This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/YkLn8tz3hbcMIIBgz23I2SUwFt0.roa File: YkLn8tz3hbcMIIBgz23I2SUwFt0.roa (raw, json) Hash identifier: 7e3Ahg7cLmv6KRLYOyXJchFQCZ5bapXqbWjili8cMRY= Subject key identifier: 62:42:E7:F2:DC:F7:85:B7:0C:20:80:60:CF:6D:C8:D9:25:30:16:DD Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c Certificate serial: 019B77C6EFD6A9E5C07D904480B233B2CF17 Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/YkLn8tz3hbcMIIBgz23I2SUwFt0.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30778 IP address blocks: 81.6.128.0/21 maxlen: 21 81.6.133.0/24 maxlen: 25 81.6.136.0/23 maxlen: 23 81.6.138.0/24 maxlen: 24 81.6.140.0/22 maxlen: 22 2a00:cd80:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ef:d6:a9:e5:c0:7d:90:44:80:b2:33:b2:cf:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6242e7f2dcf785b70c208060cf6dc8d9253016dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:ab:61:97:67:a2:4a:57:ff:04:8c:fd:78: 8a:17:26:48:59:95:47:b3:5c:82:e0:1f:b6:f4:0f: 76:f3:bd:48:de:a3:34:f4:85:b4:75:df:e5:dd:c4: bf:e4:c4:21:b6:4c:2b:0a:31:92:53:2c:9f:04:c9: af:1b:ab:eb:9e:e3:f2:01:65:ba:cc:45:42:f6:af: 65:5b:e7:a9:e7:08:1a:42:e8:c5:df:31:55:93:0b: dc:00:22:24:aa:7c:19:d4:6c:f7:19:fd:11:27:d8: 93:2a:23:db:40:30:8d:4d:89:da:ac:ff:7f:80:90: 76:8d:97:cb:42:26:8f:72:5a:ee:48:db:c5:1c:0f: 2d:36:5a:be:40:fe:34:3f:e4:cc:5e:f9:c5:c5:c2: 09:fb:a7:84:79:d8:69:3a:4d:f6:9d:a6:24:91:cf: 18:58:c4:92:43:36:94:50:00:04:f6:a7:64:1e:d9: 80:1c:73:df:6e:c2:0b:54:b0:25:14:d0:4a:bb:75: 50:83:a1:8a:d9:4e:9c:dc:2f:f5:e4:cf:c1:70:6d: e4:d2:f4:e4:b7:b4:80:43:7e:4d:d9:b9:db:77:a4: 6e:ee:29:24:04:18:a7:b8:fb:cc:91:d7:d2:ba:02: 96:61:48:1a:a9:2a:44:99:5f:54:4f:99:37:b6:76: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:42:E7:F2:DC:F7:85:B7:0C:20:80:60:CF:6D:C8:D9:25:30:16:DD X509v3 Authority Key Identifier: keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/YkLn8tz3hbcMIIBgz23I2SUwFt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.6.128.0-81.6.138.255 81.6.140.0/22 IPv6: 2a00:cd80:8000::/33 Signature Algorithm: sha256WithRSAEncryption 38:0b:85:cb:f3:df:ab:a8:c5:cf:97:f7:af:b7:55:51:c5:7e: 02:dc:db:4b:17:72:ca:ff:c7:af:70:ef:ec:ca:e5:62:a6:6c: 78:3c:5f:12:41:f9:a9:14:d0:0f:fe:26:45:e4:2f:55:ca:13: 15:6d:80:9c:99:74:e6:d7:8b:c9:8f:e9:0b:fb:b9:4d:7a:c4: 9c:3f:40:b6:3e:6f:aa:46:e7:b3:e2:7e:f5:86:70:5a:f6:9d: c6:66:a9:d0:3c:18:de:60:8c:00:fb:52:5d:0b:e5:cf:c8:d3: 46:0f:1b:64:e6:1f:02:8a:d7:40:9a:92:3d:cb:f5:fd:24:38: d0:36:b5:96:75:17:12:bc:b1:12:14:f9:3a:b5:d8:8f:80:c8: 94:ed:b9:21:55:bb:a8:2e:a3:ef:33:74:c5:c3:84:d6:c6:6d: da:1b:e9:e7:12:e7:63:d1:20:ca:4f:14:f1:e8:9a:56:b9:b9: 4c:1a:36:56:9c:17:4c:0b:82:5d:6f:b4:c5:f9:59:2c:55:8a: d9:28:30:c3:27:9d:25:94:f4:1f:f7:b5:b6:a2:72:88:c6:ef: ef:c6:25:11:77:1b:a3:3d:25:38:74:10:72:34:46:5b:87:7f: 6b:bf:42:9e:62:e5:d7:de:db:ce:11:02:66:0f:af:ca:fa:46: 66:05:d2:04 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3xu/WqeXAfZBEgLIzss8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy ZDE2MGMwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjQyZTdmMmRjZjc4NWI3MGMyMDgwNjBjZjZkYzhkOTI1MzAxNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi6rYZdnokpX/wSM/XiKFyZIWZVH s1yC4B+29A92871I3qM09IW0dd/l3cS/5MQhtkwrCjGSUyyfBMmvG6vrnuPyAWW6 zEVC9q9lW+ep5wgaQujF3zFVkwvcACIkqnwZ1Gz3Gf0RJ9iTKiPbQDCNTYnarP9/ gJB2jZfLQiaPclruSNvFHA8tNlq+QP40P+TMXvnFxcIJ+6eEedhpOk32naYkkc8Y WMSSQzaUUAAE9qdkHtmAHHPfbsILVLAlFNBKu3VQg6GK2U6c3C/15M/BcG3k0vTk t7SAQ35N2bnbd6Ru7ikkBBinuPvMkdfSugKWYUgaqSpEmV9UT5k3tnYmOQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFGJC5/Lc94W3DCCAYM9tyNklMBbdMB8GA1UdIwQY MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt YjU3MDkwN2I1OWViLzEvWWtMbjh0ejNoYmNNSUlCZ3oyM0kyU1V3RnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUMAwDBAdRBoAD BABRBooDBAJRBowwDgQCAAIwCAMGByoAzYCAMA0GCSqGSIb3DQEBCwUAA4IBAQA4 C4XL89+rqMXPl/evt1VRxX4C3NtLF3LK/8evcO/syuVipmx4PF8SQfmpFNAP/iZF 5C9VyhMVbYCcmXTm14vJj+kL+7lNesScP0C2Pm+qRuez4n71hnBa9p3GZqnQPBje YIwA+1JdC+XPyNNGDxtk5h8CitdAmpI9y/X9JDjQNrWWdRcSvLESFPk6tdiPgMiU 7bkhVbuoLqPvM3TFw4TWxm3aG+nnEudj0SDKTxTx6JpWublMGjZWnBdMC4Jdb7TF +VksVYrZKDDDJ50llPQf97W2onKIxu/vxiURdxujPSU4dBByNEZbh39rv0KeYuXX 3tvOEQJmD6/K+kZmBdIE -----END CERTIFICATE-----Generated at Mon Jan 26 15:17:42 2026 by rpki-client