This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa File: ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa (raw, json) Hash identifier: YTMzmRFmaJn2juscWRVv6AowMKg8agrf/EWZm8V6PUg= Subject key identifier: CA:4C:07:26:DC:8D:01:4F:EB:30:D8:6A:5E:40:C7:CB:69:BB:EE:34 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B85903E0CA79F25EAE22C481E9B17 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204812 IP address blocks: 77.104.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:85:90:3e:0c:a7:9f:25:ea:e2:2c:48:1e:9b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca4c0726dc8d014feb30d86a5e40c7cb69bbee34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:74:98:c4:5e:60:1f:a7:8e:e5:35:2e:96:b7: bd:71:96:5a:1e:74:e2:72:48:6b:e7:19:a9:42:cd: 19:1f:c1:6e:74:af:92:97:32:9c:2b:19:fe:81:11: 8b:00:e3:b5:93:a6:3e:60:86:5d:f8:66:98:24:a7: 29:7e:80:66:c9:06:86:b3:8c:ec:22:18:c5:0d:dd: 3e:97:c7:0e:6e:b8:69:b6:c0:a4:9a:cb:52:53:9e: c1:4d:66:66:e9:2c:8e:01:25:d6:e9:db:86:9c:02: 42:61:0e:8c:a6:cb:aa:85:48:2a:2f:e9:f6:48:56: a5:10:d5:4d:7d:d2:ae:05:9a:50:2c:64:ed:cc:e7: 26:a0:bb:db:87:54:d7:ef:c6:40:cc:18:8a:f8:9c: a1:a1:c1:45:5a:08:ab:43:27:a1:14:12:9c:54:53: 9e:ea:cc:a1:7e:cd:1f:a0:92:3f:4e:67:a6:c0:46: ec:d1:15:2a:7b:17:df:c8:73:49:5f:97:f5:3e:70: 03:21:82:e2:33:cd:14:7c:a3:a0:ea:a6:36:eb:76: 3b:ad:7f:da:ad:ec:23:26:6f:28:80:eb:77:86:ed: ed:78:6b:3b:26:29:e0:de:66:a3:a4:13:a9:0e:28: 7f:7c:db:02:1d:bd:4b:ba:c9:15:01:6e:47:4a:87: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4C:07:26:DC:8D:01:4F:EB:30:D8:6A:5E:40:C7:CB:69:BB:EE:34 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.104.124.0/24 Signature Algorithm: sha256WithRSAEncryption 32:f8:7f:ba:7e:ad:e3:0b:cc:87:8a:df:87:b7:6b:96:79:d2: b1:00:01:36:e2:32:20:82:b2:c4:14:d1:af:fd:25:fb:92:ae: 74:50:68:c8:6f:bd:8a:12:df:74:3f:32:50:d1:3c:4f:0d:05: 28:4a:84:64:10:bb:34:bd:cd:c1:6b:09:6a:c5:bf:ec:00:bd: ed:25:77:94:17:d8:89:ab:75:ae:c5:80:23:e5:c0:35:71:ac: 1e:6c:f1:cd:2e:db:a4:bf:f3:e0:78:e9:d0:71:aa:fe:60:e5: bb:95:2d:e8:6d:ac:56:e6:f9:95:76:6b:60:eb:f8:bf:0a:e2: 84:6a:21:d3:3a:73:b3:12:44:ec:ed:e8:ff:fb:6c:00:1e:5c: 31:4f:c0:79:c2:0d:cd:ab:94:ba:d1:5b:96:51:28:75:7a:9f: 49:a5:e5:a5:dc:d5:49:85:29:6b:82:7b:f3:27:fe:23:5d:d8: f1:1e:9f:2e:5e:6a:1c:10:5f:cb:61:3a:a9:05:5f:b7:f1:a9: 30:89:1b:87:98:6c:ff:c8:00:d6:b1:7a:f4:eb:4f:96:36:5b: b2:5e:43:00:03:20:1f:ad:75:a6:d0:a6:e4:ab:f3:fa:f3:e7: d8:ce:a6:5c:39:a8:48:40:04:8f:62:26:f5:d0:db:5e:15:3b: b9:e8:05:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4WQPgynnyXq4ixIHpsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTRjMDcyNmRjOGQwMTRmZWIzMGQ4NmE1ZTQwYzdjYjY5YmJlZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63SYxF5gH6eO5TUulre9cZZaHnTi ckhr5xmpQs0ZH8FudK+SlzKcKxn+gRGLAOO1k6Y+YIZd+GaYJKcpfoBmyQaGs4zs IhjFDd0+l8cObrhptsCkmstSU57BTWZm6SyOASXW6duGnAJCYQ6MpsuqhUgqL+n2 SFalENVNfdKuBZpQLGTtzOcmoLvbh1TX78ZAzBiK+JyhocFFWgirQyehFBKcVFOe 6syhfs0foJI/TmemwEbs0RUqexffyHNJX5f1PnADIYLiM80UfKOg6qY263Y7rX/a rewjJm8ogOt3hu3teGs7Jing3majpBOpDih/fNsCHb1LuskVAW5HSockCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMpMBybcjQFP6zDYal5Ax8tpu+40MB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEveWt3SEp0eU5BVV9yTU5ocVhrREh5Mm03N2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWh8MA0G CSqGSIb3DQEBCwUAA4IBAQAy+H+6fq3jC8yHit+Ht2uWedKxAAE24jIggrLEFNGv /SX7kq50UGjIb72KEt90PzJQ0TxPDQUoSoRkELs0vc3Bawlqxb/sAL3tJXeUF9iJ q3WuxYAj5cA1cawebPHNLtukv/PgeOnQcar+YOW7lS3obaxW5vmVdmtg6/i/CuKE aiHTOnOzEkTs7ej/+2wAHlwxT8B5wg3Nq5S60VuWUSh1ep9JpeWl3NVJhSlrgnvz J/4jXdjxHp8uXmocEF/LYTqpBV+38akwiRuHmGz/yADWsXr060+WNluyXkMAAyAf rXWm0Kbkq/P68+fYzqZcOahIQASPYib10NteFTu56AXc -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:34 2026 by rpki-client