This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/YtsH-o6ohV1KRenQ7M5ahCgnKiQ.roa File: YtsH-o6ohV1KRenQ7M5ahCgnKiQ.roa (raw, json) Hash identifier: /lz3T8W3K4VK2FABNIb0Axoxrp3L7N9nk00TvovZIag= Subject key identifier: 62:DB:07:FA:8E:A8:85:5D:4A:45:E9:D0:EC:CE:5A:84:28:27:2A:24 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B15B76C9234A43100F5AAB2CAD836 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/YtsH-o6ohV1KRenQ7M5ahCgnKiQ.roa Signing time: Fri 02 Jan 2026 06:17:59 +0000 ROA not before: Fri 02 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 79.124.1.0/24 maxlen: 24 130.185.249.0/24 maxlen: 24 130.185.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:15:b7:6c:92:34:a4:31:00:f5:aa:b2:ca:d8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62db07fa8ea8855d4a45e9d0ecce5a8428272a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:c1:b1:b0:ef:91:c8:a2:b4:cc:96:00:9f: f6:a1:37:7b:bc:d7:43:d3:31:88:24:16:5b:b4:4a: 7c:e1:c7:83:8e:12:69:0d:52:e0:15:39:ba:90:3a: f9:73:84:5c:4d:db:8c:0b:c8:04:82:5d:f2:8c:ce: 22:33:aa:19:12:58:f9:fb:d3:ad:38:aa:e7:5e:d1: 5d:38:ad:e8:a6:be:47:af:e8:13:0e:b1:8a:e4:82: 68:d8:2b:3e:b5:96:9c:da:ea:3a:a1:f4:5d:ac:a1: 27:bb:c5:39:7b:97:54:37:0d:4e:92:a2:18:0e:f1: ed:10:4a:72:02:18:79:1c:dc:bc:ea:24:91:57:19: 7a:9f:16:02:44:1c:de:32:b9:4a:1c:d2:f4:f1:10: a6:20:e8:bd:08:33:da:4b:ea:4f:3b:ad:28:de:2e: a1:19:20:4e:e8:9e:64:3a:0c:f3:54:e4:04:2a:7b: 88:82:e2:7e:e4:33:67:a0:94:19:ab:e0:84:1c:b4: 42:af:98:e6:26:49:fd:eb:19:d6:61:59:3e:04:ba: 63:b6:19:35:31:76:86:10:e9:88:73:d1:a3:48:9b: 0b:ec:a6:8e:66:39:bb:1d:63:93:c8:e7:0a:aa:11: 10:59:26:08:a9:2f:77:4d:61:f6:2e:66:51:e9:db: 7a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DB:07:FA:8E:A8:85:5D:4A:45:E9:D0:EC:CE:5A:84:28:27:2A:24 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/YtsH-o6ohV1KRenQ7M5ahCgnKiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.124.1.0/24 130.185.249.0/24 130.185.251.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:85:19:7c:f1:62:41:60:a8:64:eb:ef:92:b1:93:fa:06:6d: a6:b9:e8:01:94:35:8b:d1:84:e0:d0:6e:87:5a:3d:84:da:d2: 8c:b2:2f:32:e7:e4:0d:eb:11:e7:bb:c1:c5:d2:f8:6a:53:4b: 24:5c:cc:a7:6f:aa:ae:80:49:e2:12:a2:7f:4d:43:1f:59:10: 1b:ee:d9:51:08:42:64:39:f0:b7:a8:b2:5d:55:d1:ec:5f:02: 04:65:15:27:65:53:30:86:aa:8a:7b:51:2a:73:c0:2a:95:ef: 77:1d:e3:15:ad:b3:0a:18:8c:d2:6b:bc:7f:85:67:a7:f0:7f: f5:16:b8:19:ca:0d:dd:a0:cc:d0:35:10:e1:f2:e4:15:2d:46: dc:02:e0:2a:20:ef:74:9f:fa:40:57:22:b9:b2:a3:10:84:57: b1:cb:9e:14:dd:ea:79:16:47:5c:e5:be:7b:fe:32:47:08:90: 89:f9:68:28:2d:eb:ec:e9:0e:cb:59:45:60:d5:90:4f:12:12: 3d:99:cf:0f:1e:1b:1b:f2:a2:e5:7b:e2:56:65:d2:1e:7e:3f: cb:98:f3:6c:b2:32:a2:fd:00:10:f0:37:6e:9c:fd:f4:c3:97: e4:3c:dd:98:74:44:47:69:bd:c7:f1:cd:67:4e:1b:6f:ac:5e: 15:ec:29:65 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9WxW3bJI0pDEA9aqyytg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmRiMDdmYThlYTg4NTVkNGE0NWU5ZDBlY2NlNWE4NDI4MjcyYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb/BsbDvkciitMyWAJ/2oTd7vNdD 0zGIJBZbtEp84ceDjhJpDVLgFTm6kDr5c4RcTduMC8gEgl3yjM4iM6oZElj5+9Ot OKrnXtFdOK3opr5Hr+gTDrGK5IJo2Cs+tZac2uo6ofRdrKEnu8U5e5dUNw1OkqIY DvHtEEpyAhh5HNy86iSRVxl6nxYCRBzeMrlKHNL08RCmIOi9CDPaS+pPO60o3i6h GSBO6J5kOgzzVOQEKnuIguJ+5DNnoJQZq+CEHLRCr5jmJkn96xnWYVk+BLpjthk1 MXaGEOmIc9GjSJsL7KaOZjm7HWOTyOcKqhEQWSYIqS93TWH2LmZR6dt6lQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGLbB/qOqIVdSkXp0OzOWoQoJyokMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvWXRzSC1vNm9oVjFLUmVuUTdNNWFoQ2duS2lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT3wBAwQA grn5AwQAgrn7MA0GCSqGSIb3DQEBCwUAA4IBAQA7hRl88WJBYKhk6++SsZP6Bm2m uegBlDWL0YTg0G6HWj2E2tKMsi8y5+QN6xHnu8HF0vhqU0skXMynb6qugEniEqJ/ TUMfWRAb7tlRCEJkOfC3qLJdVdHsXwIEZRUnZVMwhqqKe1Eqc8Aqle93HeMVrbMK GIzSa7x/hWen8H/1FrgZyg3doMzQNRDh8uQVLUbcAuAqIO90n/pAVyK5sqMQhFex y54U3ep5Fkdc5b57/jJHCJCJ+WgoLevs6Q7LWUVg1ZBPEhI9mc8PHhsb8qLle+JW ZdIefj/LmPNssjKi/QAQ8DdunP30w5fkPN2YdERHab3H8c1nThtvrF4V7Cll -----END CERTIFICATE-----Generated at Fri Jan 23 18:50:58 2026 by rpki-client