This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/Ya-kXllajOG6K2U169D7kPW5oi0.roa File: Ya-kXllajOG6K2U169D7kPW5oi0.roa (raw, json) Hash identifier: Mi0AdJaGKYxd/0M8GSDpvWwVqIj1KoyYG1wJ5svzyI0= Subject key identifier: 61:AF:A4:5E:59:5A:8C:E1:BA:2B:65:35:EB:D0:FB:90:F5:B9:A2:2D Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406 Certificate serial: 019B7F851D1DF63784EE1228585AF8935E48 Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/Ya-kXllajOG6K2U169D7kPW5oi0.roa Signing time: Fri 02 Jan 2026 16:23:08 +0000 ROA not before: Fri 02 Jan 2026 16:23:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 185.104.28.0/22 maxlen: 24 2a06:2ec0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1d:1d:f6:37:84:ee:12:28:58:5a:f8:93:5e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406 Validity Not Before: Jan 2 16:23:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61afa45e595a8ce1ba2b6535ebd0fb90f5b9a22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:72:1d:3e:fb:b7:88:35:ca:65:e7:4e:cc: 41:ba:f2:24:f9:5b:1a:4c:9b:c6:80:d5:31:66:be: 51:88:71:8b:c0:ef:7a:63:b6:71:25:a3:11:8b:a0: cc:12:85:b0:01:ad:3e:7a:d3:e4:15:8c:09:bc:9c: 69:35:bc:3e:da:42:cf:8a:ce:05:66:43:cc:14:4a: 3b:b5:17:87:38:94:fb:aa:00:7a:5e:10:c2:21:11: f6:04:1a:af:b1:3b:51:b1:69:35:0e:27:fa:66:8a: b0:d2:13:f1:09:d4:da:3b:c7:74:8e:38:f0:9d:6b: 8b:97:24:4c:9f:15:ba:ea:49:ce:61:07:fd:d8:13: 5c:2c:4b:89:72:a8:e3:33:db:d0:29:10:b8:ff:af: 69:34:f6:f9:51:5f:98:ff:27:a3:12:91:ba:75:72: d7:fa:48:64:71:00:75:52:68:22:b4:38:b0:6a:bf: 4c:d1:dd:cd:ee:87:b2:fa:7b:37:33:1e:b2:43:f5: 31:2c:0c:22:ca:d1:c9:3c:e9:6b:47:a2:be:5b:99: c7:a6:10:61:7f:94:e9:f5:1f:c5:05:29:ce:e6:4e: b1:cf:5e:73:0b:b1:a9:4c:73:83:ef:9b:09:dc:7d: 6a:5d:fc:6c:54:d0:16:24:41:09:92:d3:28:83:c8: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AF:A4:5E:59:5A:8C:E1:BA:2B:65:35:EB:D0:FB:90:F5:B9:A2:2D X509v3 Authority Key Identifier: keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/Ya-kXllajOG6K2U169D7kPW5oi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.28.0/22 IPv6: 2a06:2ec0::/29 Signature Algorithm: sha256WithRSAEncryption 5b:aa:5a:d0:8e:81:09:3b:02:8b:24:a2:ce:46:19:4a:72:86: 04:7c:bf:8d:63:27:5a:9b:db:0c:64:b4:5d:82:0a:53:9e:c4: 7c:f4:48:31:f6:b7:e1:d9:ab:97:a2:d0:b5:dc:22:56:79:55: 55:f4:36:5f:03:62:5e:42:83:6a:32:cc:c2:b4:e7:0a:ff:ec: a9:dc:8d:54:fd:51:71:f8:7b:3b:6b:1b:cf:f1:5d:2e:be:ed: c0:d9:fc:a0:bc:5d:7a:f5:3c:23:8e:88:18:f8:38:3a:46:de: ee:f0:93:f6:bb:d2:97:b5:1e:20:67:9c:3d:15:49:12:86:80: 61:df:81:59:4f:39:91:96:2b:62:be:8c:e4:7a:d6:4c:d1:c9: 31:fd:e7:30:a8:11:61:ac:59:17:b2:bd:b7:08:00:56:34:a6: 42:e5:e9:4c:bc:0c:af:7f:74:8b:87:83:fb:3d:54:06:75:fe: 69:d3:7f:77:5c:a6:26:40:ee:9a:a7:6d:20:2f:cf:1e:73:aa: 9e:f7:86:35:92:5e:ba:07:44:2c:b8:5c:ae:40:94:a5:42:b5: 6d:71:2e:48:8a:cb:41:28:31:f2:41:ea:06:19:8f:bd:d0:20: ed:46:79:cc:d5:e1:b6:39:7e:23:ec:b7:19:b9:7d:48:dd:ce: 24:1c:24:a4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hR0d9jeE7hIoWFr4k15IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MDI4NjFmOTIzYzdlYzExMzJiNTQ4ZjdhYmI4NjFiYWNh MWY0MDYwHhcNMjYwMTAyMTYyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWFmYTQ1ZTU5NWE4Y2UxYmEyYjY1MzVlYmQwZmI5MGY1YjlhMjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqFyHT77t4g1ymXnTsxBuvIk+Vsa TJvGgNUxZr5RiHGLwO96Y7ZxJaMRi6DMEoWwAa0+etPkFYwJvJxpNbw+2kLPis4F ZkPMFEo7tReHOJT7qgB6XhDCIRH2BBqvsTtRsWk1Dif6Zoqw0hPxCdTaO8d0jjjw nWuLlyRMnxW66knOYQf92BNcLEuJcqjjM9vQKRC4/69pNPb5UV+Y/yejEpG6dXLX +khkcQB1UmgitDiwar9M0d3N7oey+ns3Mx6yQ/UxLAwiytHJPOlrR6K+W5nHphBh f5Tp9R/FBSnO5k6xz15zC7GpTHOD75sJ3H1qXfxsVNAWJEEJktMog8hShQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGGvpF5ZWozhuitlNevQ+5D1uaItMB8GA1UdIwQY MBaAFAUChh+SPH7BEytUj3q7hhusofQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQt MGM2NGRlYmU5ZWM0LzEvWWEta1hsbGFqT0c2SzJVMTY5RDdrUFc1b2kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQtMGM2NGRlYmU5ZWM0 LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWgcMA0E AgACMAcDBQMqBi7AMA0GCSqGSIb3DQEBCwUAA4IBAQBbqlrQjoEJOwKLJKLORhlK coYEfL+NYydam9sMZLRdggpTnsR89Egx9rfh2auXotC13CJWeVVV9DZfA2JeQoNq MszCtOcK/+yp3I1U/VFx+Hs7axvP8V0uvu3A2fygvF169TwjjogY+Dg6Rt7u8JP2 u9KXtR4gZ5w9FUkShoBh34FZTzmRlitivozketZM0ckx/ecwqBFhrFkXsr23CABW NKZC5elMvAyvf3SLh4P7PVQGdf5p0393XKYmQO6ap20gL88ec6qe94Y1kl66B0Qs uFyuQJSlQrVtcS5IistBKDHyQeoGGY+90CDtRnnM1eG2OX4j7LcZuX1I3c4kHCSk -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:57 2026 by rpki-client