This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/ye9CJv-gRnNlmaYw7SD_tgaq9eI.roa File: ye9CJv-gRnNlmaYw7SD_tgaq9eI.roa (raw, json) Hash identifier: joTKLvlxOsVk56Ag3bqf527kK8bL1jJHNadx5Q0xskM= Subject key identifier: C9:EF:42:26:FF:A0:46:73:65:99:A6:30:ED:20:FF:B6:06:AA:F5:E2 Certificate issuer: /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249 Certificate serial: 019B797EDE171447A8F95CF2940532985545 Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/ye9CJv-gRnNlmaYw7SD_tgaq9eI.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210617 IP address blocks: 193.36.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:de:17:14:47:a8:f9:5c:f2:94:05:32:98:55:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9ef4226ffa046736599a630ed20ffb606aaf5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:27:f2:f5:d3:f9:f2:5a:73:07:7a:d1:fb: b0:e9:b5:91:96:79:5f:79:cb:ae:e3:d8:ab:e2:7e: 2b:7b:e1:51:c2:b1:93:fd:c8:87:48:cd:64:cd:80: 36:37:f8:5e:51:38:5b:14:49:e1:96:c8:b6:14:24: e3:d9:a3:49:b6:fa:a5:6a:f2:b1:f0:b0:4c:4a:dc: 24:3e:a1:49:ad:bf:32:04:ea:92:36:da:7d:e6:5d: 5b:22:9c:ac:6e:fb:35:14:e8:81:f2:ee:8f:c0:94: 99:87:84:11:72:ca:fc:8d:18:c0:e4:83:06:88:ca: e5:8b:63:e9:10:f1:49:97:2c:57:c3:ed:53:2a:4e: 8d:a3:ce:70:fc:12:d0:ce:e4:75:de:71:e5:13:ab: 5d:15:60:61:a6:f4:2d:a9:84:1f:f9:08:7f:70:0c: 3b:85:f7:dc:90:f4:45:68:d6:ff:04:cf:98:54:d6: 8e:f6:67:be:1c:f9:f6:4b:73:ba:b5:35:12:b2:9e: ad:b8:04:89:c9:21:9b:53:f3:84:44:7b:a2:6d:ce: ba:5f:13:7a:f6:cb:c1:1c:ef:a0:fc:10:dd:f5:00: d0:85:c7:99:2f:5e:ca:63:6c:c7:2f:ed:45:85:60: 9b:0e:ee:91:2d:40:08:78:0f:8e:82:f4:47:f0:bc: 1b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EF:42:26:FF:A0:46:73:65:99:A6:30:ED:20:FF:B6:06:AA:F5:E2 X509v3 Authority Key Identifier: keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/ye9CJv-gRnNlmaYw7SD_tgaq9eI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.107.0/24 Signature Algorithm: sha256WithRSAEncryption 00:04:61:81:6a:3d:d3:8b:44:a5:61:c6:2e:ea:22:d2:24:3f: 8f:85:57:f2:23:2c:53:49:c4:b4:47:a5:c7:d0:2d:72:fb:05: 7f:a7:8f:ad:90:b5:8d:1b:5d:d3:94:a9:80:a9:42:6f:38:f0: 8d:18:fe:07:a7:e0:48:97:73:3c:37:b1:58:2e:b3:75:c9:f4: ea:ea:e1:c1:07:02:df:d4:b4:cf:7f:06:b0:ce:fe:e6:1f:22: 47:1f:3b:af:34:93:e3:de:88:de:06:9a:a6:37:0e:3b:2c:71: 5f:ab:4d:80:a2:13:22:d9:19:5a:e8:29:7a:80:59:a8:0a:54: 03:7d:31:c8:dc:b7:fb:58:05:2f:8d:0b:96:00:fd:d6:ff:ee: 19:6b:95:03:c4:65:27:49:23:d4:bf:4a:e8:04:c5:cf:e3:e9: 66:81:0d:61:ac:c9:30:c0:24:02:80:32:d8:44:5f:9e:c5:d4: 82:6a:45:95:c0:bc:2e:61:fd:3b:94:36:4b:77:af:40:46:7b: bb:96:2e:16:4c:fe:20:4b:e4:87:93:90:05:62:03:95:b8:60: 27:8c:2e:36:b4:f2:05:66:8e:96:77:a4:72:46:ce:f2:cf:9b: 91:5a:99:5b:09:f6:34:5d:15:b9:29:19:38:e4:76:99:38:65: 5d:31:c3:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ft4XFEeo+VzylAUymFVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTZmZTE0Yjg3NTVkOWZmNzQ2NmZhOTdjNGE1NWY3MzUx ODMyNDkwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWVmNDIyNmZmYTA0NjczNjU5OWE2MzBlZDIwZmZiNjA2YWFmNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBYn8vXT+fJacwd60fuw6bWRlnlf ecuu49ir4n4re+FRwrGT/ciHSM1kzYA2N/heUThbFEnhlsi2FCTj2aNJtvqlavKx 8LBMStwkPqFJrb8yBOqSNtp95l1bIpysbvs1FOiB8u6PwJSZh4QRcsr8jRjA5IMG iMrli2PpEPFJlyxXw+1TKk6No85w/BLQzuR13nHlE6tdFWBhpvQtqYQf+Qh/cAw7 hffckPRFaNb/BM+YVNaO9me+HPn2S3O6tTUSsp6tuASJySGbU/OERHuibc66XxN6 9svBHO+g/BDd9QDQhceZL17KY2zHL+1FhWCbDu6RLUAIeA+OgvRH8LwbSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnvQib/oEZzZZmmMO0g/7YGqvXiMB8GA1UdIwQY MBaAFLvm/hS4dV2f90ZvqXxKVfc1GDJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMt ODdhNjMzM2Q2ZTY0LzEveWU5Q0p2LWdSbk5sbWFZdzdTRF90Z2FxOWVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMtODdhNjMzM2Q2ZTY0 LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSRrMA0G CSqGSIb3DQEBCwUAA4IBAQAABGGBaj3Ti0SlYcYu6iLSJD+PhVfyIyxTScS0R6XH 0C1y+wV/p4+tkLWNG13TlKmAqUJvOPCNGP4Hp+BIl3M8N7FYLrN1yfTq6uHBBwLf 1LTPfwawzv7mHyJHHzuvNJPj3ojeBpqmNw47LHFfq02AohMi2Rla6Cl6gFmoClQD fTHI3Lf7WAUvjQuWAP3W/+4Za5UDxGUnSSPUv0roBMXP4+lmgQ1hrMkwwCQCgDLY RF+exdSCakWVwLwuYf07lDZLd69ARnu7li4WTP4gS+SHk5AFYgOVuGAnjC42tPIF Zo6Wd6RyRs7yz5uRWplbCfY0XRW5KRk45HaZOGVdMcNZ -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:26 2026 by rpki-client