This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Yc69PBHLXl37WUEvr-6NfakheTs.roa File: Yc69PBHLXl37WUEvr-6NfakheTs.roa (raw, json) Hash identifier: XLhM0WjdlYQER2spgt43WQuNyDQ90ApQ1CzTP3EOkZ8= Subject key identifier: 61:CE:BD:3C:11:CB:5E:5D:FB:59:41:2F:AF:EE:8D:7D:A9:21:79:3B Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37B769E283736ABE2DDDB7BCDD0A23 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Yc69PBHLXl37WUEvr-6NfakheTs.roa Signing time: Fri 02 Jan 2026 10:18:59 +0000 ROA not before: Fri 02 Jan 2026 10:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 84.51.233.0/24 maxlen: 24 103.210.197.0/24 maxlen: 24 167.160.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b7:69:e2:83:73:6a:be:2d:dd:b7:bc:dd:0a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61cebd3c11cb5e5dfb59412fafee8d7da921793b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:f9:2d:49:b2:e0:1a:b2:ba:e0:45:77:38: 12:c7:8b:14:05:75:8c:9b:17:94:89:3b:0b:f6:b0: a3:0f:1a:3a:a7:e2:20:0c:53:09:4b:e5:12:85:e3: a1:ce:62:3b:5e:34:f2:dd:ce:ff:6a:fe:5c:27:22: bb:ce:d0:c4:67:5b:7d:26:ec:d2:eb:93:6b:a0:77: 68:b4:d1:ab:6e:2d:fa:fd:64:b3:d8:d3:cd:c3:63: a0:d4:a4:5b:b9:ce:11:d9:c3:23:b9:eb:f8:7e:d7: 22:76:cc:d5:58:92:44:bb:c3:c1:2a:e9:c4:2b:29: 3c:de:fd:26:14:c9:26:9a:d9:68:58:71:19:bf:37: cd:2f:c7:ca:dd:ec:c2:52:60:13:81:9f:d8:88:c4: d8:ea:b6:8a:2b:73:73:74:19:d8:35:7b:60:6c:e8: d5:8c:87:aa:3a:ee:ce:2c:49:a5:c0:df:d0:41:60: 86:71:85:a6:b7:2c:f1:f7:50:f4:14:06:5e:aa:0a: bc:57:5b:7a:57:60:e6:d4:b2:ee:11:46:96:f2:e7: 5b:cc:57:b0:8a:97:f8:ee:fd:fc:05:aa:4a:d7:09: ca:a8:c9:69:87:c0:77:a7:0c:31:3e:68:68:0e:b3: 6a:fd:ac:35:86:55:65:42:09:33:7d:f3:af:c6:04: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CE:BD:3C:11:CB:5E:5D:FB:59:41:2F:AF:EE:8D:7D:A9:21:79:3B X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Yc69PBHLXl37WUEvr-6NfakheTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.51.233.0/24 103.210.197.0/24 167.160.12.0/24 Signature Algorithm: sha256WithRSAEncryption 83:51:d9:1f:6d:8a:c3:7f:a0:be:6d:59:ef:bd:dd:5d:e0:6c: b2:01:21:34:f5:ce:56:8f:cd:b2:09:d6:14:7d:ed:5d:3b:21: bb:c3:8a:a1:e0:f5:d9:8d:52:c7:f4:e3:39:c2:7c:d1:64:0c: 77:27:82:8e:f8:53:98:41:5b:1c:d0:7b:92:32:22:88:58:1c: 24:b7:9d:9e:2b:24:11:e3:9e:7c:e4:e7:55:08:52:2f:1e:a7: 65:ee:b4:bd:0c:55:98:a0:b2:55:9b:d2:f5:db:3e:62:c8:21: 43:6f:35:cc:71:3b:22:9c:34:2d:37:d8:66:64:13:62:a2:cf: ba:e2:cb:7a:1d:9e:3c:32:04:a8:66:8e:3b:c5:fd:ad:5f:a6: a8:3c:dd:0f:cd:a0:58:14:c8:97:b8:36:52:e3:d9:9c:5b:5a: c2:38:44:29:df:b2:c0:89:c4:6a:7d:b5:90:bc:2b:70:cc:2f: 52:c2:2d:97:19:8a:69:0a:ae:05:59:28:5e:92:1a:52:2f:25: 3b:4d:90:2f:99:75:03:2b:8b:15:88:34:c8:72:ea:24:cf:8e: fd:6d:22:05:be:92:61:42:2f:09:1b:31:35:5c:ce:29:84:b6: e7:20:71:ff:6e:7a:dd:f3:0c:2c:30:9e:93:1a:cc:6d:ac:20: 3f:c5:55:17 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N7dp4oNzar4t3be83QojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWNlYmQzYzExY2I1ZTVkZmI1OTQxMmZhZmVlOGQ3ZGE5MjE3OTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF35LUmy4BqyuuBFdzgSx4sUBXWM mxeUiTsL9rCjDxo6p+IgDFMJS+USheOhzmI7XjTy3c7/av5cJyK7ztDEZ1t9JuzS 65NroHdotNGrbi36/WSz2NPNw2Og1KRbuc4R2cMjuev4ftcidszVWJJEu8PBKunE Kyk83v0mFMkmmtloWHEZvzfNL8fK3ezCUmATgZ/YiMTY6raKK3NzdBnYNXtgbOjV jIeqOu7OLEmlwN/QQWCGcYWmtyzx91D0FAZeqgq8V1t6V2Dm1LLuEUaW8udbzFew ipf47v38BapK1wnKqMlph8B3pwwxPmhoDrNq/aw1hlVlQgkzffOvxgRlKQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGHOvTwRy15d+1lBL6/ujX2pIXk7MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvWWM2OVBCSExYbDM3V1VFdnItNk5mYWtoZVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVDPpAwQA Z9LFAwQAp6AMMA0GCSqGSIb3DQEBCwUAA4IBAQCDUdkfbYrDf6C+bVnvvd1d4Gyy ASE09c5Wj82yCdYUfe1dOyG7w4qh4PXZjVLH9OM5wnzRZAx3J4KO+FOYQVsc0HuS MiKIWBwkt52eKyQR45585OdVCFIvHqdl7rS9DFWYoLJVm9L12z5iyCFDbzXMcTsi nDQtN9hmZBNios+64st6HZ48MgSoZo47xf2tX6aoPN0PzaBYFMiXuDZS49mcW1rC OEQp37LAicRqfbWQvCtwzC9Swi2XGYppCq4FWShekhpSLyU7TZAvmXUDK4sViDTI cuokz479bSIFvpJhQi8JGzE1XM4phLbnIHH/bnrd8wwsMJ6TGsxtrCA/xVUX -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:04 2026 by rpki-client