This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/y_SBLUhzBtU72NxeeIak4RRDnEU.roa File: y_SBLUhzBtU72NxeeIak4RRDnEU.roa (raw, json) Hash identifier: x10yvxp0EebXuA7j4nfdDlIV0rhNw6PWqLB8KW20YOA= Subject key identifier: CB:F4:81:2D:48:73:06:D5:3B:D8:DC:5E:78:86:A4:E1:14:43:9C:45 Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc Certificate serial: 019B7BA526998DD388D915DD5A5DAD10C3CC Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/y_SBLUhzBtU72NxeeIak4RRDnEU.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51224 IP address blocks: 194.13.70.0/24 maxlen: 24 194.13.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:26:99:8d:d3:88:d9:15:dd:5a:5d:ad:10:c3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbf4812d487306d53bd8dc5e7886a4e114439c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:1d:45:3f:de:9f:a1:c9:fe:2f:12:c0:0c: d3:6c:aa:2c:26:0d:43:44:50:51:db:12:d7:97:9c: 05:5c:b1:cf:61:7c:d5:fb:95:86:6b:c1:f3:da:f5: 79:28:cf:9d:17:e5:aa:fc:74:8f:fb:73:ce:0d:08: 5c:97:01:6f:77:d5:13:2b:0e:05:00:cc:67:80:58: 63:0a:5c:42:23:6d:37:a2:de:04:4a:c1:a0:2d:ec: 18:81:5d:e6:89:f8:af:51:57:a8:3a:f6:16:78:7d: 0a:38:70:f2:b0:22:90:e3:66:68:7e:c6:41:34:bd: 17:e1:e6:50:84:84:f7:7e:b0:fd:84:89:0e:cf:c8: c2:d6:43:5c:92:d7:b4:21:f0:3e:bf:e3:af:da:be: 5e:f6:5a:88:c2:1b:8d:42:20:65:1c:ad:a1:ca:47: e3:f0:0e:c2:33:ca:73:11:c3:b4:e1:f8:9b:3d:37: 99:6a:ab:b9:a9:59:e2:cf:77:4a:63:2a:9f:b4:2f: a3:8e:a8:4f:51:dc:8c:27:37:99:fa:c9:a0:03:59: e3:f0:83:5e:b3:20:b2:c9:11:34:07:5d:bc:8c:78: 1b:8d:b7:82:2e:50:80:f9:61:82:6e:d2:5b:52:3e: ca:c4:e2:8c:0e:60:a2:6e:76:cb:c9:08:a8:1c:da: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:81:2D:48:73:06:D5:3B:D8:DC:5E:78:86:A4:E1:14:43:9C:45 X509v3 Authority Key Identifier: keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/y_SBLUhzBtU72NxeeIak4RRDnEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.13.70.0/23 Signature Algorithm: sha256WithRSAEncryption b7:ba:96:33:1a:fa:eb:a7:99:27:d5:e4:2d:51:1b:04:f5:ea: 89:02:83:e8:6c:41:9c:8d:22:ba:47:50:76:f5:68:0f:b6:ac: fc:85:22:59:63:2c:24:8d:23:f4:18:93:4a:10:98:bb:2c:4d: 31:bc:2b:c8:5a:72:11:b9:52:8d:f8:f8:e5:51:5c:30:27:f2: b2:18:8a:ad:1c:eb:10:cd:94:58:8c:51:84:72:1b:d9:b4:ed: b3:95:a0:f9:1c:9b:c7:d9:c8:02:de:6d:08:ec:b3:a4:53:e5: 5e:ea:0d:af:5e:a5:fa:1c:d1:9e:d9:cb:5c:16:ad:7d:2b:02: f1:9a:3c:d3:65:57:46:d2:34:ef:a5:1b:e8:cc:f2:12:08:94: ad:0a:b7:ab:86:c7:5d:9d:1c:1e:6f:09:94:bc:ab:31:b5:f4: 92:64:b9:67:f7:75:7c:04:20:4d:ed:78:28:0f:c4:cf:87:7b: ef:1e:a6:ad:ce:cc:6c:14:e6:fc:78:c1:95:ed:14:33:11:47: d0:1a:df:3e:3c:f6:f4:56:1d:61:d3:a4:16:b9:c1:64:58:57: 91:77:df:b5:39:a1:06:4f:13:52:55:84:2d:f1:2c:78:3b:a0: ba:90:ed:e3:da:d6:dd:58:e2:b5:5d:47:c0:ed:c1:b1:bc:b3: 0c:a3:ab:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSaZjdOI2RXdWl2tEMPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZTcxMWNlMzQwMjZlNTdhZjMyOTBjN2RlMmNkMjFkYzY3 MWUwZmMwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmY0ODEyZDQ4NzMwNmQ1M2JkOGRjNWU3ODg2YTRlMTE0NDM5YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquEdRT/en6HJ/i8SwAzTbKosJg1D RFBR2xLXl5wFXLHPYXzV+5WGa8Hz2vV5KM+dF+Wq/HSP+3PODQhclwFvd9UTKw4F AMxngFhjClxCI203ot4ESsGgLewYgV3mifivUVeoOvYWeH0KOHDysCKQ42ZofsZB NL0X4eZQhIT3frD9hIkOz8jC1kNckte0IfA+v+Ov2r5e9lqIwhuNQiBlHK2hykfj 8A7CM8pzEcO04fibPTeZaqu5qVniz3dKYyqftC+jjqhPUdyMJzeZ+smgA1nj8INe syCyyRE0B128jHgbjbeCLlCA+WGCbtJbUj7KxOKMDmCibnbLyQioHNqewQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMv0gS1IcwbVO9jcXniGpOEUQ5xFMB8GA1UdIwQY MBaAFCfnEc40Am5XrzKQx94s0h3GceD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDIt YjcyZTVmZWY4ODZhLzEveV9TQkxVaHpCdFU3Mk54ZWVJYWs0UlJEbkVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDItYjcyZTVmZWY4ODZh LzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwg1GMA0G CSqGSIb3DQEBCwUAA4IBAQC3upYzGvrrp5kn1eQtURsE9eqJAoPobEGcjSK6R1B2 9WgPtqz8hSJZYywkjSP0GJNKEJi7LE0xvCvIWnIRuVKN+PjlUVwwJ/KyGIqtHOsQ zZRYjFGEchvZtO2zlaD5HJvH2cgC3m0I7LOkU+Ve6g2vXqX6HNGe2ctcFq19KwLx mjzTZVdG0jTvpRvozPISCJStCrerhsddnRwebwmUvKsxtfSSZLln93V8BCBN7Xgo D8TPh3vvHqatzsxsFOb8eMGV7RQzEUfQGt8+PPb0Vh1h06QWucFkWFeRd9+1OaEG TxNSVYQt8Sx4O6C6kO3j2tbdWOK1XUfA7cGxvLMMo6tm -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:55 2026 by rpki-client