This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/YV5YbyzQ4v-R-M9sTv2X0MLou60.roa File: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (raw, json) Hash identifier: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI= Subject key identifier: 61:5E:58:6F:2C:D0:E2:FF:91:F8:CF:6C:4E:FD:97:D0:C2:E8:BB:AD Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4 Certificate serial: 019B7DCAFDBB033AE80A80CADA097E172A47 Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/YV5YbyzQ4v-R-M9sTv2X0MLou60.roa Signing time: Fri 02 Jan 2026 08:20:13 +0000 ROA not before: Fri 02 Jan 2026 08:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 194.146.133.0/24 maxlen: 24 194.146.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:fd:bb:03:3a:e8:0a:80:ca:da:09:7e:17:2a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4 Validity Not Before: Jan 2 08:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=615e586f2cd0e2ff91f8cf6c4efd97d0c2e8bbad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3f:e8:91:31:ea:4b:c0:5f:dd:95:6a:ac:fd: 89:c3:81:d0:89:7d:45:5a:de:9d:2a:81:d3:32:d0: a4:96:c0:55:2b:cc:a0:b2:dc:cf:19:9f:a4:ae:24: b8:8c:c6:85:9d:5a:4a:74:18:8f:7a:6c:27:48:e0: 5b:76:cb:ab:61:1d:23:61:90:f5:00:3f:e7:bc:be: 27:40:cb:06:2d:22:ce:b0:5f:b3:70:29:79:85:5c: 89:70:6a:da:57:18:03:86:bb:1e:1d:85:48:ec:97: e3:9c:22:24:82:1d:e1:96:00:ba:0c:13:48:1e:f5: e7:55:c7:da:8b:66:bd:a6:13:01:d2:67:07:da:94: 4b:e4:39:8a:ce:29:57:08:fe:33:9b:15:40:e2:9b: 8c:70:7c:32:7c:08:10:c2:4b:8a:e9:c9:6d:f1:ad: 8a:7e:27:7f:8a:53:6d:ac:f4:86:a5:c3:96:79:72: 1e:01:2a:4e:68:17:30:76:ba:9a:e1:84:5d:50:6a: 2e:ce:6c:1f:1c:5c:01:d4:ae:71:cf:b2:da:73:3c: c3:67:d9:89:37:1c:8c:a7:37:06:6d:52:82:09:e5: 5c:0f:42:96:7e:d0:3c:a5:f2:cd:82:06:8d:cf:dc: 8b:d0:b8:78:d8:00:1c:af:77:6b:cb:d4:54:a1:54: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5E:58:6F:2C:D0:E2:FF:91:F8:CF:6C:4E:FD:97:D0:C2:E8:BB:AD X509v3 Authority Key Identifier: keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/YV5YbyzQ4v-R-M9sTv2X0MLou60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.133.0/24 194.146.135.0/24 Signature Algorithm: sha256WithRSAEncryption 49:2c:e4:16:b2:74:ad:82:6d:c9:36:d6:30:31:c7:d5:22:7d: 5f:5e:0b:a8:06:34:77:a8:cb:42:91:31:14:64:0e:c9:2e:6c: af:f9:a9:25:f8:2a:49:3b:b2:9c:fd:06:d1:69:e2:f4:b2:84: 4e:b3:ee:3a:85:0f:72:ed:57:5c:85:03:ab:e9:be:ba:dc:21: 70:90:4a:57:c0:32:30:56:74:12:52:88:d9:9e:ec:41:06:1e: 46:5e:ae:0d:14:02:b8:88:47:e9:d1:dc:4e:3d:2e:5d:ee:5d: 84:a7:05:a4:b1:7a:11:66:49:45:27:b7:1b:1f:cb:2b:43:8b: cd:3d:77:e7:c5:e4:ef:07:90:58:3f:13:34:11:ad:fd:be:06: 71:a4:65:8a:95:3e:85:8a:4e:b8:4b:71:01:61:f7:ba:24:74: b2:75:33:02:2d:82:97:c9:19:52:ac:15:36:36:2c:e7:b7:3a: 86:1d:64:80:b8:5a:e6:94:b3:50:62:5a:08:50:5b:d7:ef:b4: 96:fc:73:44:b7:11:71:70:f9:e3:84:df:dd:79:85:9a:1c:ae: d0:07:b0:ad:45:53:57:17:3f:cc:ee:91:ed:b1:46:96:4f:9a: d1:90:0a:c0:2c:c3:a7:88:b6:c2:8a:aa:cc:36:00:72:65:ff: ac:66:fa:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yv27AzroCoDK2gl+FypHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYmExZWM0ZjAzNWE3MmRmYTM5ZTkzMGFkOGVjNTQzNjhl YjdhZjQwHhcNMjYwMTAyMDgyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTVlNTg2ZjJjZDBlMmZmOTFmOGNmNmM0ZWZkOTdkMGMyZThiYmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD/okTHqS8Bf3ZVqrP2Jw4HQiX1F Wt6dKoHTMtCklsBVK8ygstzPGZ+kriS4jMaFnVpKdBiPemwnSOBbdsurYR0jYZD1 AD/nvL4nQMsGLSLOsF+zcCl5hVyJcGraVxgDhrseHYVI7JfjnCIkgh3hlgC6DBNI HvXnVcfai2a9phMB0mcH2pRL5DmKzilXCP4zmxVA4puMcHwyfAgQwkuK6clt8a2K fid/ilNtrPSGpcOWeXIeASpOaBcwdrqa4YRdUGouzmwfHFwB1K5xz7LaczzDZ9mJ NxyMpzcGbVKCCeVcD0KWftA8pfLNggaNz9yL0Lh42AAcr3dry9RUoVS0HQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGFeWG8s0OL/kfjPbE79l9DC6LutMB8GA1UdIwQY MBaAFCO6HsTwNact+jnpMK2OxUNo63r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDct YmRlNjQ0OGI3ODZjLzEvWVY1WWJ5elE0di1SLU05c1R2MlgwTUxvdTYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDctYmRlNjQ0OGI3ODZj LzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwpKFAwQA wpKHMA0GCSqGSIb3DQEBCwUAA4IBAQBJLOQWsnStgm3JNtYwMcfVIn1fXguoBjR3 qMtCkTEUZA7JLmyv+akl+CpJO7Kc/QbRaeL0soROs+46hQ9y7VdchQOr6b663CFw kEpXwDIwVnQSUojZnuxBBh5GXq4NFAK4iEfp0dxOPS5d7l2EpwWksXoRZklFJ7cb H8srQ4vNPXfnxeTvB5BYPxM0Ea39vgZxpGWKlT6Fik64S3EBYfe6JHSydTMCLYKX yRlSrBU2NizntzqGHWSAuFrmlLNQYloIUFvX77SW/HNEtxFxcPnjhN/deYWaHK7Q B7CtRVNXFz/M7pHtsUaWT5rRkArALMOniLbCiqrMNgByZf+sZvpn -----END CERTIFICATE-----Generated at Fri Jan 23 16:01:58 2026 by rpki-client