This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/yv6GTgB8xUdjGSJ-WYO3ljh4vXQ.roa File: yv6GTgB8xUdjGSJ-WYO3ljh4vXQ.roa (raw, json) Hash identifier: UDSjqu8bR6KYleAZtw08mMfNpTx3B4MwtREdogLO9GA= Subject key identifier: CA:FE:86:4E:00:7C:C5:47:63:19:22:7E:59:83:B7:96:38:78:BD:74 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F5989D48891A7550318CE01C93B8F Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/yv6GTgB8xUdjGSJ-WYO3ljh4vXQ.roa Signing time: Fri 02 Jan 2026 02:17:59 +0000 ROA not before: Fri 02 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197431 IP address blocks: 85.232.225.0/24 maxlen: 24 85.232.246.0/24 maxlen: 24 213.189.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:59:89:d4:88:91:a7:55:03:18:ce:01:c9:3b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cafe864e007cc5476319227e5983b7963878bd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:10:83:d1:64:7d:a1:e9:0b:02:cd:0b:9a: fa:a7:0c:03:bc:68:09:fa:f8:76:26:42:7a:5a:f3: 30:d5:c0:e5:3e:62:07:b6:f5:8a:cf:6d:2c:5b:43: fa:fd:82:67:5d:b1:ea:c7:91:c7:90:96:39:1c:15: d7:54:05:87:8b:16:0c:dd:cc:21:1b:48:34:30:01: 6d:20:e7:97:44:d5:68:67:1a:a0:ef:41:c9:4e:04: d8:22:c2:e9:d9:41:13:21:a7:17:ee:8e:c1:0d:3a: 6f:6a:c4:60:45:13:a5:5c:30:5a:34:37:ee:9c:c1: 96:40:9d:28:6f:97:8a:80:c5:3f:fd:f9:8c:f5:66: 08:f9:ba:6c:19:01:79:81:fc:5d:43:f4:2b:d7:c8: 5a:7c:01:19:30:fd:12:90:69:dc:e2:f4:c3:96:6c: 4a:75:63:5b:80:a6:11:be:9c:35:4f:dc:45:24:f6: 8f:7f:0b:82:75:1b:8d:95:37:a2:49:e9:2d:ea:7c: d6:24:15:07:4b:ed:5f:c8:4b:cc:ef:24:a9:12:71: cd:91:73:69:bc:84:9a:21:bb:90:92:bb:42:4a:21: 74:81:b2:f1:fd:37:71:5d:ed:61:e9:c2:24:4e:57: c7:38:38:fd:72:60:a0:c0:69:24:48:47:79:a4:a0: 3d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FE:86:4E:00:7C:C5:47:63:19:22:7E:59:83:B7:96:38:78:BD:74 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/yv6GTgB8xUdjGSJ-WYO3ljh4vXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.232.225.0/24 85.232.246.0/24 213.189.48.0/24 Signature Algorithm: sha256WithRSAEncryption 68:2c:93:f9:da:10:ba:6f:0b:c9:4e:91:1e:54:bc:6f:71:4c: 62:4d:a3:57:f0:26:20:3a:a7:bd:5e:61:9b:a9:b6:6f:72:eb: 9f:78:71:df:90:41:d1:ea:0e:c5:20:d2:8d:ee:0a:4a:d6:6d: 52:17:35:ca:ae:17:88:4a:5e:aa:1c:88:0a:a6:56:03:ff:da: f7:c9:2a:a6:50:e1:fa:2a:5d:f8:c7:fa:9f:cf:7e:f7:e9:61: 28:25:b2:46:fd:79:0c:65:aa:c7:ed:2b:4c:9d:16:e8:62:a9: 56:bf:35:98:6c:1d:f7:b8:06:ee:a7:2b:02:00:b0:37:0f:7e: c0:ac:ac:4f:16:d5:db:40:9a:d7:ba:2b:46:75:e4:e8:38:ba: ea:ab:37:02:46:a5:ed:3c:1f:42:37:03:8a:f9:d7:cc:40:30: b8:84:88:2c:34:a8:be:b1:6c:84:9f:d0:8e:20:4f:10:d3:ce: 98:04:36:79:06:1f:a4:a3:ff:c8:08:9e:1c:7a:6c:f1:7e:cc: e0:9f:48:a1:1d:6e:43:2d:11:07:a6:80:98:81:5d:b5:ef:6e: 32:93:e4:2a:06:d5:f1:f3:97:aa:cb:25:ed:c1:53:49:82:6e: 43:f4:ff:77:0e:c6:62:92:5d:2c:56:80:c1:d2:58:58:0d:41: 78:1e:5d:d7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f1mJ1IiRp1UDGM4ByTuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWZlODY0ZTAwN2NjNTQ3NjMxOTIyN2U1OTgzYjc5NjM4NzhiZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9gQg9FkfaHpCwLNC5r6pwwDvGgJ +vh2JkJ6WvMw1cDlPmIHtvWKz20sW0P6/YJnXbHqx5HHkJY5HBXXVAWHixYM3cwh G0g0MAFtIOeXRNVoZxqg70HJTgTYIsLp2UETIacX7o7BDTpvasRgRROlXDBaNDfu nMGWQJ0ob5eKgMU//fmM9WYI+bpsGQF5gfxdQ/Qr18hafAEZMP0SkGnc4vTDlmxK dWNbgKYRvpw1T9xFJPaPfwuCdRuNlTeiSekt6nzWJBUHS+1fyEvM7ySpEnHNkXNp vISaIbuQkrtCSiF0gbLx/TdxXe1h6cIkTlfHODj9cmCgwGkkSEd5pKA95wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMr+hk4AfMVHYxkiflmDt5Y4eL10MB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEveXY2R1RnQjh4VWRqR1NKLVdZTzNsamg0dlhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVejhAwQA Vej2AwQA1b0wMA0GCSqGSIb3DQEBCwUAA4IBAQBoLJP52hC6bwvJTpEeVLxvcUxi TaNX8CYgOqe9XmGbqbZvcuufeHHfkEHR6g7FINKN7gpK1m1SFzXKrheISl6qHIgK plYD/9r3ySqmUOH6Kl34x/qfz3736WEoJbJG/XkMZarH7StMnRboYqlWvzWYbB33 uAbupysCALA3D37ArKxPFtXbQJrXuitGdeToOLrqqzcCRqXtPB9CNwOK+dfMQDC4 hIgsNKi+sWyEn9COIE8Q086YBDZ5Bh+ko//ICJ4cemzxfszgn0ihHW5DLREHpoCY gV21724yk+QqBtXx85eqyyXtwVNJgm5D9P93DsZikl0sVoDB0lhYDUF4Hl3X -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:19 2026 by rpki-client