This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/yz1pKtQyMgtptdlncZbKN2T4oYY.roa File: yz1pKtQyMgtptdlncZbKN2T4oYY.roa (raw, json) Hash identifier: Ae387dsOHzGBlCorX2l0mMZpwYKnxEqAqoAymjWiIOg= Subject key identifier: CB:3D:69:2A:D4:32:32:0B:69:B5:D9:67:71:96:CA:37:64:F8:A1:86 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED176A12DD27A8087777C5859B6942 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/yz1pKtQyMgtptdlncZbKN2T4oYY.roa Signing time: Thu 01 Jan 2026 14:18:59 +0000 ROA not before: Thu 01 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42619 IP address blocks: 193.59.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:17:6a:12:dd:27:a8:08:77:77:c5:85:9b:69:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb3d692ad432320b69b5d9677196ca3764f8a186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:93:11:7d:c9:8a:92:31:62:24:92:a2:d3: 03:d7:65:40:95:a3:99:43:72:9d:de:fa:45:be:0f: 31:fb:9e:b8:86:41:29:fa:68:ec:a7:2f:08:bb:a1: 48:7d:54:a0:44:6b:f2:32:53:b0:3f:7d:84:6b:88: d8:b8:82:ec:91:88:50:68:5e:e5:66:fe:f0:22:03: 33:e1:0d:25:45:d6:cc:fe:7d:e3:d8:cb:54:bf:f7: 65:2c:17:a3:61:e8:3d:8e:f0:1f:a6:f5:3b:08:4b: cb:7f:69:04:c8:dd:d9:e9:cc:70:ee:fd:27:fb:20: 8d:c4:e5:bd:e1:37:6d:6b:23:34:95:e0:06:31:97: 9a:d2:8a:20:1f:e8:09:5f:84:be:4a:1c:4c:18:68: 1d:18:24:1a:53:1f:53:4d:79:4b:3e:bc:d9:f6:9e: 6c:71:d0:ca:36:41:9d:b6:3d:a5:2f:c8:62:3f:13: 8a:f9:22:2a:ca:7b:a7:dc:aa:92:a7:02:3c:24:ab: 3a:0f:de:13:88:6a:ae:a6:20:57:43:df:10:5f:ac: 69:cf:74:30:9e:bb:d2:e7:3f:33:c3:87:a6:14:3a: 8b:8d:48:43:38:cd:4a:75:8b:98:54:b3:0a:1c:28: 0f:ec:b0:30:17:3a:a8:d8:ea:7a:40:ca:e1:c1:b0: 1b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3D:69:2A:D4:32:32:0B:69:B5:D9:67:71:96:CA:37:64:F8:A1:86 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/yz1pKtQyMgtptdlncZbKN2T4oYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.59.60.0/22 Signature Algorithm: sha256WithRSAEncryption 01:2e:79:d4:48:93:80:3e:8c:d3:82:fc:91:1e:38:c8:d3:82: 8b:54:d7:d7:02:7b:74:43:38:43:3d:61:94:4a:29:88:61:67: 4c:80:54:05:11:da:05:12:df:6d:f0:a5:6a:36:26:5c:bc:51: 4c:29:25:8e:ab:41:1d:47:e7:7a:8f:cc:c3:23:12:a5:ac:6d: 4d:be:ec:f1:79:31:dc:7b:25:db:f3:91:5b:2d:c1:90:30:d7: 80:9e:df:9d:cb:43:79:b4:d1:8c:f4:f0:30:e1:a0:48:85:af: dd:7a:28:94:bc:3d:f0:04:1b:41:aa:17:20:5e:14:f4:1e:a7: 20:e3:03:41:24:3b:5d:16:fd:e0:41:8b:7c:64:b5:60:70:06: 6c:08:10:3d:cf:18:ba:75:58:17:14:57:5c:a9:2b:ce:e3:a6: e5:84:5a:31:cc:b5:a4:98:0f:36:ea:dc:96:e6:a2:8a:e4:d4: 91:22:3f:8f:02:8d:e1:a3:6c:04:4d:57:23:0f:dd:af:4b:ef: 7a:17:6b:30:53:cf:66:72:6b:83:89:01:67:b3:97:0d:cb:a0: 54:c2:a9:7e:2e:0a:13:5c:82:ce:cd:10:6f:d6:44:94:09:44: 02:aa:ad:87:5c:df:b5:ca:89:a2:70:7f:42:ee:d3:d6:b2:5d: 79:35:e7:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RdqEt0nqAh3d8WFm2lCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjNkNjkyYWQ0MzIzMjBiNjliNWQ5Njc3MTk2Y2EzNzY0ZjhhMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GGTEX3JipIxYiSSotMD12VAlaOZ Q3Kd3vpFvg8x+564hkEp+mjspy8Iu6FIfVSgRGvyMlOwP32Ea4jYuILskYhQaF7l Zv7wIgMz4Q0lRdbM/n3j2MtUv/dlLBejYeg9jvAfpvU7CEvLf2kEyN3Z6cxw7v0n +yCNxOW94TdtayM0leAGMZea0oogH+gJX4S+ShxMGGgdGCQaUx9TTXlLPrzZ9p5s cdDKNkGdtj2lL8hiPxOK+SIqynun3KqSpwI8JKs6D94TiGqupiBXQ98QX6xpz3Qw nrvS5z8zw4emFDqLjUhDOM1KdYuYVLMKHCgP7LAwFzqo2Op6QMrhwbAbZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMs9aSrUMjILabXZZ3GWyjdk+KGGMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEveXoxcEt0UXlNZ3RwdGRsbmNaYktOMlQ0b1lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwTs8MA0G CSqGSIb3DQEBCwUAA4IBAQABLnnUSJOAPozTgvyRHjjI04KLVNfXAnt0QzhDPWGU SimIYWdMgFQFEdoFEt9t8KVqNiZcvFFMKSWOq0EdR+d6j8zDIxKlrG1NvuzxeTHc eyXb85FbLcGQMNeAnt+dy0N5tNGM9PAw4aBIha/deiiUvD3wBBtBqhcgXhT0Hqcg 4wNBJDtdFv3gQYt8ZLVgcAZsCBA9zxi6dVgXFFdcqSvO46blhFoxzLWkmA826tyW 5qKK5NSRIj+PAo3ho2wETVcjD92vS+96F2swU89mcmuDiQFns5cNy6BUwql+LgoT XILOzRBv1kSUCUQCqq2HXN+1yomicH9C7tPWsl15NedH -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:34 2026 by rpki-client