This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/YSY_txXwMkHdM6rWqITHXWNrMx0.roa File: YSY_txXwMkHdM6rWqITHXWNrMx0.roa (raw, json) Hash identifier: yVuL5VVBfVsU2v5lXPaJcCeDth6XQ1mjX5ArOuZxxDY= Subject key identifier: 61:26:3F:B7:15:F0:32:41:DD:33:AA:D6:A8:84:C7:5D:63:6B:33:1D Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E502A6F6DD6C75221EE10950048E Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/YSY_txXwMkHdM6rWqITHXWNrMx0.roa Signing time: Fri 02 Jan 2026 14:19:28 +0000 ROA not before: Fri 02 Jan 2026 14:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31363 IP address blocks: 80.90.240.0/20 maxlen: 20 80.90.240.0/24 maxlen: 24 80.90.250.0/24 maxlen: 24 80.90.252.0/24 maxlen: 24 80.90.254.0/24 maxlen: 24 86.62.64.0/18 maxlen: 18 86.62.64.0/24 maxlen: 24 86.62.75.0/24 maxlen: 24 86.62.79.0/24 maxlen: 24 86.62.84.0/24 maxlen: 24 86.62.92.0/24 maxlen: 24 86.62.94.0/24 maxlen: 24 86.62.96.0/24 maxlen: 24 86.62.98.0/24 maxlen: 24 86.62.99.0/24 maxlen: 24 86.62.102.0/24 maxlen: 24 86.62.103.0/24 maxlen: 24 86.62.105.0/24 maxlen: 24 86.62.110.0/24 maxlen: 24 86.62.112.0/24 maxlen: 24 86.62.113.0/24 maxlen: 24 86.62.114.0/24 maxlen: 24 86.62.115.0/24 maxlen: 24 86.62.116.0/24 maxlen: 24 86.62.117.0/24 maxlen: 24 86.62.118.0/24 maxlen: 24 86.62.119.0/24 maxlen: 24 86.62.125.0/24 maxlen: 24 195.54.192.0/19 maxlen: 19 195.54.195.0/24 maxlen: 24 195.54.196.0/24 maxlen: 24 195.54.198.0/24 maxlen: 24 195.54.201.0/24 maxlen: 24 195.54.202.0/23 maxlen: 23 195.54.202.0/24 maxlen: 24 195.54.203.0/24 maxlen: 24 195.54.207.0/24 maxlen: 24 195.54.209.0/24 maxlen: 24 195.54.210.0/24 maxlen: 24 195.54.211.0/24 maxlen: 24 195.91.128.0/17 maxlen: 17 195.91.133.0/24 maxlen: 24 195.91.138.0/24 maxlen: 24 195.91.144.0/24 maxlen: 24 195.91.145.0/24 maxlen: 24 195.91.146.0/24 maxlen: 24 195.91.147.0/24 maxlen: 24 195.91.148.0/24 maxlen: 24 195.91.149.0/24 maxlen: 24 195.91.150.0/24 maxlen: 24 195.91.151.0/24 maxlen: 24 195.91.153.0/24 maxlen: 24 195.91.156.0/24 maxlen: 24 195.91.160.0/24 maxlen: 24 195.91.165.0/24 maxlen: 24 195.91.166.0/24 maxlen: 24 195.91.168.0/24 maxlen: 24 195.91.169.0/24 maxlen: 24 195.91.170.0/24 maxlen: 24 195.91.171.0/24 maxlen: 24 195.91.172.0/24 maxlen: 24 195.91.173.0/24 maxlen: 24 195.91.174.0/24 maxlen: 24 195.91.175.0/24 maxlen: 24 195.91.178.0/24 maxlen: 24 195.91.179.0/24 maxlen: 24 195.91.180.0/24 maxlen: 24 195.91.181.0/24 maxlen: 24 195.91.182.0/24 maxlen: 24 195.91.184.0/24 