7d:4f:b3:a2:64: c8:50:8b:6d:c2:29:ee:27:6b:60:cc:ac:fd:96:06:a9:cc:ac: 21:39:ea:7f:33:37:a7:c5:0a:0c:08:46:f4:7c:b5:85:86:a9: 4e:1a:89:9a:90:33:be:8d:46:52:51:ad:fc:ed:c4:90:50:15: 82:f5:e9:a8:40:dc:b1:2b:fd:8f:a7:c9:75:30:d4:57:9c:66: 8b:19:c8:88:ae:f8:7a:da:2f:d1:41:74:ba:11:a1:72:64:c9: 77:61:a0:f5:83:9e:4f:71:5b:61:86:e7:38:d1:55:eb:44:bc: cd:31:20:a5:d0:c1:13:8b:7b:41:bc:da:02:f2:7a:ab:1d:9c: 02:5c:5b:c1:b6:bb:81:05:bf:65:89:e0:4e:72:4a:87:4e:98: ee:96:5d:0a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fkOkKMKZDdTGLxFQDO8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDNmMGVlZTUyOTVjYTFjYzI0ZGZjZTczNmNlNWViMjNlNTA2NWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/xlVgdUy9cVavKfBZyDHaWlV5nX dEV8AnuLRxS7v6mdEZ+MELG3T+tYJ/hgUT+ewzpl5YgxcXHD5Mx39raSR4slIieR ZGCrC2sGY1HpF5k33ehZrOJyJ6IHExze5YqALQP3Pzq/jKCdKChFPT9qBd4asRvK LINzx+BrSx8KFWOB9cVsBO5lTWvHkE4yB2PH5uJD8zBLhKlTdY297SNC2eXs+8hg FBeQYsRsMOxUA0fMPgCrdaajjm7I9BdRf2ITsfoQnRaIJXIeSOQWPjLepgscy9uH Nan2iljIYFL1e2eeRn9QWxBkG+Wyek/sM1LdXf5PFmT7HbfpbjW7HvHKtQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGA/Du5Slcocwk385zbOXrI+UGXJMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvWUQ4TzdsS1Z5aHpDVGZ6bk5zNWVzajVRWmNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBFp0D BADBFp4wDQYJKoZIhvcNAQELBQADggEBAFKdNLX7z0YZ/KE5420Y3NCOObsMbZGc 9Dyzrf1lQatHcWSe0rU8AOX1q9PWs6n3fWcTy+I6jbtP6bAGdm4gSWJmTk+UovlL 74mfhdnA/SjN/7ZXeji01rt1lr34BlyiN2uVRiC0brV9T7OiZMhQi23CKe4na2DM rP2WBqnMrCE56n8zN6fFCgwIRvR8tYWGqU4aiZqQM76NRlJRrfztxJBQFYL16ahA 3LEr/Y+nyXUw1FecZosZyIiu+HraL9FBdLoRoXJkyXdhoPWDnk9xW2GG5zjRVetE vM0xIKXQwROLe0G82gLyeqsdnAJcW8G2u4EFv2WJ4E5ySodOmO6WXQo= -----END CERTIFICATE-----Generated at Mon Jan 19 20:29:28 2026 by rpki-client