This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/yYbe2iJW7P_sCDhFY34_L0RrDto.roa File: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (raw, json) Hash identifier: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io= Subject key identifier: C9:86:DE:DA:22:56:EC:FF:EC:08:38:45:63:7E:3F:2F:44:6B:0E:DA Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a Certificate serial: 019B783504C8B07C6326FE12CC8D135CFE39 Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/yYbe2iJW7P_sCDhFY34_L0RrDto.roa Signing time: Thu 01 Jan 2026 06:18:19 +0000 ROA not before: Thu 01 Jan 2026 06:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44765 IP address blocks: 92.61.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:04:c8:b0:7c:63:26:fe:12:cc:8d:13:5c:fe:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a Validity Not Before: Jan 1 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c986deda2256ecffec083845637e3f2f446b0eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:99:e5:c0:53:da:bb:05:bc:20:60:dd:fb: 38:bc:a7:4c:4d:6f:dd:a6:fc:73:75:6e:47:77:35: c6:0f:8f:ac:ca:3b:70:1a:ff:af:e9:4f:1b:86:ff: 33:92:ed:1e:44:db:04:cb:4d:d4:a2:68:45:08:0a: 36:c4:01:fa:f5:2e:aa:0a:51:d5:86:15:49:71:d8: 35:02:63:da:65:31:2e:f5:8e:75:5d:7b:a4:57:19: 52:cd:b0:f3:b1:e3:d3:d0:fd:b9:f4:65:35:bd:ba: 49:b1:10:76:4b:4f:1a:39:00:76:41:1a:2f:5c:9a: 84:ff:c0:87:21:bd:9f:a5:77:b8:d5:f6:8f:65:ad: 86:9a:33:d0:a2:4b:08:3d:20:f1:63:4d:78:11:a1: 4e:06:40:7e:8e:79:1d:d2:b5:83:c9:ca:5d:42:41: 61:ec:ec:72:2c:41:a0:04:b8:6b:e2:b3:b2:25:1a: 36:ff:42:b6:5c:54:6f:6d:19:1b:46:2c:27:68:f7: d0:11:1d:35:22:b8:66:84:f4:fc:c5:b6:71:4a:11: b6:61:80:aa:06:32:53:8e:bc:0f:1a:bb:2f:7b:ef: 16:37:dd:e6:d2:d7:a2:7a:1f:c5:96:9b:74:0f:34: a6:5d:88:f0:26:06:90:69:1b:35:d9:a3:4b:12:4c: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:86:DE:DA:22:56:EC:FF:EC:08:38:45:63:7E:3F:2F:44:6B:0E:DA X509v3 Authority Key Identifier: keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/yYbe2iJW7P_sCDhFY34_L0RrDto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.61.60.0/22 Signature Algorithm: sha256WithRSAEncryption 93:25:61:f5:75:94:31:f5:66:ea:d5:83:d1:61:b3:8e:fb:88: 40:fc:b6:19:aa:01:e4:4c:8f:28:b0:4f:d7:ed:b5:57:b2:91: ff:0f:0e:eb:c9:0e:b4:35:f0:62:7d:71:2b:11:6b:68:cf:f8: fa:74:0c:e4:ac:c9:1e:a9:21:91:fa:9c:da:32:92:9d:58:0b: 53:53:6a:27:98:9a:51:48:c4:c7:cb:bb:43:6a:9e:9f:00:ee: 2d:c2:2d:14:fa:1b:3f:64:72:62:36:4f:1c:74:c9:db:78:dc: 0c:ae:92:04:6c:c3:9a:9d:6a:9f:da:03:40:c8:9e:16:84:3d: 95:f4:62:dd:b6:6d:d1:4b:88:08:fa:2c:d4:27:57:ea:30:43: 61:09:a2:3d:04:e9:c9:fe:99:aa:4d:81:74:92:fe:9b:e7:65: fb:02:9b:2c:7a:0a:05:7d:c1:63:a2:a2:4c:33:36:7d:a5:de: f3:b1:41:7f:fe:9f:3b:29:b6:90:f1:64:f7:7e:bd:8d:d4:8c: c9:8c:7c:95:dc:ff:41:8c:10:3a:e1:b5:bb:7b:ba:59:dc:48: 7d:32:63:84:06:7f:c7:4c:e6:3b:4c:14:a7:0f:8d:7e:7c:41: fd:7c:68:b3:0a:d5:93:29:3d:eb:21:ad:9b:a8:62:87:10:f2: a1:00:f6:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQTIsHxjJv4SzI0TXP45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm YTk5OGEwHhcNMjYwMTAxMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTg2ZGVkYTIyNTZlY2ZmZWMwODM4NDU2MzdlM2YyZjQ0NmIwZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoWZ5cBT2rsFvCBg3fs4vKdMTW/d pvxzdW5HdzXGD4+syjtwGv+v6U8bhv8zku0eRNsEy03UomhFCAo2xAH69S6qClHV hhVJcdg1AmPaZTEu9Y51XXukVxlSzbDzsePT0P259GU1vbpJsRB2S08aOQB2QRov XJqE/8CHIb2fpXe41faPZa2GmjPQoksIPSDxY014EaFOBkB+jnkd0rWDycpdQkFh 7OxyLEGgBLhr4rOyJRo2/0K2XFRvbRkbRiwnaPfQER01IrhmhPT8xbZxShG2YYCq BjJTjrwPGrsve+8WN93m0teieh/Flpt0DzSmXYjwJgaQaRs12aNLEkwuXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmG3toiVuz/7Ag4RWN+Py9Eaw7aMB8GA1UdIwQY MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt YzI3YzRhNjEwYmQzLzEveVliZTJpSlc3UF9zQ0RoRlkzNF9MMFJyRHRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXD08MA0G CSqGSIb3DQEBCwUAA4IBAQCTJWH1dZQx9Wbq1YPRYbOO+4hA/LYZqgHkTI8osE/X 7bVXspH/Dw7ryQ60NfBifXErEWtoz/j6dAzkrMkeqSGR+pzaMpKdWAtTU2onmJpR SMTHy7tDap6fAO4twi0U+hs/ZHJiNk8cdMnbeNwMrpIEbMOanWqf2gNAyJ4WhD2V 9GLdtm3RS4gI+izUJ1fqMENhCaI9BOnJ/pmqTYF0kv6b52X7ApssegoFfcFjoqJM MzZ9pd7zsUF//p87KbaQ8WT3fr2N1IzJjHyV3P9BjBA64bW7e7pZ3Eh9MmOEBn/H TOY7TBSnD41+fEH9fGizCtWTKT3rIa2bqGKHEPKhAPbc -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:19 2026 by rpki-client