This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa File: Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa (raw, json) Hash identifier: fw38Poz9RGtWDLhkzBj9EkYC4z3B0EbYl1M6n6QZV4c= Subject key identifier: 63:3E:B3:31:04:D6:17:FA:0F:94:18:AC:DC:99:07:27:0C:01:A7:14 Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7 Certificate serial: 019B783461C568ADB2B775BD3A8368CAE0CD Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215822 IP address blocks: 84.247.57.0/24 maxlen: 24 89.34.175.0/24 maxlen: 24 89.35.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:61:c5:68:ad:b2:b7:75:bd:3a:83:68:ca:e0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7 Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=633eb33104d617fa0f9418acdc9907270c01a714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:73:28:41:14:25:95:88:95:01:e3:8f:7a: 91:1f:06:17:81:5c:df:62:76:33:19:fb:0a:ad:51: c5:dc:8c:7c:7f:cf:91:bc:b5:ba:2e:8b:b2:29:87: 15:17:e1:82:56:2e:1b:ee:fd:ed:af:17:78:f4:66: 2b:bd:09:8d:16:62:47:9a:f1:da:a0:c8:c7:88:4a: 40:b5:1a:d4:31:9a:5c:72:f8:26:bd:35:e0:37:24: 79:22:cd:25:11:8b:49:d5:71:54:66:2e:77:41:bf: 28:77:96:7f:53:55:0f:a9:e9:bc:68:ff:a1:f7:dc: d6:95:13:14:93:29:a5:7a:7b:f1:58:58:d5:1a:24: ba:53:96:d4:b8:b9:70:ff:3b:86:a6:5c:0f:d4:b8: c4:d3:c5:13:a9:4b:97:a1:b9:48:0b:16:fb:4b:54: 95:1e:2c:d8:4c:b7:ff:61:53:5a:c0:0f:5c:7e:76: c4:04:c8:45:15:9e:c1:1b:e9:89:eb:97:54:eb:96: 20:c9:c5:61:82:d5:12:4a:55:7a:d8:c7:55:68:6b: 90:f9:1a:bf:2c:83:42:f3:75:da:09:44:17:c7:64: 8b:81:6e:bb:4c:65:de:0c:18:bd:6f:c7:3f:69:b8: 25:50:fe:e5:a1:8f:24:cc:7f:3b:a1:36:1f:47:20: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3E:B3:31:04:D6:17:FA:0F:94:18:AC:DC:99:07:27:0C:01:A7:14 X509v3 Authority Key Identifier: keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.57.0/24 89.34.175.0/24 89.35.152.0/24 Signature Algorithm: sha256WithRSAEncryption d0:94:f0:cd:9c:f5:c5:42:f6:be:2d:39:76:37:04:cc:04:60: d8:5d:84:92:21:31:b8:68:75:fe:31:4c:fe:e5:5f:a3:9f:ae: 2a:90:54:46:4b:25:22:3b:f8:5d:25:f8:59:1d:bc:62:c8:7f: 87:62:22:02:84:19:74:d8:d9:af:c4:33:20:bc:b2:7e:3f:19: 44:b6:ed:5a:97:64:b5:77:16:55:03:2b:34:00:0f:43:3e:c1: 7e:6a:75:fe:35:25:ac:a4:c6:ef:89:88:95:4a:71:06:de:bf: cb:be:50:1e:a5:4a:7e:2a:ab:22:ed:00:5a:cd:4b:6c:27:9f: 49:38:5d:1d:08:c0:69:24:75:0b:a5:4f:8a:ca:cc:d3:36:48: 46:ee:e1:54:9b:54:0b:e9:c2:62:ad:28:40:05:de:a8:58:35: ad:a7:51:f9:b2:3a:3b:60:87:f4:ad:42:00:aa:ba:17:36:25: f1:e0:42:18:4b:ef:f2:14:e3:90:7c:e8:6c:02:ad:a4:b8:d1: 51:73:5a:16:de:73:cb:f4:32:7d:f6:f1:42:54:ce:4a:cb:ff: 9d:8a:ef:a8:37:5c:2c:74:8e:95:5e:50:47:96:15:eb:8e:0b: af:cc:62:03:5d:da:da:b3:fe:8c:42:7e:59:2a:d8:e8:74:03: 71:7a:32:77 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NGHFaK2yt3W9OoNoyuDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTY2NzZjZjM5OGQzOTk0YzRkZDRhMjk2NTk0NjE0ZGZm NTg2YzcwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzNlYjMzMTA0ZDYxN2ZhMGY5NDE4YWNkYzk5MDcyNzBjMDFhNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkJzKEEUJZWIlQHjj3qRHwYXgVzf YnYzGfsKrVHF3Ix8f8+RvLW6LouyKYcVF+GCVi4b7v3trxd49GYrvQmNFmJHmvHa oMjHiEpAtRrUMZpccvgmvTXgNyR5Is0lEYtJ1XFUZi53Qb8od5Z/U1UPqem8aP+h 99zWlRMUkymlenvxWFjVGiS6U5bUuLlw/zuGplwP1LjE08UTqUuXoblICxb7S1SV HizYTLf/YVNawA9cfnbEBMhFFZ7BG+mJ65dU65YgycVhgtUSSlV62MdVaGuQ+Rq/ LINC83XaCUQXx2SLgW67TGXeDBi9b8c/abglUP7loY8kzH87oTYfRyChHQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGM+szEE1hf6D5QYrNyZBycMAacUMB8GA1UdIwQY MBaAFF+WZ2zzmNOZTE3UopZZRhTf9YbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMt ZjYyZjM1YWY0MzcxLzEvWXo2ek1RVFdGX29QbEJpczNKa0hKd3dCcHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMtZjYyZjM1YWY0Mzcx LzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVPc5AwQA WSKvAwQAWSOYMA0GCSqGSIb3DQEBCwUAA4IBAQDQlPDNnPXFQva+LTl2NwTMBGDY XYSSITG4aHX+MUz+5V+jn64qkFRGSyUiO/hdJfhZHbxiyH+HYiIChBl02NmvxDMg vLJ+PxlEtu1al2S1dxZVAys0AA9DPsF+anX+NSWspMbviYiVSnEG3r/LvlAepUp+ Kqsi7QBazUtsJ59JOF0dCMBpJHULpU+KyszTNkhG7uFUm1QL6cJirShABd6oWDWt p1H5sjo7YIf0rUIAqroXNiXx4EIYS+/yFOOQfOhsAq2kuNFRc1oW3nPL9DJ99vFC VM5Ky/+diu+oN1wsdI6VXlBHlhXrjguvzGIDXdras/6MQn5ZKtjodANxejJ3 -----END CERTIFICATE-----Generated at Wed Jan 21 16:04:51 2026 by rpki-client