This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/Y-7M_UqcBNv4FZvSRza0hnEYbt0.roa File: Y-7M_UqcBNv4FZvSRza0hnEYbt0.roa (raw, json) Hash identifier: l9lXOX5RLGIBYwkxjYc81W2wAYVBKWMt4amqOpB+mik= Subject key identifier: 63:EE:CC:FD:4A:9C:04:DB:F8:15:9B:D2:47:36:B4:86:71:18:6E:DD Certificate issuer: /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363 Certificate serial: 019B7F8469DB922B3EBC0C291D510AAF8B18 Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/Y-7M_UqcBNv4FZvSRza0hnEYbt0.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34699 IP address blocks: 85.116.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:69:db:92:2b:3e:bc:0c:29:1d:51:0a:af:8b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63eeccfd4a9c04dbf8159bd24736b48671186edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:98:59:b8:f1:8e:1b:e6:4d:39:9b:11:63: ec:d3:6f:1f:9c:1f:a1:1d:aa:07:06:47:c6:05:f3: 89:99:90:76:65:e2:13:fd:38:31:6c:68:d5:59:8d: 46:c1:c3:da:44:d0:dd:19:6d:bb:94:16:34:e8:42: a7:69:a5:37:ad:71:3f:d1:5e:6d:0a:ef:37:c6:a5: bf:68:3f:cc:e1:f9:52:24:f0:d9:c9:04:17:4f:91: 02:0d:ec:e3:98:1e:0b:78:f3:88:1c:3a:9d:27:7f: 46:5e:54:b5:f8:a5:be:60:33:5f:95:6c:f1:fd:45: 70:d3:2b:87:e7:34:ef:f2:dc:4c:a6:9e:b3:6a:50: 8d:bb:62:2e:06:26:80:47:76:d0:fe:d2:48:c0:f6: f1:e9:f9:66:e8:91:2c:32:40:10:94:ef:87:a9:81: bd:54:28:66:c0:67:12:1b:4b:13:d3:9a:05:e0:d6: ee:5b:a7:87:91:d7:ec:14:d0:3f:e0:2e:bd:4b:56: c2:8f:f7:3a:af:dd:30:40:2d:8a:73:8b:81:23:17: 0e:e6:39:52:b1:0b:a6:9d:a9:f6:ec:8f:70:a5:ba: cf:98:ce:92:b4:0b:34:35:48:e0:a3:d0:ed:b7:13: 66:7a:d0:e0:76:d5:b8:55:8f:fb:42:99:df:a1:40: 89:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EE:CC:FD:4A:9C:04:DB:F8:15:9B:D2:47:36:B4:86:71:18:6E:DD X509v3 Authority Key Identifier: keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/Y-7M_UqcBNv4FZvSRza0hnEYbt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.224.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:2c:11:06:37:e4:ca:79:06:14:d5:a8:e7:01:8b:dc:9f:e8: 90:da:2d:45:a0:e7:75:8b:d3:e9:47:21:d4:cc:53:d0:d4:6e: 1d:67:ba:5a:b0:a1:8c:6a:b8:59:1b:81:69:95:47:1d:e9:a8: 7d:e1:51:df:8d:57:db:3a:1f:0e:5a:42:56:cf:47:29:c0:64: 02:b3:cb:b8:3e:2d:17:ea:b0:cb:fc:06:ce:0d:c1:00:81:e1: 6d:42:d6:58:5b:64:7c:c0:c1:da:2f:34:71:b0:2e:cd:09:3e: 45:34:a7:6a:7c:12:f9:fb:9e:f9:0c:ed:ef:c5:81:e4:7c:f2: a2:ca:fe:3d:02:f7:d4:52:ac:81:70:76:af:47:a1:41:c1:6e: 6f:a7:70:4e:17:c7:58:35:1c:c0:97:7d:e0:ee:b6:86:c2:a6: 3a:b1:c2:3f:6a:89:1a:6b:4c:66:05:0e:1b:3b:64:ee:81:96: 7d:a0:4f:2a:46:fa:42:8f:15:1c:dd:a1:a7:cb:ca:d4:ec:26: 54:23:09:9f:44:e0:25:60:98:13:2d:c7:22:df:a4:dd:3d:d1: b9:22:52:a3:85:95:0d:34:07:5b:d2:cd:9c:58:91:19:69:e3: 1b:f8:84:0a:50:a1:a3:41:9b:65:1b:22:66:4c:e4:d0:dc:5f: e8:dc:15:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGnbkis+vAwpHVEKr4sYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZGJkNWFjZjFmOWM3NWQxOGExZjc1MDMxMTE0YzQ4ZjBi MjMzNjMwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2VlY2NmZDRhOWMwNGRiZjgxNTliZDI0NzM2YjQ4NjcxMTg2ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk+YWbjxjhvmTTmbEWPs028fnB+h HaoHBkfGBfOJmZB2ZeIT/TgxbGjVWY1GwcPaRNDdGW27lBY06EKnaaU3rXE/0V5t Cu83xqW/aD/M4flSJPDZyQQXT5ECDezjmB4LePOIHDqdJ39GXlS1+KW+YDNflWzx /UVw0yuH5zTv8txMpp6zalCNu2IuBiaAR3bQ/tJIwPbx6flm6JEsMkAQlO+HqYG9 VChmwGcSG0sT05oF4NbuW6eHkdfsFNA/4C69S1bCj/c6r90wQC2Kc4uBIxcO5jlS sQumnan27I9wpbrPmM6StAs0NUjgo9DttxNmetDgdtW4VY/7QpnfoUCJUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPuzP1KnATb+BWb0kc2tIZxGG7dMB8GA1UdIwQY MBaAFBfb1azx+cddGKH3UDERTEjwsjNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjl2VnJQSDV4MTBZb2ZkUU1SRk1TUEN5TTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yOTE5OWYtZjZjYy00NDhhLWJmZDQt NTgxZGI4N2M4MjFlLzEvWS03TV9VcWNCTnY0Rlp2U1J6YTBobkVZYnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8yOTE5OWYtZjZjYy00NDhhLWJmZDQtNTgxZGI4N2M4MjFl LzEvRjl2VnJQSDV4MTBZb2ZkUU1SRk1TUEN5TTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVXTgMA0G CSqGSIb3DQEBCwUAA4IBAQB8LBEGN+TKeQYU1ajnAYvcn+iQ2i1FoOd1i9PpRyHU zFPQ1G4dZ7pasKGMarhZG4FplUcd6ah94VHfjVfbOh8OWkJWz0cpwGQCs8u4Pi0X 6rDL/AbODcEAgeFtQtZYW2R8wMHaLzRxsC7NCT5FNKdqfBL5+575DO3vxYHkfPKi yv49AvfUUqyBcHavR6FBwW5vp3BOF8dYNRzAl33g7raGwqY6scI/aokaa0xmBQ4b O2TugZZ9oE8qRvpCjxUc3aGny8rU7CZUIwmfROAlYJgTLcci36TdPdG5IlKjhZUN NAdb0s2cWJEZaeMb+IQKUKGjQZtlGyJmTOTQ3F/o3BVs -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:40 2026 by rpki-client