This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/Yn3OZN3EcUwHW_rQBEJHvaTMrAE.roa File: Yn3OZN3EcUwHW_rQBEJHvaTMrAE.roa (raw, json) Hash identifier: RePVeO4sMrGJpgyq5iiNyaiVoc7kkkgyeSzxfnPI5mY= Subject key identifier: 62:7D:CE:64:DD:C4:71:4C:07:5B:FA:D0:04:42:47:BD:A4:CC:AC:01 Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25 Certificate serial: 019B77C6B5B38A98C21935E8B3A33309FADA Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/Yn3OZN3EcUwHW_rQBEJHvaTMrAE.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206611 IP address blocks: 167.160.5.0/24 maxlen: 24 185.98.157.0/24 maxlen: 24 185.181.52.0/22 maxlen: 24 185.181.52.0/24 maxlen: 24 185.181.53.0/24 maxlen: 24 185.181.54.0/24 maxlen: 24 185.181.55.0/24 maxlen: 24 192.161.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b5:b3:8a:98:c2:19:35:e8:b3:a3:33:09:fa:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=627dce64ddc4714c075bfad0044247bda4ccac01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:77:75:7f:17:8e:0d:68:4b:98:1a:9a:f3: 33:90:f2:99:44:39:c2:b0:be:90:5b:a5:ea:82:a6: c0:29:6b:8d:e1:99:17:16:58:df:db:ab:17:9c:2b: 8e:1b:c8:83:bb:f0:d4:0c:86:20:3a:1f:cf:cc:43: 5c:cc:9e:35:ef:5b:23:84:9b:51:c5:ef:22:25:c8: 5e:77:f8:71:45:eb:97:5d:da:13:b0:38:80:14:87: a1:39:f4:6f:2d:05:4a:27:b0:a1:d7:59:d7:05:a8: a8:8e:7b:7a:dd:18:96:5a:72:70:12:85:b2:64:6f: b7:a0:2b:87:47:56:9f:e9:17:49:31:61:83:fc:62: db:35:b6:9b:e5:eb:19:4a:ad:d9:12:c8:6c:3f:b9: 33:b3:f7:c0:27:2d:8d:3e:e8:db:00:de:6c:fb:c2: 07:9f:96:9c:8b:94:f6:6c:4c:7e:84:f3:4c:c4:6b: 06:90:57:24:85:91:6b:b6:5c:e1:c3:23:b4:8f:6a: 20:86:f5:c2:92:27:5c:a9:b8:88:06:eb:b0:dd:c5: 35:75:35:4f:96:a6:e8:43:9c:6e:3c:c3:66:9c:0a: c1:c7:8c:d7:d1:ee:78:71:04:d1:5a:5e:91:0a:9d: 21:c8:d6:15:45:77:d5:8f:b3:47:2d:50:1c:7d:33: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7D:CE:64:DD:C4:71:4C:07:5B:FA:D0:04:42:47:BD:A4:CC:AC:01 X509v3 Authority Key Identifier: keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/Yn3OZN3EcUwHW_rQBEJHvaTMrAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.160.5.0/24 185.98.157.0/24 185.181.52.0/22 192.161.6.0/23 Signature Algorithm: sha256WithRSAEncryption 00:ba:e1:f2:d2:0f:f2:7d:51:f7:e2:38:5e:a8:89:ec:d7:d8: 34:02:3e:ca:fe:44:75:15:75:88:e2:b3:7a:ae:aa:4e:99:13: 58:22:14:41:f6:bb:18:7b:17:64:00:62:c4:6a:0d:57:7c:df: 2d:2a:e7:28:42:96:1e:fa:72:ca:80:17:c2:7d:00:03:3d:2c: 3b:9e:fe:9d:76:9d:2c:25:ef:d3:34:2b:17:ae:0f:f1:c6:af: e5:50:5d:57:68:73:45:1f:e9:cc:cf:15:fc:33:a8:ca:21:7b: 0f:21:a4:2b:3a:df:a8:dd:e1:99:4f:30:34:e8:f9:47:8b:65: 51:67:49:da:99:0c:92:6b:e3:77:7f:47:b7:03:48:2a:df:f8: 19:eb:f0:58:20:8d:05:55:86:c7:4b:0e:a9:b9:82:a7:38:4f: e2:20:06:5b:ee:8d:9a:67:f4:3f:dd:9d:60:11:af:f6:ba:c6: 55:99:20:ab:06:b8:b8:ef:74:66:79:2f:5a:c3:9f:25:a6:05: 92:ca:77:5e:83:c0:a2:60:d8:ec:cf:42:07:24:56:24:48:06: 95:cc:2b:a2:b9:54:83:ed:27:20:c8:a8:6a:6f:bf:bb:68:37: e7:b3:75:62:06:d5:f9:03:e3:88:b3:b4:ad:70:a6:c2:e1:c5: e0:b6:f0:61 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xrWzipjCGTXos6MzCfraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy OTdlMjUwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjdkY2U2NGRkYzQ3MTRjMDc1YmZhZDAwNDQyNDdiZGE0Y2NhYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEd3dX8Xjg1oS5gamvMzkPKZRDnC sL6QW6XqgqbAKWuN4ZkXFljf26sXnCuOG8iDu/DUDIYgOh/PzENczJ4171sjhJtR xe8iJched/hxReuXXdoTsDiAFIehOfRvLQVKJ7Ch11nXBaiojnt63RiWWnJwEoWy ZG+3oCuHR1af6RdJMWGD/GLbNbab5esZSq3ZEshsP7kzs/fAJy2NPujbAN5s+8IH n5aci5T2bEx+hPNMxGsGkFckhZFrtlzhwyO0j2oghvXCkidcqbiIBuuw3cU1dTVP lqboQ5xuPMNmnArBx4zX0e54cQTRWl6RCp0hyNYVRXfVj7NHLVAcfTMZ/wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGJ9zmTdxHFMB1v60ARCR72kzKwBMB8GA1UdIwQY MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt YjQ5MmQ2ZmY0ODNmLzEvWW4zT1pOM0VjVXdIV19yUUJFSkh2YVRNckFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAp6AFAwQA uWKdAwQCubU0AwQBwKEGMA0GCSqGSIb3DQEBCwUAA4IBAQAAuuHy0g/yfVH34jhe qIns19g0Aj7K/kR1FXWI4rN6rqpOmRNYIhRB9rsYexdkAGLEag1XfN8tKucoQpYe +nLKgBfCfQADPSw7nv6ddp0sJe/TNCsXrg/xxq/lUF1XaHNFH+nMzxX8M6jKIXsP IaQrOt+o3eGZTzA06PlHi2VRZ0namQySa+N3f0e3A0gq3/gZ6/BYII0FVYbHSw6p uYKnOE/iIAZb7o2aZ/Q/3Z1gEa/2usZVmSCrBri473RmeS9aw58lpgWSyndeg8Ci YNjsz0IHJFYkSAaVzCuiuVSD7ScgyKhqb7+7aDfns3ViBtX5A+OIs7StcKbC4cXg tvBh -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:10 2026 by rpki-client