This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YxlaafyBoNOIBY7Jq8fI3HuQc_Q.roa File: YxlaafyBoNOIBY7Jq8fI3HuQc_Q.roa (raw, json) Hash identifier: YRN5cRxH9CIoIOKYtu406/n0bFISfppOOBn81Xcx7Pw= Subject key identifier: 63:19:5A:69:FC:81:A0:D3:88:05:8E:C9:AB:C7:C8:DC:7B:90:73:F4 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C69DA3EFE0F38610890F097AB79D76 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YxlaafyBoNOIBY7Jq8fI3HuQc_Q.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49241 IP address blocks: 188.130.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9d:a3:ef:e0:f3:86:10:89:0f:09:7a:b7:9d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63195a69fc81a0d388058ec9abc7c8dc7b9073f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:cf:08:23:19:8b:5b:25:6e:a8:70:4f:bd: 5d:88:49:01:66:ed:b0:29:0c:61:73:2c:0a:5b:7e: 78:6b:5b:db:bd:ae:6c:23:98:86:d2:56:d2:8a:c7: 00:50:02:2f:f3:66:bf:9a:44:f0:d2:2e:46:ed:f7: 15:e7:fb:5b:a8:98:82:39:0a:78:09:d6:e2:ba:c9: 76:5b:1f:16:f1:30:3b:05:fa:98:77:dc:b0:3f:6b: 4f:c7:b1:56:a1:9b:3e:1c:73:7b:5f:af:8c:8a:53: 7d:79:49:dc:2a:37:df:fa:09:e2:dd:82:c8:e4:e1: f6:96:33:3a:e9:9d:cc:e9:cb:b7:6e:68:37:34:1b: 61:4a:a3:ad:a7:97:cd:35:2d:c5:56:42:c2:94:77: 61:04:d3:80:6d:f9:18:44:77:4f:af:df:b9:36:56: 02:05:39:86:65:54:d4:aa:8d:98:17:21:c4:ff:81: 53:84:88:f5:3f:21:17:28:e5:64:12:c6:34:25:5e: dc:1a:67:1e:c9:dc:cb:b3:f7:69:60:6f:5f:d7:a0: dc:84:af:63:18:d4:53:4d:93:03:aa:12:20:4c:4f: 78:a5:8f:d4:93:c3:e0:7d:cb:4b:5a:08:63:ed:8d: fd:e4:f2:55:d0:7b:cf:99:0f:11:7d:f0:c5:ae:f8: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:19:5A:69:FC:81:A0:D3:88:05:8E:C9:AB:C7:C8:DC:7B:90:73:F4 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YxlaafyBoNOIBY7Jq8fI3HuQc_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.245.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:78:b9:3a:b6:ba:3e:35:e1:37:79:e3:37:6e:67:e4:10:92: 46:50:38:11:5a:be:69:06:7e:c6:e1:c7:d0:8d:86:ab:85:f9: f4:6f:7b:e8:27:3f:c7:38:fb:d0:b6:89:b3:f8:9e:22:e4:db: 37:12:c2:52:62:60:21:66:61:b7:bc:3f:ce:e1:f1:e4:d9:89: d3:49:07:6f:c7:6d:95:b1:f9:11:dc:7e:8e:57:21:a2:25:e7: 86:f6:ba:cb:a8:20:17:99:dd:02:12:82:fd:4a:6c:44:b3:6c: 87:d1:77:84:fc:58:ce:16:b3:ab:b4:4b:e3:8d:0a:ec:b3:18: 84:6d:bd:fd:6b:fa:a6:58:af:b8:f9:a2:89:ef:93:8d:9b:e4: fa:63:2e:c3:70:fc:fd:ad:36:36:c8:64:00:10:0f:52:2f:dd: aa:53:91:2a:6e:ca:28:c7:8b:1e:91:75:16:0a:06:d6:31:7a: 58:3e:45:8b:bd:df:d2:ee:7c:c9:78:fc:4b:e7:27:8b:f5:e4: 48:e7:1b:d3:d9:09:54:bf:23:96:60:3a:aa:2d:fd:4e:31:9e: 2f:91:53:08:60:75:06:72:5e:8c:20:0a:a6:c8:af:26:b4:d4: 53:5b:f5:cb:4b:b2:b3:73:01:4f:11:d4:5b:68:69:aa:16:df: a7:2c:73:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xp2j7+DzhhCJDwl6t512MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzE5NWE2OWZjODFhMGQzODgwNThlYzlhYmM3YzhkYzdiOTA3M2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwbPCCMZi1slbqhwT71diEkBZu2w KQxhcywKW354a1vbva5sI5iG0lbSiscAUAIv82a/mkTw0i5G7fcV5/tbqJiCOQp4 Cdbiusl2Wx8W8TA7BfqYd9ywP2tPx7FWoZs+HHN7X6+MilN9eUncKjff+gni3YLI 5OH2ljM66Z3M6cu3bmg3NBthSqOtp5fNNS3FVkLClHdhBNOAbfkYRHdPr9+5NlYC BTmGZVTUqo2YFyHE/4FThIj1PyEXKOVkEsY0JV7cGmceydzLs/dpYG9f16DchK9j GNRTTZMDqhIgTE94pY/Uk8PgfctLWghj7Y395PJV0HvPmQ8RffDFrvhZYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMZWmn8gaDTiAWOyavHyNx7kHP0MB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvWXhsYWFmeUJvTk9JQlk3SnE4ZkkzSHVRY19RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvIL1MA0G CSqGSIb3DQEBCwUAA4IBAQBreLk6tro+NeE3eeM3bmfkEJJGUDgRWr5pBn7G4cfQ jYarhfn0b3voJz/HOPvQtomz+J4i5Ns3EsJSYmAhZmG3vD/O4fHk2YnTSQdvx22V sfkR3H6OVyGiJeeG9rrLqCAXmd0CEoL9SmxEs2yH0XeE/FjOFrOrtEvjjQrssxiE bb39a/qmWK+4+aKJ75ONm+T6Yy7DcPz9rTY2yGQAEA9SL92qU5Eqbsoox4sekXUW CgbWMXpYPkWLvd/S7nzJePxL5yeL9eRI5xvT2QlUvyOWYDqqLf1OMZ4vkVMIYHUG cl6MIAqmyK8mtNRTW/XLS7KzcwFPEdRbaGmqFt+nLHPl -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:41 2026 by rpki-client