This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/JY81usnotweZyZdSahI8RyYPcPQ.roa File: JY81usnotweZyZdSahI8RyYPcPQ.roa (raw, json) Hash identifier: a+Ax7M2k213Mauckfl1KLZA2jvBbE/xfAhO6740Uqk8= Subject key identifier: 25:8F:35:BA:C9:E8:B7:07:99:C9:97:52:6A:12:3C:47:26:0F:70:F4 Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a Certificate serial: 019B7A5B39E1690CAEAAE53AAE22693AC8E1 Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/JY81usnotweZyZdSahI8RyYPcPQ.roa Signing time: Thu 01 Jan 2026 16:19:17 +0000 ROA not before: Thu 01 Jan 2026 16:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201463 IP address blocks: 128.127.8.0/22 maxlen: 24 193.8.68.0/22 maxlen: 24 194.55.42.0/24 maxlen: 24 194.56.168.0/22 maxlen: 22 194.56.172.0/23 maxlen: 23 2a07:ce40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:39:e1:69:0c:ae:aa:e5:3a:ae:22:69:3a:c8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a Validity Not Before: Jan 1 16:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=258f35bac9e8b70799c997526a123c47260f70f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:53:97:c4:1c:83:2c:df:56:49:04:e1:e1: 0a:88:68:b6:6d:94:21:60:b9:8e:c2:3e:c1:cc:a5: 22:f4:7b:cc:10:ab:e2:6f:b8:24:9c:c2:84:fb:4f: 24:9b:3c:b9:89:65:56:6d:e7:6f:b5:e4:69:0b:f8: 6c:c9:13:5d:2e:72:5b:1b:14:8d:2e:e8:a4:fa:30: 00:80:bd:24:e5:06:85:58:58:0f:4e:50:ac:ab:0b: 51:9c:b9:2e:b4:1a:de:b4:be:98:06:30:61:80:c6: fc:bf:72:53:ae:da:e1:59:55:a2:4d:26:e3:d1:f2: cf:fa:c4:06:58:f3:1e:66:e7:7e:83:dd:0c:0e:f7: cf:41:e1:df:5c:9b:60:48:44:cb:a0:7c:89:0a:cb: 0a:c3:92:a2:e6:be:3e:dc:12:dd:48:cb:a6:2c:08: d8:c9:bd:ae:35:f4:68:23:7d:69:c9:a4:f6:af:f2: 64:9b:8a:ce:7a:52:8b:df:8a:36:37:94:89:7b:a9: 58:40:cc:23:cc:3d:e3:c9:67:c0:b4:79:cf:50:54: 4c:18:40:db:ef:c0:b2:89:9a:96:6b:9b:cd:29:bf: ba:a3:e1:99:6e:0e:e4:ff:ed:76:4b:be:5d:27:f3: ee:67:c0:f5:49:e9:92:e4:34:b9:19:ca:de:24:0f: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8F:35:BA:C9:E8:B7:07:99:C9:97:52:6A:12:3C:47:26:0F:70:F4 X509v3 Authority Key Identifier: keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/JY81usnotweZyZdSahI8RyYPcPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.127.8.0/22 193.8.68.0/22 194.55.42.0/24 194.56.168.0-194.56.173.255 IPv6: 2a07:ce40::/29 Signature Algorithm: sha256WithRSAEncryption 90:d2:d2:e1:c1:7b:25:90:17:fb:c8:c2:f0:68:a0:a8:69:d0: 4a:15:63:ae:dc:a8:43:f3:3a:9e:e9:19:8b:12:83:1d:7e:65: