This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/YIiAdksRfvM2tL27jCCRXB5ju3Q.roa File: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (raw, json) Hash identifier: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg= Subject key identifier: 60:88:80:76:4B:11:7E:F3:36:B4:BD:BB:8C:20:91:5C:1E:63:BB:74 Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019B7EA558D4D22CFBCE9A2AF75EDA690BA0 Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/YIiAdksRfvM2tL27jCCRXB5ju3Q.roa Signing time: Fri 02 Jan 2026 12:18:44 +0000 ROA not before: Fri 02 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6206 IP address blocks: 89.43.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:58:d4:d2:2c:fb:ce:9a:2a:f7:5e:da:69:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=608880764b117ef336b4bdbb8c20915c1e63bb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:7f:72:39:93:b9:8d:48:8b:76:03:4d:44: e2:09:88:e7:a6:fd:c0:7d:31:5d:bb:17:b6:89:bb: 99:93:5b:e9:bc:52:b6:22:d4:3e:12:00:dc:3a:36: ae:32:94:f7:50:ac:32:ee:50:43:75:87:59:9f:5b: d7:c9:da:91:8d:dd:32:f4:b7:66:56:bf:9a:99:52: b7:a5:94:95:ee:a4:5f:f3:cb:54:e2:a4:20:32:1c: c4:5c:ca:a6:6a:2b:08:c3:0a:1d:86:25:5b:59:8f: b4:87:78:bb:8d:e5:05:f4:a2:0e:7b:8b:1c:76:d3: 92:4e:8e:b7:2c:d2:97:48:a5:b0:67:83:b4:a7:24: ed:2e:b8:64:f8:78:e9:cb:db:a1:33:2a:03:e2:8b: 8f:fb:f9:66:cc:cc:80:b0:61:5e:cc:81:31:bd:8a: be:33:de:fc:b6:5e:5a:38:5a:26:a3:67:a9:fe:cc: 6c:9d:b6:9f:d9:ee:eb:4f:02:04:f8:35:27:e1:b9: c4:c1:ec:48:9b:f4:81:34:7e:f8:0f:61:e0:df:c5: 9f:47:cf:7c:32:53:54:e8:d6:97:5e:fd:9e:14:d8: 5f:2b:e6:03:33:6e:a1:f7:a0:58:3a:c1:f7:79:7b: 36:95:28:d9:df:42:bd:48:94:33:ad:f4:d1:9e:6b: ba:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:80:76:4B:11:7E:F3:36:B4:BD:BB:8C:20:91:5C:1E:63:BB:74 X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/YIiAdksRfvM2tL27jCCRXB5ju3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.112.0/22 Signature Algorithm: sha256WithRSAEncryption 16:f1:ca:36:dc:b1:b1:9f:cc:f7:e9:41:e3:7d:f6:18:c3:b3: a8:a4:e5:ea:09:39:c2:31:7e:f1:fc:7f:4d:e7:46:07:ed:56: 42:6c:b5:98:15:d9:25:f3:20:76:eb:a7:b0:22:49:56:34:f9: fa:a6:65:80:75:38:0c:1d:45:fe:26:bb:da:ee:2a:4a:1b:88: d8:04:8b:1e:90:6e:04:2c:3a:58:86:be:e8:1d:36:22:7e:ab: 72:7b:2f:21:6e:49:4d:0c:2e:aa:61:8c:83:af:7d:d7:56:b3: 0e:68:88:db:7c:e8:65:09:4c:7e:19:a4:3f:e4:d1:f2:4a:8e: 80:75:c9:ba:45:9b:77:31:e8:14:bb:e5:d9:d9:d6:fd:67:04: c3:0f:04:99:20:e6:f6:17:f3:4b:e8:0c:aa:a0:8e:90:c3:36: 51:1d:9f:ae:98:4c:76:3b:5b:7c:51:49:3b:55:e8:36:85:75: 0e:9e:a9:b9:dd:9b:76:ce:f4:7b:a1:78:fe:94:da:fe:16:c5: 17:65:09:03:94:c2:1b:94:9c:22:7a:b1:62:a1:09:3e:6b:2f: 08:99:33:13:73:8a:fc:0c:84:77:65:f9:ce:1c:d2:a4:38:38: 67:2c:5d:96:19:fb:6b:bd:9f:03:76:13:7b:cc:bb:94:6b:f4: c3:8f:66:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pVjU0iz7zpoq917aaQugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDg4ODA3NjRiMTE3ZWYzMzZiNGJkYmI4YzIwOTE1YzFlNjNiYjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPd/cjmTuY1Ii3YDTUTiCYjnpv3A fTFduxe2ibuZk1vpvFK2ItQ+EgDcOjauMpT3UKwy7lBDdYdZn1vXydqRjd0y9Ldm Vr+amVK3pZSV7qRf88tU4qQgMhzEXMqmaisIwwodhiVbWY+0h3i7jeUF9KIOe4sc dtOSTo63LNKXSKWwZ4O0pyTtLrhk+Hjpy9uhMyoD4ouP+/lmzMyAsGFezIExvYq+ M978tl5aOFomo2ep/sxsnbaf2e7rTwIE+DUn4bnEwexIm/SBNH74D2Hg38WfR898 MlNU6NaXXv2eFNhfK+YDM26h96BYOsH3eXs2lSjZ30K9SJQzrfTRnmu6bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCIgHZLEX7zNrS9u4wgkVweY7t0MB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvWUlpQWRrc1Jmdk0ydEwyN2pDQ1JYQjVqdTNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWStwMA0G CSqGSIb3DQEBCwUAA4IBAQAW8co23LGxn8z36UHjffYYw7OopOXqCTnCMX7x/H9N 50YH7VZCbLWYFdkl8yB266ewIklWNPn6pmWAdTgMHUX+Jrva7ipKG4jYBIsekG4E LDpYhr7oHTYifqtyey8hbklNDC6qYYyDr33XVrMOaIjbfOhlCUx+GaQ/5NHySo6A dcm6RZt3MegUu+XZ2db9ZwTDDwSZIOb2F/NL6AyqoI6QwzZRHZ+umEx2O1t8UUk7 Veg2hXUOnqm53Zt2zvR7oXj+lNr+FsUXZQkDlMIblJwierFioQk+ay8ImTMTc4r8 DIR3ZfnOHNKkODhnLF2WGftrvZ8DdhN7zLuUa/TDj2Yv -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:23 2026 by rpki-client