This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Y9SJqHFKTlXPiEH51m-q31-YJks.roa File: Y9SJqHFKTlXPiEH51m-q31-YJks.roa (raw, json) Hash identifier: OjcEVYzjKq2lbdywqajOpi+VQOPsTVn3SRl4Ai6KhRg= Subject key identifier: 63:D4:89:A8:71:4A:4E:55:CF:88:41:F9:D6:6F:AA:DF:5F:98:26:4B Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390E4C8625C4F1E5447856C51A3996 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Y9SJqHFKTlXPiEH51m-q31-YJks.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60643 IP address blocks: 80.250.167.0/24 maxlen: 24 86.110.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0e:4c:86:25:c4:f1:e5:44:78:56:c5:1a:39:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63d489a8714a4e55cf8841f9d66faadf5f98264b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b7:39:f0:1c:77:bd:40:7a:47:e5:d2:da:d6: 12:06:73:a7:b2:8b:e9:23:28:3f:2c:05:95:20:81: 14:96:e0:12:7e:4e:96:3a:54:47:8e:3c:9b:3a:e3: d6:b7:5c:3f:06:95:78:7e:89:2e:82:fa:62:18:96: 48:11:66:f8:2f:8d:ae:79:3f:48:a8:04:18:f7:b4: 77:6f:99:c7:0e:7f:ce:b5:9b:73:d7:cd:16:fb:bd: 04:44:ce:46:f3:e4:3f:a1:e9:8f:9e:99:18:a0:3e: 0e:52:a7:37:77:4a:1a:fe:22:bb:6b:0d:4d:02:c7: f4:95:bf:99:5b:f4:02:2e:ff:ed:84:e4:cf:a1:a5: 00:5d:48:d4:cf:d6:b2:a8:60:37:13:b0:80:9b:1e: 4a:80:d8:e8:5a:8f:ce:a7:0c:89:64:42:43:70:ad: 80:99:e6:12:7a:86:1e:a7:e0:5d:c7:4d:23:7c:1c: fb:35:a6:8a:2d:02:24:da:68:e2:64:48:b2:10:26: fc:17:8b:71:34:5d:77:89:d2:43:6b:3f:34:ac:f9: c9:44:66:cc:c5:be:f8:06:f8:8f:44:d7:7d:15:f5: a3:d7:1b:34:97:dc:10:df:c2:80:0a:d0:60:ec:87: 2a:96:2b:4a:bc:57:bb:91:26:32:0f:5d:c5:77:94: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D4:89:A8:71:4A:4E:55:CF:88:41:F9:D6:6F:AA:DF:5F:98:26:4B X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Y9SJqHFKTlXPiEH51m-q31-YJks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.250.167.0/24 86.110.104.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:e3:20:09:1d:72:da:72:a4:8d:e3:d6:ab:69:24:27:ef:23: ed:e6:2f:9a:5d:18:f3:e3:54:6c:73:8a:59:f5:d4:24:f0:0c: 82:0f:07:69:97:6c:9e:c8:57:35:b7:08:34:c5:0d:b1:95:52: 1c:6a:08:0a:43:c0:f9:85:2d:43:e4:3b:6d:61:8b:89:08:0c: c2:03:18:b9:6b:3e:59:18:bd:21:46:fa:07:02:2b:fa:97:bc: 6f:f9:68:7a:8a:f3:49:33:e9:8c:94:b9:5f:d6:78:76:2b:0b: 5a:97:63:cd:72:90:d9:e5:95:4d:b7:c7:09:eb:44:2b:96:44: 58:14:ef:1f:ce:f1:f4:35:44:7d:d6:19:d9:15:9d:67:d0:21: c6:d5:6b:cc:c0:64:4e:31:20:55:4b:46:31:85:77:c2:42:a5: e6:1a:f0:ca:1b:b5:59:f7:7b:ce:eb:c7:70:b5:7e:d9:7b:ef: 68:ab:36:c3:f5:c2:57:ad:89:b9:1c:b5:fb:e0:68:6a:34:b4: 7e:f6:39:24:a6:78:44:71:c2:56:de:2c:8d:0b:88:5d:da:f7: 50:9b:e7:e5:97:98:ba:a7:5c:ae:fc:0e:ac:98:6e:21:23:88: 2c:cb:51:66:89:64:96:09:5a:6d:95:17:2b:99:e5:13:d6:95: ea:4c:66:9e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OQ5MhiXE8eVEeFbFGjmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2Q0ODlhODcxNGE0ZTU1Y2Y4ODQxZjlkNjZmYWFkZjVmOTgyNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bc58Bx3vUB6R+XS2tYSBnOnsovp Iyg/LAWVIIEUluASfk6WOlRHjjybOuPWt1w/BpV4fokugvpiGJZIEWb4L42ueT9I qAQY97R3b5nHDn/OtZtz180W+70ERM5G8+Q/oemPnpkYoD4OUqc3d0oa/iK7aw1N Asf0lb+ZW/QCLv/thOTPoaUAXUjUz9ayqGA3E7CAmx5KgNjoWo/OpwyJZEJDcK2A meYSeoYep+Bdx00jfBz7NaaKLQIk2mjiZEiyECb8F4txNF13idJDaz80rPnJRGbM xb74BviPRNd9FfWj1xs0l9wQ38KACtBg7IcqlitKvFe7kSYyD13Fd5R+nwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGPUiahxSk5Vz4hB+dZvqt9fmCZLMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvWTlTSnFIRktUbFhQaUVINTFtLXEzMS1ZSmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPqnAwQA Vm5oMA0GCSqGSIb3DQEBCwUAA4IBAQAO4yAJHXLacqSN49araSQn7yPt5i+aXRjz 41Rsc4pZ9dQk8AyCDwdpl2yeyFc1twg0xQ2xlVIcaggKQ8D5hS1D5DttYYuJCAzC Axi5az5ZGL0hRvoHAiv6l7xv+Wh6ivNJM+mMlLlf1nh2Kwtal2PNcpDZ5ZVNt8cJ 60QrlkRYFO8fzvH0NUR91hnZFZ1n0CHG1WvMwGROMSBVS0YxhXfCQqXmGvDKG7VZ 93vO68dwtX7Ze+9oqzbD9cJXrYm5HLX74GhqNLR+9jkkpnhEccJW3iyNC4hd2vdQ m+fll5i6p1yu/A6smG4hI4gsy1FmiWSWCVptlRcrmeUT1pXqTGae -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:02 2026 by rpki-client