This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa File: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (raw, json) Hash identifier: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg= Subject key identifier: 61:39:12:63:CD:01:5E:BA:E6:D3:23:92:4B:24:38:35:C5:9F:14:28 Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50 Certificate serial: 019B7834FA276002BD1E12F7B341ACCF5ABB Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 185.250.186.0/24 maxlen: 24 185.250.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fa:27:60:02:bd:1e:12:f7:b3:41:ac:cf:5a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61391263cd015ebae6d323924b243835c59f1428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:cf:b1:61:6f:b1:a1:84:37:9f:0b:d6:2b: 06:9c:88:10:1f:54:a7:c6:ce:aa:97:88:b9:4e:f8: 0a:1d:b6:1d:0b:bf:db:24:4d:3f:af:ed:47:52:e6: 50:d6:10:1c:58:b3:d6:4f:b8:33:c1:b3:5c:4f:cc: a0:31:5d:1a:a9:1b:59:73:75:4c:ed:07:1d:6c:12: 49:f7:86:05:6a:02:de:2d:90:5d:0f:7c:b6:c1:b7: 45:31:b8:a9:5f:11:51:10:9c:90:4f:cb:30:2c:a1: ee:3c:80:fc:9e:ae:bb:97:b3:e3:bb:b9:8d:5e:56: 77:52:53:66:55:bd:7d:f6:cb:ef:af:80:23:42:15: 19:98:69:1a:d2:85:7d:64:6b:53:50:da:51:a7:45: b6:cf:c4:a3:be:b3:c9:fc:17:59:6b:f6:e5:9f:56: 3e:03:3b:8d:4e:ca:8a:4f:3e:a4:b0:89:61:95:f5: 2d:c2:ae:fc:4e:5c:61:a8:08:20:db:5d:2d:3f:3f: d8:05:f4:23:3f:f2:55:45:43:f0:09:ae:73:57:9b: d9:57:18:1d:d9:64:58:78:5c:93:a0:f2:b4:db:4f: e9:70:a4:2a:8d:fb:e8:31:92:e7:cd:4d:21:e4:21: a8:f9:e3:af:1c:19:6f:7c:a5:a0:6d:77:8d:c0:c9: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:39:12:63:CD:01:5E:BA:E6:D3:23:92:4B:24:38:35:C5:9F:14:28 X509v3 Authority Key Identifier: keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.186.0/23 Signature Algorithm: sha256WithRSAEncryption 84:0e:3b:87:ef:c1:f8:ec:df:5e:d5:e0:ee:db:04:e0:d8:de: 15:18:e5:84:a2:2d:85:58:e6:65:8d:35:1d:89:90:4e:6d:b7: 4c:42:2a:81:3c:43:f8:c7:ac:7b:3d:39:37:fe:21:66:c8:51: 2e:00:9e:a3:ff:6c:7b:3f:41:ec:6c:4b:57:5e:3c:a5:b6:b0: 92:70:d5:8d:4a:15:db:bb:9c:1e:61:8d:c8:c5:8c:b5:46:a7: 03:fe:a4:f5:f4:f0:a9:3b:61:55:a7:ef:17:65:38:39:dd:d4: 3a:80:85:33:f2:12:3c:ed:1c:b9:32:eb:4d:72:1c:ca:61:56: c3:14:54:a2:f9:95:ed:fa:fe:ce:39:65:aa:54:1e:59:7e:9e: 7d:49:6e:11:9b:c0:91:03:75:72:28:97:70:51:1e:a3:d5:34: 5c:75:f3:e1:e7:30:25:e6:87:02:42:75:cd:b1:57:5f:d9:e8: c4:a4:83:d2:d0:ec:1f:7c:57:01:64:d2:f7:9b:a8:77:e7:7e: a9:f8:65:45:99:61:36:9f:1b:19:67:70:c3:a5:74:eb:b7:c2: 41:e4:7b:5b:73:dd:d2:16:90:6c:bb:15:e4:21:36:13:68:89: e3:f9:30:37:a9:74:d8:5a:fc:90:40:29:8a:24:93:38:e3:3d: 6b:75:60:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPonYAK9HhL3s0Gsz1q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzJhOTI1YzU1ZjFkNGU2ZTQwYzEwZjRlOGUwMTliNDgz YzFkNTAwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTM5MTI2M2NkMDE1ZWJhZTZkMzIzOTI0YjI0MzgzNWM1OWYxNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1srPsWFvsaGEN58L1isGnIgQH1Sn xs6ql4i5TvgKHbYdC7/bJE0/r+1HUuZQ1hAcWLPWT7gzwbNcT8ygMV0aqRtZc3VM 7QcdbBJJ94YFagLeLZBdD3y2wbdFMbipXxFREJyQT8swLKHuPID8nq67l7Pju7mN XlZ3UlNmVb199svvr4AjQhUZmGka0oV9ZGtTUNpRp0W2z8SjvrPJ/BdZa/bln1Y+ AzuNTsqKTz6ksIlhlfUtwq78TlxhqAgg210tPz/YBfQjP/JVRUPwCa5zV5vZVxgd 2WRYeFyToPK020/pcKQqjfvoMZLnzU0h5CGo+eOvHBlvfKWgbXeNwMn44QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGE5EmPNAV665tMjkkskODXFnxQoMB8GA1UdIwQY MBaAFFwyqSXFXx1ObkDBD06OAZtIPB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjIt NDUzNzc0MThmYmIyLzEvWVRrU1k4MEJYcnJtMHlPU1N5UTROY1dmRkNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjItNDUzNzc0MThmYmIy LzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufq6MA0G CSqGSIb3DQEBCwUAA4IBAQCEDjuH78H47N9e1eDu2wTg2N4VGOWEoi2FWOZljTUd iZBObbdMQiqBPEP4x6x7PTk3/iFmyFEuAJ6j/2x7P0HsbEtXXjyltrCScNWNShXb u5weYY3IxYy1RqcD/qT19PCpO2FVp+8XZTg53dQ6gIUz8hI87Ry5MutNchzKYVbD FFSi+ZXt+v7OOWWqVB5Zfp59SW4Rm8CRA3VyKJdwUR6j1TRcdfPh5zAl5ocCQnXN sVdf2ejEpIPS0OwffFcBZNL3m6h3536p+GVFmWE2nxsZZ3DDpXTrt8JB5Htbc93S FpBsuxXkITYTaInj+TA3qXTYWvyQQCmKJJM44z1rdWAk -----END CERTIFICATE-----Generated at Mon Jan 19 17:03:35 2026 by rpki-client