This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/Yc6S2U-P88_n_iZTloXSN0V0Eao.roa File: Yc6S2U-P88_n_iZTloXSN0V0Eao.roa (raw, json) Hash identifier: AY1UxXU5qK5SakiZ4km0VoIyNHZTCKedI3Fo2P7nvNY= Subject key identifier: 61:CE:92:D9:4F:8F:F3:CF:E7:FE:26:53:96:85:D2:37:45:74:11:AA Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Certificate serial: 019B7AC80C3C9EAF1755E5E42EE0B7464A5B Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/Yc6S2U-P88_n_iZTloXSN0V0Eao.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207797 IP address blocks: 194.76.252.0/24 maxlen: 24 2a0f:ab40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0c:3c:9e:af:17:55:e5:e4:2e:e0:b7:46:4a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61ce92d94f8ff3cfe7fe26539685d237457411aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:5f:df:80:cc:a4:52:63:55:ad:8a:e9:b5: 48:ea:d8:17:bd:60:4f:ae:46:66:14:c0:61:84:a4: 5f:03:1f:ed:33:49:38:b0:0a:4a:04:42:45:9b:3e: ba:e5:e9:7f:e4:45:11:75:39:bb:14:51:97:35:ed: 45:b2:6d:1d:05:9b:6d:52:58:0a:96:7e:02:50:0f: f1:56:13:21:c8:91:24:5e:fa:52:60:45:c1:3d:21: 4f:00:9f:c8:a1:d6:32:18:9a:f6:16:ad:e0:a9:f0: 1b:20:4e:7c:b3:bb:d9:b8:2b:48:bd:90:18:c6:49: 7e:9c:e4:9d:58:98:b9:f8:f7:1e:a9:1d:d5:e2:99: 30:05:27:17:a1:31:a1:bf:52:f2:1d:3e:6b:43:f0: 27:83:53:67:10:56:5b:af:12:86:60:8e:77:4a:fe: 06:1c:6e:f7:d0:e3:22:c4:14:a3:5b:6c:9a:9d:db: 06:2b:09:f7:85:1e:48:58:ef:74:d3:22:64:f6:b3: 5e:8e:f1:88:9d:7b:ab:44:39:82:11:62:42:a2:5a: 2c:13:1b:a0:8e:0c:60:8c:f8:96:ee:74:76:63:5a: a9:72:84:78:e2:92:48:79:9f:22:3e:31:36:bf:b3: 1c:17:f7:66:be:7c:24:85:2a:2f:b0:30:ee:f1:30: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CE:92:D9:4F:8F:F3:CF:E7:FE:26:53:96:85:D2:37:45:74:11:AA X509v3 Authority Key Identifier: keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/Yc6S2U-P88_n_iZTloXSN0V0Eao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.252.0/24 IPv6: 2a0f:ab40::/32 Signature Algorithm: sha256WithRSAEncryption 96:e1:7b:f2:cc:a3:73:fe:88:e3:20:3b:f3:a4:cb:d0:9a:ff: 34:9b:88:85:c6:75:a5:f3:7d:43:32:39:81:69:04:9b:10:4a: 90:97:cc:12:b8:9e:96:ba:71:65:9d:a8:a1:61:cc:38:fd:fb: 56:f7:13:59:bd:99:36:91:bd:88:90:09:20:d0:c1:83:e4:25: e8:49:fc:40:a8:0c:1e:82:b4:56:26:65:ae:8e:87:2f:66:6d: 99:37:e0:40:fc:20:42:cb:3f:13:27:4b:c0:9f:4f:92:65:0e: 3e:13:20:09:09:ba:01:82:38:07:99:12:fc:7d:3f:0c:ed:c9: e5:2b:0d:0a:9d:8f:ab:0f:7c:ca:a6:5c:59:b3:e6:b2:8b:c2: b2:09:18:56:cf:46:35:07:97:4c:34:cf:88:88:c9:25:b4:76: 17:a4:50:35:8f:df:10:e2:ea:f7:30:ee:7f:24:89:ac:84:db: 7a:89:05:60:d4:26:7a:ea:04:9c:41:5c:5b:d1:81:cf:83:39: 96:21:4a:76:d9:79:75:cf:1e:41:d0:e2:9c:fb:09:35:24:5b: ac:17:0b:2a:e1:c3:18:c9:95:a7:67:13:50:8b:03:23:69:3c: c2:39:60:46:84:a6:c5:3d:ff:12:00:0f:d6:57:ed:ff:ab:d5: 1d:79:1f:df -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yAw8nq8XVeXkLuC3RkpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOGM3NDE0M2MyMjczZTIwMWE2NzU3MTU0MzFkZmFmMjhm ZTE3YjIwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWNlOTJkOTRmOGZmM2NmZTdmZTI2NTM5Njg1ZDIzNzQ1NzQxMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx1f34DMpFJjVa2K6bVI6tgXvWBP rkZmFMBhhKRfAx/tM0k4sApKBEJFmz665el/5EURdTm7FFGXNe1Fsm0dBZttUlgK ln4CUA/xVhMhyJEkXvpSYEXBPSFPAJ/IodYyGJr2Fq3gqfAbIE58s7vZuCtIvZAY xkl+nOSdWJi5+PceqR3V4pkwBScXoTGhv1LyHT5rQ/Ang1NnEFZbrxKGYI53Sv4G HG730OMixBSjW2yandsGKwn3hR5IWO900yJk9rNejvGInXurRDmCEWJColosExug jgxgjPiW7nR2Y1qpcoR44pJIeZ8iPjE2v7McF/dmvnwkhSovsDDu8TBx5QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGHOktlPj/PP5/4mU5aF0jdFdBGqMB8GA1UdIwQY MBaAFH2MdBQ8InPiAaZ1cVQx368o/heyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjIt MThjMDM2NTMwN2JmLzEvWWM2UzJVLVA4OF9uX2laVGxvWFNOMFYwRWFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjItMThjMDM2NTMwN2Jm LzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwkz8MA0E AgACMAcDBQAqD6tAMA0GCSqGSIb3DQEBCwUAA4IBAQCW4XvyzKNz/ojjIDvzpMvQ mv80m4iFxnWl831DMjmBaQSbEEqQl8wSuJ6WunFlnaihYcw4/ftW9xNZvZk2kb2I kAkg0MGD5CXoSfxAqAwegrRWJmWujocvZm2ZN+BA/CBCyz8TJ0vAn0+SZQ4+EyAJ CboBgjgHmRL8fT8M7cnlKw0KnY+rD3zKplxZs+ayi8KyCRhWz0Y1B5dMNM+IiMkl tHYXpFA1j98Q4ur3MO5/JImshNt6iQVg1CZ66gScQVxb0YHPgzmWIUp22Xl1zx5B 0OKc+wk1JFusFwsq4cMYyZWnZxNQiwMjaTzCOWBGhKbFPf8SAA/WV+3/q9UdeR/f -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:59 2026 by rpki-client