This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/YnW_N1HnfxQcGZ8nbOsDuROfUtw.roa File: YnW_N1HnfxQcGZ8nbOsDuROfUtw.roa (raw, json) Hash identifier: WvOgqLBZMI+JVQxfZ0sns+9mEpeSOL8i0zDZ/Mkn1d0= Subject key identifier: 62:75:BF:37:51:E7:7F:14:1C:19:9F:27:6C:EB:03:B9:13:9F:52:DC Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411 Certificate serial: 019B78A334E982811987853C3D26C75CA946 Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/YnW_N1HnfxQcGZ8nbOsDuROfUtw.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59752 IP address blocks: 164.177.168.0/21 maxlen: 24 185.95.128.0/22 maxlen: 24 2a03:2500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:34:e9:82:81:19:87:85:3c:3d:26:c7:5c:a9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411 Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6275bf3751e77f141c199f276ceb03b9139f52dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:83:18:d4:e7:21:98:93:30:41:f2:ad:f8: 83:aa:8e:a1:e7:7a:4b:fb:2e:99:f9:a0:54:94:8e: 3d:b4:c6:e0:08:e5:52:8d:1a:ae:ba:96:58:46:74: 5a:a3:de:ac:62:3d:e9:7d:47:13:bc:79:67:19:f0: 63:19:31:24:ce:6b:3e:e5:ea:7d:57:a3:04:aa:db: 5c:ee:6e:f9:32:c2:fa:11:b5:99:ba:73:48:60:9e: 5e:d2:0d:e6:43:13:61:4b:0a:9d:18:5d:41:1a:1a: f7:d8:76:39:c7:2c:df:fb:4e:b2:72:21:f8:de:0f: a5:dc:d6:66:3e:06:21:8b:9f:55:86:b3:74:8e:8e: 98:73:04:c5:dd:2a:73:d6:83:98:3e:74:1c:b1:1d: 79:60:4e:59:6f:54:77:b6:a4:94:c1:a4:64:00:c3: 22:5f:79:7d:54:45:a9:34:1d:69:ee:9d:2c:82:e0: 1e:5b:88:93:24:d2:96:05:c1:87:1c:77:f0:95:fd: 88:de:a6:31:ed:16:15:e6:ac:56:49:86:79:68:05: 7e:29:70:f9:ee:24:83:b8:7f:97:d9:14:57:d5:d1: 58:6c:3d:84:b0:c6:3f:d0:03:72:8e:cb:32:66:45: 0b:df:5f:50:d2:f5:23:62:93:9b:ca:1e:31:7b:96: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:75:BF:37:51:E7:7F:14:1C:19:9F:27:6C:EB:03:B9:13:9F:52:DC X509v3 Authority Key Identifier: keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/YnW_N1HnfxQcGZ8nbOsDuROfUtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.177.168.0/21 185.95.128.0/22 IPv6: 2a03:2500::/32 Signature Algorithm: sha256WithRSAEncryption 02:fb:8d:e1:1c:80:82:47:ee:2e:33:57:a7:a3:38:69:c3:85: d6:1d:f1:72:05:87:d8:a1:fe:27:33:6f:22:91:82:f3:60:73: 99:da:f2:0f:2f:6b:53:ca:ae:44:f5:91:ec:13:3e:67:f2:68: f3:aa:e5:78:d8:f3:75:74:a7:cf:84:b4:92:b4:92:64:1c:ae: fa:15:55:81:c1:78:8b:b2:8c:2e:21:ff:42:65:6a:77:c7:f2: f2:5b:0f:f0:72:01:c9:5d:9c:4c:07:6c:6b:f3:19:c6:81:1b: e8:eb:e5:c8:52:c9:89:76:6b:38:34:24:80:b7:d5:45:9b:6f: 8c:6a:92:75:50:1d:2c:2d:d9:1f:13:3c:6b:29:05:85:36:93: 6d:c8:2c:5e:3f:d0:55:3d:fb:52:0a:91:a1:b6:61:0a:c5:cb: 8d:45:82:6c:40:6c:56:1d:23:ff:0f:bd:c8:77:29:63:dc:d3: fe:64:ad:ae:2d:ff:e3:c1:28:01:41:e6:8a:11:00:87:5d:66: 4a:ca:0a:2f:5a:fa:dc:31:45:f7:dd:70:f9:fd:75:94:a5:07: 90:bf:2f:50:2f:0c:ab:db:a3:71:fb:58:ed:8e:a6:fb:ca:2b: 56:96:5d:6f:92:1a:06:8a:80:3e:c5:e9:a2:dd:2f:19:b4:a2: d8:69:0e:94 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4ozTpgoEZh4U8PSbHXKlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODI3YWNjNjgwYWEyOWRkYWM4MjM4ODlkODc4NjNlNDE0 YjI0MTEwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjc1YmYzNzUxZTc3ZjE0MWMxOTlmMjc2Y2ViMDNiOTEzOWY1MmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgaDGNTnIZiTMEHyrfiDqo6h53pL +y6Z+aBUlI49tMbgCOVSjRquupZYRnRao96sYj3pfUcTvHlnGfBjGTEkzms+5ep9 V6MEqttc7m75MsL6EbWZunNIYJ5e0g3mQxNhSwqdGF1BGhr32HY5xyzf+06yciH4 3g+l3NZmPgYhi59VhrN0jo6YcwTF3Spz1oOYPnQcsR15YE5Zb1R3tqSUwaRkAMMi X3l9VEWpNB1p7p0sguAeW4iTJNKWBcGHHHfwlf2I3qYx7RYV5qxWSYZ5aAV+KXD5 7iSDuH+X2RRX1dFYbD2EsMY/0ANyjssyZkUL319Q0vUjYpObyh4xe5ZZJQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGJ1vzdR538UHBmfJ2zrA7kTn1LcMB8GA1UdIwQY MBaAFHuCesxoCqKd2sgjiJ2Hhj5BSyQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUt ZTRkNDU5NzFiMTNkLzEvWW5XX04xSG5meFFjR1o4bmJPc0R1Uk9mVXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9lY2IxOTctZTBmNS00MzhkLThmYzUtZTRkNDU5NzFiMTNk LzEvZTRKNnpHZ0tvcDNheUNPSW5ZZUdQa0ZMSkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDpLGoAwQC uV+AMA0EAgACMAcDBQAqAyUAMA0GCSqGSIb3DQEBCwUAA4IBAQAC+43hHICCR+4u M1enozhpw4XWHfFyBYfYof4nM28ikYLzYHOZ2vIPL2tTyq5E9ZHsEz5n8mjzquV4 2PN1dKfPhLSStJJkHK76FVWBwXiLsowuIf9CZWp3x/LyWw/wcgHJXZxMB2xr8xnG gRvo6+XIUsmJdms4NCSAt9VFm2+MapJ1UB0sLdkfEzxrKQWFNpNtyCxeP9BVPftS CpGhtmEKxcuNRYJsQGxWHSP/D73Idylj3NP+ZK2uLf/jwSgBQeaKEQCHXWZKygov WvrcMUX33XD5/XWUpQeQvy9QLwyr26Nx+1jtjqb7yitWll1vkhoGioA+xemi3S8Z tKLYaQ6U -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:01 2026 by rpki-client