This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y5ytJuE_0bWYHRi27tlnucUV1Xo.roa File: Y5ytJuE_0bWYHRi27tlnucUV1Xo.roa (raw, json) Hash identifier: fbYtmO5o9x6gEuZJT0S0bf3i0dp2Jl1gqHAoG+cBvtI= Subject key identifier: 63:9C:AD:26:E1:3F:D1:B5:98:1D:18:B6:EE:D9:67:B9:C5:15:D5:7A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C485239D26FEF72B1E98360004C0260E8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y5ytJuE_0bWYHRi27tlnucUV1Xo.roa Signing time: Tue 10 Feb 2026 16:11:14 +0000 ROA not before: Tue 10 Feb 2026 16:11:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48014 IP address blocks: 80.76.51.0/24 maxlen: 24 87.121.162.0/24 maxlen: 24 93.123.46.0/24 maxlen: 24 93.123.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 22:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:48:52:39:d2:6f:ef:72:b1:e9:83:60:00:4c:02:60:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Feb 10 16:11:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=639cad26e13fd1b5981d18b6eed967b9c515d57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d8:92:8a:04:43:2e:bb:41:d7:c9:d1:d4:6b: 8e:37:dc:0f:db:b0:18:42:4e:17:8e:3d:6d:eb:82: 1b:b8:66:8a:ad:28:a0:20:ef:12:4e:7a:c6:8b:7c: 47:05:1d:51:ac:6a:0b:f5:82:8f:b3:30:df:7f:8e: a0:3d:8c:ce:80:39:10:55:d2:7b:c1:59:18:59:4d: 1f:4b:8d:ba:b7:60:db:d0:cd:a8:dc:b8:ff:ac:db: cd:64:dc:ff:4b:5f:0f:d4:2d:b6:f6:48:b4:24:1a: 8a:99:d4:b6:38:50:07:85:e5:5a:26:bd:32:13:58: 83:4a:cc:1a:9c:d7:67:44:5d:86:b4:01:a9:c4:e9: d0:ce:b0:ce:44:8e:5f:fd:8a:29:78:9c:86:17:c3: 4d:2f:7b:6e:59:f6:eb:a5:5f:d9:60:cd:e7:d2:f7: da:b3:78:96:6e:a3:43:24:4a:c0:51:e6:80:36:e4: 29:4e:7e:12:39:70:81:0e:8b:2e:fa:cb:28:7f:a8: bd:b5:54:9b:00:88:34:61:27:1d:f6:8c:96:50:c9: 5f:a9:a8:11:20:e7:90:37:18:7d:bc:8d:c7:eb:8b: 8b:91:b4:21:59:e6:c5:09:05:f8:64:b0:1e:38:96: c9:28:d0:5b:7e:28:3c:a8:9d:7c:04:71:3a:44:c1: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9C:AD:26:E1:3F:D1:B5:98:1D:18:B6:EE:D9:67:B9:C5:15:D5:7A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y5ytJuE_0bWYHRi27tlnucUV1Xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.51.0/24 87.121.162.0/24 93.123.46.0/24 93.123.113.0/24 Signature Algorithm: sha256WithRSAEncryption b4:ce:84:68:40:22:49:17:8c:52:76:f8:bc:f5:30:f9:ef:94: 4d:b5:44:46:85:17:5f:0d:ca:bd:7b:d4:a8:e3:0a:b4:8b:b6: 99:ca:ca:4b:47:51:98:d7:b2:72:de:08:b6:5c:df:60:1d:06: 81:88:e4:50:8a:77:95:47:8b:dc:a1:39:5d:cf:35:b1:60:62: 64:73:f6:7b:ab:b4:91:d4:81:cc:b8:7c:b7:4d:21:da:b9:77: 83:66:a4:e8:e2:6c:d9:1d:59:2d:48:7d:70:35:4b:3c:41:55: c2:03:63:84:a8:d8:53:ba:bb:83:a8:af:18:d0:1d:c6:f0:44: a6:48:8e:72:3c:48:1c:f5:ed:4a:49:47:1e:0a:5a:ea:fc:4d: b1:d2:2b:60:fc:a0:1d:48:fd:a9:aa:eb:d8:2f:5f:ff:4b:1e: 16:7b:7c:75:72:c9:3d:19:83:0c:31:fa:7f:32:8d:27:0d:30: c5:b3:39:1e:a8:8d:17:66:dd:92:e8:b8:3f:4f:5c:49:e0:7b: 22:0f:3a:b4:12:27:c5:74:3b:a2:ac:32:18:75:ca:8a:05:7e: 51:96:1f:c6:0c:11:88:65:2e:e8:34:5e:2c:6d:04:6b:52:b9: 7d:ab:ed:17:22:4a:15:92:60:ec:10:19:3b:96:10:54:84:9f: f4:8c:7c:03 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZxIUjnSb+9ysemDYABMAmDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMjEwMTYxMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzljYWQyNmUxM2ZkMWI1OTgxZDE4YjZlZWQ5NjdiOWM1MTVkNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9iSigRDLrtB18nR1GuON9wP27AY Qk4Xjj1t64IbuGaKrSigIO8STnrGi3xHBR1RrGoL9YKPszDff46gPYzOgDkQVdJ7 wVkYWU0fS426t2Db0M2o3Lj/rNvNZNz/S18P1C229ki0JBqKmdS2OFAHheVaJr0y E1iDSswanNdnRF2GtAGpxOnQzrDORI5f/YopeJyGF8NNL3tuWfbrpV/ZYM3n0vfa s3iWbqNDJErAUeaANuQpTn4SOXCBDosu+ssof6i9tVSbAIg0YScd9oyWUMlfqagR IOeQNxh9vI3H64uLkbQhWebFCQX4ZLAeOJbJKNBbfig8qJ18BHE6RMHMcwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGOcrSbhP9G1mB0Ytu7ZZ7nFFdV6MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvWTV5dEp1RV8wYldZSFJpMjd0bG51Y1VWMVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUEwzAwQA V3miAwQAXXsuAwQAXXtxMA0GCSqGSIb3DQEBCwUAA4IBAQC0zoRoQCJJF4xSdvi8 9TD575RNtURGhRdfDcq9e9So4wq0i7aZyspLR1GY17Jy3gi2XN9gHQaBiORQineV R4vcoTldzzWxYGJkc/Z7q7SR1IHMuHy3TSHauXeDZqTo4mzZHVktSH1wNUs8QVXC A2OEqNhTuruDqK8Y0B3G8ESmSI5yPEgc9e1KSUceClrq/E2x0itg/KAdSP2pquvY L1//Sx4We3x1csk9GYMMMfp/Mo0nDTDFszkeqI0XZt2S6Lg/T1xJ4HsiDzq0EifF dDuirDIYdcqKBX5Rlh/GDBGIZS7oNF4sbQRrUrl9q+0XIkoVkmDsEBk7lhBUhJ/0 jHwD -----END CERTIFICATE-----Generated at Wed Feb 11 06:53:21 2026 by rpki-client