This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/B_Yga8dFIroZi4oBY8FBGZQGvOc.roa File: B_Yga8dFIroZi4oBY8FBGZQGvOc.roa (raw, json) Hash identifier: Xqwgsd+G6A3vjt3PhRx4O36PvKDRIPU7eS7eBDKIq0I= Subject key identifier: 07:F6:20:6B:C7:45:22:BA:19:8B:8A:01:63:C1:41:19:94:06:BC:E7 Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff Certificate serial: 019B76EB73527317E354A26F144827D3F0A4 Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/B_Yga8dFIroZi4oBY8FBGZQGvOc.roa Signing time: Thu 01 Jan 2026 00:18:20 +0000 ROA not before: Thu 01 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57710 IP address blocks: 37.61.160.0/20 maxlen: 24 185.235.200.0/22 maxlen: 24 2a00:9640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:73:52:73:17:e3:54:a2:6f:14:48:27:d3:f0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07f6206bc74522ba198b8a0163c141199406bce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:d7:0d:21:41:30:0a:ac:1a:1e:8a:11:c8: 62:6b:4a:65:ab:98:ad:29:19:eb:7d:ac:e5:de:97: 7e:8d:26:2e:97:05:e7:4a:13:2a:b4:bf:ab:05:10: de:4b:24:40:62:30:4c:97:6d:34:b6:27:de:0f:36: 44:92:02:53:4c:95:bc:97:af:e7:f1:c0:88:41:1a: ea:a7:00:f7:9a:9d:87:2c:4b:8e:f1:45:94:f5:9a: 6e:81:04:66:8c:0d:fb:8b:d4:75:c0:63:c8:b3:d0: dc:e8:ef:55:4d:22:1a:4e:0e:c9:2f:df:ec:de:1d: 9f:c2:fd:87:36:a7:1d:44:d6:a1:db:25:95:db:a8: ef:38:fc:c2:34:40:0a:c4:45:61:6b:88:5c:72:e9: c7:89:89:da:0f:97:59:d2:1e:cc:5f:ca:dc:1a:9c: 7c:39:25:eb:ef:9b:82:0a:a6:ed:16:fd:37:42:e4: 03:8f:9c:af:e0:d2:17:5d:b2:f1:3e:44:98:99:a6: 2e:f3:c7:f9:91:e8:2b:7c:e2:3c:1b:25:0d:b9:d4: 77:2d:f6:1a:c3:5f:cf:6f:14:3d:4d:78:09:12:de: 09:43:d7:78:3e:92:a8:98:8a:31:41:a4:4a:4b:2b: 24:77:d8:1a:05:93:61:2b:39:fa:6b:87:3f:e0:a1: 72:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F6:20:6B:C7:45:22:BA:19:8B:8A:01:63:C1:41:19:94:06:BC:E7 X509v3 Authority Key Identifier: keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/B_Yga8dFIroZi4oBY8FBGZQGvOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.160.0/20 185.235.200.0/22 IPv6: 2a00:9640::/32 Signature Algorithm: sha256WithRSAEncryption 1f:27:15:89:16:5a:68:f8:4a:cb:59:43:80:a8:59:c9:92:f9: 11:73:dd:01:50:3c:e2:c2:54:3f:fe:58:cb:c4:52:f5:71:ce: f5:70:f0:1b:ab:6f:a4:3e:52:65:4a:87:7c:1e:cf:1e:bd:8d: 6b:50:7d:93:3a:91:05:1e:e4:24:32:6e:0d:d2:98:1f:c2:f2: d4:6e:5c:76:b3:1f:f7:70:82:3a:8f:fe:9d:72:b0:70:1a:6d: 16:76:97:4b:97:83:10:3e:d5:7a:10:fb:9b:9f:5b:0f:cf:4f: 83:10:93:ea:c6:dd:94:22:98:f6:fd:7b:b5:80:02:11:a1:af: c4:f4:f1:87:6e:c1:8c:43:29:cb:51:c2:a2:67:6b:59:c8:c0: dd:f9:4c:c7:e7:10:6b:3e:0a:60:e0:04:33:47:38:0d:01:34: f6:31:15:d5:17:e4:41:f5:ee:70:9a:8b:36:02:04:a2:41:e4: 47:1e:39:4c:c2:fd:53:a3:dc:0b:ee:7c:ee:f7:af:2b:1b:88: e5:bc:db:e8:f7:a5:de:3b:bc:4d:e9:85:46:31:f3:55:1b:37: f0:13:91:be:b6:be:00:1e:e0:bb:7b:f0:03:4d:be:2c:04:55: 79:41:51:b4:a0:5b:8b:fc:3f:51:d7:ee:85:f2:4b:4c:82:28: d1:58:cb:e0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt263NScxfjVKJvFEgn0/CkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTRkMzBmM2IxZTExMzc0MjNjNGIyMzU5NTdmMzMwMzA2 NGRhZmYwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2Y2MjA2YmM3NDUyMmJhMTk4YjhhMDE2M2MxNDExOTk0MDZiY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5PXDSFBMAqsGh6KEchia0plq5it KRnrfazl3pd+jSYulwXnShMqtL+rBRDeSyRAYjBMl200tifeDzZEkgJTTJW8l6/n 8cCIQRrqpwD3mp2HLEuO8UWU9ZpugQRmjA37i9R1wGPIs9Dc6O9VTSIaTg7JL9/s 3h2fwv2HNqcdRNah2yWV26jvOPzCNEAKxEVha4hccunHiYnaD5dZ0h7MX8rcGpx8 OSXr75uCCqbtFv03QuQDj5yv4NIXXbLxPkSYmaYu88f5kegrfOI8GyUNudR3LfYa w1/PbxQ9TXgJEt4JQ9d4PpKomIoxQaRKSyskd9gaBZNhKzn6a4c/4KFyjwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAf2IGvHRSK6GYuKAWPBQRmUBrznMB8GA1UdIwQY MBaAFMsU0w87HhE3QjxLI1lX8zAwZNr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhUVER6c2VFVGRDUEVzaldWZnpNREJrMnY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNjdiZjUtMDIyMC00OGIxLWI3MjMt YTVhZTViMTk5MzlhLzEvQl9ZZ2E4ZEZJcm9aaTRvQlk4RkJHWlFHdk9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNjdiZjUtMDIyMC00OGIxLWI3MjMtYTVhZTViMTk5Mzlh LzEveXhUVER6c2VFVGRDUEVzaldWZnpNREJrMnY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEJT2gAwQC uevIMA0EAgACMAcDBQAqAJZAMA0GCSqGSIb3DQEBCwUAA4IBAQAfJxWJFlpo+ErL WUOAqFnJkvkRc90BUDziwlQ//ljLxFL1cc71cPAbq2+kPlJlSod8Hs8evY1rUH2T OpEFHuQkMm4N0pgfwvLUblx2sx/3cII6j/6dcrBwGm0WdpdLl4MQPtV6EPubn1sP z0+DEJPqxt2UIpj2/Xu1gAIRoa/E9PGHbsGMQynLUcKiZ2tZyMDd+UzH5xBrPgpg 4AQzRzgNATT2MRXVF+RB9e5wmos2AgSiQeRHHjlMwv1To9wL7nzu968rG4jlvNvo 96XeO7xN6YVGMfNVGzfwE5G+tr4AHuC7e/ADTb4sBFV5QVG0oFuL/D9R1+6F8ktM gijRWMvg -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:59 2026 by rpki-client