This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/YUxchUW6QgVYqToISCVzQtOWeD8.roa
File: YUxchUW6QgVYqToISCVzQtOWeD8.roa (raw, json)
Hash identifier: LnJEQH41x4xf9Uu9Xwd+T7MDgkvoJpJ00JMm+wgyfh4=
Subject key identifier: 61:4C:5C:85:45:BA:42:05:58:A9:3A:08:48:25:73:42:D3:96:78:3F
Certificate issuer: /CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
Certificate serial: 019B7B36F418D9635BB41EC624B138557D04
Authority key identifier: E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/YUxchUW6QgVYqToISCVzQtOWeD8.roa
Signing time: Thu 01 Jan 2026 20:19:17 +0000
ROA not before: Thu 01 Jan 2026 20:19:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60239
IP address blocks: 185.34.202.0/24 maxlen: 24
2a04:5ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:f4:18:d9:63:5b:b4:1e:c6:24:b1:38:55:7d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
Validity
Not Before: Jan 1 20:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=614c5c8545ba420558a93a0848257342d396783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:12:65:19:85:73:05:97:fd:43:8e:07:33:
eb:b1:0b:c8:10:18:1f:56:c9:ee:8f:ca:aa:7c:28:
2a:2f:f4:1e:d2:38:bb:2d:ab:d4:05:2f:be:41:ed:
db:2b:17:ae:05:d5:18:91:0c:dc:98:47:ad:93:ae:
05:66:01:d8:b2:1a:4f:1c:a7:22:46:e2:6f:89:8e:
44:92:48:c1:70:57:6f:94:13:ba:68:73:1e:a6:43:
73:bb:ce:8d:30:ae:04:43:3e:62:fc:08:6d:d5:21:
d4:b4:94:5d:ca:28:2b:e2:11:ea:8e:0d:7a:e0:8d:
36:af:01:97:83:9f:d3:91:0f:59:c4:a9:a4:60:50:
bb:fc:3a:04:6a:73:8c:7d:ed:09:09:20:27:5b:af:
00:10:31:96:8f:18:7f:5d:0d:21:63:35:27:60:ec:
05:cf:09:b4:13:15:b1:7e:58:26:68:b0:d7:40:2b:
74:d6:26:b4:2f:02:05:65:0e:9d:f0:7f:a9:27:a0:
2e:61:9b:ba:17:6b:d2:a5:9f:98:2b:a3:65:88:da:
b9:21:23:f0:90:26:44:f2:89:08:65:50:fb:e9:8a:
cb:38:84:5c:77:1e:66:05:23:e6:6a:84:ad:a1:af:
84:b0:f0:be:a8:c4:d0:89:d8:37:97:c9:2c:3f:13:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4C:5C:85:45:BA:42:05:58:A9:3A:08:48:25:73:42:D3:96:78:3F
X509v3 Authority Key Identifier:
keyid:E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/YUxchUW6QgVYqToISCVzQtOWeD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.202.0/24
IPv6:
2a04:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
04:66:6f:8f:47:14:0a:1c:2f:4a:94:a9:ef:1d:27:21:20:50:
ea:ff:94:c3:26:ab:b4:c4:71:ff:5d:95:fd:6c:6a:7c:5b:44:
ef:94:1f:69:f4:9f:d9:26:94:8e:cf:2a:58:2e:07:d7:6d:ef:
bd:9e:6a:cf:a7:65:ed:7a:de:de:4a:a9:5f:52:2c:29:66:5a:
98:6b:c7:b3:b8:e7:11:d9:70:f9:2b:4f:93:3c:29:c6:fd:03:
9c:3f:54:ca:fd:01:b3:13:7b:04:04:0f:b3:8d:e5:3e:00:30:
28:62:6d:00:01:2c:29:0f:fd:7a:14:ac:8b:68:40:07:99:10:
c5:f6:69:25:cf:7d:da:75:1f:a3:d6:0f:10:f3:3b:59:dc:cb:
1a:2d:c0:e7:23:5c:26:e1:63:2b:1b:81:16:e4:69:96:8f:8d:
f9:13:fe:80:91:c8:8b:98:ff:17:c9:68:d7:fa:e3:ca:83:56:
70:fd:11:c4:35:bf:e6:94:21:01:6a:0c:61:5c:d7:24:d4:48:
3c:d1:40:ec:70:e0:fd:2e:29:9c:aa:ac:24:73:fb:06:e3:69:
60:5f:3c:0b:52:90:cd:66:6d:0c:fc:c1:d3:9d:6d:8f:5f:bb:
79:5c:73:8f:fc:43:5e:ed:eb:a3:98:a5:b5:0c:98:46:fe:b5:
7f:2c:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:52 2026 by rpki-client