This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/YzFna3l-BC64_Hy9sCXon1GnhcY.roa File: YzFna3l-BC64_Hy9sCXon1GnhcY.roa (raw, json) Hash identifier: mHlEQsM8xLD+TBDwkEVeJd4jeKLg08Jp/4wsw9FdVUw= Subject key identifier: 63:31:67:6B:79:7E:04:2E:B8:FC:7C:BD:B0:25:E8:9F:51:A7:85:C6 Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 019B7F84FD108EEE1A056F7F7E0DFFB36D90 Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/YzFna3l-BC64_Hy9sCXon1GnhcY.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57888 IP address blocks: 89.111.200.0/24 maxlen: 24 89.111.246.0/24 maxlen: 24 94.250.18.0/24 maxlen: 24 94.250.116.0/22 maxlen: 22 94.250.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fd:10:8e:ee:1a:05:6f:7f:7e:0d:ff:b3:6d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6331676b797e042eb8fc7cbdb025e89f51a785c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:c7:e7:32:43:85:f9:2d:85:54:a9:bc:ad: fb:31:0e:aa:2b:03:e4:49:52:1d:ff:f7:c3:b4:a4: 2a:97:cb:06:eb:31:ac:03:65:72:bf:46:fe:48:ed: 6b:17:a7:72:9a:e2:d5:ce:6f:45:6a:20:f1:64:ea: 7a:41:20:90:f1:31:a7:a7:e2:30:5d:56:f0:47:b0: 52:35:17:06:ce:03:1a:ac:ba:67:8a:7e:33:b1:d6: bd:47:e2:4b:1e:b9:62:b6:64:ad:ab:04:28:e3:51: 93:a5:66:bb:e8:da:24:2b:d8:0e:f7:34:3d:10:fa: c8:0b:9c:95:e0:ed:ca:e6:4e:dd:07:38:e5:8c:93: c8:35:3a:f3:fc:e2:8c:47:93:e4:03:e7:e8:91:f8: 15:96:d7:44:ef:c1:ae:ec:e9:2d:5f:1b:a9:73:a2: af:6d:08:43:8a:11:4a:78:08:48:d7:9f:fe:71:21: 7b:2d:fc:4d:75:52:f3:b4:a8:81:63:ec:c9:d2:e4: 7f:73:f5:5e:97:e8:e0:fc:91:a2:00:b3:fd:b9:21: 43:68:16:6b:5c:b1:1e:e9:c3:da:0e:13:b6:c9:c3: 92:6a:36:01:3f:ef:c1:7b:f6:ac:93:5f:00:da:2b: f1:48:71:63:8e:2b:89:6b:7f:47:1e:7a:e7:1f:8c: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:67:6B:79:7E:04:2E:B8:FC:7C:BD:B0:25:E8:9F:51:A7:85:C6 X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/YzFna3l-BC64_Hy9sCXon1GnhcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.111.200.0/24 89.111.246.0/24 94.250.18.0/24 94.250.116.0-94.250.120.255 Signature Algorithm: sha256WithRSAEncryption 76:37:58:fa:8f:8f:6e:21:5a:ec:67:fa:8f:28:fa:0e:41:62: 56:42:d8:6c:21:28:2f:f1:03:f2:5b:fd:a0:81:7c:c9:ab:98: f8:a3:f8:19:65:66:00:08:26:e6:90:00:f7:d8:c0:14:a7:f6: a5:75:ac:31:59:b4:2e:a4:22:31:c6:0d:dc:47:23:af:e1:8a: 4d:d8:e1:24:ff:7e:3d:34:86:86:fd:0a:b8:2a:03:0d:b8:05: 8b:94:31:0d:7c:45:d8:c8:23:a4:15:cc:ca:ad:6d:29:d7:01: f6:c2:65:12:ba:da:35:13:0b:b8:e7:ca:9b:5f:3a:5a:72:2e: 5d:d3:eb:46:eb:0a:5b:6f:62:ba:75:98:c7:0a:fe:41:15:b6: 4f:41:c6:a1:81:59:05:96:6f:dd:a8:3f:63:dd:93:66:d7:6d: 9b:f0:52:39:85:68:02:53:e9:55:e4:5d:b6:80:f7:ff:30:a3: 54:32:e3:4b:05:84:43:f5:a5:02:09:c9:0d:cb:f3:1f:54:86: d0:7d:22:9a:2b:d9:6a:1f:d1:df:45:6c:9a:4e:71:67:e3:bf: 01:5f:19:5a:e8:70:2f:26:29:f7:54:8b:83:e0:2e:a3:75:58: 11:5e:f2:26:d0:e8:83:19:3d:11:9f:a6:58:a6:0e:21:0a:0d: 3b:05:04:55 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/hP0Qju4aBW9/fg3/s22QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzMxNjc2Yjc5N2UwNDJlYjhmYzdjYmRiMDI1ZTg5ZjUxYTc4NWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQDH5zJDhfkthVSpvK37MQ6qKwPk SVId//fDtKQql8sG6zGsA2Vyv0b+SO1rF6dymuLVzm9FaiDxZOp6QSCQ8TGnp+Iw XVbwR7BSNRcGzgMarLpnin4zsda9R+JLHrlitmStqwQo41GTpWa76NokK9gO9zQ9 EPrIC5yV4O3K5k7dBzjljJPINTrz/OKMR5PkA+fokfgVltdE78Gu7OktXxupc6Kv bQhDihFKeAhI15/+cSF7LfxNdVLztKiBY+zJ0uR/c/Vel+jg/JGiALP9uSFDaBZr XLEe6cPaDhO2ycOSajYBP+/Be/ask18A2ivxSHFjjiuJa39HHnrnH4zcrwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFGMxZ2t5fgQuuPx8vbAl6J9Rp4XGMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvWXpGbmEzbC1CQzY0X0h5OXNDWG9uMUduaGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAWW/IAwQA WW/2AwQAXvoSMAwDBAJe+nQDBABe+ngwDQYJKoZIhvcNAQELBQADggEBAHY3WPqP j24hWuxn+o8o+g5BYlZC2GwhKC/xA/Jb/aCBfMmrmPij+BllZgAIJuaQAPfYwBSn 9qV1rDFZtC6kIjHGDdxHI6/hik3Y4ST/fj00hob9CrgqAw24BYuUMQ18RdjII6QV zMqtbSnXAfbCZRK62jUTC7jnyptfOlpyLl3T60brCltvYrp1mMcK/kEVtk9BxqGB WQWWb92oP2Pdk2bXbZvwUjmFaAJT6VXkXbaA9/8wo1Qy40sFhEP1pQIJyQ3L8x9U htB9Ipor2Wof0d9FbJpOcWfjvwFfGVrocC8mKfdUi4PgLqN1WBFe8ibQ6IMZPRGf plimDiEKDTsFBFU= -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:34 2026 by rpki-client