This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/yaGrTSbSlmYQOVjGew5hBKlYIdM.roa File: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (raw, json) Hash identifier: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y= Subject key identifier: C9:A1:AB:4D:26:D2:96:66:10:39:58:C6:7B:0E:61:04:A9:58:21:D3 Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818 Certificate serial: 019B7AC88EED845C3FC93F79D31AE85C8CA9 Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/yaGrTSbSlmYQOVjGew5hBKlYIdM.roa Signing time: Thu 01 Jan 2026 18:18:42 +0000 ROA not before: Thu 01 Jan 2026 18:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 185.79.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 21:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8e:ed:84:5c:3f:c9:3f:79:d3:1a:e8:5c:8c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9a1ab4d26d29666103958c67b0e6104a95821d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:1d:7d:01:4d:56:3e:7f:28:6e:f1:4e:55: 3b:03:64:98:1b:58:e7:f3:af:b5:39:89:c6:9a:6c: 84:0f:61:dd:6f:94:fb:09:23:9d:b5:63:4f:9e:18: 3b:64:a1:79:39:8b:3e:2d:dd:d0:80:e7:98:62:01: 7c:64:dc:60:c8:03:fb:ba:a2:96:69:8e:ca:f0:88: c2:be:5c:08:43:8d:b5:35:e8:42:5f:e8:cd:b1:b0: f3:43:84:4a:b4:0e:ab:e1:bd:c2:dd:c1:50:04:98: 7d:82:36:39:a3:f8:07:11:93:32:a3:0b:e0:50:be: 2a:ad:7e:61:e7:e2:72:bd:00:c1:2e:9a:2b:f0:d3: f7:0a:25:28:78:fd:3e:1f:12:c1:87:ba:79:a0:4f: b4:e5:26:fe:54:7a:99:c3:b0:5d:c2:cf:00:9e:83: 78:b8:8e:43:6c:02:9c:7d:7a:7a:8c:ae:5c:d0:83: 69:9f:e1:cf:2c:ff:b9:9c:2d:de:6d:42:b8:19:e4: 3f:60:9e:81:a1:dc:75:12:45:11:c6:6e:32:60:94: 7e:e7:75:39:69:9a:9c:d1:d7:4a:38:6b:64:07:57: 44:fa:ba:c7:2f:82:fc:fb:a7:8e:e0:35:58:ad:9b: 0b:14:65:d5:84:35:63:7d:bd:27:13:8c:a0:fc:bb: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A1:AB:4D:26:D2:96:66:10:39:58:C6:7B:0E:61:04:A9:58:21:D3 X509v3 Authority Key Identifier: keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/yaGrTSbSlmYQOVjGew5hBKlYIdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.202.0/23 Signature Algorithm: sha256WithRSAEncryption 76:ec:e2:46:e7:bb:33:76:57:94:0a:bb:b0:1e:00:2d:a6:7f: c4:83:6e:7c:4d:6f:93:82:e5:8f:f4:90:6a:13:88:f0:b9:ba: 19:e6:a7:1f:bd:65:9d:13:b6:3f:d7:8e:db:8c:2a:c7:8b:6e: 89:61:ef:01:82:64:04:46:d4:34:bc:46:f4:f3:f4:9b:99:a2: f9:2c:94:a8:9f:11:42:b1:82:83:af:f6:9d:1e:7b:6d:18:b6: da:1a:82:bd:79:1f:b9:aa:70:35:c9:c2:7b:9e:fc:6c:35:41: 4a:d7:c8:92:ef:89:09:29:6c:73:2f:93:0c:83:cc:19:70:97: 36:b8:f8:be:25:b7:85:ef:38:53:53:17:e5:e7:25:20:18:65: 0d:1b:75:a4:bb:44:b2:06:52:54:f3:00:dc:35:a1:e0:90:cc: a3:0f:91:ad:00:28:42:93:3a:ed:e7:e4:af:41:d2:ff:21:a3: 47:b0:a9:8d:df:b4:73:46:94:9e:b6:a4:2e:21:40:bb:55:83: 4c:22:a7:49:4d:78:eb:9e:4a:7b:ad:67:2c:e8:70:ce:10:97: 0f:01:b2:32:dd:9f:68:4d:d3:0e:51:d8:31:17:b8:d3:07:4a: 73:d1:18:4c:3e:64:0a:94:34:c4:64:6c:d0:62:d0:16:5a:eb: 72:d3:dc:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yI7thFw/yT950xroXIypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYTM5ZjFkYjg1OGIxNTVmMjViYzM0Mzc1OWY1YmUyYjcz NmM4MTgwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWExYWI0ZDI2ZDI5NjY2MTAzOTU4YzY3YjBlNjEwNGE5NTgyMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XkdfQFNVj5/KG7xTlU7A2SYG1jn 86+1OYnGmmyED2Hdb5T7CSOdtWNPnhg7ZKF5OYs+Ld3QgOeYYgF8ZNxgyAP7uqKW aY7K8IjCvlwIQ421NehCX+jNsbDzQ4RKtA6r4b3C3cFQBJh9gjY5o/gHEZMyowvg UL4qrX5h5+JyvQDBLpor8NP3CiUoeP0+HxLBh7p5oE+05Sb+VHqZw7Bdws8AnoN4 uI5DbAKcfXp6jK5c0INpn+HPLP+5nC3ebUK4GeQ/YJ6Bodx1EkURxm4yYJR+53U5 aZqc0ddKOGtkB1dE+rrHL4L8+6eO4DVYrZsLFGXVhDVjfb0nE4yg/LvnkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmhq00m0pZmEDlYxnsOYQSpWCHTMB8GA1UdIwQY MBaAFKOjnx24WLFV8lvDQ3WfW+K3NsgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgt NDUwZDIyOTViYTQ5LzEveWFHclRTYlNsbVlRT1ZqR2V3NWhCS2xZSWRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgtNDUwZDIyOTViYTQ5 LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuU/KMA0G CSqGSIb3DQEBCwUAA4IBAQB27OJG57szdleUCruwHgAtpn/Eg258TW+TguWP9JBq E4jwuboZ5qcfvWWdE7Y/147bjCrHi26JYe8BgmQERtQ0vEb08/SbmaL5LJSonxFC sYKDr/adHnttGLbaGoK9eR+5qnA1ycJ7nvxsNUFK18iS74kJKWxzL5MMg8wZcJc2 uPi+JbeF7zhTUxfl5yUgGGUNG3Wku0SyBlJU8wDcNaHgkMyjD5GtAChCkzrt5+Sv QdL/IaNHsKmN37RzRpSetqQuIUC7VYNMIqdJTXjrnkp7rWcs6HDOEJcPAbIy3Z9o TdMOUdgxF7jTB0pz0RhMPmQKlDTEZGzQYtAWWuty09y7 -----END CERTIFICATE-----Generated at Mon Jan 12 04:40:04 2026 by rpki-client