This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/YAsr4AMd-DQg17IKnmJqPsKycSA.roa File: YAsr4AMd-DQg17IKnmJqPsKycSA.roa (raw, json) Hash identifier: g07FXjeIHQJ20whOb8MTucqM4PupENC/MFjlVryEQbI= Subject key identifier: 60:0B:2B:E0:03:1D:F8:34:20:D7:B2:0A:9E:62:6A:3E:C2:B2:71:20 Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f Certificate serial: 019B7D5B2182B4CE62D94C891DE4279784D5 Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/YAsr4AMd-DQg17IKnmJqPsKycSA.roa Signing time: Fri 02 Jan 2026 06:18:02 +0000 ROA not before: Fri 02 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49324 IP address blocks: 194.61.192.0/19 maxlen: 19 194.61.192.0/20 maxlen: 20 194.61.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:21:82:b4:ce:62:d9:4c:89:1d:e4:27:97:84:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f Validity Not Before: Jan 2 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=600b2be0031df83420d7b20a9e626a3ec2b27120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:ad:64:d0:33:cb:a9:82:b8:5c:fc:7b:17: 96:e7:24:58:6c:8a:4a:b5:b9:e8:77:1c:a5:e4:44: 81:6c:7e:e5:fd:a9:ee:c0:a3:af:b8:16:b1:ac:64: 7f:7f:6d:45:27:b8:57:9e:6f:1e:80:20:f7:08:ea: 15:46:a7:9a:95:82:fe:46:e3:42:c8:33:97:29:8e: 2d:91:ab:cd:8a:59:61:c5:0b:bc:12:f4:4b:69:23: ce:d3:34:1a:ba:65:72:f8:17:a7:8e:62:da:cc:ad: 61:e5:3a:6f:7d:31:f6:e2:9e:d5:68:33:1a:18:c2: c4:14:42:ce:b5:00:39:5c:1b:d9:16:ba:c4:3e:eb: 95:fe:82:29:26:dc:33:e5:28:ec:12:33:71:e9:a7: e8:67:c8:7a:81:4b:34:c0:13:3b:37:31:76:d5:bc: dd:0a:9c:ea:3d:0e:19:0f:e9:16:cb:f8:dd:32:31: 07:7a:60:8e:6f:df:76:6d:33:f9:47:5f:e1:f9:bf: 80:5d:b5:17:0a:05:ca:9e:ca:e5:99:f7:e3:5d:07: b4:53:18:21:e9:17:62:39:ed:37:bd:80:98:7f:78: 28:b0:82:25:df:3a:07:fc:6e:f9:c5:3d:bf:8f:6f: 20:fc:ef:37:a2:be:d3:aa:18:7d:87:e1:8e:ff:67: ca:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0B:2B:E0:03:1D:F8:34:20:D7:B2:0A:9E:62:6A:3E:C2:B2:71:20 X509v3 Authority Key Identifier: keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/YAsr4AMd-DQg17IKnmJqPsKycSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.192.0/19 Signature Algorithm: sha256WithRSAEncryption ba:bf:f1:41:65:0f:25:60:34:18:2b:44:27:b7:00:2f:ae:c9: 86:ca:af:bb:2a:c7:fa:fc:9a:9f:9f:bc:af:83:6b:7d:d8:c9: 46:93:40:04:77:26:5a:be:a7:42:20:1a:87:5b:b5:b3:cb:38: 08:d5:ce:07:a0:ef:ac:52:c1:eb:41:4d:d5:2f:8b:9e:e0:e3: f8:c6:be:52:9c:f3:6e:20:d0:77:9f:d9:65:32:bd:46:c4:97: 54:47:65:7d:a4:ef:57:5b:30:5c:c3:5a:ab:1a:d7:ab:08:e5: 2a:14:97:1a:f8:8f:d8:0f:ab:38:40:8f:67:ec:72:8f:73:a1: 95:4f:c7:ea:80:03:21:cc:5c:04:76:14:89:2e:75:83:2d:06: ff:70:13:53:13:28:b6:e8:7a:4e:9d:51:19:d2:ec:6d:cb:00: 42:96:7f:21:6a:ca:ea:9c:19:af:bd:50:0d:e7:78:08:84:0c: 5e:06:5a:ba:cf:81:12:89:1c:3a:2c:e1:ae:70:4b:f3:8b:f5: 71:9c:62:dc:a3:82:4e:4c:fe:da:b5:f4:88:f9:c1:51:0b:a7: 35:e6:99:57:b9:64:9b:33:b2:00:a4:75:f2:71:04:8f:74:8a: b0:45:ad:5a:6e:b7:09:b9:fa:02:9f:b8:ae:ce:11:a4:ee:ec: 73:a6:1f:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WyGCtM5i2UyJHeQnl4TVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1 MGVmMGYwHhcNMjYwMTAyMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDBiMmJlMDAzMWRmODM0MjBkN2IyMGE5ZTYyNmEzZWMyYjI3MTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS2tZNAzy6mCuFz8exeW5yRYbIpK tbnodxyl5ESBbH7l/anuwKOvuBaxrGR/f21FJ7hXnm8egCD3COoVRqealYL+RuNC yDOXKY4tkavNillhxQu8EvRLaSPO0zQaumVy+BenjmLazK1h5TpvfTH24p7VaDMa GMLEFELOtQA5XBvZFrrEPuuV/oIpJtwz5SjsEjNx6afoZ8h6gUs0wBM7NzF21bzd CpzqPQ4ZD+kWy/jdMjEHemCOb992bTP5R1/h+b+AXbUXCgXKnsrlmffjXQe0Uxgh 6RdiOe03vYCYf3gosIIl3zoH/G75xT2/j28g/O83or7Tqhh9h+GO/2fK8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGALK+ADHfg0INeyCp5iaj7CsnEgMB8GA1UdIwQY MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt MTZmZmExMTQ2OTljLzEvWUFzcjRBTWQtRFFnMTdJS25tSnFQc0t5Y1NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwj3AMA0G CSqGSIb3DQEBCwUAA4IBAQC6v/FBZQ8lYDQYK0QntwAvrsmGyq+7Ksf6/Jqfn7yv g2t92MlGk0AEdyZavqdCIBqHW7WzyzgI1c4HoO+sUsHrQU3VL4ue4OP4xr5SnPNu INB3n9llMr1GxJdUR2V9pO9XWzBcw1qrGterCOUqFJca+I/YD6s4QI9n7HKPc6GV T8fqgAMhzFwEdhSJLnWDLQb/cBNTEyi26HpOnVEZ0uxtywBCln8hasrqnBmvvVAN 53gIhAxeBlq6z4ESiRw6LOGucEvzi/VxnGLco4JOTP7atfSI+cFRC6c15plXuWSb M7IApHXycQSPdIqwRa1abrcJufoCn7iuzhGk7uxzph9E -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:35 2026 by rpki-client