This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/YwZPhm_oPIIN_h73HSe7_TwtVu4.roa File: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (raw, json) Hash identifier: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M= Subject key identifier: 63:06:4F:86:6F:E8:3C:82:0D:FE:1E:F7:1D:27:BB:FD:3C:2D:56:EE Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Certificate serial: 019B7E3822295B5B6492B0E8A4A515C37AD4 Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/YwZPhm_oPIIN_h73HSe7_TwtVu4.roa Signing time: Fri 02 Jan 2026 10:19:26 +0000 ROA not before: Fri 02 Jan 2026 10:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.246.62.0/23 maxlen: 23 193.246.62.0/24 maxlen: 24 193.246.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:22:29:5b:5b:64:92:b0:e8:a4:a5:15:c3:7a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Validity Not Before: Jan 2 10:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63064f866fe83c820dfe1ef71d27bbfd3c2d56ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:0f:30:49:c8:cd:18:2c:4a:b2:17:41:24: f2:fa:d6:f5:fb:0f:3b:00:ae:14:d1:f1:cd:4e:6f: 6e:c8:14:1f:e6:86:79:47:47:1c:1f:3c:45:7c:3e: de:e7:73:d7:1e:ce:93:c4:05:7c:e8:80:0f:65:55: 3a:45:04:79:bf:d3:74:b0:7f:6d:87:5d:9f:ca:23: f6:70:17:c7:47:5c:eb:ae:ba:f4:5f:b4:34:b1:3e: 79:0d:56:6f:af:68:15:2d:6b:b7:9f:15:cf:d3:6d: 14:19:7f:f8:bc:12:e6:71:fd:97:c6:3d:b9:0b:c9: e4:54:23:0e:68:5f:65:ed:1b:1b:38:67:53:c8:00: 74:fd:a5:96:6c:de:1f:fa:02:0f:3a:b1:a4:9a:eb: fc:04:d7:d8:f0:bc:25:75:aa:78:3c:fc:eb:a9:db: 27:ab:3f:c7:8a:94:a4:34:35:fe:a6:77:5e:4f:16: 6c:94:69:12:80:96:fa:35:37:8e:71:67:63:3a:1e: 39:f2:d2:d2:de:99:3a:a7:ee:de:8f:3d:a6:c1:e7: a9:9f:10:cb:f2:b0:0f:f3:ee:34:85:d7:2e:3c:d3: 89:43:4a:ac:dc:7f:6d:d2:06:90:13:f7:7a:3e:f9: 5e:25:b2:41:4c:93:f5:42:c8:4f:ae:b4:5e:f9:ea: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:06:4F:86:6F:E8:3C:82:0D:FE:1E:F7:1D:27:BB:FD:3C:2D:56:EE X509v3 Authority Key Identifier: keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/YwZPhm_oPIIN_h73HSe7_TwtVu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.246.62.0/23 Signature Algorithm: sha256WithRSAEncryption 44:65:56:ee:e9:df:20:bf:76:68:73:e8:f8:c7:7c:42:c1:9b: b8:be:34:ec:df:70:9a:b9:67:0f:70:15:8b:e9:04:d9:12:84: 9e:4e:a8:06:74:b6:08:1d:b8:58:fb:47:06:2e:ef:3e:55:0b: fb:ea:bd:bc:eb:26:50:dd:11:0e:aa:13:3c:ca:df:27:25:fd: 75:4c:5c:34:24:7f:1f:0e:4b:06:9b:15:82:69:aa:7a:ba:67: 2e:5d:29:64:79:d0:db:e2:fc:45:1c:27:a1:65:81:77:b0:89: a8:d0:82:cc:f6:d6:68:f7:74:ce:b9:0f:bf:9a:c2:a5:16:5b: c4:f1:f5:ed:26:02:e8:d8:80:a7:5c:f4:3b:3c:bd:ef:d2:28: 6e:b3:34:11:29:f7:42:e2:0f:4a:32:ea:87:ca:2c:85:16:ea: 0f:08:c3:3b:d7:de:54:5c:40:9f:02:f4:df:52:fe:18:b3:8f: f0:38:e8:b7:e4:2b:6e:74:a9:ec:2f:99:d3:b3:5c:12:7b:88: ff:4c:3f:8a:61:84:96:d6:6a:14:ef:c1:1f:18:fe:2d:91:fc: 20:b9:30:44:c3:65:2f:0d:07:c9:71:2a:28:5a:81:43:a8:e2: 50:c4:64:ab:ae:13:38:84:42:4f:9d:e2:0e:a4:3b:4a:4b:1c: d0:e6:5d:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCIpW1tkkrDopKUVw3rUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNDY2NDQwNjZjZWFmMzlkM2FmYjBmZDczNWIwMTljZWM5 ZGEzNjQwHhcNMjYwMTAyMTAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzA2NGY4NjZmZTgzYzgyMGRmZTFlZjcxZDI3YmJmZDNjMmQ1NmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGcPMEnIzRgsSrIXQSTy+tb1+w87 AK4U0fHNTm9uyBQf5oZ5R0ccHzxFfD7e53PXHs6TxAV86IAPZVU6RQR5v9N0sH9t h12fyiP2cBfHR1zrrrr0X7Q0sT55DVZvr2gVLWu3nxXP020UGX/4vBLmcf2Xxj25 C8nkVCMOaF9l7RsbOGdTyAB0/aWWbN4f+gIPOrGkmuv8BNfY8Lwldap4PPzrqdsn qz/HipSkNDX+pndeTxZslGkSgJb6NTeOcWdjOh458tLS3pk6p+7ejz2mweepnxDL 8rAP8+40hdcuPNOJQ0qs3H9t0gaQE/d6PvleJbJBTJP1QshPrrRe+epCcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMGT4Zv6DyCDf4e9x0nu/08LVbuMB8GA1UdIwQY MBaAFK5GZEBmzq8506+w/XNbAZzsnaNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMt OGQ5ZjExZjkxNmU5LzEvWXdaUGhtX29QSUlOX2g3M0hTZTdfVHd0VnU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMtOGQ5ZjExZjkxNmU5 LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwfY+MA0G CSqGSIb3DQEBCwUAA4IBAQBEZVbu6d8gv3Zoc+j4x3xCwZu4vjTs33CauWcPcBWL 6QTZEoSeTqgGdLYIHbhY+0cGLu8+VQv76r286yZQ3REOqhM8yt8nJf11TFw0JH8f DksGmxWCaap6umcuXSlkedDb4vxFHCehZYF3sImo0ILM9tZo93TOuQ+/msKlFlvE 8fXtJgLo2ICnXPQ7PL3v0ihuszQRKfdC4g9KMuqHyiyFFuoPCMM7195UXECfAvTf Uv4Ys4/wOOi35CtudKnsL5nTs1wSe4j/TD+KYYSW1moU78EfGP4tkfwguTBEw2Uv DQfJcSooWoFDqOJQxGSrrhM4hEJPneIOpDtKSxzQ5l3d -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:32 2026 by rpki-client