This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/YBuaRwSll46Pl6eX__IyqTruYDE.roa File: YBuaRwSll46Pl6eX__IyqTruYDE.roa (raw, json) Hash identifier: 3qHFKbwgdhCywjWZRMFAC3Gdxw/Mz4QK6oo9Kv5v/9I= Subject key identifier: 60:1B:9A:47:04:A5:97:8E:8F:97:A7:97:FF:F2:32:A9:3A:EE:60:31 Certificate issuer: /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63 Certificate serial: 019B7C1276583FCE2D0FA40ECD86E9830846 Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/YBuaRwSll46Pl6eX__IyqTruYDE.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47284 IP address blocks: 195.182.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:76:58:3f:ce:2d:0f:a4:0e:cd:86:e9:83:08:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63 Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=601b9a4704a5978e8f97a797fff232a93aee6031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:c9:ca:0c:5f:80:92:8d:7f:3c:7b:2e:5d: 6e:ab:76:fd:56:43:ff:3c:49:ad:2c:c3:ec:21:95: d2:4c:87:f5:24:02:9c:a3:f3:53:9b:94:5f:97:f9: a3:08:ce:d3:68:c3:41:62:1b:61:f2:98:be:94:fd: 9e:d0:f5:55:19:5b:e3:c3:98:7e:f8:d8:11:a7:7e: a0:73:e5:bd:95:cf:2a:e3:14:a4:a5:57:79:da:ea: 7c:70:89:82:ca:e0:c5:d0:14:b3:e8:6f:16:9c:5a: 03:df:72:ef:64:91:8d:f7:32:46:d9:7e:30:f0:59: 51:2d:74:42:24:04:a3:d2:c3:c8:c1:42:0b:d7:dd: a0:ac:f8:c6:dd:43:07:21:f0:30:4c:50:8c:69:4a: f1:2e:37:14:e2:b4:0b:e5:43:f6:cc:83:30:9e:1c: ea:27:d9:9e:a4:a7:28:5a:dc:9c:78:47:b3:98:c4: 6b:64:48:a3:a7:b6:91:8c:0c:7c:ae:29:b5:b2:37: 33:61:e0:40:bf:36:0a:51:62:c7:6f:b6:70:04:40: 7c:38:fe:5b:e3:20:64:77:d4:15:e7:ac:51:4c:22: 23:f3:1f:4c:27:ee:83:b1:61:a8:34:0b:b6:10:f4: cc:dd:ec:ed:ca:ab:a6:5a:a8:67:d2:10:dd:e4:de: 75:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1B:9A:47:04:A5:97:8E:8F:97:A7:97:FF:F2:32:A9:3A:EE:60:31 X509v3 Authority Key Identifier: keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/YBuaRwSll46Pl6eX__IyqTruYDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.47.0/24 Signature Algorithm: sha256WithRSAEncryption 30:3a:54:2b:16:2d:53:b2:45:df:c0:f8:12:3e:14:8b:f3:9d: ff:a8:98:52:d5:63:b2:6f:96:31:e8:88:65:3e:40:ac:b9:42: bc:9a:e3:e8:50:1c:a0:e1:21:70:f5:d5:26:4a:78:b1:38:6d: 09:a1:19:b8:60:f7:e6:1f:dd:16:08:13:41:8b:63:09:83:80: e7:5c:e9:96:f7:53:a2:a3:46:70:01:b2:6f:c0:4a:a0:23:6f: 47:8c:27:c1:03:47:24:94:69:00:8f:df:03:35:18:2f:ec:7b: 06:99:3f:bc:13:15:2a:11:31:5f:47:8d:b6:2d:ab:76:95:68: 70:97:da:ee:d7:f3:3f:fe:3f:e7:5d:8a:1e:de:85:df:e8:09: 3e:a9:f6:05:95:05:76:78:f5:4e:07:53:43:ac:b2:ff:89:fa: 90:05:cd:de:93:9b:fe:48:4c:74:45:5b:08:db:e7:34:ed:57: 31:bf:ee:d4:cf:35:d7:1e:22:c0:cd:73:a7:71:9e:7e:49:27: 1a:d8:cb:1c:db:a9:1e:d7:03:1b:07:95:a6:80:3b:e3:3f:ad: 09:45:06:72:65:03:17:e6:38:6d:04:96:fe:3f:d3:56:ed:5a: 6f:01:73:65:bc:9e:21:60:35:9d:7a:f2:64:d3:32:f4:73:9c: bf:a9:bc:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnZYP84tD6QOzYbpgwhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MWUzMjVjZDIxMjY2MjVjNjZkNDY5ZGI2NGU0ZWY5YWFi MGRjNjMwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDFiOWE0NzA0YTU5NzhlOGY5N2E3OTdmZmYyMzJhOTNhZWU2MDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mXJygxfgJKNfzx7Ll1uq3b9VkP/ PEmtLMPsIZXSTIf1JAKco/NTm5Rfl/mjCM7TaMNBYhth8pi+lP2e0PVVGVvjw5h+ +NgRp36gc+W9lc8q4xSkpVd52up8cImCyuDF0BSz6G8WnFoD33LvZJGN9zJG2X4w 8FlRLXRCJASj0sPIwUIL192grPjG3UMHIfAwTFCMaUrxLjcU4rQL5UP2zIMwnhzq J9mepKcoWtyceEezmMRrZEijp7aRjAx8rim1sjczYeBAvzYKUWLHb7ZwBEB8OP5b 4yBkd9QV56xRTCIj8x9MJ+6DsWGoNAu2EPTM3eztyqumWqhn0hDd5N51DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGAbmkcEpZeOj5enl//yMqk67mAxMB8GA1UdIwQY MBaAFOgeMlzSEmYlxm1GnbZOTvmqsNxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkI0eVhOSVNaaVhHYlVhZHRrNU8tYXF3M0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hZjc4YzktOTk5ZC00NjUxLWIyMWUt Zjk1Y2QzNmJmOTFhLzEvWUJ1YVJ3U2xsNDZQbDZlWF9fSXlxVHJ1WURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hZjc4YzktOTk5ZC00NjUxLWIyMWUtZjk1Y2QzNmJmOTFh LzEvNkI0eVhOSVNaaVhHYlVhZHRrNU8tYXF3M0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YvMA0G CSqGSIb3DQEBCwUAA4IBAQAwOlQrFi1TskXfwPgSPhSL853/qJhS1WOyb5Yx6Ihl PkCsuUK8muPoUByg4SFw9dUmSnixOG0JoRm4YPfmH90WCBNBi2MJg4DnXOmW91Oi o0ZwAbJvwEqgI29HjCfBA0cklGkAj98DNRgv7HsGmT+8ExUqETFfR422Lat2lWhw l9ru1/M//j/nXYoe3oXf6Ak+qfYFlQV2ePVOB1NDrLL/ifqQBc3ek5v+SEx0RVsI 2+c07Vcxv+7UzzXXHiLAzXOncZ5+SSca2Msc26ke1wMbB5WmgDvjP60JRQZyZQMX 5jhtBJb+P9NW7VpvAXNlvJ4hYDWdevJk0zL0c5y/qbyy -----END CERTIFICATE-----Generated at Tue Jan 27 04:24:08 2026 by rpki-client