This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/YYRSpcNyohXAVMmCQRhhQXcor54.roa File: YYRSpcNyohXAVMmCQRhhQXcor54.roa (raw, json) Hash identifier: fuXM313ONuqmW2wV79N+ZCUER2LAZ4hkP7+nINYw4hI= Subject key identifier: 61:84:52:A5:C3:72:A2:15:C0:54:C9:82:41:18:61:41:77:28:AF:9E Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Certificate serial: 019B7C126A82C319165637C70D5DE65A023D Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/YYRSpcNyohXAVMmCQRhhQXcor54.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24991 IP address blocks: 81.93.192.0/21 maxlen: 21 81.93.200.0/24 maxlen: 24 81.93.201.0/24 maxlen: 24 81.93.202.0/23 maxlen: 23 81.93.204.0/22 maxlen: 22 2a03:da00::/36 maxlen: 36 2a03:da00:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6a:82:c3:19:16:56:37:c7:0d:5d:e6:5a:02:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=618452a5c372a215c054c982411861417728af9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:cd:72:8d:57:78:15:3a:66:a2:48:53:6e: 44:20:4b:f7:e0:53:35:2f:45:3a:83:08:0b:b7:c1: c8:65:d3:1f:7b:3c:1f:c7:30:18:37:dd:a9:56:dc: 0b:cc:34:d6:af:82:5e:ef:87:60:4d:bc:8d:00:9b: 88:75:73:ae:cd:bb:7e:d5:1c:f5:6b:71:1c:9e:b3: a3:0f:43:cb:9d:e4:aa:42:dc:92:34:5e:d1:47:d3: 01:af:36:5d:1e:f0:18:a6:c6:68:9a:12:63:46:ad: 59:ea:9f:0c:89:d4:52:e7:93:8f:5c:bc:b4:f9:22: 54:f8:d2:bf:7a:23:cd:66:a4:88:7c:85:47:60:1d: 01:ba:f1:9d:f2:dc:9b:38:8f:76:4c:c7:1f:5d:54: 50:49:be:32:8e:35:17:a1:eb:c4:9b:00:fa:66:f5: 65:df:2c:c7:bf:d2:b3:2c:24:b2:49:cf:c0:1e:80: 30:19:f2:33:05:7d:79:19:87:14:27:16:7c:45:ee: ec:47:c5:bd:af:a6:cc:65:0d:b6:04:eb:a2:05:86: 70:2a:c8:0b:cb:4b:04:d0:a6:62:32:51:68:2f:06: c7:5f:3c:17:fb:6f:3c:bf:84:59:16:51:a4:1a:bc: 3b:2e:1e:0a:6d:f6:83:a0:14:7c:00:eb:3d:2d:6f: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:52:A5:C3:72:A2:15:C0:54:C9:82:41:18:61:41:77:28:AF:9E X509v3 Authority Key Identifier: keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/YYRSpcNyohXAVMmCQRhhQXcor54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.93.192.0/20 IPv6: 2a03:da00::/35 Signature Algorithm: sha256WithRSAEncryption 98:f4:da:42:70:a5:7a:1b:a0:c6:51:b6:4d:de:1c:aa:58:5f: cf:fd:03:72:90:48:1f:78:76:20:e2:f5:29:6a:9c:ef:69:d7: 05:a6:b3:03:06:ab:c6:6a:01:83:25:1d:68:6b:5b:c9:cb:2d: 37:88:ab:c9:da:7b:66:2f:f9:af:b0:02:0b:d4:88:e1:bd:b7: ae:69:20:af:6f:c4:5a:83:05:64:a1:48:5f:01:51:44:83:6b: 4b:3a:87:0e:b3:e4:75:70:8b:e1:f8:e2:29:53:a6:bb:7c:5b: 46:af:59:a9:a4:b7:12:1f:f2:47:92:4b:67:27:05:b6:bd:63: ad:26:2a:b9:9f:31:73:f7:4c:dc:70:f7:59:e2:05:e9:2b:eb: 3a:78:2f:95:ac:d3:34:0a:fd:1f:7e:2c:b5:af:b2:56:9e:69: 57:6e:f6:b4:f2:2c:7c:6f:c5:4a:23:91:69:43:2c:f4:b6:21: d3:f7:a1:fd:6f:80:bc:db:fc:12:ba:8a:dc:fb:14:ff:d1:b8: de:1b:1d:5f:04:77:df:82:7d:e2:ee:5d:7e:85:37:b4:3a:88: 4d:c8:33:66:d9:da:b0:15:38:94:40:2d:d1:36:ab:21:5a:3c: 41:65:cf:5e:07:14:5f:e7:c3:fd:ba:12:ec:6c:88:48:f0:1a: 6c:ca:74:3c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt8EmqCwxkWVjfHDV3mWgI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy NDkxYzUwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTg0NTJhNWMzNzJhMjE1YzA1NGM5ODI0MTE4NjE0MTc3MjhhZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuHNco1XeBU6ZqJIU25EIEv34FM1 L0U6gwgLt8HIZdMfezwfxzAYN92pVtwLzDTWr4Je74dgTbyNAJuIdXOuzbt+1Rz1 a3EcnrOjD0PLneSqQtySNF7RR9MBrzZdHvAYpsZomhJjRq1Z6p8MidRS55OPXLy0 +SJU+NK/eiPNZqSIfIVHYB0BuvGd8tybOI92TMcfXVRQSb4yjjUXoevEmwD6ZvVl 3yzHv9KzLCSySc/AHoAwGfIzBX15GYcUJxZ8Re7sR8W9r6bMZQ22BOuiBYZwKsgL y0sE0KZiMlFoLwbHXzwX+288v4RZFlGkGrw7Lh4KbfaDoBR8AOs9LW9J6QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGGEUqXDcqIVwFTJgkEYYUF3KK+eMB8GA1UdIwQY MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt MWM4YWZkMTlmZGJiLzEvWVlSU3BjTnlvaFhBVk1tQ1FSaGhRWGNvcjU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEUV3AMA4E AgACMAgDBgUqA9oAADANBgkqhkiG9w0BAQsFAAOCAQEAmPTaQnClehugxlG2Td4c qlhfz/0DcpBIH3h2IOL1KWqc72nXBaazAwarxmoBgyUdaGtbycstN4irydp7Zi/5 r7ACC9SI4b23rmkgr2/EWoMFZKFIXwFRRINrSzqHDrPkdXCL4fjiKVOmu3xbRq9Z qaS3Eh/yR5JLZycFtr1jrSYquZ8xc/dM3HD3WeIF6SvrOngvlazTNAr9H34sta+y Vp5pV272tPIsfG/FSiORaUMs9LYh0/eh/W+AvNv8ErqK3PsU/9G43hsdXwR334J9 4u5dfoU3tDqITcgzZtnasBU4lEAt0TarIVo8QWXPXgcUX+fD/boS7GyISPAabMp0 PA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:14 2026 by rpki-client