This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YPCE8YXJ1InMTlcoWwEVw29dVZo.roa File: YPCE8YXJ1InMTlcoWwEVw29dVZo.roa (raw, json) Hash identifier: 453krFxRCu1O+h1EokHnTerWglKIYbQwNskbpuAr2KQ= Subject key identifier: 60:F0:84:F1:85:C9:D4:89:CC:4E:57:28:5B:01:15:C3:6F:5D:55:9A Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C132874B6027F68FF32BA863D558271 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YPCE8YXJ1InMTlcoWwEVw29dVZo.roa Signing time: Fri 02 Jan 2026 00:19:48 +0000 ROA not before: Fri 02 Jan 2026 00:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56909 IP address blocks: 185.244.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:28:74:b6:02:7f:68:ff:32:ba:86:3d:55:82:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60f084f185c9d489cc4e57285b0115c36f5d559a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:50:fa:5a:84:d6:27:7e:7e:d1:e9:42:ec: 0e:ec:97:eb:5b:52:16:47:f0:0c:38:c9:e2:2c:11: e7:29:cf:a2:b1:57:5b:46:7c:55:cc:04:23:5f:68: 45:0e:06:89:19:70:fa:c2:eb:3e:b9:dc:9c:d4:e2: 66:71:17:a9:79:5d:6b:bf:8c:c6:2d:cb:6d:f0:c0: 6d:c6:5f:de:f8:60:e9:07:01:f1:d0:fe:2a:84:67: 39:1b:37:87:6a:3a:3c:94:de:f3:52:da:14:a6:8a: ed:93:a7:16:80:72:98:2f:dc:87:da:7c:b5:85:90: 18:8e:30:28:d0:9d:97:62:ca:b7:6f:44:a0:8c:cb: 88:cd:0a:76:11:3a:91:35:9a:dc:4e:f7:8a:b5:2f: 08:37:b2:d0:44:e3:bd:8c:55:2a:d7:c7:56:d8:06: 69:94:49:21:79:1f:a3:24:29:e5:e1:4a:cb:23:da: a1:8a:28:51:cb:62:c4:81:f5:f4:f6:20:fa:96:2e: 8b:74:79:f0:b9:2a:dc:a8:cf:bb:25:13:01:ab:9e: 1e:39:83:ca:39:9e:dc:e6:97:a6:82:36:a3:d0:ba: 9c:86:0b:60:06:34:73:20:31:d3:ff:4c:37:00:04: 3d:bc:81:6a:aa:24:c4:02:d7:da:07:f1:f6:2e:c2: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:84:F1:85:C9:D4:89:CC:4E:57:28:5B:01:15:C3:6F:5D:55:9A X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YPCE8YXJ1InMTlcoWwEVw29dVZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.234.0/24 Signature Algorithm: sha256WithRSAEncryption c0:e4:8f:fa:f8:42:2f:5e:dc:db:f6:18:06:30:55:fc:1e:ed: 1d:91:cc:83:79:49:86:47:24:d3:32:50:a0:3a:f3:95:1e:cd: 95:5b:21:f5:22:53:af:b9:b3:70:0d:a1:0a:7e:46:e3:6a:46: 22:ca:f5:05:f3:41:a2:cf:f1:b7:e2:ee:61:85:68:0b:20:57: 3e:c9:2c:f2:d4:28:c0:3c:13:73:5f:c4:d4:e2:71:98:d1:4d: 1a:8f:55:3b:cf:9c:24:8c:69:7d:28:c4:dd:5f:bc:c0:c7:57: 4b:5a:38:ca:a3:c2:80:4c:62:a4:2d:a1:4c:72:95:2f:3e:be: 5e:ac:39:c4:9b:ad:77:06:51:c4:89:55:77:ac:1c:6e:e2:5b: 40:78:9d:21:67:7f:b1:0d:70:56:e8:08:12:e6:2b:f4:e3:3a: ab:31:f5:9e:c3:cc:9e:a7:16:a4:25:06:9f:b9:8e:41:a4:9e: e5:7b:88:22:c4:8e:ef:fe:78:a6:4b:3a:9a:a0:1e:b8:8f:92: d8:c7:00:df:29:b7:11:22:28:74:60:28:cb:82:0a:d0:8f:37: 4f:a2:70:a8:26:fc:34:52:3e:71:43:1b:f6:a4:e3:89:d0:8f: f3:12:ac:67:da:35:83:ea:06:9b:58:f1:e4:f6:ea:27:2e:04: 92:25:18:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eyh0tgJ/aP8yuoY9VYJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGYwODRmMTg1YzlkNDg5Y2M0ZTU3Mjg1YjAxMTVjMzZmNWQ1NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArglQ+lqE1id+ftHpQuwO7JfrW1IW R/AMOMniLBHnKc+isVdbRnxVzAQjX2hFDgaJGXD6wus+udyc1OJmcRepeV1rv4zG Lctt8MBtxl/e+GDpBwHx0P4qhGc5GzeHajo8lN7zUtoUportk6cWgHKYL9yH2ny1 hZAYjjAo0J2XYsq3b0SgjMuIzQp2ETqRNZrcTveKtS8IN7LQROO9jFUq18dW2AZp lEkheR+jJCnl4UrLI9qhiihRy2LEgfX09iD6li6LdHnwuSrcqM+7JRMBq54eOYPK OZ7c5pemgjaj0LqchgtgBjRzIDHT/0w3AAQ9vIFqqiTEAtfaB/H2LsLXEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGDwhPGFydSJzE5XKFsBFcNvXVWaMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvWVBDRThZWEoxSW5NVGxjb1d3RVZ3MjlkVlpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufTqMA0G CSqGSIb3DQEBCwUAA4IBAQDA5I/6+EIvXtzb9hgGMFX8Hu0dkcyDeUmGRyTTMlCg OvOVHs2VWyH1IlOvubNwDaEKfkbjakYiyvUF80Giz/G34u5hhWgLIFc+ySzy1CjA PBNzX8TU4nGY0U0aj1U7z5wkjGl9KMTdX7zAx1dLWjjKo8KATGKkLaFMcpUvPr5e rDnEm613BlHEiVV3rBxu4ltAeJ0hZ3+xDXBW6AgS5iv04zqrMfWew8yepxakJQaf uY5BpJ7le4gixI7v/nimSzqaoB64j5LYxwDfKbcRIih0YCjLggrQjzdPonCoJvw0 Uj5xQxv2pOOJ0I/zEqxn2jWD6gabWPHk9uonLgSSJRg8 -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:05 2026 by rpki-client