This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/yr7773JgZS-hoqRaLKVR30gkXMA.roa File: yr7773JgZS-hoqRaLKVR30gkXMA.roa (raw, json) Hash identifier: eoiybvDzfPEaKghr3+3isj8k5HkO1EDFC+psSZmz2v8= Subject key identifier: CA:BE:FB:EF:72:60:65:2F:A1:A2:A4:5A:2C:A5:51:DF:48:24:5C:C0 Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a Certificate serial: 019B7DCA904DB2AD354896FBBAE6CCC53FE9 Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/yr7773JgZS-hoqRaLKVR30gkXMA.roa Signing time: Fri 02 Jan 2026 08:19:45 +0000 ROA not before: Fri 02 Jan 2026 08:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216258 IP address blocks: 92.42.98.0/24 maxlen: 26 2a13:2140::/32 maxlen: 48 2a13:2141:1::/48 maxlen: 48 2a13:2141:2::/48 maxlen: 48 2a13:2142:1::/48 maxlen: 48 2a13:2142:2::/48 maxlen: 48 2a13:2143:1::/48 maxlen: 48 2a13:2144::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:90:4d:b2:ad:35:48:96:fb:ba:e6:cc:c5:3f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a Validity Not Before: Jan 2 08:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cabefbef7260652fa1a2a45a2ca551df48245cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:82:d9:2f:bf:56:cb:c8:a7:52:b8:fa:19: 35:64:ed:8e:b9:9d:2c:1d:26:ce:0d:78:b5:c2:fa: a6:40:43:6a:e9:6c:66:92:4b:34:40:14:f3:3c:cb: 98:23:1b:41:01:6d:12:49:38:45:2a:32:52:27:6d: 33:59:db:91:19:fe:9e:0f:2c:9a:72:f5:9b:1d:bf: 0f:ac:54:05:b2:cc:dd:5b:c5:0c:81:29:b4:f1:60: 5e:bc:df:2a:e7:e6:1b:bb:4b:b8:2d:0f:23:be:92: e0:02:73:d5:04:72:9a:9d:30:97:85:3d:51:c5:05: 1d:9d:6c:6f:3a:0b:51:ef:e5:18:6f:e8:34:66:08: 82:61:af:23:41:24:40:55:8d:e3:cc:79:5b:49:50: 86:5c:be:40:cf:56:9d:29:1d:18:b2:60:99:1f:9c: 61:12:5b:07:e6:b5:3e:78:87:f2:74:44:db:8a:30: a1:a0:28:d0:42:ad:94:2f:7a:0e:29:01:c4:34:69: c6:4f:f7:13:23:c5:f3:ce:dc:02:f0:d7:32:f7:cd: 0d:78:73:65:a8:9f:51:5f:21:36:5c:62:0e:ca:54: fa:a4:aa:8b:f8:98:10:44:78:17:af:75:f3:21:f7: 27:84:76:de:22:da:38:cf:23:15:26:79:3d:14:d8: d2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BE:FB:EF:72:60:65:2F:A1:A2:A4:5A:2C:A5:51:DF:48:24:5C:C0 X509v3 Authority Key Identifier: keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/yr7773JgZS-hoqRaLKVR30gkXMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.98.0/24 IPv6: 2a13:2140::/32 2a13:2141:1::-2a13:2141:2:ffff:ffff:ffff:ffff:ffff 2a13:2142:1::-2a13:2142:2:ffff:ffff:ffff:ffff:ffff 2a13:2143:1::/48 2a13:2144::/32 Signature Algorithm: sha256WithRSAEncryption 