This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/yvxp8xW14Xp2PiR7kJbkc75G14A.roa File: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (raw, json) Hash identifier: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk= Subject key identifier: CA:FC:69:F3:15:B5:E1:7A:76:3E:24:7B:90:96:E4:73:BE:46:D7:80 Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019B797F073C137EA415BF75927E44EF43F6 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/yvxp8xW14Xp2PiR7kJbkc75G14A.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47846 IP address blocks: 82.98.86.0/24 maxlen: 24 82.98.99.0/24 maxlen: 24 82.98.109.192/27 maxlen: 32 213.83.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:07:3c:13:7e:a4:15:bf:75:92:7e:44:ef:43:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cafc69f315b5e17a763e247b9096e473be46d780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:62:0f:b0:08:39:63:db:b9:d6:ae:28:d1:89: 55:f4:60:b1:49:70:23:84:60:5c:78:e8:f5:cc:4c: 5a:f4:cb:a2:3a:50:6f:3a:7c:5f:c6:08:01:ff:39: f4:08:12:eb:2c:f0:3d:d6:9e:c2:34:22:d9:78:c7: 7e:16:a9:c6:1b:9c:c1:03:69:a6:7c:b0:f4:b0:38: 88:5f:33:ad:12:9f:b4:5f:b0:10:38:e3:82:ea:15: 2d:38:9c:8b:90:40:4b:90:38:a1:46:f8:bc:93:94: 7b:a3:45:f6:49:90:c2:2c:8f:11:11:17:62:02:6a: 18:97:6f:d3:d5:67:08:9d:e8:0c:83:5b:fc:a0:d3: dd:c7:a0:c9:20:25:b7:8a:bb:af:da:b2:38:3f:02: ec:04:4b:40:39:a8:f3:a2:71:7f:a4:fc:da:2f:ce: 2e:6d:41:ab:50:d1:32:c7:fd:35:72:7f:c6:85:d8: 5f:a1:00:a5:3d:e6:ee:e9:7f:f8:db:76:d4:73:60: ce:40:92:22:a3:5d:14:15:cd:d9:63:a8:53:01:77: 0e:64:c3:e4:69:f6:a4:ff:29:9a:42:9c:7f:84:c0: 24:ec:17:8b:ee:61:31:7f:b4:28:92:32:d8:2d:7b: 57:29:02:f3:b8:f2:1f:e2:26:ce:1c:2e:c6:52:c0: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FC:69:F3:15:B5:E1:7A:76:3E:24:7B:90:96:E4:73:BE:46:D7:80 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/yvxp8xW14Xp2PiR7kJbkc75G14A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.98.86.0/24 82.98.99.0/24 82.98.109.192/27 213.83.58.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:0d:41:96:13:39:9f:77:97:85:95:f4:cd:76:0c:ef:c2:ab: 96:e5:91:92:30:4a:ba:a9:c8:e6:db:8d:a7:5b:89:13:1c:49: 2d:de:7e:cd:28:8a:9c:03:77:98:0b:73:38:72:80:bd:d1:20: cc:9c:fd:7f:52:3b:1c:41:55:50:29:24:cd:7b:91:71:45:23: 1a:94:cf:58:95:85:e4:eb:22:e2:43:8b:69:ee:44:31:a1:b5: 87:a0:5a:1d:40:da:11:78:dc:0c:09:f7:37:f1:a3:11:38:9d: d8:07:eb:56:88:7d:a3:7f:42:01:6e:a0:07:b7:1d:30:ac:18: 10:8f:c3:a6:72:3a:03:80:9a:f1:5f:b0:d2:40:12:eb:73:ab: 4b:9f:30:2c:79:1f:bb:fa:f5:32:5f:02:29:73:48:7f:c4:b7: e6:51:bf:81:d3:2d:13:68:eb:a1:5f:80:35:70:93:d3:e4:6e: 7f:cf:45:c1:85:76:6f:26:8f:7f:76:b0:ca:4d:ec:8d:52:21: 51:5e:a1:7a:e7:c4:cf:de:b7:21:99:58:fe:9c:06:94:48:02: 49:59:3b:d8:53:7f:1d:3c:8e:3d:b6:ca:eb:f9:57:4b:88:93: ac:d5:d0:f4:59:21:8e:94:e0:39:7e:9b:2b:90:b0:e6:b7:88: 75:66:9f:35 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt5fwc8E36kFb91kn5E70P2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWZjNjlmMzE1YjVlMTdhNzYzZTI0N2I5MDk2ZTQ3M2JlNDZkNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mIPsAg5Y9u51q4o0YlV9GCxSXAj hGBceOj1zExa9MuiOlBvOnxfxggB/zn0CBLrLPA91p7CNCLZeMd+FqnGG5zBA2mm fLD0sDiIXzOtEp+0X7AQOOOC6hUtOJyLkEBLkDihRvi8k5R7o0X2SZDCLI8RERdi AmoYl2/T1WcInegMg1v8oNPdx6DJICW3iruv2rI4PwLsBEtAOajzonF/pPzaL84u bUGrUNEyx/01cn/GhdhfoQClPebu6X/423bUc2DOQJIio10UFc3ZY6hTAXcOZMPk afak/ymaQpx/hMAk7BeL7mExf7QokjLYLXtXKQLzuPIf4ibOHC7GUsCfwwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFMr8afMVteF6dj4ke5CW5HO+RteAMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEveXZ4cDh4VzE0WHAyUGlSN2tKYmtjNzVHMTRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQAUmJWAwQA UmJjAwUFUmJtwAMEANVTOjANBgkqhkiG9w0BAQsFAAOCAQEALw1BlhM5n3eXhZX0 zXYM78KrluWRkjBKuqnI5tuNp1uJExxJLd5+zSiKnAN3mAtzOHKAvdEgzJz9f1I7 HEFVUCkkzXuRcUUjGpTPWJWF5Osi4kOLae5EMaG1h6BaHUDaEXjcDAn3N/GjETid 2AfrVoh9o39CAW6gB7cdMKwYEI/DpnI6A4Ca8V+w0kAS63OrS58wLHkfu/r1Ml8C KXNIf8S35lG/gdMtE2jroV+ANXCT0+Ruf89FwYV2byaPf3awyk3sjVIhUV6heufE z963IZlY/pwGlEgCSVk72FN/HTyOPbbK6/lXS4iTrNXQ9FkhjpTgOX6bK5Cw5reI dWafNQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:44 2026 by rpki-client