This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/Yokz86urLdvI75d8RVRfvOdH7pU.roa File: Yokz86urLdvI75d8RVRfvOdH7pU.roa (raw, json) Hash identifier: CcLGUunGhInKbjgc7PSmW61GmKmHbMY9TVD9O45TVtQ= Subject key identifier: 62:89:33:F3:AB:AB:2D:DB:C8:EF:97:7C:45:54:5F:BC:E7:47:EE:95 Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5 Certificate serial: 019B7A5ADFFA277C4781EF13488F62DD1426 Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/Yokz86urLdvI75d8RVRfvOdH7pU.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50522 IP address blocks: 81.23.244.0/22 maxlen: 22 81.173.0.0/22 maxlen: 22 81.173.7.0/24 maxlen: 24 81.173.32.0/22 maxlen: 22 81.173.48.0/20 maxlen: 20 81.173.64.0/20 maxlen: 20 81.173.96.0/22 maxlen: 22 81.173.125.0/24 maxlen: 24 81.173.126.0/23 maxlen: 23 109.235.32.0/21 maxlen: 21 185.61.68.0/22 maxlen: 22 2a03:be00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:df:fa:27:7c:47:81:ef:13:48:8f:62:dd:14:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5 Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=628933f3abab2ddbc8ef977c45545fbce747ee95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:92:60:4e:a3:b4:fc:e2:8f:31:9f:29:cd: 09:e4:2c:85:72:6e:9a:63:31:e0:df:32:41:af:e1: b3:a5:82:6e:35:87:e2:39:67:2f:dc:14:8d:5c:2d: 33:a3:2a:b4:8b:42:21:8c:67:73:f4:e1:02:58:af: 6a:f5:79:df:e1:ea:14:61:33:96:be:67:e3:70:14: a3:ca:01:d7:f6:d7:5d:47:66:ea:18:90:27:47:3b: d2:b6:d9:ed:dc:6b:b7:12:63:f9:95:d4:3f:fa:84: ad:17:35:ee:17:f3:46:c0:76:e7:e7:a3:88:80:af: 92:1c:0c:6d:73:79:6b:0c:6c:f7:e3:72:de:71:11: d1:2e:cf:8c:84:b5:a6:3e:04:fa:8b:fb:c2:51:1d: e7:61:2a:fd:d8:20:5f:82:01:7f:bf:e0:a5:fe:b2: e2:8f:3d:2d:79:e1:be:38:ba:fe:61:46:88:9e:5b: 42:84:8d:a7:93:d4:50:46:ed:ab:c5:3b:4b:64:72: cd:e8:75:54:44:b9:f1:51:b6:82:8d:ec:50:e3:2a: c3:b9:31:51:59:23:b7:a2:eb:57:d6:00:ef:42:d9: 33:35:4b:5e:de:ad:4c:ef:6e:92:df:b6:ed:3e:dd: 96:70:40:d0:a6:5d:ef:74:cc:a1:ff:e4:60:73:30: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:89:33:F3:AB:AB:2D:DB:C8:EF:97:7C:45:54:5F:BC:E7:47:EE:95 X509v3 Authority Key Identifier: keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/Yokz86urLdvI75d8RVRfvOdH7pU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.23.244.0/22 81.173.0.0/22 81.173.7.0/24 81.173.32.0/22 81.173.48.0-81.173.79.255 81.173.96.0/22 81.173.125.0-81.173.127.255 109.235.32.0/21 185.61.68.0/22 IPv6: 2a03:be00::/32 Signature Algorithm: