This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/yXuHFZic38WtbGut6KbE1pBnfLI.roa File: yXuHFZic38WtbGut6KbE1pBnfLI.roa (raw, json) Hash identifier: kTl3ByAmOWMgoe4Kjt6fNNQpG4a7GQvCOfYlBUiosjo= Subject key identifier: C9:7B:87:15:98:9C:DF:C5:AD:6C:6B:AD:E8:A6:C4:D6:90:67:7C:B2 Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Certificate serial: 019BE06F51843A2A457128C119C2C21264C3 Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/yXuHFZic38WtbGut6KbE1pBnfLI.roa Signing time: Wed 21 Jan 2026 12:02:30 +0000 ROA not before: Wed 21 Jan 2026 12:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203466 IP address blocks: 188.208.197.0/24 maxlen: 24 188.214.194.0/24 maxlen: 24 213.134.13.0/24 maxlen: 24 2a06:f940::/48 maxlen: 48 2a06:f940:1::/48 maxlen: 48 2a06:f940:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:6f:51:84:3a:2a:45:71:28:c1:19:c2:c2:12:64:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Validity Not Before: Jan 21 12:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97b8715989cdfc5ad6c6bade8a6c4d690677cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:15:81:92:3f:13:4a:32:41:85:ba:c2:ed:45: 5c:a0:ac:54:b5:09:05:23:de:98:3b:e8:c8:90:66: 5e:2e:d4:11:4c:38:66:4e:03:e3:4e:a4:0e:5b:e1: 91:41:a5:74:bd:57:3c:4d:06:9e:e8:a3:dd:c0:0b: f7:d4:98:9a:b9:2c:3a:23:ab:21:54:a1:d1:56:c6: 45:ce:ec:72:7e:d2:6a:bb:50:2b:09:bf:26:c9:57: 11:1f:64:4f:69:5a:67:20:d3:dc:39:32:27:71:ea: f9:54:4f:b9:5e:ec:2c:e5:86:70:30:fe:23:b5:40: 41:29:2c:fe:a9:e1:07:f6:23:11:18:62:09:6d:b9: 7e:d4:60:b8:01:be:3c:95:4c:9d:68:ac:4b:37:4f: 58:64:20:3d:be:b8:fb:a7:e5:17:af:ba:8e:34:f4: 04:74:b8:3e:ee:d6:30:87:77:dc:bc:b1:e9:e4:e1: d5:fc:38:0f:6d:9a:9f:8e:39:14:d1:cf:e6:b3:34: e2:bf:04:a8:43:9a:4f:e4:45:16:48:8c:f5:71:3e: 54:72:0f:d9:ac:6c:b7:60:4e:91:a1:c2:38:8e:3b: e2:e5:73:c4:dd:90:b0:ef:78:c4:15:63:49:be:73: 4a:5a:75:bf:1b:01:31:24:1e:cd:af:6f:c2:b0:8a: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7B:87:15:98:9C:DF:C5:AD:6C:6B:AD:E8:A6:C4:D6:90:67:7C:B2 X509v3 Authority Key Identifier: keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/yXuHFZic38WtbGut6KbE1pBnfLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.208.197.0/24 188.214.194.0/24 213.134.13.0/24 IPv6: 2a06:f940::-2a06:f940:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a8:cc:f0:1b:78:5b:02:e7:61:39:f7:e3:f7:93:c8:95:c9:15: 2d:01:10:8d:36:69:08:a5:10:e5:cc:b3:e3:34:24:dd:72:11: 6b:d6:ea:56:68:75:ec:1a:41:de:f8:31:da:61:3c:d1:09:7f: 88:c4:c5:ac:75:34:3b:18:8f:9c:b2:db:f0:87:7f:e5:d3:bd: be:0d:e6:4c:95:ac:80:6b:52:ea:78:0b:c2:46:23:53:43:a4: 16:4e:06:44:32:cf:36:d6:50:6e:58:d0:8a:e1:a5:e7:a8:54: df:2d:f8:ff:52:a0:98:09:a3:96:43:62:d7:04:21:eb:91:c4: 90:ec:70:bd:ce:ab:8b:a0:4a:35:65:2c:8c:27:4c:f5:b6:e4: 1f:87:3b:0e:10:2d:c7:96:2f:b5:27:b7:9b:4b:35:9d:1d:d5: 96:3d:ab:b2:cc:3b:a6:df:13:d8:72:5e:72:89:6c:71:77:98: 86:99:cd:1b:4e:97:29:f7:94:3e:24:53:9c:4a:00:48:d6:80: 52:84:3c:f0:47:d5:fd:bf:31:9d:56:87:82:67:c1:3a:84:76: be:b8:ba:02:82:e8:87:24:42:8f:04:d4:9f:6e:31:07:ed:df: d5:90:a5:71:8a:b2:77:1c:c8:6c:a8:80:e5:ca:9b:31:70:84: 4c:b1:ed:99 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZvgb1GEOipFcSjBGcLCEmTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1 Y2IzNmYwHhcNMjYwMTIxMTIwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTdiODcxNTk4OWNkZmM1YWQ2YzZiYWRlOGE2YzRkNjkwNjc3Y2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xWBkj8TSjJBhbrC7UVcoKxUtQkF I96YO+jIkGZeLtQRTDhmTgPjTqQOW+GRQaV0vVc8TQae6KPdwAv31JiauSw6I6sh VKHRVsZFzuxyftJqu1ArCb8myVcRH2RPaVpnINPcOTIncer5VE+5Xuws5YZwMP4j tUBBKSz+qeEH9iMRGGIJbbl+1GC4Ab48lUydaKxLN09YZCA9vrj7p+UXr7qONPQE dLg+7tYwh3fcvLHp5OHV/DgPbZqfjjkU0c/mszTivwSoQ5pP5EUWSIz1cT5Ucg/Z rGy3YE6RocI4jjvi5XPE3ZCw73jEFWNJvnNKWnW/GwExJB7Nr2/CsIp1YQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFMl7hxWYnN/FrWxrreimxNaQZ3yyMB8GA1UdIwQY MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2 LWVlMDU3Y2Y5YzE2MS8xL3lYdUhGWmljMzhXdGJHdXQ2S2JFMXBCbmZMSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2 MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwRQYIKwYBBQUHAQcBAf8ENjA0MBgEAgABMBIDBAC80MUD BAC81sIDBADVhg0wGAQCAAIwEjAQAwUGKgb5QAMHACoG+UAAAjANBgkqhkiG9w0B AQsFAAOCAQEAqMzwG3hbAudhOffj95PIlckVLQEQjTZpCKUQ5cyz4zQk3XIRa9bq Vmh17BpB3vgx2mE80Ql/iMTFrHU0OxiPnLLb8Id/5dO9vg3mTJWsgGtS6ngLwkYj U0OkFk4GRDLPNtZQbljQiuGl56hU3y34/1KgmAmjlkNi1wQh65HEkOxwvc6ri6BK NWUsjCdM9bbkH4c7DhAtx5YvtSe3m0s1nR3Vlj2rssw7pt8T2HJecolscXeYhpnN G06XKfeUPiRTnEoASNaAUoQ88EfV/b8xnVaHgmfBOoR2vri6AoLohyRCjwTUn24x B+3f1ZClcYqydxzIbKiA5cqbMXCETLHtmQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:27 2026 by rpki-client