This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/YZf1I4HDqm3z0PL6TqKmws28UHo.roa File: YZf1I4HDqm3z0PL6TqKmws28UHo.roa (raw, json) Hash identifier: Iy79aoCujC05IKj4CdK/qSAtze1gZOoSXAO4h9l6iV0= Subject key identifier: 61:97:F5:23:81:C3:AA:6D:F3:D0:F2:FA:4E:A2:A6:C2:CD:BC:50:7A Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5 Certificate serial: 019B7C7F3A36A15349F13C173E68E7F1D469 Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/YZf1I4HDqm3z0PL6TqKmws28UHo.roa Signing time: Fri 02 Jan 2026 02:17:51 +0000 ROA not before: Fri 02 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50937 IP address blocks: 66.33.37.0/24 maxlen: 24 194.117.85.0/24 maxlen: 24 2a14:3b40::/32 maxlen: 48 2a14:3b40::/36 maxlen: 48 2a14:3b41::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:3a:36:a1:53:49:f1:3c:17:3e:68:e7:f1:d4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5 Validity Not Before: Jan 2 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6197f52381c3aa6df3d0f2fa4ea2a6c2cdbc507a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:1b:a3:00:b3:be:42:94:9d:31:8f:02:ce: 5d:3e:fb:bf:88:41:34:68:08:b0:78:22:5d:c7:9c: c4:0b:32:06:3d:c6:ec:1f:2c:4c:0e:45:1b:7b:e8: 5a:35:89:af:df:07:72:89:5e:cb:8e:0d:3c:55:ad: db:82:57:51:aa:d2:d8:43:4a:fc:64:a6:59:df:55: 28:86:47:d4:6a:89:70:12:c6:12:86:49:56:3e:ed: 15:a5:b3:49:7a:ea:d1:9b:58:56:97:f5:04:17:c0: aa:06:1b:98:88:72:b3:c0:ec:0a:60:40:b6:9b:ce: 50:24:07:57:dd:7a:83:50:02:84:76:c0:d0:74:0f: ac:86:d9:32:a4:4c:a9:9a:02:94:29:00:e1:6e:b7: e3:ff:9b:20:53:a2:6d:25:e7:18:ce:ca:ae:c4:4d: 58:1e:4b:fe:ea:11:e4:b7:a1:13:05:c8:19:68:9b: 8d:69:c2:f1:e5:51:5c:42:05:6c:0c:de:05:51:64: 65:d8:6c:b0:d1:43:ff:23:6d:b3:79:8c:94:4c:d5: ba:22:29:13:31:27:49:c8:40:ae:e4:1b:e3:7d:66: bd:12:a2:b3:75:69:c8:22:e9:75:0a:73:57:16:38: c7:cb:a8:20:63:75:31:ee:0c:83:af:55:2a:b3:05: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:97:F5:23:81:C3:AA:6D:F3:D0:F2:FA:4E:A2:A6:C2:CD:BC:50:7A X509v3 Authority Key Identifier: keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/YZf1I4HDqm3z0PL6TqKmws28UHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.33.37.0/24 194.117.85.0/24 IPv6: 2a14:3b40::/31 Signature Algorithm: sha256WithRSAEncryption a3:55:d4:cb:7b:fc:6e:84:3d:b2:55:08:67:33:cb:c2:c0:6e: 2d:a7:51:5e:22:3a:0c:a4:c4:02:0d:01:16:51:ea:a1:6c:8f: d5:f7:e5:8e:e8:5d:7b:f0:14:2c:d9:c0:a4:b8:a8:50:f4:f5: 95:f7:4f:cc:a8:42:a8:43:2f:fa:5f:39:9d:54:7a:18:94:58: 83:b4:d6:0b:1c:39:e8:59:17:79:04:32:fb:83:86:e8:32:f0: 25:4e:cd:24:db:93:bd:e3:0f:c3:f1:ec:94:f5:66:a8:d7:71: ee:0e:63:5f:fd:88:1b:e5:54:dc:7a:c4:f9:7c:5d:7e:5c:15: 15:02:21:56:17:ef:13:5c:c8:ce:ce:79:d8:52:4b:89:ed:d4: 84:d4:d0:05:7a:3b:fb:66:95:d8:51:b2:d5:cb:b9:36:fa:a5: e0:b2:70:2a:4a:1b:8c:a1:c6:04:6b:ad:e3:cc:4a:fb:3f:e0: 73:62:b3:e0:48:b5:d8:b7:a5:a4:71:b5:65:38:ea:a0:e6:8f: 0a:a3:4d:7d:c7:e5:65:ef:08:ce:29:dc:83:f1:a8:5a:af:bb: 6d:73:c7:b9:49:a5:77:95:58:b6:db:ff:01:86:43:29:59:b6: c5:d5:a8:e6:0e:68:aa:75:a9:cb:d5:40:98:6b:dc:af:24:de: bc:26:ef:4a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8fzo2oVNJ8TwXPmjn8dRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYWFjYWI4ZTQ1NmJiMjkxOTc5YTczNTdhNzAyNGYwMGJl YmFhZjUwHhcNMjYwMTAyMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTk3ZjUyMzgxYzNhYTZkZjNkMGYyZmE0ZWEyYTZjMmNkYmM1MDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiMbowCzvkKUnTGPAs5dPvu/iEE0 aAiweCJdx5zECzIGPcbsHyxMDkUbe+haNYmv3wdyiV7Ljg08Va3bgldRqtLYQ0r8 ZKZZ31UohkfUaolwEsYShklWPu0VpbNJeurRm1hWl/UEF8CqBhuYiHKzwOwKYEC2 m85QJAdX3XqDUAKEdsDQdA+shtkypEypmgKUKQDhbrfj/5sgU6JtJecYzsquxE1Y Hkv+6hHkt6ETBcgZaJuNacLx5VFcQgVsDN4FUWRl2Gyw0UP/I22zeYyUTNW6IikT MSdJyECu5BvjfWa9EqKzdWnIIul1CnNXFjjHy6ggY3Ux7gyDr1UqswVc7wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGGX9SOBw6pt89Dy+k6ipsLNvFB6MB8GA1UdIwQY MBaAFB+qyrjkVrspGXmnNXpwJPAL66r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzIt MmZiNzJhMGFlZjZkLzEvWVpmMUk0SERxbTN6MFBMNlRxS213czI4VUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzItMmZiNzJhMGFlZjZk LzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAQiElAwQA wnVVMA0EAgACMAcDBQEqFDtAMA0GCSqGSIb3DQEBCwUAA4IBAQCjVdTLe/xuhD2y VQhnM8vCwG4tp1FeIjoMpMQCDQEWUeqhbI/V9+WO6F178BQs2cCkuKhQ9PWV90/M qEKoQy/6XzmdVHoYlFiDtNYLHDnoWRd5BDL7g4boMvAlTs0k25O94w/D8eyU9Wao 13HuDmNf/Ygb5VTcesT5fF1+XBUVAiFWF+8TXMjOznnYUkuJ7dSE1NAFejv7ZpXY UbLVy7k2+qXgsnAqShuMocYEa63jzEr7P+BzYrPgSLXYt6WkcbVlOOqg5o8Ko019 x+Vl7wjOKdyD8ahar7ttc8e5SaV3lVi22/8BhkMpWbbF1ajmDmiqdanL1UCYa9yv JN68Ju9K -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:38 2026 by rpki-client