This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/yrqi6IRlcDIv3grXoPIY4FbOeoA.roa File: yrqi6IRlcDIv3grXoPIY4FbOeoA.roa (raw, json) Hash identifier: ALG9r0dMs7ceV0uJepoVr46+adHsA89Wj6LXqqE3rOo= Subject key identifier: CA:BA:A2:E8:84:65:70:32:2F:DE:0A:D7:A0:F2:18:E0:56:CE:7A:80 Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Certificate serial: 019B7BA34E3505907E2C4803CCFD6C053A6D Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/yrqi6IRlcDIv3grXoPIY4FbOeoA.roa Signing time: Thu 01 Jan 2026 22:17:38 +0000 ROA not before: Thu 01 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 80.254.228.0/24 maxlen: 24 185.92.168.0/24 maxlen: 24 185.92.169.0/24 maxlen: 24 185.92.171.0/24 maxlen: 24 2a13:5241::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4e:35:05:90:7e:2c:48:03:cc:fd:6c:05:3a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cabaa2e8846570322fde0ad7a0f218e056ce7a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:10:98:09:70:98:11:32:b7:0c:bf:37:c6: d2:5a:d3:fb:75:e7:ff:5e:0b:53:42:e5:8c:6f:59: 60:1b:fd:e2:56:e1:4a:67:eb:15:c0:7e:e2:f4:33: d2:91:09:f0:a9:57:86:16:fd:f9:1f:cf:c0:c8:ec: 0d:66:94:d5:d4:e3:52:50:01:ed:88:a7:96:03:f6: 9e:58:5c:e6:e4:0a:a4:32:99:38:97:ac:0c:29:96: dd:29:13:66:c9:67:c6:28:4b:77:8a:51:ee:24:19: 08:30:85:70:df:a6:93:6b:37:10:93:b8:87:62:b1: b3:26:e5:b9:06:fe:c0:27:b7:20:9d:08:63:6d:3e: 41:d8:38:a7:54:62:a9:35:f8:07:49:a5:e5:58:31: 52:3c:07:79:18:7f:00:90:fa:22:43:1f:fb:9d:6d: 7d:22:c7:6c:c4:d3:a5:fa:87:a7:fc:92:e2:1c:65: 00:54:a2:ca:ac:fd:3c:9d:92:f7:51:a6:29:6a:b2: 24:d5:e9:65:16:a4:61:68:6c:b1:83:8d:86:01:87: ab:c1:9d:6b:8b:b8:b5:34:12:38:bd:09:41:ee:cf: cc:b8:56:2e:3f:a3:a9:91:53:35:a1:9e:12:6f:c7: 6a:f8:b6:31:05:cd:61:a9:07:48:b4:aa:9c:f3:ab: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BA:A2:E8:84:65:70:32:2F:DE:0A:D7:A0:F2:18:E0:56:CE:7A:80 X509v3 Authority Key Identifier: keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/yrqi6IRlcDIv3grXoPIY4FbOeoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.254.228.0/24 185.92.168.0/23 185.92.171.0/24 IPv6: 2a13:5241::/32 Signature Algorithm: sha256WithRSAEncryption 75:92:ff:f7:6b:f0:88:81:50:99:ef:ad:87:0c:f4:87:42:1e: 25:fc:89:c1:4d:f4:59:81:4e:f5:74:7a:fe:eb:06:6f:8e:09: c3:f3:de:6c:3c:43:a9:ae:72:b2:20:31:08:43:a1:91:2e:79: 54:4b:f2:ab:a4:ff:00:68:57:53:ff:21:c7:43:fd:88:36:6a: 73:14:fc:1f:fd:dc:95:ea:82:cb:54:c8:cc:9f:8e:8e:85:9f: 43:de:e2:d5:46:99:c7:c0:9e:0a:04:b6:18:f1:f2:56:c3:82: bf:da:f0:b0:ff:79:f9:71:2f:2b:b7:43:0c:b2:dd:73:b8:d9: 02:a5:95:34:b3:93:62:3e:d6:b9:d4:39:a3:93:a8:89:b3:44: 54:c8:85:6c:72:9f:04:b3:59:57:20:17:c1:6e:36:61:54:d2: 5c:7e:05:59:d3:1a:61:bf:1a:7b:28:21:7d:70:a8:8b:08:6a: b7:fb:e7:08:79:78:75:2a:4d:df:ff:7f:97:2f:a8:e2:40:b4: 5a:da:28:b6:63:e6:29:91:39:a6:d2:d5:8d:93:6e:fd:0f:38: a9:51:82:f5:93:12:cd:53:45:5f:1c:bc:ec:29:d8:06:18:23: 88:63:7f:d0:07:e3:a2:d1:a1:0c:87:46:1a:86:ab:5c:c3:0d: d8:70:1a:ee -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7o041BZB+LEgDzP1sBTptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjQ2YWI3OWI5ZmM1OGY1ZGM0Y2YyOWQ3MmRjNTI2N2Vj M2VkZGUwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWJhYTJlODg0NjU3MDMyMmZkZTBhZDdhMGYyMThlMDU2Y2U3YTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhcQmAlwmBEytwy/N8bSWtP7def/ XgtTQuWMb1lgG/3iVuFKZ+sVwH7i9DPSkQnwqVeGFv35H8/AyOwNZpTV1ONSUAHt iKeWA/aeWFzm5AqkMpk4l6wMKZbdKRNmyWfGKEt3ilHuJBkIMIVw36aTazcQk7iH YrGzJuW5Bv7AJ7cgnQhjbT5B2DinVGKpNfgHSaXlWDFSPAd5GH8AkPoiQx/7nW19 IsdsxNOl+oen/JLiHGUAVKLKrP08nZL3UaYparIk1ellFqRhaGyxg42GAYerwZ1r i7i1NBI4vQlB7s/MuFYuP6OpkVM1oZ4Sb8dq+LYxBc1hqQdItKqc86u8uwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMq6ouiEZXAyL94K16DyGOBWznqAMB8GA1UdIwQY MBaAFFO0arebn8WPXcTPKdctxSZ+w+3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQt MDYwYTQ3MzgwOTFkLzEveXJxaTZJUmxjREl2M2dyWG9QSVk0RmJPZW9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQtMDYwYTQ3MzgwOTFk LzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAUP7kAwQB uVyoAwQAuVyrMA0EAgACMAcDBQAqE1JBMA0GCSqGSIb3DQEBCwUAA4IBAQB1kv/3 a/CIgVCZ762HDPSHQh4l/InBTfRZgU71dHr+6wZvjgnD895sPEOprnKyIDEIQ6GR LnlUS/KrpP8AaFdT/yHHQ/2INmpzFPwf/dyV6oLLVMjMn46OhZ9D3uLVRpnHwJ4K BLYY8fJWw4K/2vCw/3n5cS8rt0MMst1zuNkCpZU0s5NiPta51Dmjk6iJs0RUyIVs cp8Es1lXIBfBbjZhVNJcfgVZ0xphvxp7KCF9cKiLCGq3++cIeXh1Kk3f/3+XL6ji QLRa2ii2Y+YpkTmm0tWNk279DzipUYL1kxLNU0VfHLzsKdgGGCOIY3/QB+Oi0aEM h0Yahqtcww3YcBru -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:27 2026 by rpki-client