This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa File: yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa (raw, json) Hash identifier: Yz2sZPO7RTS7G2x7CfUC5DUG1B3ygbMjzbaefkWF+54= Subject key identifier: C9:43:BE:6D:2C:9E:92:A1:33:91:28:85:71:36:F8:0D:B2:8D:67:FA Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0 Certificate serial: 019B7DCA28A46F0B36E113DC307F21BB45AE Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58238 IP address blocks: 194.33.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:28:a4:6f:0b:36:e1:13:dc:30:7f:21:bb:45:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0 Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c943be6d2c9e92a1339128857136f80db28d67fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:10:42:db:47:23:29:0c:13:23:0b:3b:01: 41:d6:9e:cd:cb:00:1b:b0:fd:d0:4f:97:ae:8b:34: 60:3a:ac:aa:5a:37:50:6f:c8:52:e6:fd:7d:b1:59: fe:6b:d8:97:10:e2:bb:34:62:a4:e9:35:11:b3:a3: 20:59:d0:ae:0a:bf:56:25:34:93:4b:a9:d0:76:2d: f0:a9:ee:72:3a:76:25:66:b7:a5:3b:31:15:10:3b: e5:17:f1:9c:c5:84:83:86:17:2f:f1:09:78:8e:74: 04:89:cd:71:1b:87:5e:87:70:c4:c1:b3:0e:d2:aa: 67:15:10:4d:16:6a:01:e0:a6:36:73:0b:e8:1a:72: 64:26:37:b8:74:55:6b:5e:93:ff:e3:8d:92:a6:ca: 97:57:bf:c9:17:ec:b6:05:eb:c0:2c:c5:4f:78:32: 6c:26:18:9b:8a:6f:b6:25:d1:0d:72:26:6e:3e:82: af:40:b6:14:9f:e2:74:7e:f9:46:a1:bc:92:7a:cb: a4:c1:64:39:fc:6b:b5:77:5f:48:89:b7:14:a5:ed: c7:bd:1f:5f:99:a1:17:e7:c4:84:4a:26:54:93:2a: 3f:aa:a7:ba:b6:76:2d:ab:cc:9e:f8:42:04:4f:30: 6c:30:51:5a:d8:00:12:c2:ea:f6:6d:0f:43:c2:b0: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:43:BE:6D:2C:9E:92:A1:33:91:28:85:71:36:F8:0D:B2:8D:67:FA X509v3 Authority Key Identifier: keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.48.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:da:e3:f8:9f:49:a8:1b:3a:59:77:f9:48:04:44:81:ad:36: 31:c8:af:68:1f:d5:c5:a8:ff:4a:ff:10:1c:5d:b0:8d:47:e0: e1:ac:c4:74:fe:e8:c6:61:c1:c9:4a:1c:d5:4e:13:e7:aa:7b: 46:a2:fc:55:d6:0e:97:b5:cf:7f:73:e3:a0:97:84:d7:7c:f7: ef:f6:17:11:b8:95:3d:ea:d7:ca:ab:96:6f:05:f8:1d:8e:50: 4e:d6:79:6a:e5:64:42:ab:13:40:9b:dc:12:2f:f1:fc:1a:ef: 6a:ef:e1:91:79:bc:20:2b:75:94:b7:91:57:f8:44:1f:0b:78: 6b:13:68:95:3f:25:6b:6f:a8:fb:e0:7b:6b:fc:8d:79:2f:45: 52:e1:1d:ea:4a:75:fd:50:73:f8:9d:fc:5f:2b:2a:bb:2b:e9: 7e:2a:a4:4d:c1:97:18:19:5c:5d:de:a1:de:cf:11:fa:7e:f0: 06:8b:ef:6e:2a:96:af:af:34:86:07:7f:c0:7b:74:9f:c4:de: ce:66:d0:c9:6c:d7:32:b3:af:3b:ab:01:7f:fa:61:44:70:b7: 55:58:bc:3e:2a:ab:14:d3:17:ef:77:a3:af:1d:04:7e:83:3e: 2b:08:ca:21:a7:55:22:c2:54:9d:8a:e7:3f:22:ec:ad:6d:a9: b4:7f:cf:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yiikbws24RPcMH8hu0WuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MGJjYzUwYTlhMzNiYTU2NTFlZmQxYWZlNDBiNmZkYjAy NTU2ZjAwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTQzYmU2ZDJjOWU5MmExMzM5MTI4ODU3MTM2ZjgwZGIyOGQ2N2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqoQQttHIykMEyMLOwFB1p7NywAb sP3QT5euizRgOqyqWjdQb8hS5v19sVn+a9iXEOK7NGKk6TURs6MgWdCuCr9WJTST S6nQdi3wqe5yOnYlZrelOzEVEDvlF/GcxYSDhhcv8Ql4jnQEic1xG4deh3DEwbMO 0qpnFRBNFmoB4KY2cwvoGnJkJje4dFVrXpP/442SpsqXV7/JF+y2BevALMVPeDJs Jhibim+2JdENciZuPoKvQLYUn+J0fvlGobySesukwWQ5/Gu1d19IibcUpe3HvR9f maEX58SESiZUkyo/qqe6tnYtq8ye+EIETzBsMFFa2AASwur2bQ9DwrCu0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMlDvm0snpKhM5EohXE2+A2yjWf6MB8GA1UdIwQY MBaAFCkLzFCpozulZR79Gv5Atv2wJVbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYt NzY5ODI0OTNlYTFhLzEveVVPLWJTeWVrcUV6a1NpRmNUYjREYktOWl9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYtNzY5ODI0OTNlYTFh LzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiEwMA0G CSqGSIb3DQEBCwUAA4IBAQAe2uP4n0moGzpZd/lIBESBrTYxyK9oH9XFqP9K/xAc XbCNR+DhrMR0/ujGYcHJShzVThPnqntGovxV1g6Xtc9/c+Ogl4TXfPfv9hcRuJU9 6tfKq5ZvBfgdjlBO1nlq5WRCqxNAm9wSL/H8Gu9q7+GRebwgK3WUt5FX+EQfC3hr E2iVPyVrb6j74Htr/I15L0VS4R3qSnX9UHP4nfxfKyq7K+l+KqRNwZcYGVxd3qHe zxH6fvAGi+9uKpavrzSGB3/Ae3SfxN7OZtDJbNcys687qwF/+mFEcLdVWLw+KqsU 0xfvd6OvHQR+gz4rCMohp1UiwlSdiuc/Iuytbam0f89U -----END CERTIFICATE-----Generated at Mon Jan 26 16:21:51 2026 by rpki-client