This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YvQ0mb9xL1me3FE2T2kfrR62qHw.roa File: YvQ0mb9xL1me3FE2T2kfrR62qHw.roa (raw, json) Hash identifier: YA4zjb2nMxYTedW1G+JpN82HAbrqmEFmZX4LL6ddxjo= Subject key identifier: 62:F4:34:99:BF:71:2F:59:9E:DC:51:36:4F:69:1F:AD:1E:B6:A8:7C Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE3ED32CBE99636705BE66F3A4ADB0 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YvQ0mb9xL1me3FE2T2kfrR62qHw.roa Signing time: Fri 02 Jan 2026 04:19:07 +0000 ROA not before: Fri 02 Jan 2026 04:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211826 IP address blocks: 82.163.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3e:d3:2c:be:99:63:67:05:be:66:f3:a4:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62f43499bf712f599edc51364f691fad1eb6a87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:1e:62:3f:01:5d:5c:c2:68:02:59:5c:2d: 49:64:e6:56:64:34:7b:f0:f5:39:e3:f3:f1:8c:2f: 93:ac:1f:ab:9c:2e:50:5f:e0:55:60:39:83:e3:36: 65:89:70:09:6a:48:43:92:60:70:ff:db:38:64:dd: 18:f1:8f:22:c5:67:7f:4a:9f:ec:5f:7e:44:20:10: 71:8a:e5:8d:68:74:77:04:fa:4a:11:da:78:b7:fe: 6b:f1:b5:3b:3b:ec:63:4e:d0:90:36:b1:ac:59:45: f8:a5:04:a6:12:52:16:53:a2:5b:4f:d0:ef:b0:8a: 7e:bb:e6:3e:50:aa:77:c7:16:5d:0c:bb:64:da:2a: 23:d4:f2:40:20:6d:6d:8a:7f:1a:1b:4f:53:e4:0d: 14:c9:26:51:9a:82:00:4d:61:00:b1:b2:3b:c5:02: 91:9b:da:71:9f:1b:89:a9:9e:1e:e4:b4:11:bc:60: 98:7a:67:8c:1b:51:ee:08:d8:94:40:f2:2f:78:30: aa:4d:4f:3b:95:86:aa:d5:63:e5:ec:ed:52:9b:3d: 4a:0a:db:04:2f:ce:bb:12:17:ef:91:af:39:09:03: 87:81:69:68:b4:d7:81:ab:63:1f:7c:64:c9:1a:8a: 72:bd:67:18:a6:b9:60:d6:c8:4c:5c:b0:5d:54:4a: 54:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F4:34:99:BF:71:2F:59:9E:DC:51:36:4F:69:1F:AD:1E:B6:A8:7C X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YvQ0mb9xL1me3FE2T2kfrR62qHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.54.0/23 Signature Algorithm: sha256WithRSAEncryption 85:1c:77:56:bc:d0:80:e0:a5:c3:b7:75:ea:4c:a1:1a:db:3a: 27:16:61:f4:33:93:25:90:b5:88:c1:8f:f8:12:32:21:e9:39: cf:b1:2a:9a:d3:a2:7d:3f:79:b0:6f:f0:c0:68:92:7b:dd:d8: 4d:ec:b4:78:95:83:d7:12:a1:5b:48:84:22:93:2b:94:e5:54: 07:df:fb:36:5a:04:9d:0e:22:2d:ae:7a:9b:3a:50:ca:44:cb: 4e:7a:1e:f2:b7:ef:70:f8:6a:dc:51:01:d6:12:b5:ae:8e:ff: 3d:d4:7d:11:98:96:7f:d0:19:3b:88:8c:f6:83:c0:ec:bb:78: ed:47:73:22:d5:9a:24:35:61:d1:69:2e:9c:75:93:b3:16:31: 76:7a:a0:73:4c:c4:2e:05:d2:fd:1f:0f:7e:f3:59:f1:af:76: ad:53:9e:3d:63:1f:9b:53:37:f3:d2:ef:4a:f9:a2:fa:d9:65: 55:cb:37:a3:c2:40:99:19:3e:f0:12:a3:d1:ee:1b:9b:4c:a2: bf:2b:d4:ca:a5:a7:ae:d3:9d:58:ea:a9:fa:dd:3a:d3:3c:ab: 9f:f3:fb:21:9f:af:88:6b:a2:ca:4a:fa:ae:0c:2a:cb:26:26: 17:d5:a9:84:39:f7:03:2a:64:fb:fd:8c:d2:14:80:c7:d4:8a: e8:bc:56:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87j7TLL6ZY2cFvmbzpK2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmY0MzQ5OWJmNzEyZjU5OWVkYzUxMzY0ZjY5MWZhZDFlYjZhODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHUeYj8BXVzCaAJZXC1JZOZWZDR7 8PU54/PxjC+TrB+rnC5QX+BVYDmD4zZliXAJakhDkmBw/9s4ZN0Y8Y8ixWd/Sp/s X35EIBBxiuWNaHR3BPpKEdp4t/5r8bU7O+xjTtCQNrGsWUX4pQSmElIWU6JbT9Dv sIp+u+Y+UKp3xxZdDLtk2ioj1PJAIG1tin8aG09T5A0UySZRmoIATWEAsbI7xQKR m9pxnxuJqZ4e5LQRvGCYemeMG1HuCNiUQPIveDCqTU87lYaq1WPl7O1Smz1KCtsE L867Ehfvka85CQOHgWlotNeBq2MffGTJGopyvWcYprlg1shMXLBdVEpU7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGL0NJm/cS9ZntxRNk9pH60etqh8MB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvWXZRMG1iOXhMMW1lM0ZFMlQya2ZyUjYycUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUqM2MA0G CSqGSIb3DQEBCwUAA4IBAQCFHHdWvNCA4KXDt3XqTKEa2zonFmH0M5MlkLWIwY/4 EjIh6TnPsSqa06J9P3mwb/DAaJJ73dhN7LR4lYPXEqFbSIQikyuU5VQH3/s2WgSd DiItrnqbOlDKRMtOeh7yt+9w+GrcUQHWErWujv891H0RmJZ/0Bk7iIz2g8Dsu3jt R3Mi1ZokNWHRaS6cdZOzFjF2eqBzTMQuBdL9Hw9+81nxr3atU549Yx+bUzfz0u9K +aL62WVVyzejwkCZGT7wEqPR7hubTKK/K9TKpaeu051Y6qn63TrTPKuf8/shn6+I a6LKSvquDCrLJiYX1amEOfcDKmT7/YzSFIDH1IrovFaD -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:25 2026 by rpki-client