This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/Y9TiWW63huz2Y3RHyUrV0t01KvA.roa File: Y9TiWW63huz2Y3RHyUrV0t01KvA.roa (raw, json) Hash identifier: rNdERlf12PuGe5Ze8mFCZtIt+e3TVhdioA/m3kjwSCA= Subject key identifier: 63:D4:E2:59:6E:B7:86:EC:F6:63:74:47:C9:4A:D5:D2:DD:35:2A:F0 Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca Certificate serial: 019B7DCA21EEE780BF53A96E3F3BC1F46387 Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/Y9TiWW63huz2Y3RHyUrV0t01KvA.roa Signing time: Fri 02 Jan 2026 08:19:17 +0000 ROA not before: Fri 02 Jan 2026 08:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 195.2.220.0/23 maxlen: 23 195.2.220.0/24 maxlen: 24 195.2.221.0/24 maxlen: 24 2001:67c:1508::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:21:ee:e7:80:bf:53:a9:6e:3f:3b:c1:f4:63:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca Validity Not Before: Jan 2 08:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63d4e2596eb786ecf6637447c94ad5d2dd352af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:85:1a:a0:1f:24:27:c5:7b:19:df:87:28:87: c1:a1:9e:9c:4a:02:c7:7e:ce:24:ab:56:6a:8b:41: 56:10:8d:71:c4:a2:44:17:c0:1a:1b:fe:cd:ae:ac: 67:6f:ce:2a:9f:f8:d8:66:5f:71:54:1b:45:80:7f: 24:25:92:14:bd:ad:52:59:d0:89:4f:ee:b6:44:6e: 9a:b4:42:eb:d2:04:2a:ba:53:ee:da:9c:cf:92:90: fb:b5:d1:1c:c9:37:a7:fb:1d:d1:03:14:89:92:ff: 70:11:b5:59:8f:b9:47:6e:e1:ea:81:54:8f:65:4b: b8:7c:7f:8d:6a:26:6f:c7:64:4a:c6:70:bd:a6:40: 87:cf:b5:c3:9c:cc:fa:a1:03:a6:a2:b0:28:8d:e6: 8a:74:e1:77:2f:54:1b:bb:8f:b6:57:cc:f4:bb:08: c4:67:70:21:6e:5d:ad:cf:47:67:58:8e:ae:44:9a: d6:33:30:fb:61:12:e2:c6:b7:ca:f9:a1:94:5d:5c: 9c:23:08:a3:7b:68:51:88:f6:e1:0e:83:32:48:52: 4a:3f:8f:a3:51:06:d8:51:46:b8:80:6b:ea:a6:1a: da:58:f1:b5:66:ad:ed:88:83:e7:58:e7:6c:7e:bf: 5f:c3:ca:86:33:7d:48:4c:d3:9e:ee:e5:87:31:a1: 20:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D4:E2:59:6E:B7:86:EC:F6:63:74:47:C9:4A:D5:D2:DD:35:2A:F0 X509v3 Authority Key Identifier: keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/Y9TiWW63huz2Y3RHyUrV0t01KvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.2.220.0/23 IPv6: 2001:67c:1508::/48 Signature Algorithm: sha256WithRSAEncryption 3c:3f:cd:9d:91:0a:8a:30:fd:37:cf:4a:40:ad:7f:84:c4:da: bc:a9:97:7c:54:20:d1:1d:0a:31:68:26:f3:1e:d3:a7:72:3f: 15:36:6d:4a:ef:42:5d:78:33:0d:4c:df:30:ff:94:da:2c:09: 66:53:a2:4b:95:85:89:e4:88:39:55:bd:75:fa:03:6e:50:7b: 50:a8:b5:e3:88:0a:d6:11:9c:94:e6:63:4d:42:9d:cf:89:f2: 39:84:9b:84:8f:22:f2:10:d5:2e:26:07:55:64:7f:b2:7a:67: d6:42:40:04:fe:6a:8d:2c:b9:1c:b0:0d:24:1b:ad:c1:6d:77: 2f:56:b5:b7:10:4d:5f:df:3e:0e:f5:c1:9e:e7:8d:bc:47:c3: 6e:dc:9a:28:a3:e4:9a:ea:ef:db:17:90:8f:82:b4:42:af:63: 5d:73:6c:f2:56:e2:97:b6:b5:16:b6:e4:a7:0c:7b:01:fd:b9: a3:5e:b5:60:ef:6f:11:74:48:62:14:8d:b0:3f:37:a1:d4:8b: 61:be:ef:ea:6b:78:42:38:32:a4:ff:53:ed:52:03:a8:92:52: 4b:e1:80:f4:42:5f:9a:b3:95:40:b9:58:3b:3a:36:62:95:c1: 8f:05:fc:20:2c:cf:32:65:27:b9:03:e9:d9:0a:0a:4f:ae:67: b1:34:7c:b1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yiHu54C/U6luPzvB9GOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NjE3ZDJlMDg2MzU4ZGRhN2JkYjBkYzQ2NmNhMWM4NmVk NGZlY2EwHhcNMjYwMTAyMDgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2Q0ZTI1OTZlYjc4NmVjZjY2Mzc0NDdjOTRhZDVkMmRkMzUyYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYUaoB8kJ8V7Gd+HKIfBoZ6cSgLH fs4kq1Zqi0FWEI1xxKJEF8AaG/7Nrqxnb84qn/jYZl9xVBtFgH8kJZIUva1SWdCJ T+62RG6atELr0gQqulPu2pzPkpD7tdEcyTen+x3RAxSJkv9wEbVZj7lHbuHqgVSP ZUu4fH+NaiZvx2RKxnC9pkCHz7XDnMz6oQOmorAojeaKdOF3L1Qbu4+2V8z0uwjE Z3Ahbl2tz0dnWI6uRJrWMzD7YRLixrfK+aGUXVycIwije2hRiPbhDoMySFJKP4+j UQbYUUa4gGvqphraWPG1Zq3tiIPnWOdsfr9fw8qGM31ITNOe7uWHMaEglwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGPU4llut4bs9mN0R8lK1dLdNSrwMB8GA1UdIwQY MBaAFEVhfS4IY1jdp72w3EZsochu1P7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUldGOUxnaGpXTjJudmJEY1JteWh5RzdVX3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kODFiNTktYzA1YS00OGZlLWI1YjEt MTU4OTI3MzM3Njg5LzEvWTlUaVdXNjNodXoyWTNSSHlVclYwdDAxS3ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kODFiNTktYzA1YS00OGZlLWI1YjEtMTU4OTI3MzM3Njg5 LzEvUldGOUxnaGpXTjJudmJEY1JteWh5RzdVX3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwwLcMA8E AgACMAkDBwAgAQZ8FQgwDQYJKoZIhvcNAQELBQADggEBADw/zZ2RCoow/TfPSkCt f4TE2rypl3xUINEdCjFoJvMe06dyPxU2bUrvQl14Mw1M3zD/lNosCWZTokuVhYnk iDlVvXX6A25Qe1CoteOICtYRnJTmY01Cnc+J8jmEm4SPIvIQ1S4mB1Vkf7J6Z9ZC QAT+ao0suRywDSQbrcFtdy9WtbcQTV/fPg71wZ7njbxHw27cmiij5Jrq79sXkI+C tEKvY11zbPJW4pe2tRa25KcMewH9uaNetWDvbxF0SGIUjbA/N6HUi2G+7+preEI4 MqT/U+1SA6iSUkvhgPRCX5qzlUC5WDs6NmKVwY8F/CAszzJlJ7kD6dkKCk+uZ7E0 fLE= -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:36 2026 by rpki-client