This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa File: YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa (raw, json) Hash identifier: jx8KSb9gYYltGS0dfqO/0sgILL/tPjue23+E+n9mHYY= Subject key identifier: 61:55:52:C4:2E:30:6C:D4:C4:E9:A9:8F:3A:3F:DA:51:6B:BD:2A:64 Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Certificate serial: 019B7C804B8E0CAD4AB9E125379D155B6927 Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203038 IP address blocks: 185.243.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4b:8e:0c:ad:4a:b9:e1:25:37:9d:15:5b:69:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=615552c42e306cd4c4e9a98f3a3fda516bbd2a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:1c:b4:dc:a2:85:17:60:43:62:eb:df:a9: 5f:42:39:89:64:29:ea:aa:a7:2d:a2:d6:55:a1:de: 3d:a5:53:88:7e:7a:74:2b:92:99:28:d3:5a:1a:29: d0:a7:c8:41:78:e4:9a:19:22:44:e6:7c:dd:70:db: 36:a1:e6:63:16:05:75:21:2b:a4:b7:4a:be:72:21: da:9d:d6:a5:e5:c6:7c:e4:6d:c6:24:05:ee:d3:63: bd:3f:75:99:60:55:6b:5a:5a:38:3d:a2:a6:99:43: ca:97:f6:0d:b9:5e:47:ce:5c:b0:03:69:bb:12:5c: 6a:eb:a1:9d:c5:24:74:87:ae:2d:ae:5f:49:92:91: f7:c3:52:a8:b3:5a:3d:40:35:8c:b9:55:c5:ad:4c: 87:4d:b1:7b:78:c1:de:53:f1:2f:51:77:cf:e9:f3: 11:ae:5a:70:b7:50:32:43:a7:22:31:32:0c:94:1f: 74:88:80:71:21:4d:05:b6:91:aa:d9:c2:46:64:5f: 1d:e6:8c:4b:42:e1:bf:1a:72:39:31:90:d1:b6:12: 38:29:ee:f7:96:75:01:77:69:21:ae:7f:10:e6:f3: 09:73:62:50:af:3e:dd:12:08:53:c7:6c:65:9e:b9: fd:4c:9f:45:2a:03:31:af:4f:d8:bb:f8:bd:e3:39: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:55:52:C4:2E:30:6C:D4:C4:E9:A9:8F:3A:3F:DA:51:6B:BD:2A:64 X509v3 Authority Key Identifier: keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.23.0/24 Signature Algorithm: sha256WithRSAEncryption 45:42:da:2b:d9:5b:cb:0f:72:8b:1d:09:7a:70:0c:9d:09:d1: 23:4e:b0:11:00:09:cc:e0:9c:46:45:7a:40:2c:a0:01:9e:1d: b8:b2:da:1a:2a:67:1b:e1:c7:86:8b:97:ae:8a:ad:44:3f:23: 0b:29:0b:57:33:62:f1:ce:01:62:5d:1a:ff:3d:09:9b:bf:64: dd:4f:44:20:36:f2:65:6d:0d:df:f8:ea:56:77:f2:91:aa:bd: b7:a1:87:61:94:a6:80:3c:0f:5b:1e:c9:c9:a1:7b:bd:a4:15: 75:b6:41:58:d0:fc:33:12:79:cf:fe:e7:51:1b:52:69:16:94: c4:dd:71:93:80:27:32:76:35:86:bc:0d:d1:80:a1:77:7d:4a: d9:ff:8d:1f:cf:27:ae:78:da:13:4e:0a:7b:59:31:38:0f:da: 0d:f0:93:e3:15:20:44:6b:7b:dc:c3:91:7b:bd:71:03:74:f3: 61:34:73:95:96:9d:ef:19:a1:ec:ee:a1:22:b1:54:44:2f:94: 84:1b:07:65:ed:c6:17:8f:e1:76:1a:e7:f5:fb:85:12:77:b4: 98:49:04:dd:cb:77:6b:62:5b:78:4d:3f:fa:c1:0c:e7:9d:75: 4d:64:d0:b5:31:5f:19:6a:8d:68:0b:21:9c:bc:9d:03:da:92: 49:eb:4f:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEuODK1KueElN50VW2knMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz ZDM5MDgwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTU1NTJjNDJlMzA2Y2Q0YzRlOWE5OGYzYTNmZGE1MTZiYmQyYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntYctNyihRdgQ2Lr36lfQjmJZCnq qqctotZVod49pVOIfnp0K5KZKNNaGinQp8hBeOSaGSJE5nzdcNs2oeZjFgV1ISuk t0q+ciHandal5cZ85G3GJAXu02O9P3WZYFVrWlo4PaKmmUPKl/YNuV5HzlywA2m7 Elxq66GdxSR0h64trl9JkpH3w1Kos1o9QDWMuVXFrUyHTbF7eMHeU/EvUXfP6fMR rlpwt1AyQ6ciMTIMlB90iIBxIU0FtpGq2cJGZF8d5oxLQuG/GnI5MZDRthI4Ke73 lnUBd2khrn8Q5vMJc2JQrz7dEghTx2xlnrn9TJ9FKgMxr0/Yu/i94zn4FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFVUsQuMGzUxOmpjzo/2lFrvSpkMB8GA1UdIwQY MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt YTYwNTcxN2QzNGFlLzEvWVZWU3hDNHdiTlRFNmFtUE9qX2FVV3U5S21RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufMXMA0G CSqGSIb3DQEBCwUAA4IBAQBFQtor2VvLD3KLHQl6cAydCdEjTrARAAnM4JxGRXpA LKABnh24stoaKmcb4ceGi5euiq1EPyMLKQtXM2LxzgFiXRr/PQmbv2TdT0QgNvJl bQ3f+OpWd/KRqr23oYdhlKaAPA9bHsnJoXu9pBV1tkFY0PwzEnnP/udRG1JpFpTE 3XGTgCcydjWGvA3RgKF3fUrZ/40fzyeueNoTTgp7WTE4D9oN8JPjFSBEa3vcw5F7 vXEDdPNhNHOVlp3vGaHs7qEisVREL5SEGwdl7cYXj+F2Guf1+4USd7SYSQTdy3dr Ylt4TT/6wQznnXVNZNC1MV8Zao1oCyGcvJ0D2pJJ60+S -----END CERTIFICATE-----Generated at Sun Jan 25 15:47:32 2026 by rpki-client