This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/YUe1ZMCdkqc_MHxs6Jml6xtaZmY.roa File: YUe1ZMCdkqc_MHxs6Jml6xtaZmY.roa (raw, json) Hash identifier: yfGpXBMwfuCn+DMxXYn3DWhF4inc0qBH11Kt+d+QCNw= Subject key identifier: 61:47:B5:64:C0:9D:92:A7:3F:30:7C:6C:E8:99:A5:EB:1B:5A:66:66 Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Certificate serial: 019B7F83023E200A335FBD3FC6896BAD5237 Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/YUe1ZMCdkqc_MHxs6Jml6xtaZmY.roa Signing time: Fri 02 Jan 2026 16:20:50 +0000 ROA not before: Fri 02 Jan 2026 16:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42061 IP address blocks: 195.8.212.0/23 maxlen: 23 2001:67c:1d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:02:3e:20:0a:33:5f:bd:3f:c6:89:6b:ad:52:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Validity Not Before: Jan 2 16:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6147b564c09d92a73f307c6ce899a5eb1b5a6666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:66:40:ee:a1:bb:62:f6:d1:62:a1:09:7c: e1:4a:13:98:77:04:d4:92:24:07:d2:b6:59:d1:12: 9b:11:d5:b6:b9:e8:66:0c:3f:ec:5d:2e:18:ca:7f: 92:9e:cc:01:f9:ed:be:19:a1:e3:0c:bb:a5:60:0c: 5b:65:87:e4:e5:10:1a:97:d8:2c:18:4a:97:b2:4d: 23:a8:61:04:e5:a0:3b:88:69:a1:c7:91:db:df:d9: 46:5f:7e:00:4a:0b:04:d3:fd:4e:f3:83:c7:de:6c: 35:54:47:06:3c:2d:24:64:34:94:3d:50:a2:d5:81: 89:25:b5:62:3c:da:e9:30:dc:1b:59:0c:b7:20:10: 7a:b5:74:99:5b:58:1f:33:3d:26:18:ad:b7:72:7e: f1:23:75:9e:81:30:ec:3e:ab:51:64:eb:0e:25:29: 5c:27:23:7b:67:34:a5:18:c3:60:e5:9d:f4:18:a6: 1a:91:9d:ff:22:6c:0b:0f:0c:2c:e5:fd:f7:f1:72: 87:8c:f5:47:65:de:0e:66:54:97:f6:a3:81:8e:5b: 8d:8e:36:4f:a3:8b:0a:6b:25:3e:60:29:28:71:0d: 01:58:2c:c4:9d:83:0a:04:ae:b9:08:4e:9b:d2:00: 18:e1:3d:98:3a:ae:f0:3d:1b:e7:7a:3e:b9:e0:a2: 70:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:47:B5:64:C0:9D:92:A7:3F:30:7C:6C:E8:99:A5:EB:1B:5A:66:66 X509v3 Authority Key Identifier: keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/YUe1ZMCdkqc_MHxs6Jml6xtaZmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.212.0/23 IPv6: 2001:67c:1d0::/48 Signature Algorithm: sha256WithRSAEncryption 62:89:91:d2:84:90:54:95:d6:68:17:70:74:18:02:4c:8f:cc: b0:ea:e2:f7:80:78:b4:d5:33:e4:b6:41:38:0f:c8:d6:7d:77: d8:93:0b:12:92:15:22:76:c8:58:cd:a7:c5:e1:a3:2d:64:c2: 88:1e:e1:fd:c7:c4:e8:b3:e1:ff:f2:04:35:5c:8c:58:bd:5c: d4:e0:57:d1:c5:76:45:84:06:ba:be:85:e9:7b:f6:c9:23:3d: 9d:fa:35:96:54:14:30:ed:88:36:17:3b:c6:d5:5e:2c:d9:49: e4:37:ca:8f:a7:e9:cf:ff:18:94:72:ac:8d:53:73:67:eb:e3: e4:c3:95:c5:db:9b:6e:ef:00:aa:e2:1d:2b:30:54:e6:81:4f: b6:e3:ac:79:9d:cf:c1:98:ca:fd:6f:b0:92:0b:b2:ac:d8:8e: 40:a9:45:4a:7d:7d:2b:ff:61:6a:95:7c:03:c3:73:d6:d4:46: db:a6:5e:e9:8d:b8:10:89:2c:ca:51:a7:c8:71:ad:a0:8f:74: 2e:56:22:64:dd:4b:6a:d9:7d:20:c6:c0:da:1e:c4:7e:08:b7: b7:94:75:19:9d:a1:7d:56:61:bc:13:03:ae:a5:a0:e2:9b:dd: 7b:8a:89:b2:07:4b:aa:2c:9f:d5:10:52:35:17:a8:dc:9f:9e: 66:80:eb:72 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gwI+IAozX70/xolrrVI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NDEwNjU0MGYzMGE5ZGNkZjhlZjliZTcyZmZlZjhiZDhh NzJlNWMwHhcNMjYwMTAyMTYyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTQ3YjU2NGMwOWQ5MmE3M2YzMDdjNmNlODk5YTVlYjFiNWE2NjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WpmQO6hu2L20WKhCXzhShOYdwTU kiQH0rZZ0RKbEdW2uehmDD/sXS4Yyn+SnswB+e2+GaHjDLulYAxbZYfk5RAal9gs GEqXsk0jqGEE5aA7iGmhx5Hb39lGX34ASgsE0/1O84PH3mw1VEcGPC0kZDSUPVCi 1YGJJbViPNrpMNwbWQy3IBB6tXSZW1gfMz0mGK23cn7xI3WegTDsPqtRZOsOJSlc JyN7ZzSlGMNg5Z30GKYakZ3/ImwLDwws5f338XKHjPVHZd4OZlSX9qOBjluNjjZP o4sKayU+YCkocQ0BWCzEnYMKBK65CE6b0gAY4T2YOq7wPRvnej654KJwAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGFHtWTAnZKnPzB8bOiZpesbWmZmMB8GA1UdIwQY MBaAFIZBBlQPMKnc3475vnL/74vYpy5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTct M2IzMThlNDcyNzZkLzEvWVVlMVpNQ2RrcWNfTUh4czZKbWw2eHRhWm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTctM2IzMThlNDcyNzZk LzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwwjUMA8E AgACMAkDBwAgAQZ8AdAwDQYJKoZIhvcNAQELBQADggEBAGKJkdKEkFSV1mgXcHQY AkyPzLDq4veAeLTVM+S2QTgPyNZ9d9iTCxKSFSJ2yFjNp8Xhoy1kwoge4f3HxOiz 4f/yBDVcjFi9XNTgV9HFdkWEBrq+hel79skjPZ36NZZUFDDtiDYXO8bVXizZSeQ3 yo+n6c//GJRyrI1Tc2fr4+TDlcXbm27vAKriHSswVOaBT7bjrHmdz8GYyv1vsJIL sqzYjkCpRUp9fSv/YWqVfAPDc9bURtumXumNuBCJLMpRp8hxraCPdC5WImTdS2rZ fSDGwNoexH4It7eUdRmdoX1WYbwTA66loOKb3XuKibIHS6osn9UQUjUXqNyfnmaA 63I= -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:30 2026 by rpki-client