This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/YrOiyXQBvFt-emPhJBkIUx-kXzY.roa File: YrOiyXQBvFt-emPhJBkIUx-kXzY.roa (raw, json) Hash identifier: gDdOxaSqMhs+DnQoSQE1kiV7IppRkHiklEiaQCzF0J8= Subject key identifier: 62:B3:A2:C9:74:01:BC:5B:7E:7A:63:E1:24:19:08:53:1F:A4:5F:36 Certificate issuer: /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4 Certificate serial: 019B76EAF6F1FEA605CD0396CA6667DF10EA Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/YrOiyXQBvFt-emPhJBkIUx-kXzY.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20900 IP address blocks: 176.111.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f6:f1:fe:a6:05:cd:03:96:ca:66:67:df:10:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62b3a2c97401bc5b7e7a63e1241908531fa45f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:a5:29:85:2b:3d:29:3f:91:fc:2a:1e:4f: 5a:15:01:7d:48:4d:08:cd:f4:07:05:15:d0:4b:b7: 98:ce:0b:60:d2:9d:06:c4:31:f1:f3:f0:3d:e4:41: aa:b4:05:0e:11:3b:ab:d1:a3:3f:2c:95:a5:c3:17: 8c:a2:d1:59:c6:fc:a5:13:96:f0:78:e0:ac:93:40: 5e:9d:15:1a:d9:02:b9:7f:87:77:d8:62:81:9b:6a: dc:90:a7:04:26:be:2e:56:9b:ff:a2:62:a9:e7:81: 5c:01:00:8d:2e:09:d1:9c:4d:1e:74:5b:6d:33:81: 4a:8e:8e:b2:8f:35:7f:b0:b3:8f:2c:e7:c7:00:cc: 11:27:69:27:79:05:5f:2c:ce:84:4d:75:b8:56:a0: 8f:26:33:da:15:86:ce:c5:91:7a:a9:b8:d9:35:60: 91:c3:13:7a:6a:65:74:26:f7:8f:ba:bb:4a:ee:f8: d4:7c:87:ab:05:7e:55:a4:33:0a:2e:8e:fd:9d:87: 2f:92:b1:80:ea:55:ee:a4:82:4a:34:f1:02:0f:37: 43:97:f5:1f:e8:06:c2:61:1d:9e:34:2c:84:29:a2: 44:12:87:eb:f0:b4:9f:4c:b2:95:e7:67:65:71:34: a8:12:65:a2:e4:ee:9d:cc:b7:85:10:d1:35:22:b5: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B3:A2:C9:74:01:BC:5B:7E:7A:63:E1:24:19:08:53:1F:A4:5F:36 X509v3 Authority Key Identifier: keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/YrOiyXQBvFt-emPhJBkIUx-kXzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.111.246.0/24 Signature Algorithm: sha256WithRSAEncryption 26:17:b6:8d:0a:6b:5e:cf:aa:67:55:13:bc:71:ec:e9:c9:b7: 25:bd:eb:a6:20:79:37:f5:b7:c5:03:a7:a5:6b:e0:42:7b:a1: 90:bc:cd:7d:89:bc:f6:4e:9b:eb:bb:1e:dd:e8:cc:d2:14:ab: fb:f7:44:a7:28:1d:00:cf:62:64:13:7a:7a:d4:6a:69:67:9b: 6f:e0:f2:05:c2:eb:72:0a:a5:81:3c:52:3e:24:fe:63:af:f8: c4:9b:b8:a5:c6:7c:2d:0f:ca:93:26:60:8d:3a:32:c1:45:70: 4b:8f:68:ac:07:da:89:96:be:ce:2f:69:d5:8d:8c:58:c3:e6: 74:ee:33:b4:a0:a1:21:de:ed:26:20:c0:fe:96:0c:e7:a2:0d: 1c:3e:27:1e:de:79:ec:0b:a6:3a:45:2b:de:8f:30:65:0b:9e: 04:54:5a:e8:8c:a8:35:17:e9:69:f3:7a:ed:d7:88:66:ea:12: d1:fe:08:d3:4a:36:3f:7f:9a:e5:33:f6:c8:c3:73:f2:8f:dd: e8:5d:f5:75:db:c6:7e:19:dd:4c:98:31:1a:35:8c:ec:ad:76: b0:aa:6a:08:5b:0a:16:ae:e3:db:56:3f:27:c7:e4:c6:c0:8a: 16:bb:74:bf:98:14:15:2e:eb:46:54:9a:7d:7c:a6:b9:3f:1e: 06:5e:fe:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vbx/qYFzQOWymZn3xDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWI0YzJkZWUwODJkZWEzYjgwZDhlZmIyNWE0Njg2NTcw OGNiYjQwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmIzYTJjOTc0MDFiYzViN2U3YTYzZTEyNDE5MDg1MzFmYTQ1ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywqlKYUrPSk/kfwqHk9aFQF9SE0I zfQHBRXQS7eYzgtg0p0GxDHx8/A95EGqtAUOETur0aM/LJWlwxeMotFZxvylE5bw eOCsk0BenRUa2QK5f4d32GKBm2rckKcEJr4uVpv/omKp54FcAQCNLgnRnE0edFtt M4FKjo6yjzV/sLOPLOfHAMwRJ2kneQVfLM6ETXW4VqCPJjPaFYbOxZF6qbjZNWCR wxN6amV0JvePurtK7vjUfIerBX5VpDMKLo79nYcvkrGA6lXupIJKNPECDzdDl/Uf 6AbCYR2eNCyEKaJEEofr8LSfTLKV52dlcTSoEmWi5O6dzLeFENE1IrXBYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKzosl0Abxbfnpj4SQZCFMfpF82MB8GA1UdIwQY MBaAFLnrTC3uCC3qO4DY77JaRoZXCMu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWV0TUxlNElMZW83Z05qdnNscEdobGNJeTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZTYxNjctNjQ5Yi00ZjM5LWIzOWEt ZTY3NjdhZDVmNWU3LzEvWXJPaXlYUUJ2RnQtZW1QaEpCa0lVeC1rWHpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82ZTYxNjctNjQ5Yi00ZjM5LWIzOWEtZTY3NjdhZDVmNWU3 LzEvdWV0TUxlNElMZW83Z05qdnNscEdobGNJeTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsG/2MA0G CSqGSIb3DQEBCwUAA4IBAQAmF7aNCmtez6pnVRO8cezpybclveumIHk39bfFA6el a+BCe6GQvM19ibz2Tpvrux7d6MzSFKv790SnKB0Az2JkE3p61GppZ5tv4PIFwuty CqWBPFI+JP5jr/jEm7ilxnwtD8qTJmCNOjLBRXBLj2isB9qJlr7OL2nVjYxYw+Z0 7jO0oKEh3u0mIMD+lgznog0cPice3nnsC6Y6RSvejzBlC54EVFrojKg1F+lp83rt 14hm6hLR/gjTSjY/f5rlM/bIw3Pyj93oXfV128Z+Gd1MmDEaNYzsrXawqmoIWwoW ruPbVj8nx+TGwIoWu3S/mBQVLutGVJp9fKa5Px4GXv6e -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:54 2026 by rpki-client