This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa File: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (raw, json) Hash identifier: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E= Subject key identifier: 63:26:E4:97:46:50:5E:B6:36:E8:C7:43:E0:54:3D:9C:26:CE:87:D7 Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Certificate serial: 019B791033A32745EF5113665144D5443B0F Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205463 IP address blocks: 84.54.13.0/24 maxlen: 24 176.98.41.0/24 maxlen: 24 193.31.116.0/24 maxlen: 24 213.226.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:33:a3:27:45:ef:51:13:66:51:44:d5:44:3b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6326e49746505eb636e8c743e0543d9c26ce87d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:8c:c8:92:54:1e:97:25:ec:c0:80:d6:12: c6:09:5f:9e:44:79:20:b6:10:50:ef:5e:d5:23:c5: e0:83:7c:ca:cc:5f:b0:3d:2b:01:a9:e6:e1:58:e5: f5:e6:63:f4:be:24:c3:61:cb:3e:c8:39:f0:2a:9a: b8:6d:10:e7:3c:94:25:7d:5d:72:4f:59:f7:5f:c2: 82:3f:70:88:7a:1d:8a:04:a9:29:45:2a:c9:a1:36: 3a:56:87:c0:d7:cb:a2:49:86:1c:0c:f5:37:fb:d6: c4:64:64:95:33:e4:3e:dd:a2:da:6d:f2:fd:9d:28: 22:8d:62:82:93:0f:98:bf:0e:98:83:5d:80:d5:50: f9:2f:61:a4:18:4f:92:92:a3:f5:7d:5f:9d:de:3e: 6c:d9:3c:fa:e5:46:c2:85:fc:48:e0:23:e8:90:7e: 30:e3:8e:1f:2b:b3:bd:c3:a5:83:e1:e6:76:e6:8e: 4d:9e:ab:04:22:ad:36:ef:60:aa:3f:67:53:85:29: 7c:67:5f:5a:c9:01:01:c7:86:76:9e:49:d5:f1:52: 34:4f:f9:61:2b:e3:f8:3f:91:f7:78:4b:c8:65:af: 37:61:07:1d:84:4f:22:82:a7:a3:9f:65:a3:f5:32: 9f:06:f2:28:cf:b9:c7:b5:0f:0a:ea:77:53:47:52: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:26:E4:97:46:50:5E:B6:36:E8:C7:43:E0:54:3D:9C:26:CE:87:D7 X509v3 Authority Key Identifier: keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.13.0/24 176.98.41.0/24 193.31.116.0/24 213.226.119.0/24 Signature Algorithm: sha256WithRSAEncryption 64:82:6d:40:16:c7:c9:d4:fd:75:fd:4a:82:76:6b:b2:c5:86: bd:3e:ca:4c:d8:a7:25:e3:53:c6:56:4d:6d:e2:0f:83:41:b8: 8f:7e:ed:bf:d2:22:05:f3:3a:dc:77:c4:7e:1f:bb:c9:00:78: 99:65:43:98:08:52:ef:49:b3:17:eb:92:54:02:8e:b6:ef:6b: 5b:eb:46:51:8a:2a:c7:50:2e:a7:07:e9:c0:5d:13:40:2f:4c: e8:39:3d:75:75:d1:c0:d5:e8:87:be:d0:5f:81:88:a4:3d:b0: f6:da:af:47:5b:bc:c4:ef:1c:0b:8f:6f:1f:c3:a0:05:bb:d6: 4b:60:b0:b5:b5:14:e0:f2:00:e2:d0:8f:11:21:18:c9:a4:16: 59:38:60:19:5a:c8:ae:5f:c1:ca:53:68:7b:e1:f0:fa:01:94: 2d:49:83:4e:bf:e0:15:d9:b6:7b:dc:26:8d:a8:b6:2c:28:03: c3:be:e7:48:7f:47:8f:98:6e:a6:de:2d:6f:f1:2f:4d:33:9a: 08:38:53:93:d8:5f:b0:2c:e3:b7:a9:ef:1b:cc:37:32:0b:67: ea:03:a9:0a:d1:e8:1f:c3:40:89:82:5b:7c:c4:29:fe:5e:93: bf:0f:f1:ff:68:24:3a:72:7d:90:8e:f2:fc:45:39:90:6e:2d: 4e:17:06:e2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EDOjJ0XvURNmUUTVRDsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm MjhmNmMwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzI2ZTQ5NzQ2NTA1ZWI2MzZlOGM3NDNlMDU0M2Q5YzI2Y2U4N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlyMyJJUHpcl7MCA1hLGCV+eRHkg thBQ717VI8Xgg3zKzF+wPSsBqebhWOX15mP0viTDYcs+yDnwKpq4bRDnPJQlfV1y T1n3X8KCP3CIeh2KBKkpRSrJoTY6VofA18uiSYYcDPU3+9bEZGSVM+Q+3aLabfL9 nSgijWKCkw+Yvw6Yg12A1VD5L2GkGE+SkqP1fV+d3j5s2Tz65UbChfxI4CPokH4w 444fK7O9w6WD4eZ25o5NnqsEIq0272CqP2dThSl8Z19ayQEBx4Z2nknV8VI0T/lh K+P4P5H3eEvIZa83YQcdhE8igqejn2Wj9TKfBvIoz7nHtQ8K6ndTR1LmUQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGMm5JdGUF62NujHQ+BUPZwmzofXMB8GA1UdIwQY MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt YTM4NTU1MDVlYTJlLzEvWXlia2wwWlFYclkyNk1kRDRGUTluQ2JPaDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVDYNAwQA sGIpAwQAwR90AwQA1eJ3MA0GCSqGSIb3DQEBCwUAA4IBAQBkgm1AFsfJ1P11/UqC dmuyxYa9PspM2Kcl41PGVk1t4g+DQbiPfu2/0iIF8zrcd8R+H7vJAHiZZUOYCFLv SbMX65JUAo6272tb60ZRiirHUC6nB+nAXRNAL0zoOT11ddHA1eiHvtBfgYikPbD2 2q9HW7zE7xwLj28fw6AFu9ZLYLC1tRTg8gDi0I8RIRjJpBZZOGAZWsiuX8HKU2h7 4fD6AZQtSYNOv+AV2bZ73CaNqLYsKAPDvudIf0ePmG6m3i1v8S9NM5oIOFOT2F+w LOO3qe8bzDcyC2fqA6kK0egfw0CJglt8xCn+XpO/D/H/aCQ6cn2QjvL8RTmQbi1O Fwbi -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:02 2026 by rpki-client