This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/YyPSiBy46g1WV_9WxFNVVcOuoWw.roa File: YyPSiBy46g1WV_9WxFNVVcOuoWw.roa (raw, json) Hash identifier: z36Mohror2Ou7nnt3RF1uceSdOn/ObfWr29FQ4dH2E0= Subject key identifier: 63:23:D2:88:1C:B8:EA:0D:56:57:FF:56:C4:53:55:55:C3:AE:A1:6C Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e Certificate serial: 019B7C124BE5D7A906EF70280A933EC8EF07 Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/YyPSiBy46g1WV_9WxFNVVcOuoWw.roa Signing time: Fri 02 Jan 2026 00:18:52 +0000 ROA not before: Fri 02 Jan 2026 00:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210664 IP address blocks: 185.150.88.0/22 maxlen: 22 2a05:4b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4b:e5:d7:a9:06:ef:70:28:0a:93:3e:c8:ef:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e Validity Not Before: Jan 2 00:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6323d2881cb8ea0d5657ff56c4535555c3aea16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:78:b6:07:49:0d:67:d5:67:70:cb:97:d5: 8a:fc:b0:39:40:89:ba:89:c5:d8:ae:f7:ff:6b:86: 83:c4:92:b0:b6:6e:e8:75:59:7c:95:3f:92:78:41: a4:c1:4f:93:a3:35:86:12:69:b6:a9:b1:7e:14:94: e0:9d:8a:c8:89:d5:58:54:e5:53:e5:21:4d:f5:1c: c6:35:59:db:c2:ea:95:f8:35:9a:9b:0c:f3:4d:94: 30:8f:13:a9:41:50:f3:71:41:51:d0:73:97:95:c7: de:31:0a:ff:63:8a:da:0d:e2:5d:82:22:e2:77:d1: b8:67:29:4e:31:ca:e3:53:09:d6:ad:50:5b:0a:b3: 5f:24:9d:af:da:f9:2d:ef:87:b8:f4:09:7d:ef:34: 8e:8e:17:55:4a:da:e4:bf:4c:74:49:de:c7:c4:94: 73:73:58:57:d3:fc:68:8d:51:fb:c7:d4:41:3c:19: 7b:d9:3c:11:42:43:18:8e:0f:ca:b6:18:bd:12:ad: ae:98:3b:1f:69:50:1b:ac:cc:08:2e:2e:f8:db:8a: d3:60:74:e4:95:de:e1:ff:85:89:e5:8a:bf:48:f4: 54:83:cb:1a:92:1d:96:5d:42:0d:76:4e:c5:12:07: 64:f9:d8:72:01:4c:b5:47:61:4b:e1:57:03:1b:2e: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:23:D2:88:1C:B8:EA:0D:56:57:FF:56:C4:53:55:55:C3:AE:A1:6C X509v3 Authority Key Identifier: keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/YyPSiBy46g1WV_9WxFNVVcOuoWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.88.0/22 IPv6: 2a05:4b40::/32 Signature Algorithm: sha256WithRSAEncryption 05:6f:31:84:d6:bd:e2:52:a9:9e:fe:cf:81:be:27:47:f9:f4: 36:e5:22:71:d9:e5:96:fa:94:48:ae:df:bf:27:3f:ad:a0:1d: 48:9c:28:16:39:ef:4a:df:48:ee:ae:ff:01:9d:88:ed:e9:91: be:2c:40:ae:91:14:90:66:54:ce:73:ed:3c:c6:7a:bb:f1:06: fb:5e:b6:2d:43:f6:dc:ad:82:eb:9c:e6:b2:04:a3:c0:b3:a6: 23:8c:f0:2d:5e:18:9d:51:3b:04:c4:3f:05:fb:ab:91:ce:6f: 32:3e:f7:09:f7:4c:91:8c:a3:b4:92:f9:44:bb:a1:3e:87:aa: 22:9a:8f:92:55:57:10:83:d6:84:a5:f0:77:29:e8:c8:11:10: d5:0d:5c:37:d9:18:81:eb:31:5a:08:46:19:b3:8a:80:b1:e9: 59:04:d5:5c:9b:b7:05:20:49:16:c4:23:96:65:01:91:fd:d8: 9b:5d:0a:a2:b8:85:d4:fc:f1:dc:0d:a0:25:93:89:79:17:00: f3:6a:8f:e9:20:a0:cf:bf:be:4c:27:02:89:b5:e8:6b:92:dc: 95:09:c1:8c:28:a0:2b:b9:6a:fb:40:48:42:de:90:3a:9f:11: 65:be:7a:b3:cb:cb:10:83:b8:7a:18:c4:7f:bd:72:a0:ed:7e: cf:70:1d:a1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Ekvl16kG73AoCpM+yO8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWFmMDQzZmUyMDljMDM0NTM2MjIwNWY4Y2M3Y2Q2MTk1 MWMyN2UwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzIzZDI4ODFjYjhlYTBkNTY1N2ZmNTZjNDUzNTU1NWMzYWVhMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Z4tgdJDWfVZ3DLl9WK/LA5QIm6 icXYrvf/a4aDxJKwtm7odVl8lT+SeEGkwU+TozWGEmm2qbF+FJTgnYrIidVYVOVT 5SFN9RzGNVnbwuqV+DWamwzzTZQwjxOpQVDzcUFR0HOXlcfeMQr/Y4raDeJdgiLi d9G4ZylOMcrjUwnWrVBbCrNfJJ2v2vkt74e49Al97zSOjhdVStrkv0x0Sd7HxJRz c1hX0/xojVH7x9RBPBl72TwRQkMYjg/Kthi9Eq2umDsfaVAbrMwILi7424rTYHTk ld7h/4WJ5Yq/SPRUg8sakh2WXUINdk7FEgdk+dhyAUy1R2FL4VcDGy5leQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGMj0ogcuOoNVlf/VsRTVVXDrqFsMB8GA1UdIwQY MBaAFMGq8EP+IJwDRTYiBfjMfNYZUcJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQt Yjc1NzhiMTBiYTdlLzEvWXlQU2lCeTQ2ZzFXVl85V3hGTlZWY091b1d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQtYjc1NzhiMTBiYTdl LzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZZYMA0E AgACMAcDBQAqBUtAMA0GCSqGSIb3DQEBCwUAA4IBAQAFbzGE1r3iUqme/s+BvidH +fQ25SJx2eWW+pRIrt+/Jz+toB1InCgWOe9K30jurv8BnYjt6ZG+LECukRSQZlTO c+08xnq78Qb7XrYtQ/bcrYLrnOayBKPAs6YjjPAtXhidUTsExD8F+6uRzm8yPvcJ 90yRjKO0kvlEu6E+h6oimo+SVVcQg9aEpfB3KejIERDVDVw32RiB6zFaCEYZs4qA selZBNVcm7cFIEkWxCOWZQGR/dibXQqiuIXU/PHcDaAlk4l5FwDzao/pIKDPv75M JwKJtehrktyVCcGMKKAruWr7QEhC3pA6nxFlvnqzy8sQg7h6GMR/vXKg7X7PcB2h -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:01 2026 by rpki-client