This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/YtxqG6YVJVzJtkAnwNNnMrka-WU.roa File: YtxqG6YVJVzJtkAnwNNnMrka-WU.roa (raw, json) Hash identifier: m+f6M6gTdplPJjEueYl+KBT8SUvLASyT3kyBqwL5mTg= Subject key identifier: 62:DC:6A:1B:A6:15:25:5C:C9:B6:40:27:C0:D3:67:32:B9:1A:F9:65 Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019B7E37D916B438158A4C6C36A44DC95895 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/YtxqG6YVJVzJtkAnwNNnMrka-WU.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 95.38.144.0/22 maxlen: 22 95.38.148.0/22 maxlen: 22 95.38.148.0/23 maxlen: 23 95.38.148.0/24 maxlen: 24 95.38.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d9:16:b4:38:15:8a:4c:6c:36:a4:4d:c9:58:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62dc6a1ba615255cc9b64027c0d36732b91af965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b3:53:cc:03:0f:ed:3f:40:f8:b9:51:0b:84: 34:fa:73:df:b3:d5:45:22:9d:70:46:47:a9:8a:a4: 70:cf:3c:f9:4e:f0:a9:e8:57:59:48:d0:ec:46:f8: 1f:b0:22:af:3a:50:29:ad:4e:78:d1:e4:f5:dd:aa: c9:ce:b7:80:b7:f1:8b:a4:e8:ac:84:da:57:21:6a: c2:8b:50:da:d8:34:79:2a:82:3f:01:49:34:91:47: 47:f7:3d:d3:34:72:e5:4e:32:1f:a4:bf:eb:65:a8: 63:df:3b:ce:5d:15:1b:2f:88:e2:94:e8:25:0c:c1: 87:01:5e:f6:c8:ce:53:f3:00:91:26:e1:db:51:16: 54:d3:8f:45:eb:1e:b9:5f:e7:92:ef:8e:9e:4c:e7: 6b:67:81:d0:75:9d:37:17:1c:3e:2f:b4:7f:c5:f5: d2:ee:c2:ae:87:86:25:e4:9c:9d:b6:02:f3:f2:8f: f8:40:e9:d3:2a:91:49:13:33:3f:5a:f2:33:01:82: 8f:6f:e5:a8:b8:b5:a6:37:cc:8e:21:c8:df:b1:24: 6f:cb:54:d6:a1:4d:d8:37:8e:9f:74:a0:b8:ba:a0: 7f:5e:49:a5:95:0e:af:c3:00:f6:d2:6e:ef:1b:84: 6c:c3:82:b8:25:9e:e9:0b:2a:13:d1:a3:e2:86:54: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DC:6A:1B:A6:15:25:5C:C9:B6:40:27:C0:D3:67:32:B9:1A:F9:65 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/YtxqG6YVJVzJtkAnwNNnMrka-WU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.38.144.0/21 Signature Algorithm: sha256WithRSAEncryption 48:a8:06:bb:d6:66:ea:b4:86:80:04:48:33:1b:42:6e:e8:ff: ec:0b:84:e2:38:9d:72:65:3d:5d:77:62:64:58:04:8c:e8:67: 5a:88:33:2c:60:e0:55:17:93:7b:6a:f6:dd:8c:39:4b:75:eb: 11:49:64:3f:3f:73:f5:40:c0:c1:5c:30:71:f1:0c:20:37:7d: ba:d9:01:ea:3d:81:6c:b1:3f:6f:73:4f:da:b3:08:cc:b1:4b: b2:db:f7:34:96:30:33:f2:64:e7:f9:86:03:83:74:c0:81:28: 6f:c7:0b:29:86:5a:84:90:b9:a5:ad:07:28:02:40:3e:bc:cd: 9f:94:97:9d:0a:5c:ce:92:63:1e:79:51:ea:8a:4b:e8:bb:b9: 8e:3a:92:3d:ed:68:cb:fc:28:3e:b3:b0:54:e5:f3:33:fa:93: 08:8c:aa:02:18:1c:2d:62:6f:53:67:3a:1d:1c:67:07:fd:25: 64:e0:f1:6c:03:2c:ab:4e:fd:0d:27:d5:6d:bb:e9:9b:64:23: f1:45:17:a4:24:95:2d:95:d0:0e:71:dc:5e:e6:91:a7:83:2a: b6:b8:f9:10:9c:c8:2b:c5:80:59:29:71:0a:08:fb:75:0f:37: a3:52:84:17:ca:52:a8:70:57:b3:38:bc:d0:f6:23:b4:a2:fc: 7c:30:8a:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9kWtDgVikxsNqRNyViVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmRjNmExYmE2MTUyNTVjYzliNjQwMjdjMGQzNjczMmI5MWFmOTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bNTzAMP7T9A+LlRC4Q0+nPfs9VF Ip1wRkepiqRwzzz5TvCp6FdZSNDsRvgfsCKvOlAprU540eT13arJzreAt/GLpOis hNpXIWrCi1Da2DR5KoI/AUk0kUdH9z3TNHLlTjIfpL/rZahj3zvOXRUbL4jilOgl DMGHAV72yM5T8wCRJuHbURZU049F6x65X+eS746eTOdrZ4HQdZ03Fxw+L7R/xfXS 7sKuh4Yl5JydtgLz8o/4QOnTKpFJEzM/WvIzAYKPb+WouLWmN8yOIcjfsSRvy1TW oU3YN46fdKC4uqB/XkmllQ6vwwD20m7vG4Rsw4K4JZ7pCyoT0aPihlScgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGLcahumFSVcybZAJ8DTZzK5GvllMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvWXR4cUc2WVZKVnpKdGtBbndOTm5NcmthLVdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXyaQMA0G CSqGSIb3DQEBCwUAA4IBAQBIqAa71mbqtIaABEgzG0Ju6P/sC4TiOJ1yZT1dd2Jk WASM6GdaiDMsYOBVF5N7avbdjDlLdesRSWQ/P3P1QMDBXDBx8QwgN3262QHqPYFs sT9vc0/aswjMsUuy2/c0ljAz8mTn+YYDg3TAgShvxwsphlqEkLmlrQcoAkA+vM2f lJedClzOkmMeeVHqikvou7mOOpI97WjL/Cg+s7BU5fMz+pMIjKoCGBwtYm9TZzod HGcH/SVk4PFsAyyrTv0NJ9Vtu+mbZCPxRRekJJUtldAOcdxe5pGngyq2uPkQnMgr xYBZKXEKCPt1DzejUoQXylKocFezOLzQ9iO0ovx8MIqH -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:48 2026 by rpki-client