This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/YEBbrOilcCBLuSwFe65eIURKPqU.roa File: YEBbrOilcCBLuSwFe65eIURKPqU.roa (raw, json) Hash identifier: 6SToK43vpVY6+uemspZ0Ir8l4NyXy0drAOScGCcbKYI= Subject key identifier: 60:40:5B:AC:E8:A5:70:20:4B:B9:2C:05:7B:AE:5E:21:44:4A:3E:A5 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83B4389808EA4542D640F690DADFFA Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/YEBbrOilcCBLuSwFe65eIURKPqU.roa Signing time: Fri 02 Jan 2026 16:21:36 +0000 ROA not before: Fri 02 Jan 2026 16:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204496 IP address blocks: 37.18.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b4:38:98:08:ea:45:42:d6:40:f6:90:da:df:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60405bace8a570204bb92c057bae5e21444a3ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:27:e7:2f:7c:2c:9b:18:81:18:30:9c:25: 9e:f2:56:00:63:38:e4:15:18:08:c1:74:68:22:23: 8c:eb:bd:ca:96:33:2d:1c:69:b3:b5:dd:e6:10:bc: 80:cc:13:c5:76:98:70:59:e6:0d:31:d2:b7:4c:13: 5d:dc:2f:c4:4f:a2:bd:93:12:f2:d2:2d:b6:31:15: 06:94:07:dd:c9:2c:33:8a:47:81:5a:e2:d5:bb:70: 66:5d:43:19:31:b5:e7:94:34:e0:ac:74:62:16:8e: f4:8a:a2:6b:68:29:ff:d3:8a:b5:c3:0c:49:5f:e5: a2:28:f3:a2:03:fd:27:7c:3c:79:d1:bd:f9:d5:9e: 92:bb:30:dc:6a:56:23:e9:13:37:67:d1:8d:d5:8d: 2d:82:3b:3f:3f:bd:a9:54:5e:34:6d:e9:b6:6a:ab: f7:45:10:ab:33:2c:50:be:32:35:a5:8a:ab:af:31: 14:fc:b9:6a:3a:69:51:17:9c:45:cb:6d:a4:cb:0d: 30:6f:d1:cc:f0:c5:75:f8:7d:46:a0:8a:9a:96:b2: 74:c7:15:6c:f8:31:f2:6f:b3:14:e0:40:0a:4d:a4: 0d:b5:9a:e3:19:0c:3e:57:b1:65:a5:64:47:6a:c7: cb:6c:e2:22:1b:9d:81:cd:17:0c:f2:58:be:d6:c8: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:40:5B:AC:E8:A5:70:20:4B:B9:2C:05:7B:AE:5E:21:44:4A:3E:A5 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/YEBbrOilcCBLuSwFe65eIURKPqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.59.0/24 Signature Algorithm: sha256WithRSAEncryption b9:83:d7:24:d2:a7:4a:43:ac:09:17:5c:c1:61:9c:d8:d2:50: a8:47:97:7d:2a:4f:13:06:da:7d:32:17:01:ca:4e:58:59:66: 09:b1:c4:d1:3e:63:1a:f5:37:46:1a:6a:d3:a4:58:02:4b:7b: 98:26:99:b0:6b:f6:8a:a0:79:57:dd:06:fb:7a:c6:20:19:38: 6f:d7:c7:99:5f:37:08:32:92:46:67:de:14:68:6c:c7:76:3e: b1:cf:bf:c7:82:5b:5a:f6:72:1b:8d:7e:b5:a6:66:55:35:3c: 57:01:47:d7:35:74:b2:e0:96:60:4a:df:27:32:f6:11:f7:78: 31:c7:b9:fe:e1:5d:fd:44:79:25:55:91:26:26:70:f2:2c:22: b7:25:a2:db:21:7b:ce:b6:59:8b:60:98:de:f6:c9:c4:a0:20: bb:9b:16:68:88:6e:da:2d:28:76:c0:6b:15:a2:56:fe:b0:95: 3c:4e:87:ec:74:ca:68:6b:27:80:b4:78:4a:c5:0d:b9:70:2a: 3b:6b:02:b3:c3:ab:a5:5d:4a:1a:62:4d:f7:62:87:18:ec:86: d8:f1:e7:b5:56:21:1d:14:cd:0b:ad:cc:64:ee:6e:8f:d9:38: 23:db:97:8f:3a:61:72:1a:68:af:d2:96:af:51:38:18:3a:5f: 65:a2:a8:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7Q4mAjqRULWQPaQ2t/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDQwNWJhY2U4YTU3MDIwNGJiOTJjMDU3YmFlNWUyMTQ0NGEzZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVIn5y98LJsYgRgwnCWe8lYAYzjk FRgIwXRoIiOM673KljMtHGmztd3mELyAzBPFdphwWeYNMdK3TBNd3C/ET6K9kxLy 0i22MRUGlAfdySwzikeBWuLVu3BmXUMZMbXnlDTgrHRiFo70iqJraCn/04q1wwxJ X+WiKPOiA/0nfDx50b351Z6SuzDcalYj6RM3Z9GN1Y0tgjs/P72pVF40bem2aqv3 RRCrMyxQvjI1pYqrrzEU/LlqOmlRF5xFy22kyw0wb9HM8MV1+H1GoIqalrJ0xxVs +DHyb7MU4EAKTaQNtZrjGQw+V7FlpWRHasfLbOIiG52BzRcM8li+1sg8/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBAW6zopXAgS7ksBXuuXiFESj6lMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvWUVCYnJPaWxjQ0JMdVN3RmU2NWVJVVJLUHFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRI7MA0G CSqGSIb3DQEBCwUAA4IBAQC5g9ck0qdKQ6wJF1zBYZzY0lCoR5d9Kk8TBtp9MhcB yk5YWWYJscTRPmMa9TdGGmrTpFgCS3uYJpmwa/aKoHlX3Qb7esYgGThv18eZXzcI MpJGZ94UaGzHdj6xz7/Hglta9nIbjX61pmZVNTxXAUfXNXSy4JZgSt8nMvYR93gx x7n+4V39RHklVZEmJnDyLCK3JaLbIXvOtlmLYJje9snEoCC7mxZoiG7aLSh2wGsV olb+sJU8TofsdMpoayeAtHhKxQ25cCo7awKzw6ulXUoaYk33YocY7IbY8ee1ViEd FM0Lrcxk7m6P2Tgj25ePOmFyGmiv0pavUTgYOl9loqg/ -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:28 2026 by rpki-client