This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/flYk0fPODsZgJ_kgt0t_p5e4Jek.roa File: flYk0fPODsZgJ_kgt0t_p5e4Jek.roa (raw, json) Hash identifier: TPZ3Huyf7AyjT68mqQjBhrlPDV/pxjrdXJyjIrSWQ0M= Subject key identifier: 7E:56:24:D1:F3:CE:0E:C6:60:27:F9:20:B7:4B:7F:A7:97:B8:25:E9 Certificate issuer: /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7 Certificate serial: 019B7EA63FC8C0BA6073288854AE6DDEADC8 Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/flYk0fPODsZgJ_kgt0t_p5e4Jek.roa Signing time: Fri 02 Jan 2026 12:19:43 +0000 ROA not before: Fri 02 Jan 2026 12:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209555 IP address blocks: 188.116.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3f:c8:c0:ba:60:73:28:88:54:ae:6d:de:ad:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7 Validity Not Before: Jan 2 12:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e5624d1f3ce0ec66027f920b74b7fa797b825e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:18:a2:97:d3:de:31:ff:d0:a2:b7:ff:b8: f4:1f:a5:b3:8f:b0:2b:78:cb:98:e3:a3:0a:5f:e5: f5:e9:b8:b2:ef:00:83:d3:14:63:b0:96:1a:db:02: 32:c3:f4:0b:49:25:85:80:a1:ae:43:c1:33:e9:fc: 33:3e:96:37:dd:e1:f9:9f:e5:1d:b0:85:c5:4d:09: ae:c6:89:ef:80:3d:db:0b:2f:13:16:eb:4e:09:c6: ef:45:b5:74:42:0c:cc:5c:b4:cc:de:92:23:10:d9: 77:3c:f4:55:33:cf:a7:96:01:1c:d8:02:5b:47:7e: 74:6c:76:1f:c1:3b:27:86:97:e0:97:b6:2c:63:fa: ad:90:50:70:84:df:62:74:d7:03:ca:50:45:f4:52: 63:3a:bc:c8:d0:89:97:f0:70:97:d9:ea:88:4a:79: 67:1d:9d:43:81:cf:b4:60:27:3f:46:7b:06:78:2c: bb:b9:da:36:64:65:6c:83:14:d5:e9:48:d8:22:67: e9:70:b1:03:fc:bd:5b:28:6b:56:78:18:d1:61:5e: 6e:82:6a:55:3b:3e:6a:05:12:58:d5:9e:07:12:66: 66:84:bc:d2:6b:f1:1a:66:f7:b7:c6:bc:7e:77:3a: e5:ec:b7:1d:59:d5:1d:c7:62:2f:f5:c5:79:d5:4d: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:56:24:D1:F3:CE:0E:C6:60:27:F9:20:B7:4B:7F:A7:97:B8:25:E9 X509v3 Authority Key Identifier: keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/flYk0fPODsZgJ_kgt0t_p5e4Jek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.116.58.0/23 Signature Algorithm: sha256WithRSAEncryption 17:c2:06:b1:1b:db:14:b8:b6:c6:5a:4b:cb:86:14:56:34:ad: e8:0f:8e:8c:5e:4a:d4:c0:00:c5:35:44:b1:61:36:3f:c6:62: fd:57:9f:94:08:66:27:40:05:ab:6f:93:6f:c3:eb:28:6a:02: 11:b8:d1:59:71:f5:be:1f:d8:8b:dc:39:40:7b:04:1f:34:c7: 57:6c:62:3c:40:12:9e:90:c2:09:0b:e0:07:35:ea:d8:93:38: 1c:92:a4:84:75:c4:74:2e:58:d5:06:ba:b0:2e:5d:76:30:2d: 2f:93:20:05:80:47:c4:ec:bc:7e:a1:92:e7:15:0e:5d:b5:e8: 62:38:84:8b:e0:d2:b2:0e:e5:3b:17:2c:cc:e0:66:b1:2f:46: 64:6a:e1:30:5f:a5:9c:e2:0a:a0:45:66:27:59:66:35:a8:c2: 0f:82:f3:6b:87:d5:8a:45:b2:28:c7:41:e0:2a:16:61:67:63: 28:52:cf:aa:76:30:0c:89:9d:e3:40:b2:88:7b:3e:76:63:47: f2:f6:bd:07:21:e1:16:0c:c7:a3:81:58:09:fa:92:7c:45:5a: ed:28:e1:bd:32:8c:45:a0:08:d6:87:8f:eb:b0:bf:35:20:65: 24:17:7d:e1:d0:95:95:79:66:83:36:08:30:54:48:39:2a:de: 8e:a4:20:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pj/IwLpgcyiIVK5t3q3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyODNiNmQxZDg2MTAyZTllZGYyYWJkZGFhN2M5MzQ3YWFj NzE3YzcwHhcNMjYwMTAyMTIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTU2MjRkMWYzY2UwZWM2NjAyN2Y5MjBiNzRiN2ZhNzk3YjgyNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr58YopfT3jH/0KK3/7j0H6Wzj7Ar eMuY46MKX+X16biy7wCD0xRjsJYa2wIyw/QLSSWFgKGuQ8Ez6fwzPpY33eH5n+Ud sIXFTQmuxonvgD3bCy8TFutOCcbvRbV0QgzMXLTM3pIjENl3PPRVM8+nlgEc2AJb R350bHYfwTsnhpfgl7YsY/qtkFBwhN9idNcDylBF9FJjOrzI0ImX8HCX2eqISnln HZ1Dgc+0YCc/RnsGeCy7udo2ZGVsgxTV6UjYImfpcLED/L1bKGtWeBjRYV5ugmpV Oz5qBRJY1Z4HEmZmhLzSa/EaZve3xrx+dzrl7LcdWdUdx2Iv9cV51U3bDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5WJNHzzg7GYCf5ILdLf6eXuCXpMB8GA1UdIwQY MBaAFGKDttHYYQLp7fKr3ap8k0eqxxfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQt OTE0ZTQ4ODFlZWE4LzEvZmxZazBmUE9Ec1pnSl9rZ3QwdF9wNWU0SmVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQtOTE0ZTQ4ODFlZWE4 LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvHQ6MA0G CSqGSIb3DQEBCwUAA4IBAQAXwgaxG9sUuLbGWkvLhhRWNK3oD46MXkrUwADFNUSx YTY/xmL9V5+UCGYnQAWrb5Nvw+soagIRuNFZcfW+H9iL3DlAewQfNMdXbGI8QBKe kMIJC+AHNerYkzgckqSEdcR0LljVBrqwLl12MC0vkyAFgEfE7Lx+oZLnFQ5dtehi OISL4NKyDuU7FyzM4GaxL0ZkauEwX6Wc4gqgRWYnWWY1qMIPgvNrh9WKRbIox0Hg KhZhZ2MoUs+qdjAMiZ3jQLKIez52Y0fy9r0HIeEWDMejgVgJ+pJ8RVrtKOG9MoxF oAjWh4/rsL81IGUkF33h0JWVeWaDNggwVEg5Kt6OpCAP -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:00 2026 by rpki-client