This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/YcE6ReHh6unnU83H-TjyslkyeUw.roa File: YcE6ReHh6unnU83H-TjyslkyeUw.roa (raw, json) Hash identifier: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE= Subject key identifier: 61:C1:3A:45:E1:E1:EA:E9:E7:53:CD:C7:F9:38:F2:B2:59:32:79:4C Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8 Certificate serial: 019B78A377F0A7E6F521581CBD6468BD3E5E Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/YcE6ReHh6unnU83H-TjyslkyeUw.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35773 IP address blocks: 195.214.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:f0:a7:e6:f5:21:58:1c:bd:64:68:bd:3e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61c13a45e1e1eae9e753cdc7f938f2b25932794c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:80:a4:9d:51:e5:1c:ad:16:c6:f3:52:09: e1:a5:a9:90:7a:df:e0:a4:bf:ed:0d:cf:5a:0c:56: e6:8b:ea:91:ba:ca:66:a3:2e:8d:20:ed:26:96:b3: b4:91:49:87:04:bd:1b:97:67:b5:af:8d:f3:03:fe: 27:32:2c:3f:26:49:ca:4c:94:5e:11:36:16:57:6b: 40:64:cd:2d:d9:54:8b:15:34:7e:ba:89:f3:c8:ef: be:cc:25:f3:c8:61:35:47:8e:a6:ac:c3:ab:75:91: 1a:74:ce:f6:2f:ea:82:92:e1:e4:5c:28:ad:54:f8: 67:88:ae:9f:e3:60:5b:67:a2:52:f0:72:05:f1:8a: 69:75:cb:2a:87:67:8c:32:52:82:4f:b3:18:b1:15: 23:83:a7:46:8d:89:75:71:20:15:d5:57:73:47:f2: e1:ad:01:64:b9:7a:5d:17:c3:ef:d0:84:8e:2d:05: d5:e2:74:1e:9c:df:df:88:37:b2:ce:f5:76:51:18: 27:ad:f3:13:bc:a2:57:78:c8:a6:e9:d2:43:72:b3: 7b:15:56:4f:25:12:1d:49:2d:52:9a:6e:9f:e6:83: cc:9f:d1:a2:6f:6d:9a:ce:55:06:ca:60:c0:9a:d6: f4:a4:fb:d2:4f:c4:8f:de:2a:d0:99:a3:c0:c3:5b: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C1:3A:45:E1:E1:EA:E9:E7:53:CD:C7:F9:38:F2:B2:59:32:79:4C X509v3 Authority Key Identifier: keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/YcE6ReHh6unnU83H-TjyslkyeUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.214.248.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:37:69:e9:a4:c9:1f:f0:dd:0e:b1:4e:e4:db:0f:f4:6a:79: d1:65:5f:5c:a8:af:86:33:04:93:65:00:36:c8:cf:c0:67:d2: 40:09:c2:40:be:04:4e:88:64:ad:9b:3b:21:46:29:a1:5c:3a: 5a:ac:ad:29:6a:36:ad:8a:f3:88:8c:90:b9:c8:6f:bd:a5:61: 6b:b1:36:1f:98:cd:8c:1b:17:7c:90:3c:c0:52:ac:fe:e2:58: 38:07:0b:dc:af:9c:65:a6:90:50:da:24:91:2d:21:35:cb:a9: 91:06:26:58:93:98:c6:3b:bd:b4:fe:6a:70:d5:6f:25:43:30: a5:fd:28:28:1e:cd:10:7a:f9:a5:eb:fa:55:7a:3d:b6:0d:92: 8a:d3:5c:00:0e:c3:88:c8:05:b1:2b:e8:fe:91:70:07:c7:91: 91:5a:19:0a:c7:95:dd:63:b8:a9:6f:06:cc:d1:0e:34:58:8c: 8c:97:68:fc:dc:b2:70:ec:5c:91:e7:42:2d:77:f6:69:68:70: c8:34:6d:23:b8:19:06:b7:68:4c:e1:b9:27:ca:93:c8:f5:14: 43:8c:31:93:26:fe:db:94:71:43:b0:03:27:e7:d9:44:55:94: 33:e7:28:68:7b:19:ab:be:9e:cd:cf:7e:f7:0b:88:19:ae:05: 8f:38:25:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3fwp+b1IVgcvWRovT5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx ZDVjYTgwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWMxM2E0NWUxZTFlYWU5ZTc1M2NkYzdmOTM4ZjJiMjU5MzI3OTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCaApJ1R5RytFsbzUgnhpamQet/g pL/tDc9aDFbmi+qRuspmoy6NIO0mlrO0kUmHBL0bl2e1r43zA/4nMiw/JknKTJRe ETYWV2tAZM0t2VSLFTR+uonzyO++zCXzyGE1R46mrMOrdZEadM72L+qCkuHkXCit VPhniK6f42BbZ6JS8HIF8Yppdcsqh2eMMlKCT7MYsRUjg6dGjYl1cSAV1VdzR/Lh rQFkuXpdF8Pv0ISOLQXV4nQenN/fiDeyzvV2URgnrfMTvKJXeMim6dJDcrN7FVZP JRIdSS1Smm6f5oPMn9Gib22azlUGymDAmtb0pPvST8SP3irQmaPAw1uTmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGHBOkXh4erp51PNx/k48rJZMnlMMB8GA1UdIwQY MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct M2VjNDQ3MzEwZGZiLzEvWWNFNlJlSGg2dW5uVTgzSC1UanlzbGt5ZVV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDw9b4MA0G CSqGSIb3DQEBCwUAA4IBAQBuN2nppMkf8N0OsU7k2w/0annRZV9cqK+GMwSTZQA2 yM/AZ9JACcJAvgROiGStmzshRimhXDparK0pajativOIjJC5yG+9pWFrsTYfmM2M Gxd8kDzAUqz+4lg4Bwvcr5xlppBQ2iSRLSE1y6mRBiZYk5jGO720/mpw1W8lQzCl /SgoHs0Qevml6/pVej22DZKK01wADsOIyAWxK+j+kXAHx5GRWhkKx5XdY7ipbwbM 0Q40WIyMl2j83LJw7FyR50Itd/ZpaHDING0juBkGt2hM4bknypPI9RRDjDGTJv7b lHFDsAMn59lEVZQz5yhoexmrvp7Nz373C4gZrgWPOCV/ -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:52 2026 by rpki-client