This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa File: Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa (raw, json) Hash identifier: 3j6bnXLc/3ckyPdMqKUjErtfoWBW1SDwWHfzwh4ftiY= Subject key identifier: 63:C6:91:30:86:11:1F:58:D5:8E:BC:8A:28:FD:6F:F2:61:AC:39:D7 Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34 Certificate serial: 019B7CECB9364F1783EA3AC17ACA9369784D Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa Signing time: Fri 02 Jan 2026 04:17:27 +0000 ROA not before: Fri 02 Jan 2026 04:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47176 IP address blocks: 185.20.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:b9:36:4f:17:83:ea:3a:c1:7a:ca:93:69:78:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34 Validity Not Before: Jan 2 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63c6913086111f58d58ebc8a28fd6ff261ac39d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:a5:0a:35:27:64:45:a0:f3:a4:08:14:f7: 9b:57:3e:fb:8b:30:54:56:de:cf:fa:fb:b6:e9:43: 82:cf:79:1a:d4:3e:fe:4a:c5:f7:d7:3c:fd:7f:79: b1:21:41:de:e5:da:c6:bb:11:7d:a3:83:14:07:3a: 25:40:ee:77:87:f4:24:f6:0a:c5:97:6e:52:e5:d1: ba:6f:c9:51:a6:2a:2f:11:66:57:fb:e9:88:b3:15: d1:09:c0:05:f6:ff:16:76:1a:5c:86:3e:99:4c:91: 56:c4:b6:a4:d1:4e:da:25:a3:bb:67:86:fa:d7:66: 3e:28:06:aa:40:3d:5c:66:f1:b2:a6:d3:9c:5b:3d: f3:bd:e8:ba:cf:2b:b3:1b:00:bf:36:86:7b:bd:a1: 80:27:0f:3a:39:c4:36:79:14:bd:bc:f5:f6:5a:45: 0d:92:a2:b7:14:0c:bb:35:19:f6:98:6e:25:9e:37: f2:59:a5:69:29:97:1f:07:55:21:58:f0:5a:54:b6: c4:78:9a:b1:e1:87:56:ea:a8:f2:2d:c2:01:03:fd: 11:a2:a8:39:4d:9b:5d:7d:0d:01:bc:c2:fe:05:c8: f9:7e:10:5f:4d:1b:32:1b:32:6c:83:67:1f:44:ed: 05:38:df:cf:c0:0a:08:7a:2a:66:0b:7b:56:e7:d1: 81:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C6:91:30:86:11:1F:58:D5:8E:BC:8A:28:FD:6F:F2:61:AC:39:D7 X509v3 Authority Key Identifier: keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.233.0/24 Signature Algorithm: sha256WithRSAEncryption a6:cc:cf:7e:59:49:39:ca:9e:22:fe:1d:27:ca:77:e0:c2:49: 63:6d:11:ce:6f:5a:85:32:47:bd:a3:6a:ec:22:f7:d7:0d:53: 77:8c:4b:59:7f:43:e0:24:ce:2d:8a:c0:5d:de:f8:c6:eb:bc: fd:27:01:3d:80:9b:ee:e0:bb:f7:67:66:ed:47:1e:de:35:86: 0d:fd:1e:8a:10:34:f3:06:fa:7f:95:f2:de:cb:b1:86:8e:4a: ec:50:62:00:07:f1:a0:52:83:51:5f:f8:d1:32:e8:62:ed:02: 51:43:6f:74:cc:6b:63:cd:b4:16:b9:17:82:69:87:53:6c:1b: 76:95:4b:01:e5:4a:5a:c1:52:bd:42:92:9b:6b:6c:5c:64:ff: cf:05:c6:03:9b:53:9a:b2:f1:67:13:d2:a9:6c:30:a3:60:ab: 24:09:19:21:07:70:51:c6:3e:64:4a:c2:cc:0c:1d:e5:f3:55: 15:25:fb:8d:3f:d9:7a:ec:fe:76:b9:41:49:de:0e:5b:0e:f7: db:44:12:9d:67:06:0b:ac:16:fd:b5:d6:cf:f0:06:9f:b6:6f: 23:49:30:ee:41:29:e5:ab:c1:87:61:2b:a1:0d:7c:15:89:59: 18:f9:6e:50:09:fe:15:57:e0:23:11:36:18:69:79:d5:97:b8: 7a:ee:cb:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Lk2TxeD6jrBesqTaXhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZWIwMDJmMDAwYmQ0MjZlNGE2NDBjNzFkNmMwMjAxYjUw NTBlMzQwHhcNMjYwMTAyMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2M2OTEzMDg2MTExZjU4ZDU4ZWJjOGEyOGZkNmZmMjYxYWMzOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6mlCjUnZEWg86QIFPebVz77izBU Vt7P+vu26UOCz3ka1D7+SsX31zz9f3mxIUHe5drGuxF9o4MUBzolQO53h/Qk9grF l25S5dG6b8lRpiovEWZX++mIsxXRCcAF9v8Wdhpchj6ZTJFWxLak0U7aJaO7Z4b6 12Y+KAaqQD1cZvGyptOcWz3zvei6zyuzGwC/NoZ7vaGAJw86OcQ2eRS9vPX2WkUN kqK3FAy7NRn2mG4lnjfyWaVpKZcfB1UhWPBaVLbEeJqx4YdW6qjyLcIBA/0Roqg5 TZtdfQ0BvML+Bcj5fhBfTRsyGzJsg2cfRO0FON/PwAoIeipmC3tW59GBBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPGkTCGER9Y1Y68iij9b/JhrDnXMB8GA1UdIwQY MBaAFGnrAC8AC9Qm5KZAxx1sAgG1BQ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0Mzct Nzg1NDc1YzIyYzliLzEvWThhUk1JWVJIMWpWanJ5S0tQMXY4bUdzT2RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0MzctNzg1NDc1YzIyYzli LzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRTpMA0G CSqGSIb3DQEBCwUAA4IBAQCmzM9+WUk5yp4i/h0nynfgwkljbRHOb1qFMke9o2rs IvfXDVN3jEtZf0PgJM4tisBd3vjG67z9JwE9gJvu4Lv3Z2btRx7eNYYN/R6KEDTz Bvp/lfLey7GGjkrsUGIAB/GgUoNRX/jRMuhi7QJRQ290zGtjzbQWuReCaYdTbBt2 lUsB5UpawVK9QpKba2xcZP/PBcYDm1OasvFnE9KpbDCjYKskCRkhB3BRxj5kSsLM DB3l81UVJfuNP9l67P52uUFJ3g5bDvfbRBKdZwYLrBb9tdbP8Aaftm8jSTDuQSnl q8GHYSuhDXwViVkY+W5QCf4VV+AjETYYaXnVl7h67svP -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:25 2026 by rpki-client