This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/yjBUu69YuQD7TkAxTeMdScZ5Icw.roa File: yjBUu69YuQD7TkAxTeMdScZ5Icw.roa (raw, json) Hash identifier: Jeyx52sZn1PD/5iqRvE1v26OMeGY1Wk0jCU3l6YuckQ= Subject key identifier: CA:30:54:BB:AF:58:B9:00:FB:4E:40:31:4D:E3:1D:49:C6:79:21:CC Certificate issuer: /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56 Certificate serial: 019B7C12B6BDC97AE0396C16C9D70381BBDD Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/yjBUu69YuQD7TkAxTeMdScZ5Icw.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20509 IP address blocks: 193.178.232.0/23 maxlen: 23 193.178.232.0/24 maxlen: 24 193.178.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b6:bd:c9:7a:e0:39:6c:16:c9:d7:03:81:bb:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca3054bbaf58b900fb4e40314de31d49c67921cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:05:5f:a5:72:a3:9b:bd:f6:7e:51:3a:91: a8:d4:68:e5:0b:4f:5c:04:00:e3:87:93:ed:bc:86: 10:a2:1a:ef:93:6a:cc:ad:fb:c1:8a:56:21:75:e1: 38:5e:fe:f8:63:a3:ca:72:f2:5d:ad:e6:eb:0d:3b: 04:91:25:1f:6f:24:1d:90:44:2d:48:ac:8f:be:ed: 90:39:d9:d4:8b:60:69:f7:45:50:84:86:af:75:91: 25:46:1c:1f:a6:d2:ea:cf:39:d7:8b:7f:38:8c:c8: f8:a0:8b:12:65:33:f4:47:0d:f6:9d:ff:0c:74:1e: ae:c5:f2:89:76:9a:21:3b:a1:2e:b5:20:b8:05:b2: d5:5b:08:db:1b:58:ee:71:64:45:56:b5:b3:fd:38: 54:db:b9:48:80:1b:35:41:90:5b:6b:2f:24:15:c2: a7:c8:c4:19:93:34:09:6c:49:e0:7e:25:6c:ed:22: ce:e6:99:ec:54:db:84:2e:e0:8f:69:f7:2c:c6:68: fa:06:ad:e1:c0:4d:52:44:88:46:1e:a8:b8:4d:c9: 41:8a:9e:da:f9:fd:24:55:fb:53:14:20:a9:cd:8b: 30:6f:19:1a:82:6c:0d:5e:22:d2:6f:f5:16:77:3c: 32:83:10:9a:5f:de:ba:e0:0d:55:de:b0:94:56:51: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:30:54:BB:AF:58:B9:00:FB:4E:40:31:4D:E3:1D:49:C6:79:21:CC X509v3 Authority Key Identifier: keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/yjBUu69YuQD7TkAxTeMdScZ5Icw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.232.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:ab:55:bd:29:f6:ba:1e:ae:33:fd:01:e2:6f:a0:52:6f:eb: 6a:41:5a:54:d9:96:aa:34:c3:bb:5e:a9:51:8b:6f:f2:33:17: 22:48:31:42:92:db:00:0e:25:7c:3d:62:57:51:9e:4c:27:65: 92:65:67:4f:d2:c5:e2:3d:f9:b5:d6:41:bc:16:dc:70:48:cd: 2d:ad:49:a4:7e:0d:cb:6d:e1:28:e4:07:f0:e5:2e:55:7c:64: 81:cd:08:7d:ef:f7:9c:dd:22:bf:33:c2:83:d9:dc:13:04:b8: b6:8c:ce:93:b7:8d:c0:2c:ae:ec:35:f0:84:2e:c2:96:d8:aa: ba:07:6c:d4:e2:dc:d8:38:46:fb:7e:bd:f7:a6:b6:52:49:d5: 3d:67:e3:a9:d8:35:bf:32:06:98:65:61:01:a9:60:4e:74:98: ec:15:cc:20:7f:19:17:22:08:7e:da:35:5c:c1:f1:a8:48:ae: c0:ff:08:50:df:ea:4e:54:f3:f8:40:17:b9:e0:40:53:d0:32: 4a:da:87:80:28:40:2d:db:84:ba:d9:cd:d2:92:3e:44:7f:d9: 81:4d:fc:05:d0:83:73:77:dc:f0:05:2d:02:11:68:0f:2e:a6: 7c:5b:17:38:9e:65:b9:32:de:5a:a4:b7:31:7b:83:ee:27:7f: b6:78:54:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Era9yXrgOWwWydcDgbvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZGEzZDMyNTk3YjUwNTE5MzJmNmNhOTE4MmQ0YjlhMmZi MDViNTYwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTMwNTRiYmFmNThiOTAwZmI0ZTQwMzE0ZGUzMWQ0OWM2NzkyMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdIFX6Vyo5u99n5ROpGo1GjlC09c BADjh5PtvIYQohrvk2rMrfvBilYhdeE4Xv74Y6PKcvJdrebrDTsEkSUfbyQdkEQt SKyPvu2QOdnUi2Bp90VQhIavdZElRhwfptLqzznXi384jMj4oIsSZTP0Rw32nf8M dB6uxfKJdpohO6EutSC4BbLVWwjbG1jucWRFVrWz/ThU27lIgBs1QZBbay8kFcKn yMQZkzQJbEngfiVs7SLO5pnsVNuELuCPafcsxmj6Bq3hwE1SRIhGHqi4TclBip7a +f0kVftTFCCpzYswbxkagmwNXiLSb/UWdzwygxCaX9664A1V3rCUVlFutQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMowVLuvWLkA+05AMU3jHUnGeSHMMB8GA1UdIwQY MBaAFFHaPTJZe1BRky9sqRgtS5ovsFtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYt MDBhNTQ5ZTFiMWQ3LzEveWpCVXU2OVl1UUQ3VGtBeFRlTWRTY1o1SWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYtMDBhNTQ5ZTFiMWQ3 LzEvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbLoMA0G CSqGSIb3DQEBCwUAA4IBAQALq1W9Kfa6Hq4z/QHib6BSb+tqQVpU2ZaqNMO7XqlR i2/yMxciSDFCktsADiV8PWJXUZ5MJ2WSZWdP0sXiPfm11kG8FtxwSM0trUmkfg3L beEo5Afw5S5VfGSBzQh97/ec3SK/M8KD2dwTBLi2jM6Tt43ALK7sNfCELsKW2Kq6 B2zU4tzYOEb7fr33prZSSdU9Z+Op2DW/MgaYZWEBqWBOdJjsFcwgfxkXIgh+2jVc wfGoSK7A/whQ3+pOVPP4QBe54EBT0DJK2oeAKEAt24S62c3Skj5Ef9mBTfwF0INz d9zwBS0CEWgPLqZ8Wxc4nmW5Mt5apLcxe4PuJ3+2eFRd -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:16 2026 by rpki-client