This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/YaozTdvah4PyD6CuJmnyOrAMFLM.roa
File: YaozTdvah4PyD6CuJmnyOrAMFLM.roa (raw, json)
Hash identifier: TPg/XsH5Y8UGf7ia69jAJB3rN1a2sdNkkH/G/KTnbJY=
Subject key identifier: 61:AA:33:4D:DB:DA:87:83:F2:0F:A0:AE:26:69:F2:3A:B0:0C:14:B3
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 019B77C72A267A17A999B1922D05C5B5C786
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/YaozTdvah4PyD6CuJmnyOrAMFLM.roa
Signing time: Thu 01 Jan 2026 04:18:19 +0000
ROA not before: Thu 01 Jan 2026 04:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43366
IP address blocks: 185.79.8.0/22 maxlen: 24
2a05:6c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:2a:26:7a:17:a9:99:b1:92:2d:05:c5:b5:c7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Jan 1 04:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61aa334ddbda8783f20fa0ae2669f23ab00c14b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:09:ad:cc:cf:fc:07:d3:07:b7:4c:0c:0a:
65:05:0e:3e:58:62:4c:5c:3b:84:7a:65:7e:26:a2:
ac:97:cd:ff:4f:36:fa:6b:97:4a:83:d4:c7:41:70:
f6:02:d7:6b:c8:d1:2f:ca:95:bd:7a:85:ab:da:fb:
bd:d3:cb:3f:84:4a:38:7e:64:d4:43:6b:e5:3b:15:
8b:8d:bb:69:5e:07:fe:58:42:c1:0f:7e:6a:84:5e:
23:54:76:49:16:12:1e:10:15:5b:db:dd:92:b9:35:
61:9b:5a:76:d2:80:3b:4c:d9:14:99:0b:12:55:99:
c7:e1:a0:b6:a9:49:d9:60:38:fd:03:e5:34:39:88:
96:5b:25:72:8d:69:e6:d1:98:10:c6:37:8c:b5:4e:
4c:99:c6:8e:e3:98:39:bf:fd:40:e9:f9:2f:d8:6d:
7b:f8:b9:5f:c3:18:e7:0f:44:52:e0:36:64:2b:63:
77:4c:cb:ca:3c:3a:ab:a3:0c:94:04:20:89:f0:e4:
94:c3:98:56:08:c4:27:5a:9e:01:85:8b:6c:aa:b8:
74:ff:75:97:3b:4b:27:9c:c1:ce:2a:d7:94:34:e7:
77:4d:0e:82:49:7d:c7:68:4d:51:9c:b9:cd:9b:fd:
ea:9a:8c:ab:f6:13:c2:72:15:db:e1:b5:15:50:46:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AA:33:4D:DB:DA:87:83:F2:0F:A0:AE:26:69:F2:3A:B0:0C:14:B3
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/YaozTdvah4PyD6CuJmnyOrAMFLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.8.0/22
IPv6:
2a05:6c80::/29
Signature Algorithm: sha256WithRSAEncryption
75:4a:47:93:15:62:29:0e:d0:04:e8:d0:44:11:93:ff:6d:85:
60:7d:db:bb:47:fa:9a:f4:f5:33:54:35:de:a1:f0:0e:37:30:
b9:17:94:ff:df:fd:64:b9:08:db:91:5b:93:b4:4d:9c:57:17:
69:87:4e:d5:38:6e:0e:78:35:6f:d3:a2:75:ad:12:f4:d5:c0:
bb:67:79:d5:c3:65:b4:4c:bb:63:35:0d:1b:a5:f0:8e:da:75:
a5:c0:4e:7d:68:70:76:8b:43:54:33:5b:62:11:29:0d:79:11:
35:81:20:25:6d:a3:49:07:0e:86:49:c7:4a:d8:88:a8:d7:6d:
53:10:8b:a4:b5:3f:3f:81:95:65:0a:3b:ff:7d:26:c9:e9:bd:
06:0b:f8:67:ed:27:32:ce:30:ba:53:e3:b1:e1:25:f8:3b:d0:
b0:25:e5:1b:3d:7f:7d:e7:82:4a:c4:2f:4a:51:8e:b0:02:dc:
7e:b2:f0:02:07:30:5b:e1:89:a1:7b:23:de:b7:98:b8:d5:ab:
f3:0b:56:67:e2:70:7a:86:d5:21:72:eb:bd:c0:3c:d6:ce:78:
f1:17:13:e5:51:ca:16:47:26:cd:dd:8b:0e:cf:21:55:81:09:
28:5d:a6:fe:bf:52:17:f8:a5:0b:04:26:ca:9c:87:38:f1:f5:
f6:11:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:48:54 2026 by rpki-client