maxlen: 24 195.91.187.0/24 maxlen: 24 195.91.188.0/24 maxlen: 24 195.91.191.0/24 maxlen: 24 195.91.192.0/24 maxlen: 24 195.91.195.0/24 maxlen: 24 195.91.196.0/24 maxlen: 24 195.91.197.0/24 maxlen: 24 195.91.204.0/24 maxlen: 24 195.91.207.0/24 maxlen: 24 195.91.208.0/24 maxlen: 24 195.91.209.0/24 maxlen: 24 195.91.210.0/24 maxlen: 24 195.91.211.0/24 maxlen: 24 195.91.213.0/24 maxlen: 24 195.91.215.0/24 maxlen: 24 195.91.217.0/24 maxlen: 24 195.91.218.0/24 maxlen: 24 195.91.219.0/24 maxlen: 24 195.91.220.0/24 maxlen: 24 195.91.221.0/24 maxlen: 24 195.91.222.0/24 maxlen: 24 195.91.223.0/24 maxlen: 24 195.91.224.0/24 maxlen: 24 195.91.225.0/24 maxlen: 24 195.91.226.0/24 maxlen: 24 195.91.227.0/24 maxlen: 24 195.91.228.0/24 maxlen: 24 195.91.229.0/24 maxlen: 24 195.91.230.0/24 maxlen: 24 195.91.231.0/24 maxlen: 24 195.91.232.0/24 maxlen: 24 195.91.233.0/24 maxlen: 24 195.91.234.0/24 maxlen: 24 195.91.235.0/24 maxlen: 24 195.91.236.0/24 maxlen: 24 195.91.237.0/24 maxlen: 24 195.91.238.0/24 maxlen: 24 195.91.239.0/24 maxlen: 24 195.91.240.0/24 maxlen: 24 195.91.241.0/24 maxlen: 24 195.91.242.0/24 maxlen: 24 195.91.243.0/24 maxlen: 24 195.91.244.0/24 maxlen: 24 195.91.245.0/24 maxlen: 24 195.91.246.0/24 maxlen: 24 195.91.247.0/24 maxlen: 24 195.91.252.0/24 maxlen: 24 195.91.254.0/24 maxlen: 24 195.91.255.0/24 maxlen: 24 2a00:14d0::/32 maxlen: 32 2a02:2698:9800::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e5:02:a6:f6:dd:6c:75:22:1e:e1:09:50:04:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61263fb715f03241dd33aad6a884c75d636b331d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:71:f7:fb:5e:0c:53:9b:af:7f:e3:fa:0d:70: 23:87:cc:fd:9e:0e:ad:88:aa:cf:54:3e:dd:39:8b: f7:5d:91:d5:51:e1:5a:d3:21:e3:1b:66:a5:a4:80: 25:cb:72:e9:38:39:d3:f4:e3:c6:68:1b:6d:c2:52: 8a:b8:2f:c5:9d:fd:12:d0:42:73:be:d7:59:cd:84: cf:36:ce:a6:cd:3e:9e:28:37:eb:4c:f2:cb:a2:18: a6:69:93:25:28:e7:7e:22:1b:0f:eb:5e:e7:25:24: f1:38:14:10:2a:69:9d:b7:26:a3:bf:35:0b:04:44: 15:1b:5e:60:07:4a:70:3d:4f:ac:6a:68:d0:46:f7: e3:71:3d:4d:5e:5f:b8:2b:c7:8e:31:7d:12:ea:0b: 24:af:ce:6f:27:91:14:a1:29:68:7b:92:e7:c8:61: 33:1a:c8:be:b2:ae:3b:72:05:99:58:62:8d:2e:c0: 40:15:6c:61:2c:4a:ac:46:a7:d0:98:d4:78:aa:8f: b0:31:b3:88:8b:42:56:35:4e:33:e8:61:af:51:bf: 90:4f:30:6d:c4:64:b7:d9:a6:e6:8d:9c:ec:15:53: a5:d8:39:ce:03:78:be:04:05:c9:cd:f2:9e:25:6a: e0:4e:9a:b8:64:1c:e3:06:a1:3e:a6:7a:b5:cc:47: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:26:3F:B7:15:F0:32:41:DD:33:AA:D6:A8:84:C7:5D:63:6B:33:1D