This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/YzVa-BUJnuWH4diErgPUKokymQ0.roa File: YzVa-BUJnuWH4diErgPUKokymQ0.roa (raw, json) Hash identifier: QcBSZdMSRm/lWv+szi2oRyb+M3WP6bg67A4t9dEA1tc= Subject key identifier: 63:35:5A:F8:15:09:9E:E5:87:E1:D8:84:AE:03:D4:2A:89:32:99:0D Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019B7FF1E2999E2CB9714A0F531D3E3D8854 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/YzVa-BUJnuWH4diErgPUKokymQ0.roa Signing time: Fri 02 Jan 2026 18:21:57 +0000 ROA not before: Fri 02 Jan 2026 18:21:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 82.206.12.0/23 maxlen: 23 82.206.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e2:99:9e:2c:b9:71:4a:0f:53:1d:3e:3d:88:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jan 2 18:21:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63355af815099ee587e1d884ae03d42a8932990d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:79:26:8f:07:89:aa:b8:e9:fc:f3:3d:4c: 0b:88:db:d2:8b:fe:e4:d2:9f:05:89:9c:ee:66:d1: 0e:de:eb:b6:a5:ee:af:4b:5d:21:f3:66:5c:5e:46: a8:d2:43:96:aa:f1:14:bf:d9:bf:17:b5:b5:00:ac: 63:28:04:18:d1:4c:68:60:d8:ff:2a:bd:67:e5:f7: eb:73:05:5f:08:d9:07:ac:88:f7:0e:eb:8a:ba:2b: 54:8c:bd:ac:7a:27:a6:ea:cc:fb:81:04:fb:8d:58: 12:5b:10:29:c1:02:4d:43:f4:1d:95:42:0b:0a:37: b0:5e:d2:a4:b5:35:3b:1a:18:67:d6:d3:53:a7:da: 16:7e:57:f9:e4:e0:9e:07:19:09:01:54:5b:9e:12: 7e:4a:f1:06:e3:aa:95:c9:00:85:df:35:29:3f:97: ae:59:17:a7:27:ed:4a:5a:28:c4:ac:ee:be:db:38: 1c:72:d5:32:65:2f:d2:65:12:e7:27:f7:13:42:31: 7b:52:38:d8:27:d6:0d:2f:96:49:d7:27:cc:a7:55: 6d:23:54:55:64:6e:72:b6:0c:ab:92:16:f9:36:cc: 5c:83:85:c5:56:0c:cf:f2:f4:12:70:95:68:7e:38: 9a:5d:6b:96:47:b2:36:86:29:df:ac:25:0e:7e:4b: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:35:5A:F8:15:09:9E:E5:87:E1:D8:84:AE:03:D4:2A:89:32:99:0D X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/YzVa-BUJnuWH4diErgPUKokymQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.206.12.0/22 Signature Algorithm: sha256WithRSAEncryption 64:7f:6a:3f:46:d3:f4:bb:43:a9:0a:66:6d:0b:63:fe:62:6a: e7:14:a5:25:88:e5:e0:82:c8:0f:aa:f1:25:4a:d5:d7:1c:b2: 27:4f:71:00:22:45:7f:d8:62:46:7c:ce:88:dc:c6:37:c0:81: 21:e3:c0:ce:1f:c9:aa:99:c1:0e:8f:00:2a:84:35:2e:b1:bf: 7b:76:13:57:95:70:37:76:fd:16:22:81:9e:97:11:b4:5f:6a: 16:3a:f6:3c:b8:8b:00:ed:c0:d5:d4:22:45:a7:87:b3:5c:7a: 9d:68:6e:bc:25:ee:0f:55:19:0c:18:74:6c:28:12:e6:16:30: f0:ee:06:7e:57:af:ac:57:22:e0:c0:59:f5:00:00:8b:42:02: df:0c:1c:af:a3:d5:11:3a:fa:73:f8:40:b6:25:22:ca:c4:2f: 62:b2:58:f9:64:13:a5:92:47:58:9d:10:73:6f:6c:06:69:19: 23:e6:5d:8e:13:fc:f2:91:c0:0a:b3:1d:eb:6d:5a:95:44:7d: cb:23:40:95:66:a1:0e:a8:e5:b0:58:21:17:0c:be:c8:e0:e2: c6:52:2e:e8:b7:bb:8a:af:b1:20:c9:02:66:46:75:88:08:2e: 9e:4d:ea:d5:13:a2:04:ed:27:b9:1a:fc:8e:ab:cb:cf:0d:4d: 73:23:06:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8eKZniy5cUoPUx0+PYhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwMTAyMTgyMTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzM1NWFmODE1MDk5ZWU1ODdlMWQ4ODRhZTAzZDQyYTg5MzI5OTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrF5Jo8Hiaq46fzzPUwLiNvSi/7k 0p8FiZzuZtEO3uu2pe6vS10h82ZcXkao0kOWqvEUv9m/F7W1AKxjKAQY0UxoYNj/ Kr1n5ffrcwVfCNkHrIj3DuuKuitUjL2seiem6sz7gQT7jVgSWxApwQJNQ/QdlUIL CjewXtKktTU7Ghhn1tNTp9oWflf55OCeBxkJAVRbnhJ+SvEG46qVyQCF3zUpP5eu WRenJ+1KWijErO6+2zgcctUyZS/SZRLnJ/cTQjF7UjjYJ9YNL5ZJ1yfMp1VtI1RV ZG5ytgyrkhb5Nsxcg4XFVgzP8vQScJVofjiaXWuWR7I2hinfrCUOfktOlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGM1WvgVCZ7lh+HYhK4D1CqJMpkNMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvWXpWYS1CVUpudVdINGRpRXJnUFVLb2t5bVEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUs4MMA0G CSqGSIb3DQEBCwUAA4IBAQBkf2o/RtP0u0OpCmZtC2P+YmrnFKUliOXggsgPqvEl StXXHLInT3EAIkV/2GJGfM6I3MY3wIEh48DOH8mqmcEOjwAqhDUusb97dhNXlXA3 dv0WIoGelxG0X2oWOvY8uIsA7cDV1CJFp4ezXHqdaG68Je4PVRkMGHRsKBLmFjDw 7gZ+V6+sVyLgwFn1AACLQgLfDByvo9UROvpz+EC2JSLKxC9islj5ZBOlkkdYnRBz b2wGaRkj5l2OE/zykcAKsx3rbVqVRH3LI0CVZqEOqOWwWCEXDL7I4OLGUi7ot7uK r7EgyQJmRnWICC6eTerVE6IE7Se5GvyOq8vPDU1zIwbG -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:33 2026 by rpki-client