This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa File: YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa (raw, json) Hash identifier: qv62jghVn/xc1zYuKekCyiDZQVZ2Kui3yZ/JmsGwwSk= Subject key identifier: 60:A4:3B:6C:9E:54:CA:0B:32:E7:23:7B:74:FF:18:79:02:E6:13:1E Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249 Certificate serial: 019B7B3542C82C37229B6685EEC2CE244B75 Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa Signing time: Thu 01 Jan 2026 20:17:26 +0000 ROA not before: Thu 01 Jan 2026 20:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209620 IP address blocks: 78.31.196.0/22 maxlen: 24 2a06:6880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:42:c8:2c:37:22:9b:66:85:ee:c2:ce:24:4b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249 Validity Not Before: Jan 1 20:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60a43b6c9e54ca0b32e7237b74ff187902e6131e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:5a:6f:01:90:82:20:6b:b3:c0:14:65:14: 61:63:16:7a:b3:49:2d:a4:0b:58:fd:8e:91:4c:dc: c5:a0:d0:29:76:b5:b7:2a:0d:be:a1:7c:7a:13:f7: 1a:bf:40:a5:5e:58:61:d6:b7:0f:f4:40:91:8a:b5: a9:a8:b5:42:5e:a4:58:d8:ec:0c:72:2a:76:1a:a5: c1:72:bc:b9:84:46:9c:a8:55:e6:ec:4e:bb:68:8c: a9:c8:6d:cd:35:9c:fd:95:e5:bc:ef:68:e9:2b:45: f9:54:ed:14:f4:32:ba:e8:8b:be:ac:b3:63:7b:a7: 1f:c4:f8:be:08:d8:48:3c:28:e7:78:0f:b5:c9:cb: 3d:5a:bc:8a:c3:82:33:74:66:74:8a:58:cc:92:1d: 2a:b6:f7:93:6a:82:00:c6:b1:25:73:68:24:ac:10: 1a:72:3f:07:2d:a0:2b:13:e9:5f:1e:e4:c0:71:19: 9f:b9:fe:61:1c:a3:6b:df:d7:ce:ba:ae:4f:fc:73: f1:c5:89:96:1e:a4:e7:fe:8d:8f:85:42:ab:7c:30: c9:5b:af:ad:da:c3:20:fd:e4:6c:e0:a5:a4:70:51: 1d:53:d3:ed:84:25:79:fb:9c:c0:f4:92:cc:7e:48: 92:5a:8e:4e:b1:88:08:ca:d2:cb:11:be:02:d2:20: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A4:3B:6C:9E:54:CA:0B:32:E7:23:7B:74:FF:18:79:02:E6:13:1E X509v3 Authority Key Identifier: keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.196.0/22 IPv6: 2a06:6880::/29 Signature Algorithm: sha256WithRSAEncryption 39:96:23:94:ac:8f:c0:3b:b2:7e:89:4f:81:17:f8:57:3a:39: c7:de:7d:71:66:4b:0f:c1:aa:0a:14:65:a4:c5:05:08:d8:e2: db:61:60:8f:55:fe:89:f7:e7:1c:a8:8e:ed:22:58:70:84:ac: b6:b5:e4:b4:ec:4b:39:d8:ae:eb:b8:b5:1b:7f:b8:1f:b2:b3: 41:7e:2d:5f:cd:4d:12:19:00:eb:4e:f5:da:53:7c:a3:0a:47: 97:2e:bb:2d:ff:b0:4b:ec:b1:24:da:51:b7:83:e7:ed:01:e5: b3:66:18:17:b4:29:24:0a:7a:62:84:ef:00:a8:89:66:87:db: c3:db:2b:a4:f3:92:99:09:1c:0d:0c:73:e0:d9:1d:02:8f:ea: 58:97:b0:8e:71:90:39:b5:e4:9d:db:41:01:e5:e9:37:cc:42: d1:86:b5:b1:12:e6:6b:02:39:18:53:08:bb:de:99:5a:0e:1f: 28:b7:bd:d1:d9:66:51:8d:5e:3a:ab:ed:cd:d9:2f:c6:44:0f: 0c:33:14:bf:38:db:5a:b9:ed:13:c0:ff:09:f4:05:b9:be:13: ec:74:d8:79:58:11:35:3b:de:e2:69:ba:2d:89:39:ee:30:6d: 22:75:68:71:2a:04:fa:db:22:fd:ed:d0:16:97:e0:a9:50:e5: 34:fd:b3:01 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NULILDcim2aF7sLOJEt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5M2YzMjMxYzc4N2Y3MWRkMjQ4NGVlMDAyZGE3M2E3MTc1 YmQyNDkwHhcNMjYwMTAxMjAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGE0M2I2YzllNTRjYTBiMzJlNzIzN2I3NGZmMTg3OTAyZTYxMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUVabwGQgiBrs8AUZRRhYxZ6s0kt pAtY/Y6RTNzFoNApdrW3Kg2+oXx6E/cav0ClXlhh1rcP9ECRirWpqLVCXqRY2OwM cip2GqXBcry5hEacqFXm7E67aIypyG3NNZz9leW872jpK0X5VO0U9DK66Iu+rLNj e6cfxPi+CNhIPCjneA+1ycs9WryKw4IzdGZ0iljMkh0qtveTaoIAxrElc2gkrBAa cj8HLaArE+lfHuTAcRmfuf5hHKNr39fOuq5P/HPxxYmWHqTn/o2PhUKrfDDJW6+t 2sMg/eRs4KWkcFEdU9PthCV5+5zA9JLMfkiSWo5OsYgIytLLEb4C0iDrRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGCkO2yeVMoLMucje3T/GHkC5hMeMB8GA1UdIwQY MBaAFKk/MjHHh/cd0khO4ALac6cXW9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2Mt YjU0YmNhZTE3ZDQwLzEvWUtRN2JKNVV5Z3N5NXlON2RQOFllUUxtRXg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2MtYjU0YmNhZTE3ZDQw LzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCTh/EMA0E AgACMAcDBQMqBmiAMA0GCSqGSIb3DQEBCwUAA4IBAQA5liOUrI/AO7J+iU+BF/hX OjnH3n1xZksPwaoKFGWkxQUI2OLbYWCPVf6J9+ccqI7tIlhwhKy2teS07Es52K7r uLUbf7gfsrNBfi1fzU0SGQDrTvXaU3yjCkeXLrst/7BL7LEk2lG3g+ftAeWzZhgX tCkkCnpihO8AqIlmh9vD2yuk85KZCRwNDHPg2R0Cj+pYl7COcZA5teSd20EB5ek3 zELRhrWxEuZrAjkYUwi73plaDh8ot73R2WZRjV46q+3N2S/GRA8MMxS/ONtaue0T wP8J9AW5vhPsdNh5WBE1O97iabotiTnuMG0idWhxKgT62yL97dAWl+CpUOU0/bMB -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:17 2026 by rpki-client