This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/YboTsZW5E_LquEoNeH4f-DKai2A.roa File: YboTsZW5E_LquEoNeH4f-DKai2A.roa (raw, json) Hash identifier: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ= Subject key identifier: 61:BA:13:B1:95:B9:13:F2:EA:B8:4A:0D:78:7E:1F:F8:32:9A:8B:60 Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Certificate serial: 019B76EB52700F064E35E2E662E96FF73DB2 Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/YboTsZW5E_LquEoNeH4f-DKai2A.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12350 IP address blocks: 81.23.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:52:70:0f:06:4e:35:e2:e6:62:e9:6f:f7:3d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61ba13b195b913f2eab84a0d787e1ff8329a8b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:10:45:40:ef:39:30:f9:77:91:15:f1:1c: f0:86:d2:72:99:9b:f3:6f:df:83:0e:6f:24:73:36: f1:17:c9:ca:4f:84:be:ee:4e:97:42:ed:eb:3d:ee: b3:f8:b9:9e:29:6e:8c:a8:90:79:3b:17:c6:0f:4c: e4:84:d4:34:e0:de:28:69:ea:f4:9a:47:e5:71:7a: 58:1c:0b:69:91:7d:1b:92:b0:d0:19:0e:f0:bf:9f: f6:a6:f8:6f:1f:31:5c:74:28:7c:3e:58:e7:7d:a0: 57:60:4b:c0:db:f0:6d:d2:ae:0b:88:ff:68:a3:90: 18:09:44:78:ff:43:b5:8e:f1:d8:ac:09:a7:72:bd: b3:ce:4a:0b:28:d0:25:f0:43:c8:80:ca:de:04:1d: 61:17:30:31:b1:04:55:1a:5e:2c:27:d5:93:ea:55: 59:b4:86:9e:32:91:ec:33:fb:38:3a:e2:54:b1:60: c4:c2:78:89:66:a9:71:d3:ef:b6:98:c9:3b:c7:41: f0:bb:c4:41:f3:33:67:7a:27:9d:fa:c1:5f:59:95: 61:26:9e:4c:df:9c:03:c4:ab:0a:8e:aa:a7:69:1f: 19:63:3f:08:ef:5b:f0:7d:15:43:2f:ae:c0:ce:0f: 38:97:ff:42:ed:da:41:4d:a1:3a:09:fb:6f:28:73: cc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BA:13:B1:95:B9:13:F2:EA:B8:4A:0D:78:7E:1F:F8:32:9A:8B:60 X509v3 Authority Key Identifier: keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/YboTsZW5E_LquEoNeH4f-DKai2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.23.64.0/20 Signature Algorithm: sha256WithRSAEncryption 46:41:d5:1c:16:fb:82:f2:b5:24:f9:0d:30:89:c5:50:7e:8d: 9b:5c:e4:bf:20:a0:26:b6:72:a9:b3:74:ce:26:65:35:1d:6b: 90:c2:79:7a:9a:a1:83:24:7e:da:15:10:e5:d6:26:17:4e:8a: c2:47:78:91:24:6d:c5:a3:50:22:69:da:9a:f2:02:95:4d:b7: e1:8d:c3:ae:21:b0:cf:f4:c3:c6:d3:ef:39:21:da:7a:c2:13: 7c:81:6d:de:63:6e:a4:38:25:52:9d:54:ba:76:9b:ee:7c:5b: 9d:85:22:00:fe:a1:3d:cf:06:15:fd:3d:7c:47:09:5b:5c:b4: 4e:22:29:89:46:0d:1d:de:b9:f3:31:d4:0f:90:cc:11:cb:07: 84:97:7b:40:f1:15:13:a8:e9:7a:a9:e5:94:00:16:58:37:db: 7e:24:f6:67:3e:4f:30:c9:17:32:2f:0e:ad:2d:cb:c8:bf:4c: 47:46:88:1e:b6:e8:1e:ae:bf:d4:61:a6:c0:cd:7c:73:ec:6f: cb:71:42:98:22:4d:63:0f:45:1f:06:6d:62:44:60:6a:df:3d: 91:41:1f:42:aa:8c:f4:58:82:03:63:4a:23:5d:e8:67:ca:39: 3d:ce:da:41:52:f0:f5:e6:46:39:c2:2a:e9:fc:b9:fa:12:e3: 19:34:e0:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261JwDwZONeLmYulv9z2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODNjMzk3NmNmMDBlNDJjYmVkNTM5MjRjNGE4NjU1NmJk NzAxNDIwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWJhMTNiMTk1YjkxM2YyZWFiODRhMGQ3ODdlMWZmODMyOWE4YjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLgQRUDvOTD5d5EV8RzwhtJymZvz b9+DDm8kczbxF8nKT4S+7k6XQu3rPe6z+LmeKW6MqJB5OxfGD0zkhNQ04N4oaer0 mkflcXpYHAtpkX0bkrDQGQ7wv5/2pvhvHzFcdCh8PljnfaBXYEvA2/Bt0q4LiP9o o5AYCUR4/0O1jvHYrAmncr2zzkoLKNAl8EPIgMreBB1hFzAxsQRVGl4sJ9WT6lVZ tIaeMpHsM/s4OuJUsWDEwniJZqlx0++2mMk7x0Hwu8RB8zNneied+sFfWZVhJp5M 35wDxKsKjqqnaR8ZYz8I71vwfRVDL67Azg84l/9C7dpBTaE6CftvKHPMjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGG6E7GVuRPy6rhKDXh+H/gymotgMB8GA1UdIwQY MBaAFF+Dw5ds8A5Cy+1TkkxKhlVr1wFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEt OWMzZWZmYWYyYWYyLzEvWWJvVHNaVzVFX0xxdUVvTmVINGYtREthaTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEtOWMzZWZmYWYyYWYy LzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEURdAMA0G CSqGSIb3DQEBCwUAA4IBAQBGQdUcFvuC8rUk+Q0wicVQfo2bXOS/IKAmtnKps3TO JmU1HWuQwnl6mqGDJH7aFRDl1iYXTorCR3iRJG3Fo1Aiadqa8gKVTbfhjcOuIbDP 9MPG0+85Idp6whN8gW3eY26kOCVSnVS6dpvufFudhSIA/qE9zwYV/T18RwlbXLRO IimJRg0d3rnzMdQPkMwRyweEl3tA8RUTqOl6qeWUABZYN9t+JPZnPk8wyRcyLw6t LcvIv0xHRogetugerr/UYabAzXxz7G/LcUKYIk1jD0UfBm1iRGBq3z2RQR9Cqoz0 WIIDY0ojXehnyjk9ztpBUvD15kY5wirp/Ln6EuMZNOBb -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:37 2026 by rpki-client