This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/YB_nGWcNw9qUX8wpVOK6TBj3DtU.roa File: YB_nGWcNw9qUX8wpVOK6TBj3DtU.roa (raw, json) Hash identifier: 8Vy5h9LCNlGMuWAukt3eAgST/HOlYo6a2vD/jiISkbs= Subject key identifier: 60:1F:E7:19:67:0D:C3:DA:94:5F:CC:29:54:E2:BA:4C:18:F7:0E:D5 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C128B877775AA2702A4E91E2855C704 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/YB_nGWcNw9qUX8wpVOK6TBj3DtU.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212461 IP address blocks: 80.66.65.0/24 maxlen: 24 80.66.78.0/24 maxlen: 24 87.251.84.0/24 maxlen: 24 87.251.85.0/24 maxlen: 24 194.113.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8b:87:77:75:aa:27:02:a4:e9:1e:28:55:c7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=601fe719670dc3da945fcc2954e2ba4c18f70ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:24:0f:c2:bb:17:19:f3:d3:47:13:92:52: fe:17:0c:2e:29:e0:71:be:4a:ce:ea:98:b9:5f:f6: 68:4e:82:df:a4:f0:cc:d2:96:cf:5b:ee:71:bb:d9: 6e:ec:b1:58:7d:f9:99:06:a5:57:14:43:e4:23:c1: 55:a1:47:38:dc:63:6d:52:22:ec:9d:c4:f5:1d:53: 78:06:8d:32:a4:1b:dc:37:bf:62:63:2e:f8:19:51: 3b:b1:72:fb:e9:d4:2d:4c:ae:5f:6f:34:c6:da:16: 6a:35:3e:66:25:7c:a3:2a:dc:81:30:ac:41:68:1a: 60:ea:cf:56:2f:4a:a5:f9:d2:c8:46:95:ec:22:c6: d6:73:fa:0c:2e:72:a0:97:24:0a:89:88:6f:bf:da: ea:52:6e:4c:d6:49:ec:6e:ed:8e:40:33:79:ba:f1: 97:c9:1e:a7:41:e5:f3:04:2e:36:78:8c:ea:ff:62: 00:54:05:fb:98:76:32:1d:34:3e:a8:0c:05:a6:a5: 39:0a:a8:59:50:9f:77:2f:6f:d3:81:0e:6a:2a:4a: 49:5d:58:d4:61:7d:5b:a3:29:6e:6d:41:70:97:bc: 6e:fe:df:18:c0:1f:9f:05:0d:e4:1e:50:75:31:a0: bf:ab:cb:dc:42:ad:28:a5:97:0c:6d:b2:7d:25:fc: 4b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1F:E7:19:67:0D:C3:DA:94:5F:CC:29:54:E2:BA:4C:18:F7:0E:D5 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/YB_nGWcNw9qUX8wpVOK6TBj3DtU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.65.0/24 80.66.78.0/24 87.251.84.0/23 194.113.235.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:75:2a:98:d7:31:44:a7:47:c7:a8:d0:c9:23:00:a6:a9:4e: ab:d5:26:e8:33:5f:9f:e3:6a:08:4d:07:c3:7e:8f:51:2a:a3: b7:5e:63:ba:94:58:05:c1:31:f5:61:89:16:e6:7b:99:fa:65: d4:1c:19:67:7c:fc:ba:9f:85:f3:5d:34:a1:c4:56:f6:28:0f: 48:eb:84:d3:f4:fa:d6:d3:02:3f:17:b2:b3:1c:78:ab:cb:79: cc:cf:ea:b1:67:33:d8:61:f4:df:6f:c5:7e:2e:35:6c:e4:f4: 80:65:49:c4:f1:5c:ec:24:db:63:08:99:34:27:38:4d:e4:1b: 4c:e9:12:e8:e5:bb:be:a2:cd:49:76:9f:fa:ec:f8:8a:f0:d9: f1:c0:40:81:4d:b0:6b:1b:70:10:52:de:2f:7c:72:52:1f:bc: 4e:d8:c9:c0:69:6c:88:b6:98:52:88:a9:23:cc:f8:12:f0:1e: 0e:7a:92:de:89:e1:92:a6:d4:25:49:74:70:27:cd:6c:b4:dd: 0c:2f:72:c0:d4:8c:b5:e3:7a:67:29:10:dc:ee:70:b0:77:87: 31:71:10:89:0d:8b:ad:5f:1c:f6:be:b9:93:61:1c:ae:fb:85: 51:bc:f6:0f:26:24:f1:f3:b7:98:24:9f:20:75:d3:8d:1c:fd: 72:b7:9e:c5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EouHd3WqJwKk6R4oVccEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDFmZTcxOTY3MGRjM2RhOTQ1ZmNjMjk1NGUyYmE0YzE4ZjcwZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1ckD8K7Fxnz00cTklL+FwwuKeBx vkrO6pi5X/ZoToLfpPDM0pbPW+5xu9lu7LFYffmZBqVXFEPkI8FVoUc43GNtUiLs ncT1HVN4Bo0ypBvcN79iYy74GVE7sXL76dQtTK5fbzTG2hZqNT5mJXyjKtyBMKxB aBpg6s9WL0ql+dLIRpXsIsbWc/oMLnKglyQKiYhvv9rqUm5M1knsbu2OQDN5uvGX yR6nQeXzBC42eIzq/2IAVAX7mHYyHTQ+qAwFpqU5CqhZUJ93L2/TgQ5qKkpJXVjU YX1boylubUFwl7xu/t8YwB+fBQ3kHlB1MaC/q8vcQq0opZcMbbJ9JfxLXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGAf5xlnDcPalF/MKVTiukwY9w7VMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvWUJfbkdXY053OXFVWDh3cFZPSzZUQmozRHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUEJBAwQA UEJOAwQBV/tUAwQAwnHrMA0GCSqGSIb3DQEBCwUAA4IBAQBqdSqY1zFEp0fHqNDJ IwCmqU6r1SboM1+f42oITQfDfo9RKqO3XmO6lFgFwTH1YYkW5nuZ+mXUHBlnfPy6 n4XzXTShxFb2KA9I64TT9PrW0wI/F7KzHHiry3nMz+qxZzPYYfTfb8V+LjVs5PSA ZUnE8VzsJNtjCJk0JzhN5BtM6RLo5bu+os1Jdp/67PiK8NnxwECBTbBrG3AQUt4v fHJSH7xO2MnAaWyItphSiKkjzPgS8B4OepLeieGSptQlSXRwJ81stN0ML3LA1Iy1 43pnKRDc7nCwd4cxcRCJDYutXxz2vrmTYRyu+4VRvPYPJiTx87eYJJ8gddONHP1y t57F -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:17 2026 by rpki-client