This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/yn6euPUsjq8bRXFpjTNGPdRM13Y.roa File: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (raw, json) Hash identifier: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw= Subject key identifier: CA:7E:9E:B8:F5:2C:8E:AF:1B:45:71:69:8D:33:46:3D:D4:4C:D7:76 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 019B7F83555BF52D178A750710C7934C2BD1 Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/yn6euPUsjq8bRXFpjTNGPdRM13Y.roa Signing time: Fri 02 Jan 2026 16:21:12 +0000 ROA not before: Fri 02 Jan 2026 16:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.205.0/24 maxlen: 24 2001:7f8:111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:55:5b:f5:2d:17:8a:75:07:10:c7:93:4c:2b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Jan 2 16:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca7e9eb8f52c8eaf1b4571698d33463dd44cd776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:da:02:3c:7c:8c:bc:0b:ae:4a:db:c0:f0: 5d:e0:d2:a9:66:09:29:78:80:7e:cb:71:f4:74:5e: 12:29:99:43:19:e8:3b:50:68:8e:d1:62:41:87:56: 62:2d:81:b0:8f:f7:de:f6:1b:19:d4:e3:d0:37:f1: 99:be:12:8d:6a:71:a9:dd:89:59:46:e5:f4:ab:e7: 6f:b0:d2:fc:0d:b7:c6:fe:5f:cc:b2:96:bf:92:c3: cf:2e:23:96:82:8d:cd:87:d7:67:59:a4:22:2a:ae: fc:f9:8a:30:45:43:cc:84:01:34:3b:d9:d5:d5:b1: e5:9e:93:2f:01:cf:c6:b6:e3:c2:a8:30:35:34:56: b8:62:90:81:b4:3e:76:64:cb:af:4e:cb:41:a9:89: af:ae:34:c1:da:90:8a:3b:f9:9f:4d:36:59:c0:01: ee:ca:82:5e:be:0d:c9:0d:61:0c:fc:c4:8c:ad:0f: 5a:b5:c6:d5:f6:86:3c:73:89:43:31:c4:ab:53:71: de:dd:f4:b2:df:55:11:96:fc:52:8b:08:3d:74:3b: 95:37:05:c0:37:aa:a6:99:7c:2f:0b:1d:ff:0f:0f: 27:f4:69:8e:1e:7e:a8:24:6d:14:fc:50:ec:56:34: 5f:59:a3:5d:5c:1a:81:6a:d9:9a:90:6b:24:f1:2a: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7E:9E:B8:F5:2C:8E:AF:1B:45:71:69:8D:33:46:3D:D4:4C:D7:76 X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/yn6euPUsjq8bRXFpjTNGPdRM13Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.205.0/24 IPv6: 2001:7f8:111::/48 Signature Algorithm: sha256WithRSAEncryption 5f:75:6e:f5:d6:99:05:c5:7f:2c:22:50:8c:4f:76:69:73:34: 6b:49:b9:da:d3:d1:53:0b:18:ee:a5:a5:9d:cf:33:0d:69:24: e0:9d:46:c2:ce:6d:e2:19:c5:12:63:33:3d:0f:0f:65:25:d5: 17:1e:f3:ea:af:55:e9:61:41:63:a3:a6:d8:26:1a:6e:13:19: 43:11:28:c3:e3:b2:1a:70:21:dc:60:5f:9a:87:ee:fa:10:98: e4:98:ab:a2:98:41:18:4f:85:a2:66:bf:75:31:80:82:c9:ca: 5a:2a:f8:9c:32:5b:c5:f6:d1:d9:9c:91:57:d8:45:ef:3e:f6: c9:77:91:fb:cf:84:c0:82:16:b4:e3:f8:e7:ad:78:52:54:8d: 2e:fb:5e:4d:08:8c:46:21:45:e0:2f:d1:ba:c8:48:05:e8:29: 8f:b0:d2:9c:c3:5a:75:33:10:e4:38:44:8e:4d:44:3e:a7:4a: 50:eb:e1:b0:ea:a1:71:db:42:1c:f8:28:d7:c3:c9:89:e1:29: a7:34:c1:62:ec:65:7e:d6:ae:de:a0:c5:ec:91:22:ed:5a:6b: 18:86:e0:50:be:44:3d:ec:e9:1b:53:e3:a5:4f:93:3f:d9:f8: 86:29:81:5b:52:47:ce:42:15:e2:8b:05:93:6c:61:2a:56:8d: e8:ee:8a:ee -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/g1Vb9S0XinUHEMeTTCvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYwMTAyMTYyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTdlOWViOGY1MmM4ZWFmMWI0NTcxNjk4ZDMzNDYzZGQ0NGNkNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8XaAjx8jLwLrkrbwPBd4NKpZgkp eIB+y3H0dF4SKZlDGeg7UGiO0WJBh1ZiLYGwj/fe9hsZ1OPQN/GZvhKNanGp3YlZ RuX0q+dvsNL8DbfG/l/Mspa/ksPPLiOWgo3Nh9dnWaQiKq78+YowRUPMhAE0O9nV 1bHlnpMvAc/GtuPCqDA1NFa4YpCBtD52ZMuvTstBqYmvrjTB2pCKO/mfTTZZwAHu yoJevg3JDWEM/MSMrQ9atcbV9oY8c4lDMcSrU3He3fSy31URlvxSiwg9dDuVNwXA N6qmmXwvCx3/Dw8n9GmOHn6oJG0U/FDsVjRfWaNdXBqBatmakGsk8Sov1wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMp+nrj1LI6vG0VxaY0zRj3UTNd2MB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEveW42ZXVQVXNqcThiUlhGcGpUTkdQZFJNMTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQHNMA8E AgACMAkDBwAgAQf4AREwDQYJKoZIhvcNAQELBQADggEBAF91bvXWmQXFfywiUIxP dmlzNGtJudrT0VMLGO6lpZ3PMw1pJOCdRsLObeIZxRJjMz0PD2Ul1Rce8+qvVelh QWOjptgmGm4TGUMRKMPjshpwIdxgX5qH7voQmOSYq6KYQRhPhaJmv3UxgILJyloq +JwyW8X20dmckVfYRe8+9sl3kfvPhMCCFrTj+OeteFJUjS77Xk0IjEYhReAv0brI SAXoKY+w0pzDWnUzEOQ4RI5NRD6nSlDr4bDqoXHbQhz4KNfDyYnhKac0wWLsZX7W rt6gxeyRIu1aaxiG4FC+RD3s6RtT46VPkz/Z+IYpgVtSR85CFeKLBZNsYSpWjeju iu4= -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:35 2026 by rpki-client