sha256WithRSAEncryption 2f:8b:49:74:f4:bb:b7:a6:e8:b2:b2:9e:47:ea:f0:a1:5f:69: 31:de:a9:55:c2:46:b4:51:76:ce:45:05:48:3e:94:33:f7:22: 02:21:33:96:43:b1:6e:97:02:36:e2:6f:60:b6:91:35:d3:a6: 4f:0f:95:48:c8:62:a1:27:7e:96:cf:40:6f:ef:40:fa:15:0a: 3b:e1:02:66:7d:c2:6b:70:fb:10:a4:f2:5a:61:8d:2f:66:b7: 59:33:25:30:b9:8b:67:f4:55:a8:88:96:eb:f3:14:f1:4f:eb: 86:1a:4f:7f:b7:e8:ef:26:74:e5:cd:6f:46:f9:bd:f3:a0:15: fc:4a:78:ca:a9:b2:ed:70:1d:26:47:bc:62:06:4d:32:dd:bf: 8e:15:25:82:ac:b5:02:7f:57:30:5a:4d:66:85:6c:cc:5c:06: cd:e0:6f:64:a5:85:e3:23:a2:5e:bc:e3:2e:61:23:c4:13:f7: ce:50:3e:a9:a6:00:d0:7f:1d:56:20:62:f6:ad:50:c1:e9:95: 67:cb:12:58:d3:aa:b0:bc:f5:be:cd:f8:a7:80:48:6d:61:04: 91:4f:d9:f2:4d:7c:61:9c:0b:b8:c2:d6:4e:a4:52:87:7e:14: 5b:f8:15:9e:51:fe:3b:46:65:ab:95:ac:70:47:a1:af:8f:46: 13:cf:56:ec -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt6Wt/6J3xHge8TSI9i3RQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMzExMzlmODllODI1OTYyYTdlMzM4MGFkZTc1YjU2YWI1 YmFhZDUwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjg5MzNmM2FiYWIyZGRiYzhlZjk3N2M0NTU0NWZiY2U3NDdlZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20CSYE6jtPzijzGfKc0J5CyFcm6a YzHg3zJBr+GzpYJuNYfiOWcv3BSNXC0zoyq0i0IhjGdz9OECWK9q9Xnf4eoUYTOW vmfjcBSjygHX9tddR2bqGJAnRzvSttnt3Gu3EmP5ldQ/+oStFzXuF/NGwHbn56OI gK+SHAxtc3lrDGz343LecRHRLs+MhLWmPgT6i/vCUR3nYSr92CBfggF/v+Cl/rLi jz0teeG+OLr+YUaInltChI2nk9RQRu2rxTtLZHLN6HVURLnxUbaCjexQ4yrDuTFR WSO3outX1gDvQtkzNUte3q1M726S37btPt2WcEDQpl3vdMyh/+RgczBkdQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFGKJM/Orqy3byO+XfEVUX7znR+6VMB8GA1UdIwQY MBaAFB8xE5+J6CWWKn4zgK3nW1arW6rVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2Yt YmUxN2I4YWFkNTU0LzEvWW9rejg2dXJMZHZJNzVkOFJWUmZ2T2RIN3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2YtYmUxN2I4YWFkNTU0 LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQCURf0AwQC Ua0AAwQAUa0HAwQCUa0gMAwDBARRrTADBARRrUADBAJRrWAwDAMEAFGtfQMEB1Gt AAMEA23rIAMEArk9RDANBAIAAjAHAwUAKgO+ADANBgkqhkiG9w0BAQsFAAOCAQEA L4tJdPS7t6bosrKeR+rwoV9pMd6pVcJGtFF2zkUFSD6UM/ciAiEzlkOxbpcCNuJv YLaRNdOmTw+VSMhioSd+ls9Ab+9A+hUKO+ECZn3Ca3D7EKTyWmGNL2a3WTMlMLmL Z/RVqIiW6/MU8U/rhhpPf7fo7yZ05c1vRvm986AV/Ep4yqmy7XAdJke8YgZNMt2/ jhUlgqy1An9XMFpNZoVszFwGzeBvZKWF4yOiXrzjLmEjxBP3zlA+qaYA0H8dViBi 9q1QwemVZ8sSWNOqsLz1vs34p4BIbWEEkU/Z8k18YZwLuMLWTqRSh34UW/gVnlH+ O0Zlq5WscEehr49GE89W7A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:40 2026 by rpki-client