This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/YTdZTF2Viwm7X1jVXxM7RE7iWkY.roa File: YTdZTF2Viwm7X1jVXxM7RE7iWkY.roa (raw, json) Hash identifier: PLUDojBBmrCDr2cH3ErKbpRNZIaQu8DifE7CiT8Cths= Subject key identifier: 61:37:59:4C:5D:95:8B:09:BB:5F:58:D5:5F:13:3B:44:4E:E2:5A:46 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7E188BA513392F5982746219E3DC4 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/YTdZTF2Viwm7X1jVXxM7RE7iWkY.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215712 IP address blocks: 85.254.127.0/24 maxlen: 24 159.148.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e1:88:ba:51:33:92:f5:98:27:46:21:9e:3d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6137594c5d958b09bb5f58d55f133b444ee25a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:ce:dd:26:44:c7:53:64:24:af:63:a3:24: 03:a3:96:88:e1:e3:de:b7:bb:c8:be:0e:e6:7e:42: cc:fb:63:a4:47:e3:99:e8:cb:93:38:36:a8:4d:12: 64:e9:d9:9a:f9:86:78:25:af:09:54:87:37:a8:38: e1:5d:25:f8:78:7f:07:cb:1b:d2:ea:de:6a:c5:ed: 7c:f7:38:0c:8c:52:54:ac:04:ef:37:39:c0:af:4e: 13:54:42:42:70:a7:51:a0:cf:69:65:b2:e3:7e:42: cb:cd:a4:43:49:8f:ef:53:c4:a9:6b:03:41:7a:c6: 19:4f:48:8e:28:42:69:7c:7a:c7:87:8d:0a:72:77: 38:ed:e7:61:c5:61:5c:d3:f7:da:d7:51:8b:9a:8c: 04:43:bf:aa:6f:6d:87:da:ff:5a:55:a2:e2:e7:45: e7:b8:b6:81:1e:5e:bc:d0:cc:ab:5f:5d:ac:2e:73: ee:da:67:8f:f2:0e:56:62:11:5f:52:e8:6d:6a:14: 11:4a:0e:69:04:8d:e0:82:e1:f8:35:4f:d7:94:f7: 5e:47:3f:70:b5:3e:3d:c8:b3:0b:a0:04:5b:82:4d: 1d:8a:3d:51:b9:ff:9c:42:bd:d0:88:c5:d7:cf:34: 3b:13:40:ad:9a:fd:29:88:3c:9e:7f:66:74:07:c1: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:37:59:4C:5D:95:8B:09:BB:5F:58:D5:5F:13:3B:44:4E:E2:5A:46 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/YTdZTF2Viwm7X1jVXxM7RE7iWkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.127.0/24 159.148.88.0/24 Signature Algorithm: sha256WithRSAEncryption 36:5b:6e:11:40:0b:43:22:8f:01:2c:78:fb:b8:3b:92:80:2e: 5a:19:a8:3e:c3:c7:e9:56:c1:ce:19:a1:5b:68:ce:60:80:7b: fb:48:35:26:f4:fc:6f:99:46:06:6d:50:65:36:59:a9:ac:4a: 98:91:7b:58:5e:f2:83:13:bf:1b:84:c0:07:1b:55:b4:80:a0: a9:d9:ae:88:d6:8d:35:79:65:54:4d:fd:59:db:b8:c9:ee:9a: 76:09:d3:93:05:23:76:8d:9e:65:2d:1c:dc:04:56:62:c0:23: 22:6d:35:40:19:3b:0f:24:2d:cb:96:02:72:b5:0e:b2:a1:f2: b0:48:49:4c:91:db:85:1a:7e:55:7f:47:65:70:6b:36:7e:b5: 25:84:2c:95:92:1a:60:1b:dc:1c:6d:d8:f9:a4:bd:b0:a4:65: 7c:a6:7a:4c:25:50:7e:67:88:74:aa:66:8d:03:ca:be:e0:8c: cf:2c:59:e2:5e:40:af:f6:87:8b:d4:52:74:5d:dd:5b:16:d5: 53:52:2f:5d:90:aa:9d:9f:6a:79:15:f3:fb:95:48:e0:e6:f4: 7a:36:e2:ba:ea:dc:6d:da:95:48:ae:48:56:68:06:78:98:49: ae:5a:f9:4e:8d:54:9e:2c:48:de:70:d5:68:78:00:09:0b:22: 78:58:dd:72 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x+GIulEzkvWYJ0Yhnj3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTM3NTk0YzVkOTU4YjA5YmI1ZjU4ZDU1ZjEzM2I0NDRlZTI1YTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9DO3SZEx1NkJK9joyQDo5aI4ePe t7vIvg7mfkLM+2OkR+OZ6MuTODaoTRJk6dma+YZ4Ja8JVIc3qDjhXSX4eH8HyxvS 6t5qxe189zgMjFJUrATvNznAr04TVEJCcKdRoM9pZbLjfkLLzaRDSY/vU8SpawNB esYZT0iOKEJpfHrHh40Kcnc47edhxWFc0/fa11GLmowEQ7+qb22H2v9aVaLi50Xn uLaBHl680MyrX12sLnPu2meP8g5WYhFfUuhtahQRSg5pBI3gguH4NU/XlPdeRz9w tT49yLMLoARbgk0dij1Ruf+cQr3QiMXXzzQ7E0Ctmv0piDyef2Z0B8EcIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGE3WUxdlYsJu19Y1V8TO0RO4lpGMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvWVRkWlRGMlZpd203WDFqVlh4TTdSRTdpV2tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVf5/AwQA n5RYMA0GCSqGSIb3DQEBCwUAA4IBAQA2W24RQAtDIo8BLHj7uDuSgC5aGag+w8fp VsHOGaFbaM5ggHv7SDUm9PxvmUYGbVBlNlmprEqYkXtYXvKDE78bhMAHG1W0gKCp 2a6I1o01eWVUTf1Z27jJ7pp2CdOTBSN2jZ5lLRzcBFZiwCMibTVAGTsPJC3LlgJy tQ6yofKwSElMkduFGn5Vf0dlcGs2frUlhCyVkhpgG9wcbdj5pL2wpGV8pnpMJVB+ Z4h0qmaNA8q+4IzPLFniXkCv9oeL1FJ0Xd1bFtVTUi9dkKqdn2p5FfP7lUjg5vR6 NuK66txt2pVIrkhWaAZ4mEmuWvlOjVSeLEjecNVoeAAJCyJ4WN1y -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:13 2026 by rpki-client