This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/y41FVqTdNgaHOhblG8qHK429Eaw.roa File: y41FVqTdNgaHOhblG8qHK429Eaw.roa (raw, json) Hash identifier: ywQnIe78IWlYGGTQz+9GJ+uyUZbaxIHafPYxf4mrKbA= Subject key identifier: CB:8D:45:56:A4:DD:36:06:87:3A:16:E5:1B:CA:87:2B:8D:BD:11:AC Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA767C80BB9E77BA3F079EC96C4B864 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/y41FVqTdNgaHOhblG8qHK429Eaw.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28267 IP address blocks: 188.17.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:67:c8:0b:b9:e7:7b:a3:f0:79:ec:96:c4:b8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb8d4556a4dd3606873a16e51bca872b8dbd11ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:cb:a0:f3:c4:16:39:3b:fa:f7:b4:85:a0: 6a:74:98:3d:01:a8:71:56:b7:a4:7b:42:e7:a2:1b: d5:72:1d:f5:d9:dd:a8:3b:f5:4c:c3:29:b9:78:31: 6f:9a:c6:55:92:ce:a5:3d:cd:24:3b:3f:b0:dd:d1: 16:d3:fe:0f:1d:0c:eb:ec:d9:c4:f0:88:67:3d:b8: 6c:9c:6a:a7:e3:9a:c5:f6:75:b0:11:e2:d2:d3:a5: 95:62:0f:c2:d4:48:08:b4:4f:e1:26:10:f4:17:70: 7a:01:e9:20:f9:8d:8a:76:d2:99:e0:bd:79:46:05: 1d:d3:e2:cd:fb:0b:a1:8f:ea:2d:11:5f:d4:bd:1e: df:76:ea:c2:d0:50:36:81:bf:b6:02:c0:4d:8c:03: fc:c1:71:e1:94:0f:05:a7:b4:6c:fe:6c:17:8f:1c: d1:87:ac:3d:13:99:d7:04:f9:da:ff:3d:92:92:ea: 9a:52:12:1b:8d:b3:d6:a5:db:f9:60:6e:63:c2:37: 4c:80:06:89:f0:fb:2a:b7:36:e7:3e:16:3c:70:6d: e1:b6:02:fb:d9:4d:63:6e:d9:b2:89:08:e4:2c:a6: 4a:36:3a:47:bb:89:98:d5:bb:5b:13:c0:89:dd:22: e3:21:54:e6:fa:7f:48:19:76:34:a0:44:c1:fa:42: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8D:45:56:A4:DD:36:06:87:3A:16:E5:1B:CA:87:2B:8D:BD:11:AC X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/y41FVqTdNgaHOhblG8qHK429Eaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.17.226.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:09:ac:8b:8d:a6:a2:44:d5:3d:df:69:18:78:a8:bc:60:36: 72:4b:69:2e:71:0a:41:d6:6e:89:13:67:3d:c9:b1:02:87:fb: 9e:53:5a:57:f2:32:f9:1d:90:de:ee:d0:c6:e8:97:a0:e2:d1: ec:ee:fc:52:37:e7:69:ed:83:5d:98:a1:00:7d:75:a7:85:2e: b8:f7:3a:61:bb:07:36:3c:f5:12:53:5f:8a:c6:d5:5d:fd:07: e8:e3:03:6a:27:45:42:1c:70:c7:b7:47:41:b8:28:eb:68:1b: d9:26:f7:a4:2d:a0:01:a5:05:a1:e5:fb:f8:8c:5e:fc:68:6b: a3:0a:f2:06:57:ee:bd:c3:91:19:bf:2f:fe:6d:30:e5:ac:9e: d4:47:a2:71:cd:7f:5c:34:f2:79:ef:f5:1d:3b:27:ed:42:f3: 6b:8a:ff:70:42:e6:e9:22:ec:82:82:1c:8a:c1:8e:20:de:23: 51:5b:a1:60:e7:9c:6d:38:5f:4c:14:cf:e9:80:72:b2:46:25: 2e:81:5b:bd:46:e3:7d:15:f2:07:df:dd:28:8e:fb:8f:c8:9f: b5:da:cf:88:6d:d1:ea:85:77:14:d4:c2:ba:48:00:25:8b:6e: 7e:92:92:7e:55:b2:d0:89:c7:1b:08:60:76:85:c3:7f:bc:15: ad:e7:8f:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p2fIC7nne6PweeyWxLhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjhkNDU1NmE0ZGQzNjA2ODczYTE2ZTUxYmNhODcyYjhkYmQxMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqrLoPPEFjk7+ve0haBqdJg9Aahx Vreke0LnohvVch312d2oO/VMwym5eDFvmsZVks6lPc0kOz+w3dEW0/4PHQzr7NnE 8IhnPbhsnGqn45rF9nWwEeLS06WVYg/C1EgItE/hJhD0F3B6Aekg+Y2KdtKZ4L15 RgUd0+LN+wuhj+otEV/UvR7fdurC0FA2gb+2AsBNjAP8wXHhlA8Fp7Rs/mwXjxzR h6w9E5nXBPna/z2SkuqaUhIbjbPWpdv5YG5jwjdMgAaJ8PsqtzbnPhY8cG3htgL7 2U1jbtmyiQjkLKZKNjpHu4mY1btbE8CJ3SLjIVTm+n9IGXY0oETB+kK81QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMuNRVak3TYGhzoW5RvKhyuNvRGsMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEveTQxRlZxVGROZ2FIT2hibEc4cUhLNDI5RWF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvBHiMA0G CSqGSIb3DQEBCwUAA4IBAQB8CayLjaaiRNU932kYeKi8YDZyS2kucQpB1m6JE2c9 ybECh/ueU1pX8jL5HZDe7tDG6Jeg4tHs7vxSN+dp7YNdmKEAfXWnhS649zphuwc2 PPUSU1+KxtVd/Qfo4wNqJ0VCHHDHt0dBuCjraBvZJvekLaABpQWh5fv4jF78aGuj CvIGV+69w5EZvy/+bTDlrJ7UR6JxzX9cNPJ57/UdOyftQvNriv9wQubpIuyCghyK wY4g3iNRW6Fg55xtOF9MFM/pgHKyRiUugVu9RuN9FfIH390ojvuPyJ+12s+IbdHq hXcU1MK6SAAli25+kpJ+VbLQiccbCGB2hcN/vBWt548m -----END CERTIFICATE-----Generated at Mon Jan 26 11:27:30 2026 by rpki-client