This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Y76doziKGwwwbwthMWKDSJOEO_U.roa File: Y76doziKGwwwbwthMWKDSJOEO_U.roa (raw, json) Hash identifier: EqWuWbycfN/11zcMjgVui/kMByG7hrq3xMAFcve3x+g= Subject key identifier: 63:BE:9D:A3:38:8A:1B:0C:30:6F:0B:61:31:62:83:48:93:84:3B:F5 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37AF94DD825FA78571C0CC00719BF1 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Y76doziKGwwwbwthMWKDSJOEO_U.roa Signing time: Fri 02 Jan 2026 10:18:57 +0000 ROA not before: Fri 02 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12844 IP address blocks: 124.198.146.0/23 maxlen: 24 158.173.148.0/22 maxlen: 24 158.173.248.0/21 maxlen: 24 185.102.170.0/24 maxlen: 24 212.32.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:af:94:dd:82:5f:a7:85:71:c0:cc:00:71:9b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63be9da3388a1b0c306f0b613162834893843bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:64:ed:d3:f8:f7:07:2d:09:e3:d9:48:67: 5b:20:c3:49:0a:be:e5:67:c6:29:f4:4a:4d:fa:11: df:e8:5f:43:68:f7:9c:db:90:45:84:e1:39:70:0f: 27:f8:22:88:ab:59:fa:9c:d7:ff:89:ab:96:2f:6e: 53:05:94:43:76:5f:84:9e:7f:26:2d:32:f7:8f:ce: 53:44:8a:e8:b6:52:96:2a:6f:7d:c8:06:45:43:4b: 28:72:ef:8d:00:7b:61:70:54:51:7a:44:ba:50:4f: 3b:da:4d:b3:5b:62:ba:c1:b5:8e:e9:fe:00:0e:74: 2e:de:ce:66:b5:bb:b6:9b:ec:fc:e5:0b:9e:2c:f8: 93:1f:a0:38:49:13:cb:3e:67:b6:dd:a7:c2:41:0f: b2:54:46:a8:fa:80:ce:ed:a5:45:fc:ba:97:f0:67: 3e:02:13:85:be:3f:8c:07:5b:1b:a9:30:cd:9d:0e: 66:93:e6:bf:2b:44:cf:c7:c9:d7:b0:f0:db:4f:50: 79:a6:f4:88:ef:70:d8:cf:69:65:92:c6:08:4a:77: 07:b6:1f:dc:e5:10:e9:46:01:12:52:bf:c5:5b:89: 56:a6:18:08:92:73:35:d9:99:0c:b5:31:5f:7d:68: 99:77:77:37:70:3d:36:fc:e9:fc:00:4e:91:ef:9f: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BE:9D:A3:38:8A:1B:0C:30:6F:0B:61:31:62:83:48:93:84:3B:F5 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Y76doziKGwwwbwthMWKDSJOEO_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.198.146.0/23 158.173.148.0/22 158.173.248.0/21 185.102.170.0/24 212.32.74.0/24 Signature Algorithm: sha256WithRSAEncryption 94:5d:cc:92:cd:74:09:c8:90:49:88:3f:fa:50:e0:81:31:91: f5:d1:00:0f:07:20:f3:da:4e:37:19:f0:9e:b0:18:b5:2d:19: 55:53:51:7c:35:b6:d2:b6:e2:69:f5:ed:88:1a:8f:9c:f5:ee: ff:c2:51:3a:75:fe:19:5c:77:2f:e8:b1:e3:36:4f:be:ee:c0: f0:80:1d:44:ea:58:4b:c3:80:6c:5e:7b:80:54:40:37:60:02: 37:d8:dd:32:36:c1:c9:26:fc:33:40:46:cb:9d:cb:51:72:36: 2b:60:b0:f6:0c:6a:54:ab:61:cc:fa:4e:b5:bf:0f:26:3e:94: 9c:96:b6:3c:e0:6a:73:29:a1:c3:86:dd:3b:b1:7a:ba:f2:4f: 50:69:9e:61:21:49:b0:5b:4b:2d:22:79:53:5f:56:48:87:55: 0e:d4:91:d0:12:a3:ac:f9:80:29:4a:96:92:a1:3d:6e:ea:9b: 04:1c:56:f9:39:27:79:5c:0d:da:a2:49:5c:61:f9:4b:07:57: e9:b2:e5:81:5d:d8:66:79:99:b6:29:ed:be:a7:58:a5:74:45: db:af:0e:69:46:ab:67:9f:30:79:b4:e6:1c:3c:69:91:88:99: 29:30:a8:ad:15:f9:51:40:4e:2c:05:84:1b:28:0e:76:97:e9: 61:26:a6:ac -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+N6+U3YJfp4VxwMwAcZvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2JlOWRhMzM4OGExYjBjMzA2ZjBiNjEzMTYyODM0ODkzODQzYmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Jk7dP49wctCePZSGdbIMNJCr7l Z8Yp9EpN+hHf6F9DaPec25BFhOE5cA8n+CKIq1n6nNf/iauWL25TBZRDdl+Enn8m LTL3j85TRIrotlKWKm99yAZFQ0socu+NAHthcFRRekS6UE872k2zW2K6wbWO6f4A DnQu3s5mtbu2m+z85QueLPiTH6A4SRPLPme23afCQQ+yVEao+oDO7aVF/LqX8Gc+ AhOFvj+MB1sbqTDNnQ5mk+a/K0TPx8nXsPDbT1B5pvSI73DYz2llksYISncHth/c 5RDpRgESUr/FW4lWphgIknM12ZkMtTFffWiZd3c3cD02/On8AE6R75+GIwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGO+naM4ihsMMG8LYTFig0iThDv1MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvWTc2ZG96aUtHd3d3Ynd0aE1XS0RTSk9FT19VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBfMaSAwQC nq2UAwQDnq34AwQAuWaqAwQA1CBKMA0GCSqGSIb3DQEBCwUAA4IBAQCUXcySzXQJ yJBJiD/6UOCBMZH10QAPByDz2k43GfCesBi1LRlVU1F8NbbStuJp9e2IGo+c9e7/ wlE6df4ZXHcv6LHjNk++7sDwgB1E6lhLw4BsXnuAVEA3YAI32N0yNsHJJvwzQEbL nctRcjYrYLD2DGpUq2HM+k61vw8mPpSclrY84GpzKaHDht07sXq68k9QaZ5hIUmw W0stInlTX1ZIh1UO1JHQEqOs+YApSpaSoT1u6psEHFb5OSd5XA3aoklcYflLB1fp suWBXdhmeZm2Ke2+p1ildEXbrw5pRqtnnzB5tOYcPGmRiJkpMKitFflRQE4sBYQb KA52l+lhJqas -----END CERTIFICATE-----Generated at Tue Jan 20 23:49:50 2026 by rpki-client