This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/Yuog9y8JF_gUyOtwmx2LA41kaSA.roa File: Yuog9y8JF_gUyOtwmx2LA41kaSA.roa (raw, json) Hash identifier: bgBtmLlCdZ3iz8t6uBn4uo/dQZySgZ2naQr/qUoBKkg= Subject key identifier: 62:EA:20:F7:2F:09:17:F8:14:C8:EB:70:9B:1D:8B:03:8D:64:69:20 Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6 Certificate serial: 019B7C7FB646CDD383ACCCF83A16776DFB22 Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/Yuog9y8JF_gUyOtwmx2LA41kaSA.roa Signing time: Fri 02 Jan 2026 02:18:23 +0000 ROA not before: Fri 02 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51164 IP address blocks: 178.217.128.0/21 maxlen: 21 185.93.48.0/22 maxlen: 22 2001:67c:224::/48 maxlen: 48 2a0b:8880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b6:46:cd:d3:83:ac:cc:f8:3a:16:77:6d:fb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6 Validity Not Before: Jan 2 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62ea20f72f0917f814c8eb709b1d8b038d646920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:89:c1:4e:b7:aa:0b:e3:cb:5b:4a:a4:11: 52:57:50:93:c5:69:20:2d:88:47:93:29:ec:d2:10: 53:7a:19:37:94:fc:ee:9a:90:73:eb:79:97:79:97: 33:8a:95:89:2d:b0:2f:51:86:29:96:6a:fd:6a:4d: 76:f7:44:99:63:3a:ba:63:4e:b5:c2:26:99:b8:dc: cb:6f:bc:51:fa:bf:61:5b:16:37:8a:80:4e:ce:eb: 56:55:f0:04:df:64:b2:1a:3b:70:68:9d:d0:bf:c7: 2e:69:d4:82:32:1f:3d:df:15:2f:d4:d3:fc:02:30: 00:19:06:d4:0b:64:24:7f:51:91:cf:14:25:6b:19: 97:ee:b9:7b:4d:26:ba:11:56:82:61:e7:5a:21:f5: 5f:b4:dd:d5:d6:a7:e2:f6:56:bd:f1:2a:cc:35:4d: a8:d6:cc:2f:ab:52:3d:01:db:44:b2:9d:d5:db:20: 01:a8:a4:d8:4b:10:fe:9f:22:2d:ae:a6:7f:84:0e: 25:33:69:87:cf:ad:dc:ac:2c:77:34:79:54:fd:8a: e2:5b:0a:8f:36:ca:61:ad:aa:f0:74:fd:44:b5:7c: 9a:2c:df:ff:3b:85:21:a3:ea:da:6e:42:c7:d0:11: 39:cf:d2:2e:fc:48:bb:c8:7f:23:c7:71:d9:51:b4: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EA:20:F7:2F:09:17:F8:14:C8:EB:70:9B:1D:8B:03:8D:64:69:20 X509v3 Authority Key Identifier: keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/Yuog9y8JF_gUyOtwmx2LA41kaSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.217.128.0/21 185.93.48.0/22 IPv6: 2001:67c:224::/48 2a0b:8880::/29 Signature Algorithm: sha256WithRSAEncryption 15:00:41:c6:71:80:85:59:85:20:1a:3e:82:ae:58:2b:88:a0: 3e:03:19:64:9c:57:07:74:92:c7:c3:06:56:0d:24:83:3f:64: 69:e6:9c:9f:99:bc:d5:35:8c:78:fb:a3:8c:4e:54:22:91:e3: 8e:05:6f:30:e3:fa:ce:0d:09:13:ce:27:4f:c0:0f:a0:87:4b: cb:9d:36:4f:bb:c6:ce:b6:d0:6d:07:75:72:99:f5:62:da:a8: 59:d3:a0:f3:d2:82:1a:06:22:4a:53:13:18:3d:0d:de:a2:a2: 67:f5:08:25:a8:0e:14:1b:15:fe:02:94:16:a5:f9:17:6d:08: 72:bf:2e:72:7a:30:eb:10:a9:0d:6c:17:97:59:62:b2:f3:4d: d0:c3:e2:40:f8:6f:ca:4b:70:92:c6:31:87:ca:c4:ad:f2:c5: 47:55:8e:9e:bf:fd:2f:c8:13:8a:63:58:c4:3b:28:1a:6a:79: 32:42:83:9a:72:48:38:d1:fa:f8:c7:cd:06:f8:0d:57:7a:bf: a2:58:0d:49:d1:ed:e8:53:49:3f:c4:1c:63:7d:79:86:14:2e: 85:6d:c1:3b:c6:64:4a:8d:07:cf:5b:40:7f:02:f9:cd:a7:24: f8:c9:dc:c7:f5:e3:f4:e4:90:f1:e9:2c:0c:a3:a4:27:80:4f: 36:e2:45:2b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8f7ZGzdODrMz4OhZ3bfsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTM5ZWJiNGU1N2ZmMzQ4NTNjNzZiMGY1ODc3YWU4YWIz YzdjZjYwHhcNMjYwMTAyMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmVhMjBmNzJmMDkxN2Y4MTRjOGViNzA5YjFkOGIwMzhkNjQ2OTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NaJwU63qgvjy1tKpBFSV1CTxWkg LYhHkyns0hBTehk3lPzumpBz63mXeZczipWJLbAvUYYplmr9ak1290SZYzq6Y061 wiaZuNzLb7xR+r9hWxY3ioBOzutWVfAE32SyGjtwaJ3Qv8cuadSCMh893xUv1NP8 AjAAGQbUC2Qkf1GRzxQlaxmX7rl7TSa6EVaCYedaIfVftN3V1qfi9la98SrMNU2o 1swvq1I9AdtEsp3V2yABqKTYSxD+nyItrqZ/hA4lM2mHz63crCx3NHlU/YriWwqP NsphrarwdP1EtXyaLN//O4Uho+rabkLH0BE5z9Iu/Ei7yH8jx3HZUbQB1QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFGLqIPcvCRf4FMjrcJsdiwONZGkgMB8GA1UdIwQY MBaAFCmjnrtOV/80hTx2sPWHeuirPHz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUt Y2Q5ZGEyZDkyZThkLzEvWXVvZzl5OEpGX2dVeU90d214MkxBNDFrYVNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUtY2Q5ZGEyZDkyZThk LzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQDstmAAwQC uV0wMBYEAgACMBADBwAgAQZ8AiQDBQMqC4iAMA0GCSqGSIb3DQEBCwUAA4IBAQAV AEHGcYCFWYUgGj6CrlgriKA+AxlknFcHdJLHwwZWDSSDP2Rp5pyfmbzVNYx4+6OM TlQikeOOBW8w4/rODQkTzidPwA+gh0vLnTZPu8bOttBtB3VymfVi2qhZ06Dz0oIa BiJKUxMYPQ3eoqJn9QglqA4UGxX+ApQWpfkXbQhyvy5yejDrEKkNbBeXWWKy803Q w+JA+G/KS3CSxjGHysSt8sVHVY6ev/0vyBOKY1jEOygaankyQoOackg40fr4x80G +A1Xer+iWA1J0e3oU0k/xBxjfXmGFC6FbcE7xmRKjQfPW0B/AvnNpyT4ydzH9eP0 5JDx6SwMo6QngE824kUr -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:19 2026 by rpki-client