This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YfQFgzDZSVOykUnVVK-kbLQuDvY.roa File: YfQFgzDZSVOykUnVVK-kbLQuDvY.roa (raw, json) Hash identifier: XCkgQFNVcxx130L6yafkt9Rqldy1JOo7zaxYjKyiCxQ= Subject key identifier: 61:F4:05:83:30:D9:49:53:B2:91:49:D5:54:AF:A4:6C:B4:2E:0E:F6 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12EA0740D0DBE576485D0328AB5F63 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YfQFgzDZSVOykUnVVK-kbLQuDvY.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12651 IP address blocks: 193.246.0.128/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ea:07:40:d0:db:e5:76:48:5d:03:28:ab:5f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61f4058330d94953b29149d554afa46cb42e0ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7c:96:70:bc:b1:f6:0d:d4:e8:5e:f1:df:96: 09:c3:bb:75:26:65:44:c2:5c:eb:ba:db:a6:79:2c: 65:40:eb:89:c7:dc:9a:e2:e6:6a:18:59:af:24:86: 5c:ce:14:8c:5e:f7:20:3c:5a:09:97:6a:9d:37:21: 6e:9f:33:7b:54:19:84:94:26:ce:a6:dd:2d:80:00: e5:da:ac:bc:07:69:b9:5f:62:bd:63:29:05:5f:6b: 73:fb:65:dc:e0:86:55:b4:1c:b8:af:8a:b0:0d:4e: c5:93:53:c7:50:63:57:23:e0:45:3a:f2:c4:51:2e: 7e:be:dd:20:21:23:81:1f:73:62:88:3b:a3:84:6d: 0f:5b:87:8f:87:2d:7d:a6:90:d6:9c:cb:56:de:0d: e2:84:e5:e5:09:a2:5e:a0:cc:80:9a:94:a6:de:4f: b3:fd:59:36:30:8d:0b:0e:b4:85:07:71:82:64:5f: 9b:b7:45:82:a2:f1:f9:af:08:a8:87:7e:6e:da:bc: 42:af:81:1f:f4:26:1e:0e:b7:e4:31:b0:7c:90:47: 17:97:ad:b3:2e:41:95:91:e4:ca:64:ff:bd:07:da: 41:f2:6e:7c:e3:32:4a:50:68:35:1f:5f:ca:ff:73: a6:54:ea:c6:f7:82:ce:e9:08:45:fd:9d:7c:22:a8: 2b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F4:05:83:30:D9:49:53:B2:91:49:D5:54:AF:A4:6C:B4:2E:0E:F6 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YfQFgzDZSVOykUnVVK-kbLQuDvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.246.0.128/29 Signature Algorithm: sha256WithRSAEncryption 6d:69:88:60:ef:24:a7:f7:d3:00:d8:2f:37:f9:75:0b:59:6b: c4:ca:18:77:28:11:72:85:3d:d4:de:ff:9d:2d:ec:ab:30:d4: 8e:b3:ec:24:1c:87:ec:34:f5:be:7a:bc:cd:c9:f3:70:ed:32: 1a:0c:5b:16:1b:b5:6c:0b:7c:a7:ad:ea:6a:47:2e:84:ed:e1: e9:23:16:4d:5a:2a:df:b5:35:7c:bb:2f:d5:a3:16:e9:08:f3: 1d:0d:35:d9:64:38:29:2e:e1:fc:b7:7f:8a:15:a6:d1:f3:05: fb:6e:b4:2e:fe:6e:4c:d2:5d:80:6f:ba:9b:b3:35:e0:84:ae: 07:3a:a7:22:bf:8d:27:b2:51:b4:ce:f1:06:c4:10:b4:c1:fc: 28:b2:c0:af:f0:dd:31:75:91:1d:80:09:b5:18:80:19:5e:74: 10:1c:79:fc:12:07:ce:82:f0:51:14:92:3f:d6:34:ad:fc:a6: 13:6f:90:db:aa:4c:b2:36:aa:ac:9e:88:0d:9c:2b:4f:b5:09: f4:2d:7f:d2:42:9d:d2:8c:5e:a3:10:f3:24:84:70:86:5a:53: 17:8d:a5:a6:8d:cb:56:65:ef:16:58:35:73:3b:cd:42:86:0e: 2f:57:6b:52:68:79:30:7d:52:26:22:19:38:b3:e3:64:87:d5: d4:2b:4d:e1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EuoHQNDb5XZIXQMoq19jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWY0MDU4MzMwZDk0OTUzYjI5MTQ5ZDU1NGFmYTQ2Y2I0MmUwZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonyWcLyx9g3U6F7x35YJw7t1JmVE wlzrutumeSxlQOuJx9ya4uZqGFmvJIZczhSMXvcgPFoJl2qdNyFunzN7VBmElCbO pt0tgADl2qy8B2m5X2K9YykFX2tz+2Xc4IZVtBy4r4qwDU7Fk1PHUGNXI+BFOvLE US5+vt0gISOBH3NiiDujhG0PW4ePhy19ppDWnMtW3g3ihOXlCaJeoMyAmpSm3k+z /Vk2MI0LDrSFB3GCZF+bt0WCovH5rwioh35u2rxCr4Ef9CYeDrfkMbB8kEcXl62z LkGVkeTKZP+9B9pB8m584zJKUGg1H1/K/3OmVOrG94LO6QhF/Z18IqgrBQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGH0BYMw2UlTspFJ1VSvpGy0Lg72MB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvWWZRRmd6RFpTVk95a1VuVlZLLWtiTFF1RHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDwfYAgDAN BgkqhkiG9w0BAQsFAAOCAQEAbWmIYO8kp/fTANgvN/l1C1lrxMoYdygRcoU91N7/ nS3sqzDUjrPsJByH7DT1vnq8zcnzcO0yGgxbFhu1bAt8p63qakcuhO3h6SMWTVoq 37U1fLsv1aMW6QjzHQ012WQ4KS7h/Ld/ihWm0fMF+260Lv5uTNJdgG+6m7M14ISu BzqnIr+NJ7JRtM7xBsQQtMH8KLLAr/DdMXWRHYAJtRiAGV50EBx5/BIHzoLwURSS P9Y0rfymE2+Q26pMsjaqrJ6IDZwrT7UJ9C1/0kKd0oxeoxDzJIRwhlpTF42lpo3L VmXvFlg1czvNQoYOL1drUmh5MH1SJiIZOLPjZIfV1CtN4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:40 2026 by rpki-client