This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/YMLHUww6Ty7DeidmelYQRqZnCdM.roa File: YMLHUww6Ty7DeidmelYQRqZnCdM.roa (raw, json) Hash identifier: P7cWbiKqBlhPbSP1wZkYORC+sgOuxgIGzowAM0v0Bt8= Subject key identifier: 60:C2:C7:53:0C:3A:4F:2E:C3:7A:27:66:7A:56:10:46:A6:67:09:D3 Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b Certificate serial: 019B7BA46ED49D477589B8633F060F9CC8A7 Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/YMLHUww6Ty7DeidmelYQRqZnCdM.roa Signing time: Thu 01 Jan 2026 22:18:52 +0000 ROA not before: Thu 01 Jan 2026 22:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 82.99.128.0/18 maxlen: 24 84.244.64.0/18 maxlen: 24 85.207.0.0/16 maxlen: 24 212.158.128.0/19 maxlen: 24 2a02:a40::/32 maxlen: 48 2a02:a41::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:6e:d4:9d:47:75:89:b8:63:3f:06:0f:9c:c8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b Validity Not Before: Jan 1 22:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60c2c7530c3a4f2ec37a27667a561046a66709d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:d9:2b:65:b8:b3:75:af:20:4c:d0:70:fa: 36:cd:49:1c:67:fc:ed:55:18:54:1a:a1:2c:0d:ea: 5f:86:1e:82:6e:df:f8:6e:9b:d1:84:60:ed:1f:4d: ad:d4:48:32:a9:e6:ac:a2:48:f4:91:05:fd:83:88: 8b:53:2d:b8:ea:f6:39:82:aa:c8:a9:d9:ae:a9:63: 5e:64:44:31:ce:5a:5a:f6:49:1f:12:83:5e:3a:f3: 2b:07:db:62:43:a9:f3:1f:65:87:5d:64:70:ef:41: be:fb:62:5a:20:f1:6b:ab:98:2e:9b:dd:08:b4:00: 15:d2:ef:29:46:a2:24:0b:76:85:7e:01:bd:cd:c7: f7:99:76:c0:6b:6c:36:28:d7:89:eb:1d:4f:eb:04: 3b:e5:22:6c:28:08:d1:e0:39:03:47:6a:3b:f7:37: 78:d8:10:ee:10:2a:68:26:e4:e7:a8:dc:54:c4:15: 10:64:9b:b2:bb:22:a7:36:1e:b7:de:b0:65:06:a7: 69:42:cf:70:7d:00:3b:bb:85:95:ab:b3:85:ff:e9: 7c:28:ab:13:5f:da:bb:54:58:29:95:4c:40:28:8f: 87:cd:1c:8f:2b:30:02:09:3d:0c:a1:bc:24:eb:ec: 14:cd:e5:47:5e:9d:93:5b:2e:08:0e:2a:40:ca:44: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C2:C7:53:0C:3A:4F:2E:C3:7A:27:66:7A:56:10:46:A6:67:09:D3 X509v3 Authority Key Identifier: keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/YMLHUww6Ty7DeidmelYQRqZnCdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.99.128.0/18 84.244.64.0/18 85.207.0.0/16 212.158.128.0/19 IPv6: 2a02:a40::/31 Signature Algorithm: sha256WithRSAEncryption 1e:8b:4e:2b:42:62:f2:a7:f4:51:a4:24:c5:6f:09:84:e9:91: a8:66:f8:39:e1:a6:58:da:e3:e4:04:20:59:6a:98:01:5a:9e: 36:f2:9e:de:7b:49:5c:05:cf:46:3b:ba:22:2d:84:e2:42:1a: 1e:9c:aa:b1:6d:f4:f1:42:a7:d3:ee:61:87:0d:2c:f8:af:e9: 3c:7a:34:23:19:a8:6e:f0:a1:03:bd:f6:bd:92:36:a2:61:78: 6c:79:18:b7:38:88:ec:eb:88:5c:23:7c:c4:3f:af:29:4f:37: 5e:49:5e:8e:c8:40:f0:88:83:8d:d0:37:85:f0:fe:28:4e:a4: b5:8b:0b:d5:e0:a1:b9:cd:40:a7:b3:98:94:15:43:c3:fd:ab: d1:fc:d5:c8:56:c5:ae:43:fa:de:da:61:28:46:1f:34:d9:56: 3c:87:a5:da:47:75:65:cd:c7:54:d8:93:b7:46:f9:e9:cb:47: 2c:ed:03:93:bd:0e:2d:b3:c8:40:cf:dd:0d:be:d1:ce:61:eb: 96:34:9c:36:59:3b:1e:b7:89:52:51:16:34:ac:3c:0f:69:ae: 79:40:e7:b3:95:48:1c:08:ee:57:71:e7:4b:94:2a:bc:9c:2e: 9a:42:4a:b6:51:6e:e5:36:c4:95:2f:30:df:7a:06:07:dd:be: a9:76:1d:9e -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt7pG7UnUd1ibhjPwYPnMinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZjUyNTJjY2FjM2Y2ZGMxNDI2YjU1M2YyYzFjNzIzM2Fj Yzg5NGIwHhcNMjYwMTAxMjIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGMyYzc1MzBjM2E0ZjJlYzM3YTI3NjY3YTU2MTA0NmE2NjcwOWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtvZK2W4s3WvIEzQcPo2zUkcZ/zt VRhUGqEsDepfhh6Cbt/4bpvRhGDtH02t1Egyqeasokj0kQX9g4iLUy246vY5gqrI qdmuqWNeZEQxzlpa9kkfEoNeOvMrB9tiQ6nzH2WHXWRw70G++2JaIPFrq5gum90I tAAV0u8pRqIkC3aFfgG9zcf3mXbAa2w2KNeJ6x1P6wQ75SJsKAjR4DkDR2o79zd4 2BDuECpoJuTnqNxUxBUQZJuyuyKnNh633rBlBqdpQs9wfQA7u4WVq7OF/+l8KKsT X9q7VFgplUxAKI+HzRyPKzACCT0Mobwk6+wUzeVHXp2TWy4IDipAykSm4wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGDCx1MMOk8uw3onZnpWEEamZwnTMB8GA1UdIwQY MBaAFL71JSzKw/bcFCa1U/LBxyM6zIlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmIt MTFlNWY2ZDEyZWYxLzEvWU1MSFV3dzZUeTdEZWlkbWVsWVFScVpuQ2RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmItMTFlNWY2ZDEyZWYx LzEvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQGUmOAAwQG VPRAAwMAVc8DBAXUnoAwDQQCAAIwBwMFASoCCkAwDQYJKoZIhvcNAQELBQADggEB AB6LTitCYvKn9FGkJMVvCYTpkahm+Dnhplja4+QEIFlqmAFanjbynt57SVwFz0Y7 uiIthOJCGh6cqrFt9PFCp9PuYYcNLPiv6Tx6NCMZqG7woQO99r2SNqJheGx5GLc4 iOzriFwjfMQ/rylPN15JXo7IQPCIg43QN4Xw/ihOpLWLC9XgobnNQKezmJQVQ8P9 q9H81chWxa5D+t7aYShGHzTZVjyHpdpHdWXNx1TYk7dG+enLRyztA5O9Di2zyEDP 3Q2+0c5h65Y0nDZZOx63iVJRFjSsPA9prnlA57OVSBwI7ldx50uUKrycLppCSrZR buU2xJUvMN96Bgfdvql2HZ4= -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:13 2026 by rpki-client