This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/YD6TzpC5R6Hp_v6ASOjqQ9toRco.roa File: YD6TzpC5R6Hp_v6ASOjqQ9toRco.roa (raw, json) Hash identifier: c6e+XVaqZUDcD49245+mL48dQ3Qd5iEdgRHJAw8cJfs= Subject key identifier: 60:3E:93:CE:90:B9:47:A1:E9:FE:FE:80:48:E8:EA:43:DB:68:45:CA Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945 Certificate serial: 019B7F14E3138C20AE62B143E37F7F938395 Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/YD6TzpC5R6Hp_v6ASOjqQ9toRco.roa Signing time: Fri 02 Jan 2026 14:20:33 +0000 ROA not before: Fri 02 Jan 2026 14:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15966 IP address blocks: 95.128.0.0/21 maxlen: 21 2a01:a640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e3:13:8c:20:ae:62:b1:43:e3:7f:7f:93:83:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945 Validity Not Before: Jan 2 14:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=603e93ce90b947a1e9fefe8048e8ea43db6845ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:23:20:df:7e:05:d0:cf:1b:c9:2e:c1:77:91: 01:5f:14:03:d6:bc:fa:d6:d9:c1:a9:a7:52:20:89: 74:aa:50:9d:a9:c3:40:f0:2d:12:b4:b7:b6:8f:d3: 78:2b:79:55:d7:50:4a:9c:5c:0f:2b:5e:ac:cf:34: 44:1f:ed:6a:ac:9f:5b:5f:57:98:4d:fd:13:ca:78: 4b:1b:88:bd:b8:bb:87:93:44:fc:dd:7d:8d:41:61: ff:0a:ba:56:08:74:04:63:01:8b:52:eb:69:29:c8: 93:70:c6:ba:f1:33:52:4a:3d:0b:6b:1d:66:5c:23: d8:56:ad:39:11:87:56:92:52:5e:12:db:e0:44:d1: 45:45:f2:d2:53:c2:25:3d:f8:3f:99:ff:a3:d0:c6: 8a:7d:12:6b:f2:1b:5b:f4:6d:cd:3f:f3:14:62:b4: d0:3a:7f:ca:45:a7:7b:5a:8e:9f:a0:6b:a1:98:0b: 36:66:5e:54:60:54:54:4a:4d:b4:0a:a3:1b:e1:a0: 4d:e6:2e:40:f4:ac:5b:5f:90:1e:e0:5a:ed:cb:6e: e3:1d:51:f9:e6:5b:17:78:a2:fe:33:4a:6a:f0:c6: 91:df:f8:7f:8a:1c:ca:9b:3c:7f:c4:6b:11:dd:b1: 8c:79:c5:6e:f8:ce:e5:58:d6:85:21:6a:be:cc:2a: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3E:93:CE:90:B9:47:A1:E9:FE:FE:80:48:E8:EA:43:DB:68:45:CA X509v3 Authority Key Identifier: keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/YD6TzpC5R6Hp_v6ASOjqQ9toRco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.0.0/21 IPv6: 2a01:a640::/32 Signature Algorithm: sha256WithRSAEncryption 48:af:7b:19:36:d9:81:f7:18:bf:91:cd:53:2d:b8:6b:5c:8e: 08:c1:7d:fd:ca:fc:e2:56:a8:4f:6f:36:cf:f6:cb:86:0a:cb: e2:f0:3d:c5:c5:bd:a7:10:bc:89:47:20:f3:5f:fe:8e:b7:24: 31:30:7b:6f:2c:9d:59:33:c5:16:45:b1:90:15:c7:8f:82:8a: 44:4a:91:1c:cf:b7:f9:25:1c:84:2f:ad:c3:bb:17:dd:29:4f: e9:29:b3:12:5a:72:28:33:c1:26:cb:ba:38:17:94:2f:d4:36: 75:b3:66:51:f7:d5:2a:b3:2a:db:e4:a8:86:7e:f1:2c:e9:ec: 42:e6:ff:ab:2b:65:5f:84:9c:01:3b:2f:81:9a:77:4c:64:a3: 65:af:02:a0:56:c4:ad:96:49:17:4a:fe:78:d1:f9:37:bc:33: 25:2d:ad:ab:4d:38:f0:80:7b:a5:bf:2b:f7:d7:2b:8e:a7:80: 33:c7:c0:89:fd:9c:48:a9:f7:20:6c:36:f2:08:34:f2:31:19: e7:06:7e:3e:87:dc:90:57:23:26:b2:62:9f:46:b6:e7:bb:ae: 57:b1:1b:df:ac:4b:80:f2:8c:2f:20:c0:e5:c3:ee:f7:96:24: fe:eb:02:d0:d6:85:80:2c:4b:7a:c0:1e:e2:aa:6a:92:86:8d: 38:80:ae:cd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FOMTjCCuYrFD439/k4OVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjBmOWY3NTViMGUzMDNjYzE2ZDFhNjMzZjk1OGMwMzYw MzQ5NDUwHhcNMjYwMTAyMTQyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDNlOTNjZTkwYjk0N2ExZTlmZWZlODA0OGU4ZWE0M2RiNjg0NWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CMg334F0M8byS7Bd5EBXxQD1rz6 1tnBqadSIIl0qlCdqcNA8C0StLe2j9N4K3lV11BKnFwPK16szzREH+1qrJ9bX1eY Tf0TynhLG4i9uLuHk0T83X2NQWH/CrpWCHQEYwGLUutpKciTcMa68TNSSj0Lax1m XCPYVq05EYdWklJeEtvgRNFFRfLSU8IlPfg/mf+j0MaKfRJr8htb9G3NP/MUYrTQ On/KRad7Wo6foGuhmAs2Zl5UYFRUSk20CqMb4aBN5i5A9KxbX5Ae4Frty27jHVH5 5lsXeKL+M0pq8MaR3/h/ihzKmzx/xGsR3bGMecVu+M7lWNaFIWq+zCqV1wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGA+k86QuUeh6f7+gEjo6kPbaEXKMB8GA1UdIwQY MBaAFA2w+fdVsOMDzBbRpjP5WMA2A0lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUt NjRjOWMyY2M5NjA5LzEvWUQ2VHpwQzVSNkhwX3Y2QVNPanFROXRvUmNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUtNjRjOWMyY2M5NjA5 LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDX4AAMA0E AgACMAcDBQAqAaZAMA0GCSqGSIb3DQEBCwUAA4IBAQBIr3sZNtmB9xi/kc1TLbhr XI4IwX39yvziVqhPbzbP9suGCsvi8D3Fxb2nELyJRyDzX/6OtyQxMHtvLJ1ZM8UW RbGQFcePgopESpEcz7f5JRyEL63DuxfdKU/pKbMSWnIoM8Emy7o4F5Qv1DZ1s2ZR 99Uqsyrb5KiGfvEs6exC5v+rK2VfhJwBOy+BmndMZKNlrwKgVsStlkkXSv540fk3 vDMlLa2rTTjwgHulvyv31yuOp4Azx8CJ/ZxIqfcgbDbyCDTyMRnnBn4+h9yQVyMm smKfRrbnu65XsRvfrEuA8owvIMDlw+73liT+6wLQ1oWALEt6wB7iqmqSho04gK7N -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:59 2026 by rpki-client