This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/YY2bD1lJGVXnAve4KCOQnRgcyqM.roa File: YY2bD1lJGVXnAve4KCOQnRgcyqM.roa (raw, json) Hash identifier: zyz3+Ol7aMUrRBs0SEp2hLbGVzOPcEMMPHj5nB0BmD0= Subject key identifier: 61:8D:9B:0F:59:49:19:55:E7:02:F7:B8:28:23:90:9D:18:1C:CA:A3 Certificate issuer: /CN=ab59b462efc04583960a205f2f45659dc7fe3c6c Certificate serial: 019BEEF3713A2D5B740A73EA089B3FE07973 Authority key identifier: AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/YY2bD1lJGVXnAve4KCOQnRgcyqM.roa Signing time: Sat 24 Jan 2026 07:41:30 +0000 ROA not before: Sat 24 Jan 2026 07:41:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201603 IP address blocks: 94.177.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ee:f3:71:3a:2d:5b:74:0a:73:ea:08:9b:3f:e0:79:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab59b462efc04583960a205f2f45659dc7fe3c6c Validity Not Before: Jan 24 07:41:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=618d9b0f59491955e702f7b82823909d181ccaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:da:2c:ce:15:e1:9f:ae:15:b5:9d:bb:bf:74: 99:39:4d:1a:25:e6:0a:d1:2f:95:aa:05:b6:5d:07: be:f5:be:54:02:63:8e:67:5c:0f:22:10:5c:e4:26: 14:59:d0:e2:be:c7:81:81:85:a0:59:e1:68:4b:25: 1b:a3:3d:a7:07:19:93:9a:f7:e9:f4:c1:97:c9:fb: 29:7b:69:f8:b9:cb:c2:77:62:7e:1d:62:5d:5e:f4: 78:89:2a:fe:1e:87:e7:86:51:70:7a:2e:fa:f7:9c: 4b:ec:58:c3:1e:67:ea:f0:2b:96:de:99:f2:47:df: ae:aa:d9:12:95:52:5a:f6:0e:5f:2f:1f:30:ee:e2: 52:d2:00:8e:7b:67:df:1b:ad:3c:81:82:26:62:83: 61:6b:ac:3a:5d:63:d6:ae:5e:dc:cd:60:d8:ac:a0: 82:2d:7b:12:1e:c2:e6:d7:ec:10:d9:be:83:3a:cd: a6:57:c3:32:16:95:d7:85:42:08:9d:24:42:30:ad: 00:3f:6e:05:9c:a7:43:ea:43:f0:39:ef:4b:97:66: 67:ad:c7:99:cc:6b:1d:50:4d:87:6d:59:44:fc:75: bb:da:59:11:c6:4f:c8:40:ed:2c:02:18:1a:3a:62: a8:56:39:4d:bd:a6:ec:7f:0f:89:f2:3d:98:20:5a: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8D:9B:0F:59:49:19:55:E7:02:F7:B8:28:23:90:9D:18:1C:CA:A3 X509v3 Authority Key Identifier: keyid:AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/YY2bD1lJGVXnAve4KCOQnRgcyqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.177.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:a3:72:5e:58:be:85:46:1a:48:d1:42:d2:ee:b7:82:03:2e: b4:63:5e:31:81:1d:d4:f2:72:60:4b:3f:e2:ec:ba:17:21:90: df:36:ae:0e:7f:92:28:8d:47:18:15:dc:73:01:d2:17:f2:7c: ab:9a:a7:52:c3:44:74:96:b2:ab:1a:f9:4b:ae:ca:27:4a:65: d4:20:9d:fd:5a:2f:4b:54:af:2e:c7:68:05:ca:2d:3d:f2:2a: 48:e8:dd:e7:6d:0d:4d:5c:6e:a0:ba:aa:14:ec:90:12:c5:f7: 1c:9b:dd:9c:1b:1b:3b:31:90:0a:9d:02:96:19:36:6b:5b:c5: 70:35:62:9a:f4:c4:ef:35:c9:6c:24:9c:ca:44:3d:d1:62:ef: 37:65:f2:fa:02:e2:54:85:61:f2:a7:cb:0b:b8:8c:24:cc:23: b7:97:ce:9a:1c:42:a8:ce:0c:7f:cb:3d:6d:1a:9c:7b:e2:33: 35:a4:63:31:2f:d5:1a:ea:d0:10:44:7b:1a:e7:c6:65:5c:bf: 81:cb:39:bf:b2:14:5b:0e:e6:2f:ec:48:5b:ac:16:f2:1a:33: ba:1d:fe:9f:15:5d:59:01:fe:44:fa:1a:99:ef:b3:56:fb:39: fe:7b:af:8c:c9:08:c1:4b:ef:81:76:1a:a5:1d:f6:05:3e:87: cb:33:09:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvu83E6LVt0CnPqCJs/4HlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTliNDYyZWZjMDQ1ODM5NjBhMjA1ZjJmNDU2NTlkYzdm ZTNjNmMwHhcNMjYwMTI0MDc0MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MThkOWIwZjU5NDkxOTU1ZTcwMmY3YjgyODIzOTA5ZDE4MWNjYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49oszhXhn64VtZ27v3SZOU0aJeYK 0S+VqgW2XQe+9b5UAmOOZ1wPIhBc5CYUWdDivseBgYWgWeFoSyUboz2nBxmTmvfp 9MGXyfspe2n4ucvCd2J+HWJdXvR4iSr+HofnhlFwei7695xL7FjDHmfq8CuW3pny R9+uqtkSlVJa9g5fLx8w7uJS0gCOe2ffG608gYImYoNha6w6XWPWrl7czWDYrKCC LXsSHsLm1+wQ2b6DOs2mV8MyFpXXhUIInSRCMK0AP24FnKdD6kPwOe9Ll2ZnrceZ zGsdUE2HbVlE/HW72lkRxk/IQO0sAhgaOmKoVjlNvabsfw+J8j2YIFpndQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGGNmw9ZSRlV5wL3uCgjkJ0YHMqjMB8GA1UdIwQY MBaAFKtZtGLvwEWDlgogXy9FZZ3H/jxsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFtMFl1X0FSWU9XQ2lCZkwwVmxuY2YtUEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMTMzNWMtYjM0NS00ODE1LWJiOWUt ZmQ1ZmFlZDFjMWQwLzEvWVkyYkQxbEpHVlhuQXZlNEtDT1FuUmdjeXFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wMTMzNWMtYjM0NS00ODE1LWJiOWUtZmQ1ZmFlZDFjMWQw LzEvcTFtMFl1X0FSWU9XQ2lCZkwwVmxuY2YtUEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrEUMA0G CSqGSIb3DQEBCwUAA4IBAQBto3JeWL6FRhpI0ULS7reCAy60Y14xgR3U8nJgSz/i 7LoXIZDfNq4Of5IojUcYFdxzAdIX8nyrmqdSw0R0lrKrGvlLrsonSmXUIJ39Wi9L VK8ux2gFyi098ipI6N3nbQ1NXG6guqoU7JASxfccm92cGxs7MZAKnQKWGTZrW8Vw NWKa9MTvNclsJJzKRD3RYu83ZfL6AuJUhWHyp8sLuIwkzCO3l86aHEKozgx/yz1t Gpx74jM1pGMxL9Ua6tAQRHsa58ZlXL+Byzm/shRbDuYv7EhbrBbyGjO6Hf6fFV1Z Af5E+hqZ77NW+zn+e6+MyQjBS++BdhqlHfYFPofLMwmY -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:01 2026 by rpki-client