This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/jYiU8bv569WiEs-qGefdtilWB8Y.roa File: jYiU8bv569WiEs-qGefdtilWB8Y.roa (raw, json) Hash identifier: kPGKYpkrFjV7H4hDvAWisI7rvp3jwldiGMNdXvER2ok= Subject key identifier: 8D:88:94:F1:BB:F9:EB:D5:A2:12:CF:AA:19:E7:DD:B6:29:56:07:C6 Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Certificate serial: 019B7BA4F21F0A8C9EA53AC2DB8E01C4A41C Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/jYiU8bv569WiEs-qGefdtilWB8Y.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35913 IP address blocks: 193.36.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f2:1f:0a:8c:9e:a5:3a:c2:db:8e:01:c4:a4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d8894f1bbf9ebd5a212cfaa19e7ddb6295607c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:25:7e:62:8d:a8:cc:00:0e:35:22:81:47: 4d:a2:08:ae:b9:6a:35:f3:72:bb:c9:e8:de:3b:39: 7e:c7:b4:3b:d6:46:75:a2:75:2e:37:e5:f3:00:77: 13:7a:2c:a0:a9:4a:ad:14:c8:11:4e:d8:b1:ba:f8: 51:d0:cd:17:2c:30:32:e9:c3:d8:a3:db:0b:9c:76: 8d:87:03:3c:ed:bf:ed:03:77:42:0e:f4:77:07:f3: d3:fa:a8:c8:2f:3f:26:70:d0:d0:bd:a2:af:20:8f: b7:cf:9b:aa:80:81:d6:f1:33:7f:60:cb:10:1e:0f: 98:dc:de:8d:ee:1e:f3:65:52:92:80:84:00:96:4e: 6d:fb:2f:0b:e0:bf:08:10:48:d6:03:b3:94:2e:27: d5:20:46:7d:87:3e:69:77:36:42:8c:c5:e2:fb:83: d4:12:f7:0e:2b:07:48:4c:74:c8:53:c5:03:7b:25: 7b:48:4f:68:1f:fe:c8:e8:d6:99:8a:43:c8:6f:41: 71:60:31:d0:7d:86:a0:88:4e:1f:2b:09:c5:d3:33: 61:c6:a4:3b:de:45:f5:c7:64:0a:67:db:4e:70:47: 3a:91:17:4f:fb:f2:6b:65:00:05:cb:f7:e8:ee:5d: 25:a9:da:52:19:49:d8:6f:d4:2c:c0:8d:7d:c3:9b: 08:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:88:94:F1:BB:F9:EB:D5:A2:12:CF:AA:19:E7:DD:B6:29:56:07:C6 X509v3 Authority Key Identifier: keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/jYiU8bv569WiEs-qGefdtilWB8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:56:09:0b:e1:22:b9:cc:ce:49:46:8c:5a:23:65:27:53:8f: 4d:37:b0:3e:db:b7:ec:47:ed:6b:e0:0b:c9:55:0e:b8:4e:3f: e9:cd:38:db:12:4d:6c:4b:b7:9d:a7:c7:f8:0d:5e:14:24:5e: 5d:50:7c:9d:5b:ef:4d:1f:fe:88:02:cd:c8:a1:7e:1b:90:a8: a7:98:e2:7a:7b:61:1b:13:9a:7b:d7:c8:e8:eb:24:aa:3d:1c: 4b:3c:79:e0:0b:6c:e7:1f:12:86:68:2e:be:0c:0c:45:56:4e: 1c:48:2b:d6:1e:16:09:85:f0:4d:88:36:db:ab:b4:f1:25:bc: 6f:6e:c1:ef:79:6d:9a:7a:d9:b3:22:35:d8:1a:35:6a:c6:b0: 52:48:7e:b6:af:e3:cb:85:bb:7f:ac:a7:bb:13:ff:28:77:b7: 48:d7:92:44:df:a9:59:22:3b:b0:0c:6d:08:90:02:90:17:ff: b4:4a:3c:88:ca:d6:fc:5d:f0:6f:50:14:05:36:c0:f2:69:4a: 62:ae:96:e8:ca:3b:38:db:2f:01:d4:fa:7d:b2:92:54:91:43: 37:1d:70:3f:8a:f6:f6:6f:a8:b4:b5:ea:e0:f8:9e:66:ee:51: 79:87:8c:86:8a:90:1b:ca:6c:24:a7:ad:db:9c:92:26:e3:79: 2f:f9:31:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPIfCoyepTrC244BxKQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMDhkZjE2NWQ0OTdkN2E5Yjk5ZTBlNzFmMTViYTA3ZDE4 NDYxNWEwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDg4OTRmMWJiZjllYmQ1YTIxMmNmYWExOWU3ZGRiNjI5NTYwN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumMlfmKNqMwADjUigUdNogiuuWo1 83K7yejeOzl+x7Q71kZ1onUuN+XzAHcTeiygqUqtFMgRTtixuvhR0M0XLDAy6cPY o9sLnHaNhwM87b/tA3dCDvR3B/PT+qjILz8mcNDQvaKvII+3z5uqgIHW8TN/YMsQ Hg+Y3N6N7h7zZVKSgIQAlk5t+y8L4L8IEEjWA7OULifVIEZ9hz5pdzZCjMXi+4PU EvcOKwdITHTIU8UDeyV7SE9oH/7I6NaZikPIb0FxYDHQfYagiE4fKwnF0zNhxqQ7 3kX1x2QKZ9tOcEc6kRdP+/JrZQAFy/fo7l0lqdpSGUnYb9QswI19w5sIwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2IlPG7+evVohLPqhnn3bYpVgfGMB8GA1UdIwQY MBaAFC8I3xZdSX16m5ng5x8VugfRhGFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzIt Y2FjM2U0MmFlMDNmLzEvallpVThidjU2OVdpRXMtcUdlZmR0aWxXQjhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzItY2FjM2U0MmFlMDNm LzEvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSTjMA0G CSqGSIb3DQEBCwUAA4IBAQBqVgkL4SK5zM5JRoxaI2UnU49NN7A+27fsR+1r4AvJ VQ64Tj/pzTjbEk1sS7edp8f4DV4UJF5dUHydW+9NH/6IAs3IoX4bkKinmOJ6e2Eb E5p718jo6ySqPRxLPHngC2znHxKGaC6+DAxFVk4cSCvWHhYJhfBNiDbbq7TxJbxv bsHveW2aetmzIjXYGjVqxrBSSH62r+PLhbt/rKe7E/8od7dI15JE36lZIjuwDG0I kAKQF/+0SjyIytb8XfBvUBQFNsDyaUpirpboyjs42y8B1Pp9spJUkUM3HXA/ivb2 b6i0terg+J5m7lF5h4yGipAbymwkp63bnJIm43kv+THS -----END CERTIFICATE-----Generated at Wed Jan 21 15:23:59 2026 by rpki-client