a7:7f:49:2d:ba:e2:20:76:5b:58:0e:5f:da:44:e4:b2:f0:b3: dc:d6:7e:87:04:35:aa:73:30:87:c2:f7:96:f7:60:93:1d:15: 9f:14:16:95:bf:93:94:60:c1:cb:5d:f9:fa:17:77:7a:25:74: 74:89:c3:ea:ca:69:d2:06:ed:7a:6e:e2:37:f5:23:3d:db:d5: fb:22:40:a8:7d:be:cb:70:d4:6a:bb:bf:fd:ee:cf:8c:fa:88: 44:21:91:0c:4b:96:88:75:4f:ad:f7:89:40:7c:ec:2f:41:e2: 0a:7a:e7:9e:c2:76:a8:58:43:3a:e4:56:83:9f:7c:bb:13:14: 05:fd:c7:bc:84:3f:6b:4d:8e:e9:ff:8c:dd:a4:7f:7b:ce:78: 83:4a:ab:9b:8c:30:d9:4b:d7:ca:82:b4:ff:81:08:07:f0:5f: f7:5f:65:fe:55:a4:b0:b0:f3:fb:fc:e9:db:56:6d:81:79:a9: 8f:46:d6:14:38:36:b0:0d:4f:e9:c8:ac:13:70:c5:8a:85:2a: 35:87:d3:b4:73:1a:11:22:d3:9f:5e:ea:77:8a:58:d5:ba:04: 9b:a4:97:9a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt6WznhaQyuquU6riJpOsjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTVkNWMwY2QyMTQ2YmFhZmU4YWE2YjhiOWFhN2NlYjZl NDE3NWEwHhcNMjYwMTAxMTYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNThmMzViYWM5ZThiNzA3OTljOTk3NTI2YTEyM2M0NzI2MGY3MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfhTl8QcgyzfVkkE4eEKiGi2bZQh YLmOwj7BzKUi9HvMEKvib7gknMKE+08kmzy5iWVWbedvteRpC/hsyRNdLnJbGxSN Luik+jAAgL0k5QaFWFgPTlCsqwtRnLkutBretL6YBjBhgMb8v3JTrtrhWVWiTSbj 0fLP+sQGWPMeZud+g90MDvfPQeHfXJtgSETLoHyJCssKw5Ki5r4+3BLdSMumLAjY yb2uNfRoI31pyaT2r/Jkm4rOelKL34o2N5SJe6lYQMwjzD3jyWfAtHnPUFRMGEDb 78CyiZqWa5vNKb+6o+GZbg7k/+12S75dJ/PuZ8D1SemS5DS5GcreJA8eOwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFCWPNbrJ6LcHmcmXUmoSPEcmD3D0MB8GA1UdIwQY MBaAFMgV1cDNIUa6r+iqa4uap8625BdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJYVndNMGhScnF2Nktwcmk1cW56cmJrRjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wZWVjZWYtYWU4Zi00YmY5LWFiNWUt NTI0NzY0YTQwZTIyLzEvSlk4MXVzbm90d2VaeVpkU2FoSThSeVlQY1BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wZWVjZWYtYWU4Zi00YmY5LWFiNWUtNTI0NzY0YTQwZTIy LzEveUJYVndNMGhScnF2Nktwcmk1cW56cmJrRjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCgH8IAwQC wQhEAwQAwjcqMAwDBAPCOKgDBAHCOKwwDQQCAAIwBwMFAyoHzkAwDQYJKoZIhvcN AQELBQADggEBAJDS0uHBeyWQF/vIwvBooKhp0EoVY67cqEPzOp7pGYsSgx1+Zad/ SS264iB2W1gOX9pE5LLws9zWfocENapzMIfC95b3YJMdFZ8UFpW/k5Rgwctd+foX d3oldHSJw+rKadIG7Xpu4jf1Iz3b1fsiQKh9vstw1Gq7v/3uz4z6iEQhkQxLloh1 T633iUB87C9B4gp6557CdqhYQzrkVoOffLsTFAX9x7yEP2tNjun/jN2kf3vOeINK q5uMMNlL18qCtP+BCAfwX/dfZf5VpLCw8/v86dtWbYF5qY9G1hQ4NrANT+nIrBNw xYqFKjWH07RzGhEi059e6neKWNW6BJukl5o= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:22 2026 by rpki-client