This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/YUkk-VPlyO51Kvco9NGKUJyQo_I.roa File: YUkk-VPlyO51Kvco9NGKUJyQo_I.roa (raw, json) Hash identifier: rOJkJo3RXxhBpbSnVQu+gVqcl9F84oLxIPEpl0l8QXo= Subject key identifier: 61:49:24:F9:53:E5:C8:EE:75:2A:F7:28:F4:D1:8A:50:9C:90:A3:F2 Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Certificate serial: 019B7DCB4C7220BB8071BF699743EE9C2003 Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/YUkk-VPlyO51Kvco9NGKUJyQo_I.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60470 IP address blocks: 88.201.236.0/23 maxlen: 23 185.84.32.0/22 maxlen: 24 185.88.156.0/22 maxlen: 24 185.123.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4c:72:20:bb:80:71:bf:69:97:43:ee:9c:20:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=614924f953e5c8ee752af728f4d18a509c90a3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:1f:b1:c8:b2:7b:2c:c3:1e:bc:15:6a:4e: be:f7:80:d2:32:76:88:ba:55:2d:4f:8d:ca:f0:cf: 5b:55:06:97:29:b1:c0:aa:ea:4f:7b:87:4e:e7:b9: 0f:5a:de:97:4e:9a:d3:2f:09:26:c5:67:bf:44:e1: e2:cb:15:8f:ed:98:ad:36:e8:fb:66:ce:f5:cd:52: 83:31:89:6c:64:5d:ad:3d:32:f0:51:0b:50:be:b7: d0:3b:bb:04:0a:5d:0c:5d:ae:9f:bf:c3:fb:89:7b: a9:61:0e:8b:3e:b6:57:40:35:03:2e:51:f4:5f:d6: 1f:2c:4f:65:b2:55:9d:92:7a:81:6c:99:bc:6a:61: 33:d8:7e:8c:94:b0:b7:2a:48:d6:ca:d9:2a:4f:31: 64:9d:99:f8:3f:60:c9:74:d6:23:f9:32:58:e1:27: 66:62:eb:ba:69:ad:28:05:8a:4d:61:74:ce:37:65: 9b:1b:12:23:2c:5f:7c:2b:09:2b:b6:11:94:f0:bc: 3c:0c:87:d4:57:a1:4e:48:e0:5a:8f:3a:a4:53:bf: c1:67:8c:96:eb:17:84:88:38:6e:26:a3:7b:06:30: 38:5f:a9:1d:cb:5a:55:4a:07:6c:ac:d7:c5:c6:be: 9d:aa:09:c2:68:42:a4:07:c3:86:cc:40:c8:5c:41: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:24:F9:53:E5:C8:EE:75:2A:F7:28:F4:D1:8A:50:9C:90:A3:F2 X509v3 Authority Key Identifier: keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/YUkk-VPlyO51Kvco9NGKUJyQo_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.201.236.0/23 185.84.32.0/22 185.88.156.0/22 185.123.64.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:b0:81:9c:33:af:05:05:60:4b:bd:2f:48:2c:54:05:5a:aa: 94:e7:17:e9:2e:73:5c:94:82:0c:f6:7a:c2:74:22:45:75:65: 61:86:45:ea:f5:2f:0b:3c:ae:f8:f9:30:3d:67:35:d5:a3:e8: c0:43:94:34:0d:3f:30:eb:51:06:27:1c:2d:79:06:0c:4a:b1: a6:ac:65:f3:1c:2f:3b:48:68:37:0f:a3:e6:3d:e5:8f:95:b4: 06:9c:5e:0f:ed:11:1f:72:b7:2b:ce:c7:f8:23:d5:8f:2a:ed: c8:c5:07:eb:e9:dc:bd:98:92:a2:01:52:47:ee:d9:3f:6c:e6: f8:5f:37:28:66:36:73:82:4f:90:7f:96:af:86:28:e8:81:2d: ee:af:68:38:1f:6e:ac:8f:94:8a:ef:80:fb:63:28:22:a4:5b: 00:23:8a:0d:87:95:a2:95:32:d2:6e:38:bc:7c:22:80:60:51: e7:c3:f7:71:fc:1b:28:c0:f3:2e:dd:84:5e:ab:12:a1:76:3f: d6:37:f3:73:0b:41:82:ef:7a:d9:e2:b4:86:51:86:ff:67:00: 0e:2e:a1:ed:65:d8:9d:f7:9b:d7:38:59:b1:59:7b:97:44:ce: e1:f8:3c:12:b5:0c:48:d5:d3:da:d8:dd:db:98:82:e9:ea:40: 48:02:c7:32 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9y0xyILuAcb9pl0PunCADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc5YmY0YzYyN2Q4NWZlZTJjZTEzYTUzYzQ0ODUxYjlk ZjA1NjMwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTQ5MjRmOTUzZTVjOGVlNzUyYWY3MjhmNGQxOGE1MDljOTBhM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYIfsciyeyzDHrwVak6+94DSMnaI ulUtT43K8M9bVQaXKbHAqupPe4dO57kPWt6XTprTLwkmxWe/ROHiyxWP7ZitNuj7 Zs71zVKDMYlsZF2tPTLwUQtQvrfQO7sECl0MXa6fv8P7iXupYQ6LPrZXQDUDLlH0 X9YfLE9lslWdknqBbJm8amEz2H6MlLC3KkjWytkqTzFknZn4P2DJdNYj+TJY4Sdm Yuu6aa0oBYpNYXTON2WbGxIjLF98KwkrthGU8Lw8DIfUV6FOSOBajzqkU7/BZ4yW 6xeEiDhuJqN7BjA4X6kdy1pVSgdsrNfFxr6dqgnCaEKkB8OGzEDIXEFmBQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGFJJPlT5cjudSr3KPTRilCckKPyMB8GA1UdIwQY MBaAFKNnm/TGJ9hf7izhOlPESFG53wVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjct NTU2NzI2MzRjYmMxLzEvWVVray1WUGx5TzUxS3ZjbzlOR0tVSnlRb19JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjctNTU2NzI2MzRjYmMx LzEvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBWMnsAwQC uVQgAwQCuVicAwQBuXtAMA0GCSqGSIb3DQEBCwUAA4IBAQANsIGcM68FBWBLvS9I LFQFWqqU5xfpLnNclIIM9nrCdCJFdWVhhkXq9S8LPK74+TA9ZzXVo+jAQ5Q0DT8w 61EGJxwteQYMSrGmrGXzHC87SGg3D6PmPeWPlbQGnF4P7REfcrcrzsf4I9WPKu3I xQfr6dy9mJKiAVJH7tk/bOb4XzcoZjZzgk+Qf5avhijogS3ur2g4H26sj5SK74D7 YygipFsAI4oNh5WilTLSbji8fCKAYFHnw/dx/BsowPMu3YReqxKhdj/WN/NzC0GC 73rZ4rSGUYb/ZwAOLqHtZdid95vXOFmxWXuXRM7h+DwStQxI1dPa2N3bmILp6kBI Ascy -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:54 2026 by rpki-client