82:3c:e8:71:3e:ef:d2:8a:6f:9b:d5:39:4a:b3:cc:57:70:53: 32:1a:3c:e2:40:f9:66:8d:53:7f:62:a6:e6:f5:c1:79:a3:4c: 19:e6:1a:ff:51:2d:20:6b:3c:4b:ec:ac:7e:e8:10:50:e3:0f: 18:8f:89:30:23:6c:83:6b:ce:45:2a:30:80:9c:f4:44:7e:1c: 6a:78:67:78:8f:e8:20:25:c8:e8:b1:c2:fa:2d:d8:32:0b:f4: c0:97:34:84:53:1a:1c:7b:cc:9d:27:6d:75:f3:03:6f:4a:bc: 8f:99:ae:ba:f5:63:46:c8:6e:0e:ae:b6:2b:9a:c3:e5:a4:5f: d7:41:ee:16:3e:55:39:86:8d:6f:f4:13:52:0c:2d:80:3c:71: 9f:c1:ed:23:49:23:10:cf:97:9a:41:6b:8d:03:95:43:f3:9b: 02:19:0a:c4:68:77:78:62:0c:8a:df:05:c5:eb:c8:e7:66:dc: cb:f2:20:1b:90:78:21:72:b2:c4:3d:44:7f:79:d4:9d:17:00: 32:cc:d3:0f:04:51:fa:64:ca:b4:cf:b9:43:66:1c:34:e3:86: d6:73:81:2b:63:47:22:68:a6:0d:f6:73:20:91:0a:6e:af:2e: b2:37:7a:7d:9b:b0:ec:f0:2e:25:0e:30:19:9b:f8:8a:5c:32: 38:b2:47:1b -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZt9ypBNsq01SJb7uubMxT/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU2MTllZjk2YTNhZmQwMmZjMmQ1ZDAwM2E5NDdlNGQy ZDU5MGEwHhcNMjYwMTAyMDgxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWJlZmJlZjcyNjA2NTJmYTFhMmE0NWEyY2E1NTFkZjQ4MjQ1Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc+C2S+/VsvIp1K4+hk1ZO2OuZ0s HSbODXi1wvqmQENq6Wxmkks0QBTzPMuYIxtBAW0SSThFKjJSJ20zWduRGf6eDyya cvWbHb8PrFQFsszdW8UMgSm08WBevN8q5+Ybu0u4LQ8jvpLgAnPVBHKanTCXhT1R xQUdnWxvOgtR7+UYb+g0ZgiCYa8jQSRAVY3jzHlbSVCGXL5Az1adKR0YsmCZH5xh ElsH5rU+eIfydETbijChoCjQQq2UL3oOKQHENGnGT/cTI8XzztwC8Ncy980NeHNl qJ9RXyE2XGIOylT6pKqL+JgQRHgXr3XzIfcnhHbeIto4zyMVJnk9FNjSewIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFMq+++9yYGUvoaKkWiylUd9IJFzAMB8GA1UdIwQY MBaAFBnuYZ75ajr9AvwtXQA6lH5NLVkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEt ZWIyNzdhMjBmMjdmLzEveXI3NzczSmdaUy1ob3FSYUxLVlIzMGdrWE1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEtZWIyNzdhMjBmMjdm LzEvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTAMBAIAATAGAwQAXCpiMEUE AgACMD8DBQAqEyFAMBIDBwAqEyFBAAEDBwAqEyFBAAIwEgMHACoTIUIAAQMHACoT IUIAAgMHACoTIUMAAQMFACoTIUQwDQYJKoZIhvcNAQELBQADggEBAII86HE+79KK b5vVOUqzzFdwUzIaPOJA+WaNU39ipub1wXmjTBnmGv9RLSBrPEvsrH7oEFDjDxiP iTAjbINrzkUqMICc9ER+HGp4Z3iP6CAlyOixwvot2DIL9MCXNIRTGhx7zJ0nbXXz A29KvI+Zrrr1Y0bIbg6utiuaw+WkX9dB7hY+VTmGjW/0E1IMLYA8cZ/B7SNJIxDP l5pBa40DlUPzmwIZCsRod3hiDIrfBcXryOdm3MvyIBuQeCFyssQ9RH951J0XADLM 0w8EUfpkyrTPuUNmHDTjhtZzgStjRyJopg32cyCRCm6vLrI3en2bsOzwLiUOMBmb +IpcMjiyRxs= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:21 2026 by rpki-client