This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/8y6CSuTPq3UxhTyIPDkLzey39TU.roa File: 8y6CSuTPq3UxhTyIPDkLzey39TU.roa (raw, json) Hash identifier: d0MlsOE7YxSPTJhFI0bSHyZQVZmMtG9CLdrDZmVT9Fg= Subject key identifier: F3:2E:82:4A:E4:CF:AB:75:31:85:3C:88:3C:39:0B:CD:EC:B7:F5:35 Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Certificate serial: 019B7911082DE1B98C04628508136E0A7433 Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/8y6CSuTPq3UxhTyIPDkLzey39TU.roa Signing time: Thu 01 Jan 2026 10:18:37 +0000 ROA not before: Thu 01 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210110 IP address blocks: 178.157.48.0/20 maxlen: 24 185.239.68.0/22 maxlen: 24 212.50.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:08:2d:e1:b9:8c:04:62:85:08:13:6e:0a:74:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f32e824ae4cfab7531853c883c390bcdecb7f535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:ce:a3:c0:e0:34:cb:3b:80:1a:ad:9e:8a: 50:cc:38:aa:67:d7:d2:ae:07:1c:fb:61:59:f9:34: 22:8f:97:e5:03:1c:db:59:a0:24:0f:bd:ea:82:da: b0:bb:52:5f:69:cf:c5:6d:85:79:60:2f:88:ef:04: 6e:6b:0e:98:97:5b:ff:5a:2c:6d:83:b3:75:e6:fb: 1c:b2:a2:05:ef:87:27:ca:0a:bc:9c:d6:9a:ce:26: 11:34:f4:08:28:3d:a1:c9:5c:0b:0f:92:8e:29:3c: 25:3e:fc:f6:39:95:c4:20:3e:93:cd:d3:58:5a:bf: 5f:cf:1a:55:c6:6d:d8:f0:3a:22:25:69:3a:fb:9f: 77:b1:1e:40:b9:a0:97:b7:51:6f:b9:c8:d7:f6:21: 8c:e0:fe:28:60:b4:f1:58:9d:cb:05:b8:32:1a:db: 50:4d:bc:22:55:0f:90:59:ee:b8:c5:96:ce:65:60: 07:90:94:dd:7a:5f:91:09:38:a4:c9:b7:34:91:0d: fc:b9:10:0c:e9:11:68:75:ec:91:fa:ba:f6:54:7e: e4:c2:a6:26:8b:dc:c7:dc:a4:5a:16:5f:a4:54:20: 29:51:bc:1d:c0:fd:6f:dc:72:37:d6:b2:02:8c:b4: 7d:28:e3:a6:1b:3a:23:47:25:4e:45:ae:75:09:19: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2E:82:4A:E4:CF:AB:75:31:85:3C:88:3C:39:0B:CD:EC:B7:F5:35 X509v3 Authority Key Identifier: keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/8y6CSuTPq3UxhTyIPDkLzey39TU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.157.48.0/20 185.239.68.0/22 212.50.224.0/19 Signature Algorithm: sha256WithRSAEncryption 6b:95:e7:a2:5f:69:2b:ff:4c:22:37:e6:65:63:ba:bf:15:8d: ad:98:88:26:2e:c7:7f:08:1b:90:c4:26:8b:31:87:5d:72:20: f4:45:32:d3:27:fc:39:e6:0d:72:ca:2b:e1:dc:f5:86:3e:5f: 9a:b1:c3:5c:01:be:8a:15:20:f9:b1:cd:9b:5b:2a:c5:71:44: b7:10:35:c8:3c:51:1f:ab:5b:13:ac:30:fa:cc:e9:b3:47:03: 0d:ba:07:ea:aa:3f:86:69:39:d6:5a:46:75:c6:74:f9:6c:0e: d8:c2:9e:fc:ea:43:c0:68:59:60:a4:5e:18:ad:70:3a:25:d5: 16:70:59:82:dc:81:e5:c1:9b:d9:52:24:11:05:d1:04:38:35: 33:8c:b1:97:ec:a6:a0:db:69:97:10:f6:42:95:84:5f:1e:e7: 8a:9d:bf:2c:99:23:05:0f:42:58:99:4e:da:1c:7c:52:e9:08: ad:50:b7:89:4e:73:9f:35:a1:ec:10:67:08:73:23:1d:cf:41: e3:f4:25:f9:5a:bb:2c:c1:4e:d5:82:ab:7e:49:17:f6:4b:9d: be:16:c1:2d:78:5f:4d:53:21:aa:34:79:fa:34:3c:3d:40:3a: 67:f0:01:39:c0:06:b4:3d:a9:03:89:bb:76:25:60:0b:de:32: 41:b6:7c:3e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EQgt4bmMBGKFCBNuCnQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4 YzNiZjEwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzJlODI0YWU0Y2ZhYjc1MzE4NTNjODgzYzM5MGJjZGVjYjdmNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmXOo8DgNMs7gBqtnopQzDiqZ9fS rgcc+2FZ+TQij5flAxzbWaAkD73qgtqwu1Jfac/FbYV5YC+I7wRuaw6Yl1v/Wixt g7N15vscsqIF74cnygq8nNaaziYRNPQIKD2hyVwLD5KOKTwlPvz2OZXEID6TzdNY Wr9fzxpVxm3Y8DoiJWk6+593sR5AuaCXt1FvucjX9iGM4P4oYLTxWJ3LBbgyGttQ TbwiVQ+QWe64xZbOZWAHkJTdel+RCTikybc0kQ38uRAM6RFodeyR+rr2VH7kwqYm i9zH3KRaFl+kVCApUbwdwP1v3HI31rICjLR9KOOmGzojRyVORa51CRkVxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPMugkrkz6t1MYU8iDw5C83st/U1MB8GA1UdIwQY MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt NDIxOGIyYjY5NjNhLzEvOHk2Q1N1VFBxM1V4aFR5SVBEa0x6ZXkzOVRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEsp0wAwQC ue9EAwQF1DLgMA0GCSqGSIb3DQEBCwUAA4IBAQBrleeiX2kr/0wiN+ZlY7q/FY2t mIgmLsd/CBuQxCaLMYddciD0RTLTJ/w55g1yyivh3PWGPl+ascNcAb6KFSD5sc2b WyrFcUS3EDXIPFEfq1sTrDD6zOmzRwMNugfqqj+GaTnWWkZ1xnT5bA7Ywp786kPA aFlgpF4YrXA6JdUWcFmC3IHlwZvZUiQRBdEEODUzjLGX7Kag22mXEPZClYRfHueK nb8smSMFD0JYmU7aHHxS6QitULeJTnOfNaHsEGcIcyMdz0Hj9CX5WrsswU7Vgqt+ SRf2S52+FsEteF9NUyGqNHn6NDw9QDpn8AE5wAa0PakDibt2JWAL3jJBtnw+ -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:07 2026 by rpki-client