This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/YKIZEXPg8oheZp7WpP7OU246ru8.roa File: YKIZEXPg8oheZp7WpP7OU246ru8.roa (raw, json) Hash identifier: Q2zcLyXdsWeX4PkdcMwGBRDhiV4NlfFDZoV6YyWN27s= Subject key identifier: 60:A2:19:11:73:E0:F2:88:5E:66:9E:D6:A4:FE:CE:53:6E:3A:AE:EF Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6 Certificate serial: 019B7910AD0A35F729EE5D25E4AF5F65D9D4 Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/YKIZEXPg8oheZp7WpP7OU246ru8.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34785 IP address blocks: 80.80.240.0/20 maxlen: 20 185.72.136.0/24 maxlen: 24 185.72.137.0/24 maxlen: 24 185.72.138.0/24 maxlen: 24 193.186.72.0/21 maxlen: 21 193.186.80.0/22 maxlen: 22 193.186.84.0/23 maxlen: 23 193.228.112.0/21 maxlen: 21 193.228.120.0/23 maxlen: 23 193.228.122.0/24 maxlen: 24 2a01:af80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ad:0a:35:f7:29:ee:5d:25:e4:af:5f:65:d9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60a2191173e0f2885e669ed6a4fece536e3aaeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:06:e3:b5:56:fa:81:a7:3b:66:99:08:78: 24:3d:a4:51:e2:8c:cd:72:b2:f5:dd:77:d7:6b:5c: a5:82:b7:52:9d:8f:06:32:de:77:57:26:60:83:7f: 05:4a:0c:a2:cf:b9:25:a8:d8:48:5e:74:81:77:83: 53:54:d5:9d:06:37:ac:ed:e1:1a:14:dd:01:f5:4e: 38:7e:64:93:89:d6:26:33:35:bd:44:c9:b9:c4:46: 9b:a4:12:ca:4f:7e:46:e3:8f:5b:74:77:db:29:48: 11:0e:98:87:2e:fd:c2:f6:de:06:37:ca:bb:58:ea: f8:8d:01:71:81:85:52:1b:3c:0b:4b:ea:36:00:37: ec:a3:b2:2e:3a:15:4b:8a:0e:63:48:24:bc:58:3c: 0d:62:3a:d0:3f:56:94:74:76:9c:99:c2:84:fa:41: c4:84:41:ea:82:43:f8:cf:74:c9:a8:7d:0e:d8:5e: ad:7f:b3:39:e0:f4:2e:2c:f0:3c:43:bf:63:d9:82: 22:aa:8d:ef:65:7b:de:a3:f1:fc:3f:e2:8e:10:8e: 6d:51:40:0e:0e:6d:06:d9:42:a6:57:d8:79:29:b5: a4:72:62:ce:3d:96:0e:0c:8b:b8:f0:3d:f8:c5:56: ed:b2:22:d6:a2:0b:9b:14:80:85:ab:cb:0d:65:31: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A2:19:11:73:E0:F2:88:5E:66:9E:D6:A4:FE:CE:53:6E:3A:AE:EF X509v3 Authority Key Identifier: keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/YKIZEXPg8oheZp7WpP7OU246ru8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.80.240.0/20 185.72.136.0-185.72.138.255 193.186.72.0-193.186.85.255 193.228.112.0-193.228.122.255 IPv6: 2a01:af80::/32 Signature Algorithm: sha256WithRSAEncryption 2c:bb:d0:28:94:f5:13:b3:2b:8e:bb:52:c5:50:a7:52:e4:8b: 20:30:6b:7f:0b:81:c7:83:1f:03:b8:fd:84:cb:e9:62:44:15: c9:07:29:3f:c9:ee:70:be:a3:5b:fd:05:8d:60:23:ee:35:3d: 9f:cd:a3:e5:16:fe:a6:d3:de:ba:92:30:9c:11:a0:4c:22:e2: 81:16:35:01:b9:b7:6b:95:e4:d8:4a:9d:80:c8:82:95:de:f8: cd:38:4a:e1:ec:79:74:81:f5:db:ab:17:54:0c:73:b0:9f:09: 64:eb:cd:48:0a:92:1d:26:fd:2e:1c:b9:5b:e7:0b:b9:6c:ea: d4:0a:4c:8c:62:8a:6d:96:2c:6c:6e:59:3d:43:2f:4c:e9:1a: f7:72:30:82:c8:93:12:27:76:91:79:4c:4a:1a:d7:d0:be:52: 8f:40:08:22:61:b0:05:10:a2:2c:e0:3b:86:80:70:11:38:08: c7:44:cf:fc:b4:9c:03:da:af:df:cb:da:9c:b2:49:b4:63:24: 82:08:f0:26:91:a7:12:50:6a:c2:62:44:91:ba:88:45:df:40: 77:01:d7:f2:96:f1:66:b5:19:3c:ac:36:c8:10:6a:7b:eb:0f: b5:5b:a9:d1:0c:5a:79:fc:db:36:fe:3b:8a:f8:e8:cc:60:ad: f6:5a:a0:7c -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt5EK0KNfcp7l0l5K9fZdnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjY1M2JiZDE3MDRjNDdiYWRhNjJhYjZjZTM1MDIzMDdm MjQ0YjYwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGEyMTkxMTczZTBmMjg4NWU2NjllZDZhNGZlY2U1MzZlM2FhZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMAG47VW+oGnO2aZCHgkPaRR4ozN crL13XfXa1ylgrdSnY8GMt53VyZgg38FSgyiz7klqNhIXnSBd4NTVNWdBjes7eEa FN0B9U44fmSTidYmMzW9RMm5xEabpBLKT35G449bdHfbKUgRDpiHLv3C9t4GN8q7 WOr4jQFxgYVSGzwLS+o2ADfso7IuOhVLig5jSCS8WDwNYjrQP1aUdHacmcKE+kHE hEHqgkP4z3TJqH0O2F6tf7M54PQuLPA8Q79j2YIiqo3vZXveo/H8P+KOEI5tUUAO Dm0G2UKmV9h5KbWkcmLOPZYODIu48D34xVbtsiLWogubFICFq8sNZTE/7wIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFGCiGRFz4PKIXmae1qT+zlNuOq7vMB8GA1UdIwQY MBaAFNu2U7vRcExHutpiq2zjUCMH8kS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5Mjkt YTk4MGJlZDMzYWIwLzEvWUtJWkVYUGc4b2hlWnA3V3BQN09VMjQ2cnU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5MjktYTk4MGJlZDMzYWIw LzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQEUFDwMAwD BAO5SIgDBAC5SIowDAMEA8G6SAMEAcG6VDAMAwQEweRwAwQAweR6MA0EAgACMAcD BQAqAa+AMA0GCSqGSIb3DQEBCwUAA4IBAQAsu9AolPUTsyuOu1LFUKdS5IsgMGt/ C4HHgx8DuP2Ey+liRBXJByk/ye5wvqNb/QWNYCPuNT2fzaPlFv6m0966kjCcEaBM IuKBFjUBubdrleTYSp2AyIKV3vjNOErh7Hl0gfXbqxdUDHOwnwlk681ICpIdJv0u HLlb5wu5bOrUCkyMYoptlixsblk9Qy9M6Rr3cjCCyJMSJ3aReUxKGtfQvlKPQAgi YbAFEKIs4DuGgHAROAjHRM/8tJwD2q/fy9qcskm0YySCCPAmkacSUGrCYkSRuohF 30B3AdfylvFmtRk8rDbIEGp76w+1W6nRDFp5/Ns2/juK+OjMYK32WqB8 -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:27 2026 by rpki-client