This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/YFuXlkN-MljNRVYZCMihnQz4RoU.roa File: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (raw, json) Hash identifier: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE= Subject key identifier: 60:5B:97:96:43:7E:32:58:CD:45:56:19:08:C8:A1:9D:0C:F8:46:85 Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9 Certificate serial: 019B7F83C3460F937BCFA8AA7F43A7DA8E90 Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/YFuXlkN-MljNRVYZCMihnQz4RoU.roa Signing time: Fri 02 Jan 2026 16:21:40 +0000 ROA not before: Fri 02 Jan 2026 16:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 193.23.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c3:46:0f:93:7b:cf:a8:aa:7f:43:a7:da:8e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9 Validity Not Before: Jan 2 16:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=605b9796437e3258cd45561908c8a19d0cf84685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:00:5d:12:fb:d8:b9:1f:ab:ae:b6:35:10: 05:fe:6f:5c:d5:48:ed:ad:6f:59:cd:7c:27:2c:d8: 98:e6:fe:1b:7e:af:97:2c:20:4e:8a:ef:e3:54:98: 0e:43:21:07:4c:d7:29:40:ad:3f:04:bf:c4:e0:bc: 56:ce:9c:87:3b:74:99:9d:c6:f2:9a:af:ca:ca:9b: eb:17:fd:bc:bd:f2:28:38:54:95:b3:21:ea:62:a2: eb:ca:7a:37:47:e5:e3:1f:b6:d3:c4:3b:e5:f0:bd: b9:df:f2:62:d0:2b:4b:43:9e:b6:22:fd:42:8c:f0: ca:8f:aa:9c:8f:cd:be:45:6c:1f:e7:26:ac:9c:7d: 1d:65:5b:dc:20:38:8b:de:f9:c3:e7:1a:9d:50:2e: c8:a7:8f:fc:46:9e:82:19:74:8a:7f:d3:1a:78:e0: 5d:85:71:97:ac:8b:e9:5a:24:d0:79:76:47:63:8e: 09:d3:40:25:58:15:39:fe:78:8f:8b:84:ca:a2:2d: ee:e8:c3:f1:59:e8:cc:d7:76:19:d5:87:d1:da:1b: a2:cf:9c:a6:95:27:2d:30:e6:3b:cc:17:ad:fe:98: 9f:f0:2e:f1:4b:91:44:ab:0a:d7:1a:c5:28:54:f9: c5:12:35:0b:ea:79:77:31:45:a7:b4:5a:49:ac:ba: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5B:97:96:43:7E:32:58:CD:45:56:19:08:C8:A1:9D:0C:F8:46:85 X509v3 Authority Key Identifier: keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/YFuXlkN-MljNRVYZCMihnQz4RoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.168.0/22 Signature Algorithm: sha256WithRSAEncryption 41:cd:32:d2:9c:eb:a9:bb:a5:98:7b:14:6c:c6:93:03:0e:c3: 82:3e:05:84:3b:70:7d:37:40:40:64:c4:9e:eb:d5:8d:81:ae: 94:24:eb:5a:c4:18:f5:4b:66:67:6c:3d:fa:c6:bd:0e:e2:a2: 88:20:3c:92:5c:c3:6b:e6:49:77:77:3c:43:70:e4:44:95:16: 87:f9:fa:ef:72:d8:6f:dd:17:3b:5e:b9:6f:50:b6:94:e1:ee: 98:e7:52:c5:4b:8e:f6:e0:62:9a:01:58:be:30:9f:56:26:a4: 8a:4c:e5:8a:83:2a:26:62:94:67:b5:d2:21:c5:8a:1f:42:2b: a9:11:16:42:8a:62:7f:28:87:ea:01:18:d6:43:f6:34:65:44: b0:87:5f:1c:3c:e3:19:b5:0f:b6:ab:70:be:6a:f2:cc:b0:38: 50:01:bc:08:b7:d6:0c:99:99:6c:f4:55:e2:3c:e0:dc:6f:83: f6:96:f0:e7:8c:96:3a:a2:8e:a8:39:51:e5:45:46:7d:11:20: 46:e6:78:75:d2:74:53:d0:36:46:f5:5c:56:fc:3d:88:2c:24: 31:35:89:a0:c8:7d:bf:f5:86:da:11:7b:29:8b:1c:1e:9f:c6: 69:7c:30:19:c8:5e:e4:6b:d2:dd:d3:84:d0:07:e7:4e:93:b2: ef:c8:b6:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g8NGD5N7z6iqf0On2o6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2 NGJmYzkwHhcNMjYwMTAyMTYyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDViOTc5NjQzN2UzMjU4Y2Q0NTU2MTkwOGM4YTE5ZDBjZjg0Njg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw08AXRL72Lkfq662NRAF/m9c1Ujt rW9ZzXwnLNiY5v4bfq+XLCBOiu/jVJgOQyEHTNcpQK0/BL/E4LxWzpyHO3SZncby mq/KypvrF/28vfIoOFSVsyHqYqLryno3R+XjH7bTxDvl8L253/Ji0CtLQ562Iv1C jPDKj6qcj82+RWwf5yasnH0dZVvcIDiL3vnD5xqdUC7Ip4/8Rp6CGXSKf9MaeOBd hXGXrIvpWiTQeXZHY44J00AlWBU5/niPi4TKoi3u6MPxWejM13YZ1YfR2huiz5ym lSctMOY7zBet/pif8C7xS5FEqwrXGsUoVPnFEjUL6nl3MUWntFpJrLrECQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBbl5ZDfjJYzUVWGQjIoZ0M+EaFMB8GA1UdIwQY MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt ZWNjZDY2NWYxZjAzLzEvWUZ1WGxrTi1NbGpOUlZZWkNNaWhuUXo0Um9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwReoMA0G CSqGSIb3DQEBCwUAA4IBAQBBzTLSnOupu6WYexRsxpMDDsOCPgWEO3B9N0BAZMSe 69WNga6UJOtaxBj1S2ZnbD36xr0O4qKIIDySXMNr5kl3dzxDcORElRaH+frvcthv 3Rc7XrlvULaU4e6Y51LFS4724GKaAVi+MJ9WJqSKTOWKgyomYpRntdIhxYofQiup ERZCimJ/KIfqARjWQ/Y0ZUSwh18cPOMZtQ+2q3C+avLMsDhQAbwIt9YMmZls9FXi PODcb4P2lvDnjJY6oo6oOVHlRUZ9ESBG5nh10nRT0DZG9VxW/D2ILCQxNYmgyH2/ 9YbaEXspixwen8ZpfDAZyF7ka9Ld04TQB+dOk7LvyLZB -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:38 2026 by rpki-client