This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa File: YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa (raw, json) Hash identifier: hRmDSB2XVzgwKx2/p0YzSDUPDkJ5hlG/bnoU+nNpOPU= Subject key identifier: 62:B3:27:80:E0:95:D6:A6:14:67:61:B9:2F:44:57:75:B3:8A:EC:BB Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38E1496A140EBC62EFA029B50246C6 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397238 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e1:49:6a:14:0e:bc:62:ef:a0:29:b5:02:46:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62b32780e095d6a6146761b92f445775b38aecbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:91:e7:57:d8:fd:17:bf:e3:fa:95:c4:41: 7a:49:99:92:04:ce:d4:95:62:ab:94:6a:ea:76:cd: 4e:eb:c9:92:4e:39:d7:7c:d4:15:8b:01:40:96:1f: 83:0f:99:18:05:55:3e:55:4a:9e:62:e2:23:1a:95: 1b:30:77:5d:a4:8d:65:96:b0:dc:dd:f6:0d:56:5c: aa:50:c7:80:29:bf:3b:68:d3:78:8a:24:a8:4a:be: 3e:0b:d3:15:0a:8f:bd:5f:29:6b:43:fb:98:e4:b0: 50:79:0a:71:63:1c:05:b7:c4:88:26:9a:a7:b6:c8: 3d:97:05:43:63:13:53:43:ce:a8:aa:38:62:62:b0: 27:31:af:1d:bd:5a:46:6f:39:c4:c7:27:99:a3:2b: 8f:45:f6:57:78:ea:c1:87:5b:45:2c:88:b0:cf:3b: 9b:b6:56:7c:75:6f:6d:8e:6d:e0:d2:1f:22:50:f6: de:41:62:07:33:04:87:3c:0e:3e:f7:86:7e:a2:eb: 54:af:32:83:c7:86:34:4d:ae:f6:c3:db:a6:96:9a: 1f:30:21:f5:3d:cf:0d:f7:08:2a:de:ee:d2:43:48: 18:4a:b7:c6:43:04:5c:08:7f:02:46:c9:00:9a:d4: e3:68:3e:d5:ec:d2:59:46:93:39:4e:6d:11:28:76: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B3:27:80:E0:95:D6:A6:14:67:61:B9:2F:44:57:75:B3:8A:EC:BB X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 83:4b:22:22:cb:09:54:f9:51:17:1c:aa:76:e1:c9:d2:38:fc: fd:d0:80:94:12:16:7a:74:3c:30:c5:14:a2:7d:6d:5b:21:fd: 71:2f:d2:3a:0e:2a:d7:d3:c5:05:2d:7b:c1:2e:62:bd:62:49: 28:a7:0d:71:6e:9c:87:d3:9e:dc:43:72:40:8c:87:b3:63:ca: c6:60:09:cb:7e:a1:2c:2d:f1:17:b4:c3:f5:9a:5a:4a:3d:27: b4:c7:74:ca:8b:39:af:42:03:a4:08:59:d6:be:ba:61:5c:17: 36:73:bb:02:f3:f2:b3:95:52:08:ce:90:ef:14:3b:23:c3:5e: 9a:4c:ef:8e:f8:4b:04:37:f7:2a:5b:7e:cf:72:01:78:54:c9: 58:13:4f:2a:42:25:21:b9:48:e1:5b:87:69:7a:3c:55:f6:0d: f6:36:be:c0:7b:23:9b:ec:d9:d1:be:e1:33:f2:51:f9:e6:a4: ab:d1:72:b8:55:a4:d2:29:ae:55:a3:eb:89:88:8d:08:d7:db: 82:0f:5a:51:dd:09:ee:37:6b:aa:21:7b:5f:59:00:a1:6e:53: 05:cc:66:75:42:08:2c:00:fe:40:a9:6f:5a:79:15:bd:e4:0b: 57:ab:62:1b:e1:a6:cd:56:27:72:8b:b1:2b:15:8b:99:2e:62: 5a:42:88:25 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OOFJahQOvGLvoCm1AkbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmIzMjc4MGUwOTVkNmE2MTQ2NzYxYjkyZjQ0NTc3NWIzOGFlY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQyR51fY/Re/4/qVxEF6SZmSBM7U lWKrlGrqds1O68mSTjnXfNQViwFAlh+DD5kYBVU+VUqeYuIjGpUbMHddpI1llrDc 3fYNVlyqUMeAKb87aNN4iiSoSr4+C9MVCo+9XylrQ/uY5LBQeQpxYxwFt8SIJpqn tsg9lwVDYxNTQ86oqjhiYrAnMa8dvVpGbznExyeZoyuPRfZXeOrBh1tFLIiwzzub tlZ8dW9tjm3g0h8iUPbeQWIHMwSHPA4+94Z+outUrzKDx4Y0Ta72w9umlpofMCH1 Pc8N9wgq3u7SQ0gYSrfGQwRcCH8CRskAmtTjaD7V7NJZRpM5Tm0RKHYAcwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGKzJ4DgldamFGdhuS9EV3Wziuy7MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvWXJNbmdPQ1YxcVlVWjJHNUwwUlhkYk9LN0xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQCDSyIiywlU+VEXHKp2 4cnSOPz90ICUEhZ6dDwwxRSifW1bIf1xL9I6DirX08UFLXvBLmK9Ykkopw1xbpyH 057cQ3JAjIezY8rGYAnLfqEsLfEXtMP1mlpKPSe0x3TKizmvQgOkCFnWvrphXBc2 c7sC8/KzlVIIzpDvFDsjw16aTO+O+EsEN/cqW37PcgF4VMlYE08qQiUhuUjhW4dp ejxV9g32Nr7AeyOb7NnRvuEz8lH55qSr0XK4VaTSKa5Vo+uJiI0I19uCD1pR3Qnu N2uqIXtfWQChblMFzGZ1QggsAP5AqW9aeRW95AtXq2Ib4abNVidyi7ErFYuZLmJa Qogl -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:24 2026 by rpki-client