This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/YYz0Ra-AyeN1y-x_tz99q6uROXw.roa File: YYz0Ra-AyeN1y-x_tz99q6uROXw.roa (raw, json) Hash identifier: d1wNmR3qGWlzOdOJM2Cg8ES808SIUCxvq3RhFeBu6hA= Subject key identifier: 61:8C:F4:45:AF:80:C9:E3:75:CB:EC:7F:B7:3F:7D:AB:AB:91:39:7C Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Certificate serial: 019B7EA6D874E0980F2EE7029204E92F9CA0 Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/YYz0Ra-AyeN1y-x_tz99q6uROXw.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201383 IP address blocks: 84.47.184.0/24 maxlen: 24 84.47.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d8:74:e0:98:0f:2e:e7:02:92:04:e9:2f:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=618cf445af80c9e375cbec7fb73f7dabab91397c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:7b:29:ab:60:d6:fa:c8:19:c5:4d:41:69: dc:df:1a:4e:36:1c:ff:1d:dc:0b:c5:c7:e2:08:58: 49:2c:9e:ba:85:0c:ef:0a:39:f1:5b:10:da:b7:b5: 38:0d:1a:8a:36:dc:b6:dd:c9:8e:b7:61:f4:c5:6f: 9d:11:1d:81:42:d0:4c:9f:82:2a:3c:6a:98:e9:a7: 96:fb:61:e3:6a:26:9d:71:64:a5:13:a9:35:b6:d4: 94:e5:06:4c:e4:fa:c3:b6:8f:c9:dc:c8:1d:0d:90: 74:cf:0d:f9:b6:80:8a:f5:b9:8a:85:f8:8b:79:9d: 3a:50:f9:a6:31:fb:d5:21:7f:f8:8b:1e:12:db:fc: 34:f3:35:48:bf:01:c5:ad:ac:95:80:d0:1d:ee:38: 3f:84:8f:f5:5d:e2:4f:4d:a6:33:d8:dd:b1:b5:75: 5b:5f:a9:48:e5:da:77:06:cf:91:d6:5a:92:b6:f8: 83:ce:ae:8f:97:3b:4a:41:e7:ba:2c:dc:27:4d:e3: 1a:2f:67:0c:92:e6:16:02:f1:a1:51:e9:82:1e:28: 3b:2d:f7:5c:27:d2:ab:b2:97:c3:54:97:d6:9d:63: 69:cc:f6:5c:7f:8c:9b:1b:a8:96:9d:9e:16:b8:b8: 71:de:b8:de:95:e3:80:fa:d6:65:34:85:75:75:15: 9f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8C:F4:45:AF:80:C9:E3:75:CB:EC:7F:B7:3F:7D:AB:AB:91:39:7C X509v3 Authority Key Identifier: keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/YYz0Ra-AyeN1y-x_tz99q6uROXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.47.184.0/23 Signature Algorithm: sha256WithRSAEncryption 49:21:c5:e2:5f:de:05:54:c6:dd:86:ad:69:02:47:1c:1a:62: 3d:f5:97:53:0b:1b:38:37:94:b0:dd:66:60:4f:a8:a8:3b:a7: fe:4f:95:41:73:d4:fc:99:9e:ff:f6:9e:22:69:08:8d:58:27: 1b:a4:0a:ce:be:11:b4:d3:f7:de:5a:7d:7f:f1:5b:b3:17:68: c9:d4:1d:58:47:39:88:06:73:92:0e:47:23:ec:f0:80:0d:60: 2c:72:1e:40:45:c5:e0:ad:dd:9f:f6:a2:9d:77:f1:c3:d1:21: 27:a4:29:bc:31:03:ba:27:28:db:dc:b7:08:69:77:92:da:a3: fd:82:20:e3:cf:39:dd:42:cb:34:ca:2a:43:44:be:6c:15:41: a8:3b:bc:2b:68:0f:c9:b7:6d:fa:04:f1:2a:2e:58:fe:1a:a6: ad:d9:7c:bc:82:91:21:ab:07:8a:54:83:64:78:da:1b:47:20: 49:43:48:fd:e7:59:ab:dc:bb:fe:7a:4b:c1:67:65:72:21:9f: fd:76:a5:00:cb:4b:96:0c:a7:97:0c:bc:bc:08:f1:a9:b0:5a: ea:90:f4:b4:3e:da:24:50:c9:ae:57:29:8b:9d:e5:f3:32:a0: fa:e8:a8:c8:78:cb:49:9d:fc:17:e8:f5:a4:93:61:7a:59:76: 8d:a1:26:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pth04JgPLucCkgTpL5ygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj ODI3N2UwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MThjZjQ0NWFmODBjOWUzNzVjYmVjN2ZiNzNmN2RhYmFiOTEzOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKJ7Katg1vrIGcVNQWnc3xpONhz/ HdwLxcfiCFhJLJ66hQzvCjnxWxDat7U4DRqKNty23cmOt2H0xW+dER2BQtBMn4Iq PGqY6aeW+2HjaiadcWSlE6k1ttSU5QZM5PrDto/J3MgdDZB0zw35toCK9bmKhfiL eZ06UPmmMfvVIX/4ix4S2/w08zVIvwHFrayVgNAd7jg/hI/1XeJPTaYz2N2xtXVb X6lI5dp3Bs+R1lqStviDzq6PlztKQee6LNwnTeMaL2cMkuYWAvGhUemCHig7Lfdc J9KrspfDVJfWnWNpzPZcf4ybG6iWnZ4WuLhx3rjeleOA+tZlNIV1dRWfNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGGM9EWvgMnjdcvsf7c/faurkTl8MB8GA1UdIwQY MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt NDdlMDkzNzk4OWE4LzEvWVl6MFJhLUF5ZU4xeS14X3R6OTlxNnVST1h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4 LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVC+4MA0G CSqGSIb3DQEBCwUAA4IBAQBJIcXiX94FVMbdhq1pAkccGmI99ZdTCxs4N5Sw3WZg T6ioO6f+T5VBc9T8mZ7/9p4iaQiNWCcbpArOvhG00/feWn1/8VuzF2jJ1B1YRzmI BnOSDkcj7PCADWAsch5ARcXgrd2f9qKdd/HD0SEnpCm8MQO6Jyjb3LcIaXeS2qP9 giDjzzndQss0yipDRL5sFUGoO7wraA/Jt236BPEqLlj+Gqat2Xy8gpEhqweKVINk eNobRyBJQ0j951mr3Lv+ekvBZ2VyIZ/9dqUAy0uWDKeXDLy8CPGpsFrqkPS0Ptok UMmuVymLneXzMqD66KjIeMtJnfwX6PWkk2F6WXaNoSaR -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:22 2026 by rpki-client