X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/YSY_txXwMkHdM6rWqITHXWNrMx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.240.0/20 86.62.64.0/18 195.54.192.0/19 195.91.128.0/17 IPv6: 2a00:14d0::/32 2a02:2698:9800::/38 Signature Algorithm: sha256WithRSAEncryption 10:9e:30:82:ed:a5:94:ba:a8:34:7d:34:d9:72:e0:a6:98:46: fd:45:23:01:1b:a1:93:41:65:91:0c:ea:e1:5e:23:1f:7d:44: b2:5c:9f:fb:b6:b0:a5:1f:8c:55:08:83:6a:84:14:17:68:13: 31:bb:cc:e2:be:f1:05:f8:cf:f3:90:05:db:5d:a6:ea:45:23: fd:30:d9:88:fe:67:d3:17:42:e4:2c:1e:5e:02:14:27:d1:23: 47:db:d6:62:f7:b1:d9:71:ee:eb:70:de:84:a7:50:c5:1e:ca: ae:14:f8:80:86:e4:77:24:c5:02:51:d5:f8:33:08:17:39:14: 67:8f:10:4e:27:af:72:8e:2b:45:fa:e6:34:c5:bf:e7:1e:24: 5d:d8:19:fe:52:cb:be:9b:29:08:55:02:3e:1e:a7:ec:21:87: e7:5a:50:e8:42:db:ef:f5:d1:3f:ef:07:5f:46:68:0a:6f:de: 33:57:e4:f7:90:11:67:7c:69:b6:b6:48:61:4b:a2:8b:7e:0b: eb:f1:cd:66:80:2f:7f:06:2c:61:43:95:c2:7f:6f:ff:c4:d4: 6d:69:30:21:e5:52:8a:0d:1e:58:75:41:42:e3:3c:e5:52:53: 64:5e:32:98:c9:e7:71:4c:14:a5:a7:48:04:e3:f8:c8:db:42: 5a:82:93:6f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt/E+UCpvbdbHUiHuEJUASOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTI2M2ZiNzE1ZjAzMjQxZGQzM2FhZDZhODg0Yzc1ZDYzNmIzMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XH3+14MU5uvf+P6DXAjh8z9ng6t iKrPVD7dOYv3XZHVUeFa0yHjG2alpIAly3LpODnT9OPGaBttwlKKuC/Fnf0S0EJz vtdZzYTPNs6mzT6eKDfrTPLLohimaZMlKOd+IhsP617nJSTxOBQQKmmdtyajvzUL BEQVG15gB0pwPU+samjQRvfjcT1NXl+4K8eOMX0S6gskr85vJ5EUoSloe5LnyGEz Gsi+sq47cgWZWGKNLsBAFWxhLEqsRqfQmNR4qo+wMbOIi0JWNU4z6GGvUb+QTzBt xGS32abmjZzsFVOl2DnOA3i+BAXJzfKeJWrgTpq4ZBzjBqE+pnq1zEfLRwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFGEmP7cV8DJB3TOq1qiEx11jazMdMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvWVNZX3R4WHdNa0hkTTZyV3FJVEhYV05yTXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAeBAIAATAYAwQEUFrwAwQG Vj5AAwQFwzbAAwQHw1uAMBUEAgACMA8DBQAqABTQAwYCKgImmJgwDQYJKoZIhvcN AQELBQADggEBABCeMILtpZS6qDR9NNly4KaYRv1FIwEboZNBZZEM6uFeIx99RLJc n/u2sKUfjFUIg2qEFBdoEzG7zOK+8QX4z/OQBdtdpupFI/0w2Yj+Z9MXQuQsHl4C FCfRI0fb1mL3sdlx7utw3oSnUMUeyq4U+ICG5HckxQJR1fgzCBc5FGePEE4nr3KO K0X65jTFv+ceJF3YGf5Sy76bKQhVAj4ep+whh+daUOhC2+/10T/vB19GaApv3jNX 5PeQEWd8aba2SGFLoot+C+vxzWaAL38GLGFDlcJ/b//E1G1pMCHlUooNHlh1QULj POVSU2ReMpjJ53FMFKWnSATj+MjbQlqCk28= -----END CERTIFICATE-----Generated at Thu Feb 5 05:54:46 2026 by rpki-client