This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa File: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (raw, json) Hash identifier: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE= Subject key identifier: 60:E6:62:2E:AC:58:99:D3:6E:56:7C:E9:4A:AC:45:BA:27:45:8C:14 Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91 Certificate serial: 019BFADEE653D2E2AB97666B4EDB5F40CD76 Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa Signing time: Mon 26 Jan 2026 15:14:30 +0000 ROA not before: Mon 26 Jan 2026 15:14:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51214 IP address blocks: 193.25.120.0/23 maxlen: 24 2001:67c:2ee0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:de:e6:53:d2:e2:ab:97:66:6b:4e:db:5f:40:cd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91 Validity Not Before: Jan 26 15:14:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60e6622eac5899d36e567ce94aac45ba27458c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:97:6e:7d:92:ed:92:a0:00:45:1e:65:4a: aa:81:a6:a2:06:0e:d0:82:5a:76:f2:25:2a:e7:ed: b2:e3:64:c3:a5:b8:dc:7a:b7:62:92:fd:fd:42:66: 4b:d8:62:98:9c:0a:14:88:af:2c:32:90:9f:f2:9c: 6a:65:94:d6:f1:66:4b:d3:96:3b:ac:f7:7e:b9:37: 0d:31:76:04:2e:99:e6:68:0d:95:ec:f4:22:8e:d2: 3f:cd:90:f5:8c:ba:16:a8:45:89:f4:6d:6a:8d:d3: d6:ce:a0:f7:16:c0:2d:da:0f:40:49:af:3e:04:08: b4:68:14:36:83:c4:9c:da:07:67:3a:d4:ed:8a:31: 60:aa:21:ab:65:69:87:d0:38:4a:cd:a6:0c:20:a9: ca:d8:89:96:a5:d6:9c:7b:65:8b:45:33:50:cf:62: 16:85:96:fd:35:04:51:68:ef:02:c5:59:11:5d:c6: 4e:4e:db:a8:ba:22:3a:8a:98:cc:a5:01:0d:0d:3e: 54:ff:17:87:6f:39:76:75:39:79:ee:c4:d4:1f:9a: 6e:b4:d5:56:4b:e1:30:64:54:be:9f:fb:b3:55:05: e0:cd:02:58:04:6b:70:8f:4e:08:7d:f1:eb:94:ad: 29:f5:fb:1a:41:45:f2:86:57:d7:f2:67:41:bb:8a: 33:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E6:62:2E:AC:58:99:D3:6E:56:7C:E9:4A:AC:45:BA:27:45:8C:14 X509v3 Authority Key Identifier: keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.120.0/23 IPv6: 2001:67c:2ee0::/48 Signature Algorithm: sha256WithRSAEncryption 8c:1c:bf:44:b3:46:f9:cb:ff:16:f3:21:8d:64:d3:c6:f6:75: 74:13:2e:be:54:65:f0:84:59:68:f6:18:d3:9e:48:67:60:2c: d7:22:31:b4:bd:af:b3:68:17:74:38:c7:0a:8f:f8:df:98:4c: 81:16:eb:e7:9e:ab:82:51:d9:1e:d5:4a:8e:b3:f2:7c:bc:ba: 4e:9d:3b:2b:5f:81:9d:90:f4:fc:2d:c2:45:60:a5:af:1a:be: 57:b9:35:9c:b0:db:89:b5:40:42:f7:3b:34:f5:7f:a4:4d:ee: 8d:17:6b:7d:4f:36:4f:41:f1:e5:9b:04:99:03:b9:0d:c0:7d: 36:e1:d0:4e:5e:2e:5b:b1:e8:2d:3f:db:85:d1:70:3a:54:e1: a6:76:01:bc:05:95:f8:ff:b9:34:03:87:64:86:14:34:b7:f8: a3:6a:8a:12:d5:b0:09:bc:e2:4b:80:76:13:cc:62:50:26:97: cd:18:46:b6:32:29:fa:21:3f:2b:73:6a:f6:48:0f:b1:d9:6f: e0:41:97:9d:a0:76:70:b1:ae:cc:9a:e4:9c:61:29:fd:c2:45: c1:9c:9a:05:94:93:e8:f0:b9:1a:8a:48:b5:96:ec:f2:d9:5f: 64:be:b3:f9:39:9b:40:3a:2d:0d:b1:f8:b1:ab:23:96:66:4d: 7a:60:9d:ca -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZv63uZT0uKrl2ZrTttfQM12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjM3M2U3YTg0NDA2Y2VhYjVmN2FhOTE1MjM0YzkzZDhi ODhlOTEwHhcNMjYwMTI2MTUxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGU2NjIyZWFjNTg5OWQzNmU1NjdjZTk0YWFjNDViYTI3NDU4YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNmXbn2S7ZKgAEUeZUqqgaaiBg7Q glp28iUq5+2y42TDpbjcerdikv39QmZL2GKYnAoUiK8sMpCf8pxqZZTW8WZL05Y7 rPd+uTcNMXYELpnmaA2V7PQijtI/zZD1jLoWqEWJ9G1qjdPWzqD3FsAt2g9ASa8+ BAi0aBQ2g8Sc2gdnOtTtijFgqiGrZWmH0DhKzaYMIKnK2ImWpdace2WLRTNQz2IW hZb9NQRRaO8CxVkRXcZOTtuouiI6ipjMpQENDT5U/xeHbzl2dTl57sTUH5putNVW S+EwZFS+n/uzVQXgzQJYBGtwj04IffHrlK0p9fsaQUXyhlfX8mdBu4ozUQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGDmYi6sWJnTblZ86UqsRbonRYwUMB8GA1UdIwQY MBaAFDcjc+eoRAbOq196qRUjTJPYuI6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYt N2ExZWM1ZDQ5ZDMzLzEvWU9aaUxxeFltZE51Vm56cFNxeEZ1aWRGakJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYtN2ExZWM1ZDQ5ZDMz LzEvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwRl4MA8E AgACMAkDBwAgAQZ8LuAwDQYJKoZIhvcNAQELBQADggEBAIwcv0SzRvnL/xbzIY1k 08b2dXQTLr5UZfCEWWj2GNOeSGdgLNciMbS9r7NoF3Q4xwqP+N+YTIEW6+eeq4JR 2R7VSo6z8ny8uk6dOytfgZ2Q9PwtwkVgpa8avle5NZyw24m1QEL3OzT1f6RN7o0X a31PNk9B8eWbBJkDuQ3AfTbh0E5eLlux6C0/24XRcDpU4aZ2AbwFlfj/uTQDh2SG FDS3+KNqihLVsAm84kuAdhPMYlAml80YRrYyKfohPytzavZID7HZb+BBl52gdnCx rsya5JxhKf3CRcGcmgWUk+jwuRqKSLWW7PLZX2S+s/k5m0A6LQ2x+LGrI5ZmTXpg nco= -----END CERTIFICATE-----Generated at Mon Feb 2 09:33:59 2026 by rpki-client