This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa File: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (raw, json) Hash identifier: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q= Subject key identifier: 62:CF:F8:0D:1D:70:50:B1:81:34:0F:DE:0D:88:17:64:45:8E:0F:64 Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459 Certificate serial: 019B7CEE68CAA4D84135E9D6D12285AA6BE4 Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199578 IP address blocks: 131.246.0.0/16 maxlen: 16 192.68.165.0/24 maxlen: 24 192.68.166.0/23 maxlen: 23 192.68.168.0/23 maxlen: 23 2a03:63c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:68:ca:a4:d8:41:35:e9:d6:d1:22:85:aa:6b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62cff80d1d7050b181340fde0d881764458e0f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:4c:2f:ec:1f:5f:43:4e:85:3b:30:e0:fc: 3c:38:2b:26:ec:f8:ca:15:91:63:b3:ca:35:43:5e: 49:34:a0:c9:1f:05:7a:36:6e:15:fc:40:86:05:25: b6:27:5c:0c:04:d3:ce:f4:99:68:40:ba:c2:7a:e0: 34:8b:20:29:6b:70:f6:dc:b8:f8:cb:65:0c:c7:71: 8d:81:2a:12:19:ec:ab:f9:dc:02:58:a4:15:b8:dc: e1:dc:ad:a1:95:a1:5a:05:51:f4:7e:74:26:61:19: f0:c7:fd:a4:0a:c4:32:5d:fe:29:65:d9:d9:1d:74: 29:03:5f:6d:d1:77:71:fd:28:c1:1b:3d:b1:40:3a: 90:12:cd:07:ea:7a:1b:e9:7c:f3:1c:38:2b:4f:c6: 27:cc:77:8f:74:68:ba:77:69:d4:db:c5:15:fa:14: 4b:3c:62:c1:e8:84:3d:d6:c8:6a:4e:6b:e3:06:98: c3:89:81:e2:bd:83:6f:58:d8:6b:82:46:24:8d:ec: 4b:8a:8a:00:71:47:65:6b:f7:49:38:fd:ac:c6:59: 22:86:75:cc:21:14:64:9a:5c:57:ab:d8:61:d6:cf: 41:dd:27:d5:e2:f5:98:bf:0a:fd:ed:e1:e4:ea:f7: fe:8e:22:1f:ef:4a:6a:6a:01:3b:1e:5f:f1:30:eb: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CF:F8:0D:1D:70:50:B1:81:34:0F:DE:0D:88:17:64:45:8E:0F:64 X509v3 Authority Key Identifier: keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.246.0.0/16 192.68.165.0-192.68.169.255 IPv6: 2a03:63c0::/32 Signature Algorithm: sha256WithRSAEncryption 59:20:45:43:01:a5:57:cb:98:08:ca:99:d3:e1:8a:70:a8:0e: d8:19:bc:b8:64:c7:aa:25:02:85:a5:61:1a:9f:9f:12:1a:5a: cd:99:97:1b:39:8a:2c:d8:8a:f3:f4:81:3a:a5:23:6a:df:b7: 5c:fe:c7:b3:93:9c:13:c9:d3:b1:9f:1c:4a:ce:6b:60:eb:34: 59:8c:ac:f0:76:a7:38:69:1e:4a:37:b2:5d:5c:01:63:16:db: d8:39:1d:6c:8c:16:12:63:45:8c:ac:0e:64:0b:ff:e8:b8:7d: 4e:a7:d8:de:85:bc:73:c9:bf:18:fd:4f:56:0b:ab:63:dd:1c: f7:85:f5:5b:ac:cf:fe:01:35:c3:a2:aa:dd:b4:d2:40:6a:9d: f8:ed:bc:66:28:cf:43:3f:5d:fc:1b:04:5c:56:3e:4a:6e:c7: a4:58:5f:6a:c7:c9:e0:c1:05:28:63:9d:0d:07:e3:ef:4f:a7: b1:3c:ff:23:aa:ef:e3:97:41:7f:6c:15:6d:ce:da:48:2d:87: ff:8f:af:69:db:f0:8c:34:c0:5f:57:30:7d:74:24:9e:b2:52: 20:29:88:d5:a7:a2:37:5f:dd:75:d4:fa:e0:7f:aa:78:14:81: 68:55:2d:35:c9:f3:d2:7b:bf:14:22:88:46:72:5c:58:08:eb: 53:bd:4b:39 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt87mjKpNhBNenW0SKFqmvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxODE4MjJhOWNhMmEwMDhmNWNkMTFiOWY5ZGJhMTZlZTJj NjE0NTkwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmNmZjgwZDFkNzA1MGIxODEzNDBmZGUwZDg4MTc2NDQ1OGUwZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtldML+wfX0NOhTsw4Pw8OCsm7PjK FZFjs8o1Q15JNKDJHwV6Nm4V/ECGBSW2J1wMBNPO9JloQLrCeuA0iyApa3D23Lj4 y2UMx3GNgSoSGeyr+dwCWKQVuNzh3K2hlaFaBVH0fnQmYRnwx/2kCsQyXf4pZdnZ HXQpA19t0Xdx/SjBGz2xQDqQEs0H6nob6XzzHDgrT8YnzHePdGi6d2nU28UV+hRL PGLB6IQ91shqTmvjBpjDiYHivYNvWNhrgkYkjexLiooAcUdla/dJOP2sxlkihnXM IRRkmlxXq9hh1s9B3SfV4vWYvwr97eHk6vf+jiIf70pqagE7Hl/xMOuqZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGLP+A0dcFCxgTQP3g2IF2RFjg9kMB8GA1UdIwQY MBaAFAGBgiqcoqAI9c0RufnboW7ixhRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQt ODBkNDk0NTkxMWRkLzEvWXNfNERSMXdVTEdCTkFfZURZZ1haRVdPRDJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQtODBkNDk0NTkxMWRk LzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAZBAIAATATAwMAg/YwDAME AMBEpQMEAcBEqDANBAIAAjAHAwUAKgNjwDANBgkqhkiG9w0BAQsFAAOCAQEAWSBF QwGlV8uYCMqZ0+GKcKgO2Bm8uGTHqiUChaVhGp+fEhpazZmXGzmKLNiK8/SBOqUj at+3XP7Hs5OcE8nTsZ8cSs5rYOs0WYys8HanOGkeSjeyXVwBYxbb2DkdbIwWEmNF jKwOZAv/6Lh9TqfY3oW8c8m/GP1PVgurY90c94X1W6zP/gE1w6Kq3bTSQGqd+O28 ZijPQz9d/BsEXFY+Sm7HpFhfasfJ4MEFKGOdDQfj70+nsTz/I6rv45dBf2wVbc7a SC2H/4+vadvwjDTAX1cwfXQknrJSICmI1aeiN1/dddT64H+qeBSBaFUtNcnz0nu/ FCKIRnJcWAjrU71LOQ== -----END CERTIFICATE-----Generated at Wed Jan 21 17:16:19 2026 by rpki-client