This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Ygsxykf3uzMluirmVMegyVoFLS0.roa File: Ygsxykf3uzMluirmVMegyVoFLS0.roa (raw, json) Hash identifier: oylu68VFzffinxutX7NTVCDb+jA6Sp7DjuwzucIVKqw= Subject key identifier: 62:0B:31:CA:47:F7:BB:33:25:BA:2A:E6:54:C7:A0:C9:5A:05:2D:2D Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019BEAC70656D78D49F21D3BBDFF2FF5526E Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Ygsxykf3uzMluirmVMegyVoFLS0.roa Signing time: Fri 23 Jan 2026 12:14:30 +0000 ROA not before: Fri 23 Jan 2026 12:14:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25211 IP address blocks: 94.26.0.0/24 maxlen: 24 94.26.3.0/24 maxlen: 24 94.26.32.0/24 maxlen: 24 94.26.38.0/24 maxlen: 24 94.26.41.0/24 maxlen: 24 94.26.42.0/24 maxlen: 24 94.26.68.0/24 maxlen: 24 94.26.69.0/24 maxlen: 24 94.26.83.0/24 maxlen: 24 94.26.88.0/24 maxlen: 24 192.109.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:c7:06:56:d7:8d:49:f2:1d:3b:bd:ff:2f:f5:52:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jan 23 12:14:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=620b31ca47f7bb3325ba2ae654c7a0c95a052d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:71:6d:ce:49:20:7e:07:0f:6d:a1:1b:3d: e1:c7:e7:f4:ea:ee:fb:fc:ed:29:c0:1f:48:fd:0d: e4:13:38:07:19:8f:8e:a9:01:79:09:d2:c3:72:e9: 0b:7d:ae:8a:a0:4f:a0:4e:37:5e:c1:48:02:14:ca: 4b:22:79:c7:b2:d9:8f:fa:c9:f8:b1:7b:64:76:14: 76:9d:78:10:be:bd:6c:0c:eb:e5:af:76:3d:db:8e: 95:3d:a8:87:dc:11:e6:c4:3b:fc:0a:a8:0e:50:77: ac:71:6e:a4:2a:63:a0:49:87:d1:03:5d:3c:76:d8: 26:5d:48:79:d5:c7:0b:06:b1:d4:8e:50:21:a7:5e: 5b:0f:08:0f:6a:66:95:06:ee:75:ce:ca:8f:c4:76: 45:69:f3:b1:55:d5:30:32:d9:92:b2:4b:a8:12:01: 01:e9:b8:b7:38:3f:8a:ed:76:fa:26:7a:1c:8e:06: 12:d9:fc:38:95:57:ef:bd:f1:d8:18:4c:91:7c:36: 1a:3b:1b:bc:b5:bc:b3:e1:8b:27:7e:f8:c1:87:87: 87:fa:82:0f:6a:42:6a:de:0f:81:bd:33:05:70:fc: e5:e1:3f:d1:d4:f9:e9:6d:7d:78:3a:b0:ab:62:33: d8:09:49:46:2e:60:37:e0:e5:ab:1d:60:0a:60:7d: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0B:31:CA:47:F7:BB:33:25:BA:2A:E6:54:C7:A0:C9:5A:05:2D:2D X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Ygsxykf3uzMluirmVMegyVoFLS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.0.0/24 94.26.3.0/24 94.26.32.0/24 94.26.38.0/24 94.26.41.0-94.26.42.255 94.26.68.0/23 94.26.83.0/24 94.26.88.0/24 192.109.139.0/24 Signature Algorithm: sha256WithRSAEncryption 14:05:2e:c3:84:41:ca:2c:f6:94:0d:a0:b4:ef:32:61:6e:a0: 56:6d:30:52:5b:4f:c7:5b:5d:eb:2b:da:00:27:2a:b8:69:6d: 3e:9c:bc:3a:46:84:d2:b9:fd:93:49:2a:dc:bd:09:2c:92:3b: ec:52:6d:8d:21:6a:ae:22:7f:d1:5e:cd:82:40:7d:ee:ca:5e: 59:18:57:07:89:f0:29:cf:e7:13:98:b5:22:c6:84:47:df:0b: 97:65:22:a3:30:4d:83:7f:a2:57:1f:1e:2e:2e:13:ef:6f:59: 7b:88:63:c0:21:2b:9a:f7:3f:0b:82:fb:f2:26:6d:53:27:24: ce:3b:2c:1c:11:d4:35:28:fa:5e:31:39:af:71:5a:9e:28:a2: a2:58:ac:8c:d7:f8:86:86:5a:4c:9e:ba:74:34:ef:23:45:44: 7b:06:b3:f2:7f:73:f1:b2:18:67:8d:4c:19:06:15:db:f2:24: 9d:3c:09:71:70:6c:ac:ce:a3:00:ed:60:2f:0e:e5:a9:93:46: d1:03:5f:ad:ec:00:68:a8:9e:5a:0e:0f:b7:94:77:43:39:f2: 86:9a:0b:eb:5f:67:77:7a:13:f5:75:4b:72:8d:94:9a:ef:8b: 79:bf:51:66:10:1f:83:9e:a9:b4:3e:a7:f7:c7:5a:b8:cf:89: a8:75:1f:97 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZvqxwZW141J8h07vf8v9VJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMTIzMTIxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjBiMzFjYTQ3ZjdiYjMzMjViYTJhZTY1NGM3YTBjOTVhMDUyZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobBxbc5JIH4HD22hGz3hx+f06u77 /O0pwB9I/Q3kEzgHGY+OqQF5CdLDcukLfa6KoE+gTjdewUgCFMpLInnHstmP+sn4 sXtkdhR2nXgQvr1sDOvlr3Y9246VPaiH3BHmxDv8CqgOUHescW6kKmOgSYfRA108 dtgmXUh51ccLBrHUjlAhp15bDwgPamaVBu51zsqPxHZFafOxVdUwMtmSskuoEgEB 6bi3OD+K7Xb6JnocjgYS2fw4lVfvvfHYGEyRfDYaOxu8tbyz4YsnfvjBh4eH+oIP akJq3g+BvTMFcPzl4T/R1PnpbX14OrCrYjPYCUlGLmA34OWrHWAKYH0X2wIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFGILMcpH97szJboq5lTHoMlaBS0tMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvWWdzeHlrZjN1ek1sdWlybVZNZWd5Vm9GTFMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAXhoAAwQA XhoDAwQAXhogAwQAXhomMAwDBABeGikDBABeGioDBAFeGkQDBABeGlMDBABeGlgD BADAbYswDQYJKoZIhvcNAQELBQADggEBABQFLsOEQcos9pQNoLTvMmFuoFZtMFJb T8dbXesr2gAnKrhpbT6cvDpGhNK5/ZNJKty9CSySO+xSbY0haq4if9FezYJAfe7K XlkYVweJ8CnP5xOYtSLGhEffC5dlIqMwTYN/olcfHi4uE+9vWXuIY8AhK5r3PwuC +/ImbVMnJM47LBwR1DUo+l4xOa9xWp4ooqJYrIzX+IaGWkyeunQ07yNFRHsGs/J/ c/GyGGeNTBkGFdvyJJ08CXFwbKzOowDtYC8O5amTRtEDX63sAGionloOD7eUd0M5 8oaaC+tfZ3d6E/V1S3KNlJrvi3m/UWYQH4OeqbQ+p/fHWrjPiah1H5c= -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:30 2026 by rpki-client