This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa File: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (raw, json) Hash identifier: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4= Subject key identifier: 63:F6:FA:24:38:D0:2E:40:4B:0D:4C:95:0C:E3:D3:16:1B:CB:0A:A1 Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019B7B35B679B12D182BBA84974A333164F8 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa Signing time: Thu 01 Jan 2026 20:17:56 +0000 ROA not before: Thu 01 Jan 2026 20:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25164 IP address blocks: 193.192.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b6:79:b1:2d:18:2b:ba:84:97:4a:33:31:64:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jan 1 20:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63f6fa2438d02e404b0d4c950ce3d3161bcb0aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:14:7d:6c:13:26:21:86:88:9a:38:91:30: 35:13:08:f9:5b:64:b7:36:f9:97:11:f7:1f:03:25: 06:25:4b:f3:ee:77:33:be:37:97:c7:0c:99:21:fe: f0:14:cb:16:09:3b:ef:00:fd:a2:80:0b:54:cd:d1: 9a:3a:47:26:83:f7:c1:88:a7:af:61:b9:c8:d2:1d: 94:e3:05:db:62:77:3e:c7:b2:a8:45:d4:2e:10:6b: 35:1c:2e:8b:f3:98:f9:6d:f2:8d:3d:79:f6:0a:c0: 2c:6f:c4:e9:3c:cc:66:c9:bc:b3:70:dc:75:91:c6: 30:59:d1:26:b7:d8:c9:a0:56:6c:e4:94:42:6f:ba: 8b:2c:33:7b:5b:ec:8d:1d:6c:39:5b:2d:38:f4:0c: cf:d2:45:58:a4:67:98:dd:c2:36:59:a9:ae:f7:4f: 9f:d7:c5:0e:fb:72:09:35:6f:f4:33:40:86:40:0d: 11:ae:d4:1a:81:db:96:7f:c1:66:36:73:f7:95:4e: dd:8f:f5:c6:51:3b:36:84:06:70:47:ac:0a:23:aa: 09:60:8b:7c:ac:21:1b:1e:10:85:5b:c1:4c:04:c9: 5e:18:2c:68:12:63:7f:5a:c6:51:69:55:0b:75:9f: 2b:c9:41:4c:44:52:fa:77:01:89:68:48:fa:0a:99: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:FA:24:38:D0:2E:40:4B:0D:4C:95:0C:E3:D3:16:1B:CB:0A:A1 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.192.232.0/23 Signature Algorithm: sha256WithRSAEncryption bb:07:48:30:2f:31:b5:b3:b9:89:30:f8:9b:e9:f7:6a:0b:e3: 71:58:5d:41:e8:2a:3c:03:9f:27:19:11:b9:bf:4c:af:ea:c3: ac:bc:ae:ad:33:b8:ff:d0:d1:84:36:69:e9:d7:cd:a5:1e:20: 86:c2:2c:81:2c:cb:75:1b:32:73:17:70:20:91:89:7c:3c:c5: 80:d8:8a:95:b0:f3:5d:17:e9:9c:42:e7:8c:47:a0:69:a6:18: 56:04:2d:6d:91:65:c0:20:91:3c:36:7e:92:e0:a7:27:22:ea: d6:ca:01:65:23:4c:cc:12:89:a5:21:7b:4b:16:75:4c:d8:a3: 0d:7e:6d:39:7a:29:d7:dd:8c:5d:ab:30:cf:96:a1:f8:80:2f: fb:e3:4e:bf:cb:30:23:23:69:a5:96:c6:60:d0:fc:33:ad:b3: eb:b0:8b:78:b3:89:f8:00:00:90:9c:6a:42:a9:7f:8e:fb:06: 43:90:a8:11:3d:8b:4f:37:19:ef:9c:d6:0a:e8:f5:36:c7:b4: 30:26:32:12:3e:a3:74:42:8e:55:44:87:8f:3d:9f:02:96:77: 3d:67:a2:a1:40:1d:06:48:4f:d0:0c:25:e5:62:ca:27:08:36: eb:b1:bd:92:ca:49:8a:b6:7b:5f:17:22:36:3b:b4:f1:e4:10: 39:3d:9b:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbZ5sS0YK7qEl0ozMWT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwMTAxMjAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2Y2ZmEyNDM4ZDAyZTQwNGIwZDRjOTUwY2UzZDMxNjFiY2IwYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc8UfWwTJiGGiJo4kTA1Ewj5W2S3 NvmXEfcfAyUGJUvz7nczvjeXxwyZIf7wFMsWCTvvAP2igAtUzdGaOkcmg/fBiKev YbnI0h2U4wXbYnc+x7KoRdQuEGs1HC6L85j5bfKNPXn2CsAsb8TpPMxmybyzcNx1 kcYwWdEmt9jJoFZs5JRCb7qLLDN7W+yNHWw5Wy049AzP0kVYpGeY3cI2Wamu90+f 18UO+3IJNW/0M0CGQA0RrtQagduWf8FmNnP3lU7dj/XGUTs2hAZwR6wKI6oJYIt8 rCEbHhCFW8FMBMleGCxoEmN/WsZRaVULdZ8ryUFMRFL6dwGJaEj6CpkLfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGP2+iQ40C5ASw1MlQzj0xYbywqhMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvWV9iNkpEalFMa0JMRFV5VkRPUFRGaHZMQ3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcDoMA0G CSqGSIb3DQEBCwUAA4IBAQC7B0gwLzG1s7mJMPib6fdqC+NxWF1B6Co8A58nGRG5 v0yv6sOsvK6tM7j/0NGENmnp182lHiCGwiyBLMt1GzJzF3AgkYl8PMWA2IqVsPNd F+mcQueMR6BpphhWBC1tkWXAIJE8Nn6S4KcnIurWygFlI0zMEomlIXtLFnVM2KMN fm05einX3YxdqzDPlqH4gC/7406/yzAjI2mllsZg0PwzrbPrsIt4s4n4AACQnGpC qX+O+wZDkKgRPYtPNxnvnNYK6PU2x7QwJjISPqN0Qo5VRIePPZ8Clnc9Z6KhQB0G SE/QDCXlYsonCDbrsb2SykmKtntfFyI2O7Tx5BA5PZsL -----END CERTIFICATE-----Generated at Sat Jan 3 02:31:08 2026 by rpki-client