This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa File: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (raw, json) Hash identifier: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g= Subject key identifier: C8:69:D3:51:9F:8A:E6:26:6F:BF:F4:09:97:28:F2:AF:55:62:7E:8D Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Certificate serial: 019B77591E328A8D471168045D067667A22B Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204206 IP address blocks: 185.78.244.0/24 maxlen: 24 185.78.245.0/24 maxlen: 24 185.78.246.0/24 maxlen: 24 185.78.247.0/24 maxlen: 24 213.42.48.0/24 maxlen: 24 213.42.49.0/24 maxlen: 24 213.42.50.0/24 maxlen: 24 213.42.51.0/24 maxlen: 24 213.42.52.0/24 maxlen: 24 213.42.53.0/24 maxlen: 24 213.42.54.0/24 maxlen: 24 213.42.55.0/24 maxlen: 24 213.42.56.0/24 maxlen: 24 213.42.84.0/24 maxlen: 24 213.42.85.0/24 maxlen: 24 213.42.86.0/24 maxlen: 24 213.42.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1e:32:8a:8d:47:11:68:04:5d:06:76:67:a2:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c869d3519f8ae6266fbff4099728f2af55627e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:0f:bb:91:9e:41:6d:ae:b4:06:68:b1:f6: 06:e9:03:0a:83:17:ec:a1:a8:cd:a9:af:6c:ef:50: e3:09:ff:8d:24:9b:17:c0:48:94:80:0d:78:f9:96: 78:3b:70:78:4f:5b:09:4c:1f:e3:5c:ef:33:c3:9c: 0f:24:1b:f1:ef:27:96:64:a7:b4:9f:e6:e5:51:1f: c4:fb:14:7e:1a:e1:e2:fe:f3:fe:b5:08:d4:96:3c: 53:3b:4c:50:dc:41:37:41:6c:63:59:66:a6:14:50: a3:e7:11:3c:2b:56:67:a5:b4:ed:1a:61:80:b9:11: cd:5c:3c:fa:9d:04:88:e4:7b:a2:10:80:d1:cd:5c: 62:2f:85:42:7d:71:56:d7:3e:28:50:32:0b:f7:cd: 3d:f5:84:d9:95:b9:f3:36:0c:1e:7e:10:12:0f:75: 2c:36:45:3a:96:c2:2d:28:3f:f9:dd:78:43:c1:ab: 6e:d4:6c:e1:ee:40:81:34:84:1c:3e:76:f0:24:90: 36:b3:f3:71:70:8d:89:04:93:b3:da:13:ec:e2:fa: 19:56:3c:ba:95:e4:6a:f4:7d:b9:ac:79:f9:c1:7b: 0c:8f:a0:30:ac:a3:a6:69:26:41:3f:90:6d:11:fa: 2c:96:e3:5b:6a:5b:c4:2c:c3:0f:1c:57:cd:92:80: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:69:D3:51:9F:8A:E6:26:6F:BF:F4:09:97:28:F2:AF:55:62:7E:8D X509v3 Authority Key Identifier: keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.244.0/22 213.42.48.0-213.42.56.255 213.42.84.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:8a:32:2a:25:1e:f8:ec:7a:02:6c:87:06:2d:4d:a4:5b:65: 9b:e5:2d:16:d5:7b:e2:c1:77:c7:f2:ae:55:01:e8:6d:34:11: 20:74:52:65:8f:48:91:79:0e:b9:86:16:53:54:09:cb:ca:91: 79:bf:fd:32:a9:9b:56:fe:64:f0:bc:a8:ad:15:95:c4:09:12: ba:9a:da:cf:0a:62:b7:dd:a5:b0:34:93:f0:d3:55:39:7d:e7: dd:9f:5e:d1:b6:6a:81:3d:7b:a7:42:dc:12:67:3b:b6:2b:e7: a4:97:61:d4:57:ed:8e:7f:6c:35:9b:b4:4a:e7:6b:fd:fd:b0: 62:e6:92:67:82:1c:0b:89:2f:db:44:fa:e2:30:8a:21:80:26: 61:c7:4f:7f:04:99:f2:59:c2:cf:ea:d9:43:d4:e5:f3:90:bc: 21:9e:13:b5:fd:c8:18:21:bf:b4:c3:cf:31:e5:f6:6e:74:48: 63:9c:65:f0:8a:5b:5e:d9:0e:90:b7:d1:88:a3:0f:97:f9:6b: 44:33:89:81:98:dd:7e:b9:ba:99:d6:d8:1c:fc:f2:95:6d:ae: 8a:8b:73:1a:6e:c5:8d:d9:94:fa:12:f1:ac:cc:30:5e:6a:69: 99:33:ab:5a:44:f1:a5:ba:a7:ef:bb:73:bf:7e:11:6a:22:b3: cd:cd:e8:54 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3WR4yio1HEWgEXQZ2Z6IrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh NmFiOGQwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODY5ZDM1MTlmOGFlNjI2NmZiZmY0MDk5NzI4ZjJhZjU1NjI3ZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiIPu5GeQW2utAZosfYG6QMKgxfs oajNqa9s71DjCf+NJJsXwEiUgA14+ZZ4O3B4T1sJTB/jXO8zw5wPJBvx7yeWZKe0 n+blUR/E+xR+GuHi/vP+tQjUljxTO0xQ3EE3QWxjWWamFFCj5xE8K1ZnpbTtGmGA uRHNXDz6nQSI5HuiEIDRzVxiL4VCfXFW1z4oUDIL98099YTZlbnzNgwefhASD3Us NkU6lsItKD/53XhDwatu1Gzh7kCBNIQcPnbwJJA2s/NxcI2JBJOz2hPs4voZVjy6 leRq9H25rHn5wXsMj6AwrKOmaSZBP5BtEfosluNbalvELMMPHFfNkoDsRQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMhp01GfiuYmb7/0CZco8q9VYn6NMB8GA1UdIwQY MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt MzUwMDRhNjcxZWIzLzEveUduVFVaLUs1aVp2dl9RSmx5anlyMVZpZm8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCuU70MAwD BATVKjADBADVKjgDBALVKlQwDQYJKoZIhvcNAQELBQADggEBAGuKMiolHvjsegJs hwYtTaRbZZvlLRbVe+LBd8fyrlUB6G00ESB0UmWPSJF5DrmGFlNUCcvKkXm//TKp m1b+ZPC8qK0VlcQJErqa2s8KYrfdpbA0k/DTVTl9592fXtG2aoE9e6dC3BJnO7Yr 56SXYdRX7Y5/bDWbtErna/39sGLmkmeCHAuJL9tE+uIwiiGAJmHHT38EmfJZws/q 2UPU5fOQvCGeE7X9yBghv7TDzzHl9m50SGOcZfCKW17ZDpC30YijD5f5a0QziYGY 3X65upnW2Bz88pVtroqLcxpuxY3ZlPoS8azMMF5qaZkzq1pE8aW6p++7c79+EWoi s83N6FQ= -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:10 2026 by rpki-client