This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Ye4Q-oV1_3uwm1skkUeTu6XbTyA.roa File: Ye4Q-oV1_3uwm1skkUeTu6XbTyA.roa (raw, json) Hash identifier: AUgO5Oz8eAgveEotj/OWkQpdIPbmET8HdxwUWm1Roj0= Subject key identifier: 61:EE:10:FA:85:75:FF:7B:B0:9B:5B:24:91:47:93:BB:A5:DB:4F:20 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B03742038D0FE69468A3F33160B63 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Ye4Q-oV1_3uwm1skkUeTu6XbTyA.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8866 IP address blocks: 78.142.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:03:74:20:38:d0:fe:69:46:8a:3f:33:16:0b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61ee10fa8575ff7bb09b5b24914793bba5db4f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:fa:d0:6d:07:6f:85:f8:42:98:47:d5:99: bc:5d:5b:56:53:a2:60:f3:46:75:35:74:b0:0a:22: 32:4d:fe:29:97:31:a4:ea:25:e7:64:9f:36:c5:6d: c8:2c:da:88:20:f6:33:f2:df:42:44:28:70:39:6c: cb:25:09:8e:05:67:2b:a9:97:38:64:88:98:a6:15: 5a:22:e9:d8:f7:5d:38:26:7c:8a:15:18:95:7b:8c: f9:37:52:6b:b1:d1:59:41:c8:51:da:d6:37:bf:ed: 96:3b:d1:cd:2a:f8:72:c6:cf:b9:b0:68:7b:04:cc: e0:50:90:35:9a:24:c2:f4:85:31:3e:18:a6:cb:48: 4b:23:a6:e4:d6:fa:8f:c1:5a:b6:2f:ce:67:1a:46: 1a:5c:fa:17:9f:c6:55:7b:82:c4:dc:cc:98:87:bb: 56:e7:5a:01:4f:58:a9:b9:4a:b4:4f:13:5e:10:07: 07:39:b8:43:9c:0a:5a:c3:58:e6:ef:c8:a5:ec:ce: 53:f6:74:95:b7:60:b3:8e:5e:af:94:39:3c:43:c4: 75:f5:81:67:45:6d:e0:90:90:f5:85:20:48:1e:51: be:7f:10:c0:b4:7e:c1:63:92:eb:e7:50:46:6f:5d: 09:7c:fc:73:6b:cf:05:1d:17:44:5c:12:6f:09:ac: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EE:10:FA:85:75:FF:7B:B0:9B:5B:24:91:47:93:BB:A5:DB:4F:20 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Ye4Q-oV1_3uwm1skkUeTu6XbTyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.44.0/23 Signature Algorithm: sha256WithRSAEncryption 20:d4:cc:93:d6:8b:1a:9d:5e:32:d5:f8:05:8b:57:8c:49:9b: 8a:12:fa:13:8b:43:24:97:5c:c6:90:0e:1e:26:32:0f:18:36: 4e:de:cf:57:2b:15:80:5d:0a:a1:0b:77:c2:c8:cc:d9:82:f2: 36:5f:bd:50:c2:45:19:1f:12:be:a5:76:8b:5f:2e:f1:52:10: d8:9c:78:58:e2:d0:c7:ad:89:0e:6f:9e:48:29:df:aa:96:bf: fd:13:33:38:b0:99:aa:77:28:51:d1:fd:39:5a:cb:4b:a2:d7: b5:01:82:a4:ef:dd:92:bd:d1:39:cd:d2:be:70:84:81:15:aa: ad:62:e6:35:55:3c:7c:b0:2c:ee:c7:18:25:9a:d5:bc:d4:c6: 97:05:c9:89:63:65:a6:41:92:7f:e6:6d:64:4d:65:04:12:4b: 6c:cd:60:28:e9:37:ec:a8:f4:c3:ca:af:fe:59:f3:a2:86:2e: d9:e4:9f:e3:61:f3:27:8f:b1:5d:82:89:64:a5:d6:f0:ea:18: 53:27:f6:83:b7:e7:d1:03:26:3c:7e:e9:15:5b:94:1f:49:b6: a8:7a:c6:e1:4b:67:87:80:11:2f:b1:59:a2:12:cf:9a:9a:56: 3e:9f:6d:02:bf:c5:27:bb:7e:43:b5:fb:50:9e:92:c3:ff:93: 11:d7:42:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwN0IDjQ/mlGij8zFgtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWVlMTBmYTg1NzVmZjdiYjA5YjViMjQ5MTQ3OTNiYmE1ZGI0ZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8v60G0Hb4X4QphH1Zm8XVtWU6Jg 80Z1NXSwCiIyTf4plzGk6iXnZJ82xW3ILNqIIPYz8t9CRChwOWzLJQmOBWcrqZc4 ZIiYphVaIunY9104JnyKFRiVe4z5N1JrsdFZQchR2tY3v+2WO9HNKvhyxs+5sGh7 BMzgUJA1miTC9IUxPhimy0hLI6bk1vqPwVq2L85nGkYaXPoXn8ZVe4LE3MyYh7tW 51oBT1ipuUq0TxNeEAcHObhDnApaw1jm78il7M5T9nSVt2Czjl6vlDk8Q8R19YFn RW3gkJD1hSBIHlG+fxDAtH7BY5Lr51BGb10JfPxza88FHRdEXBJvCawrMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGHuEPqFdf97sJtbJJFHk7ul208gMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvWWU0US1vVjFfM3V3bTFza2tVZVR1NlhiVHlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTo4sMA0G CSqGSIb3DQEBCwUAA4IBAQAg1MyT1osanV4y1fgFi1eMSZuKEvoTi0Mkl1zGkA4e JjIPGDZO3s9XKxWAXQqhC3fCyMzZgvI2X71QwkUZHxK+pXaLXy7xUhDYnHhY4tDH rYkOb55IKd+qlr/9EzM4sJmqdyhR0f05WstLote1AYKk792SvdE5zdK+cISBFaqt YuY1VTx8sCzuxxglmtW81MaXBcmJY2WmQZJ/5m1kTWUEEktszWAo6TfsqPTDyq/+ WfOihi7Z5J/jYfMnj7Fdgolkpdbw6hhTJ/aDt+fRAyY8fukVW5QfSbaoesbhS2eH gBEvsVmiEs+amlY+n20Cv8Unu35DtftQnpLD/5MR10Lw -----END CERTIFICATE-----Generated at Fri Jan 23 18:51:31 2026 by rpki-client