This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YLQCyazqZl3mktR39zjVkIb4AAw.roa File: YLQCyazqZl3mktR39zjVkIb4AAw.roa (raw, json) Hash identifier: 487PAafo8LvsrFISZ0UtjZLZyUOXuI6oaSgcys/aChA= Subject key identifier: 60:B4:02:C9:AC:EA:66:5D:E6:92:D4:77:F7:38:D5:90:86:F8:00:0C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A6F684729A0AF27E31450CAA2526 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YLQCyazqZl3mktR39zjVkIb4AAw.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210538 IP address blocks: 31.57.33.0/24 maxlen: 24 31.57.77.0/24 maxlen: 24 31.57.154.0/24 maxlen: 24 31.57.156.0/24 maxlen: 24 31.57.187.0/24 maxlen: 24 31.58.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a6:f6:84:72:9a:0a:f2:7e:31:45:0c:aa:25:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60b402c9acea665de692d477f738d59086f8000c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f6:87:cd:c8:af:e9:6e:8b:4b:6a:ce:dd:c1: b5:b0:f3:3f:1b:01:0f:d2:0e:e7:7e:82:9f:e9:88: 04:f7:af:ea:66:98:01:85:23:83:88:c8:75:78:64: 17:a5:ae:85:2d:05:e0:8c:91:0a:6e:80:a3:d1:97: d2:62:94:f1:30:dc:ae:e8:06:f8:56:a2:01:e2:7f: 1a:ef:f5:42:57:cb:98:39:fb:f0:ef:3b:ec:f8:5a: 22:db:a5:f0:35:3c:84:52:52:bb:c5:f1:ab:bb:73: f1:80:09:43:bd:85:44:c2:9e:68:f8:fd:f9:34:2e: 06:ce:1a:9f:f2:af:be:e2:46:df:fe:97:98:52:8a: b0:52:68:3d:13:b1:52:43:13:3c:3f:52:c6:0b:31: 8d:3d:27:9b:83:80:fd:47:23:01:36:55:6f:69:bb: 5f:20:1f:03:bc:d7:e2:ac:65:89:ab:e3:fa:e9:5a: ce:26:13:d6:c4:0a:23:0c:23:b9:d2:71:aa:5b:b5: a6:97:bf:c2:c1:d9:3d:97:94:b4:05:d7:07:44:f1: 89:68:ef:2f:7f:1a:56:c1:5e:ba:30:6b:e8:4b:b0: 91:e3:e4:ca:77:42:5b:56:a5:31:6c:28:1c:7a:d6: 4a:a2:91:cb:02:42:9c:ed:92:2f:c0:b0:33:80:8c: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B4:02:C9:AC:EA:66:5D:E6:92:D4:77:F7:38:D5:90:86:F8:00:0C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YLQCyazqZl3mktR39zjVkIb4AAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.33.0/24 31.57.77.0/24 31.57.154.0/24 31.57.156.0/24 31.57.187.0/24 31.58.91.0/24 Signature Algorithm: sha256WithRSAEncryption b4:b3:cd:c4:1f:ce:e1:00:14:fa:1a:94:42:57:56:02:c6:6b: be:db:6e:5d:b6:85:e8:42:0e:74:7f:71:98:fc:07:86:1d:41: 03:8a:7c:1d:a9:b3:59:03:2d:41:5c:f8:11:ce:e8:a2:4b:fe: aa:17:f5:b4:d3:d2:0f:14:55:b2:7b:53:fa:7e:85:87:83:5c: d5:7a:ca:fd:90:58:91:91:f2:78:b3:f0:84:7f:98:c4:2b:fb: a1:a5:b6:83:2b:51:5a:01:b1:35:af:76:ac:17:76:be:05:6c: fa:22:c0:e8:d3:a3:b2:7e:93:13:03:ad:09:30:db:04:da:24: bb:f4:58:c0:b0:ed:51:39:10:26:11:a2:17:f3:b7:fb:a9:24: 80:16:44:25:74:88:5f:4d:77:5a:4e:0a:3d:36:0b:fa:95:6d: b6:c2:26:2f:8f:b4:5a:ff:56:87:0a:e4:12:3f:fc:f7:aa:b1: 99:59:b3:32:ff:0a:5c:5f:ed:d6:80:a4:fc:78:b1:9d:b5:3e: 11:a9:2c:ab:f1:e9:59:83:6e:ad:69:a7:67:b6:af:1d:c5:9c: 20:d9:4f:d7:a7:74:73:b3:e5:89:b8:2e:f3:26:76:d3:34:90: ae:98:5f:c4:62:8a:17:d3:29:35:b1:68:19:ab:31:6a:48:32: 65:7b:b2:37 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/hKb2hHKaCvJ+MUUMqiUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGI0MDJjOWFjZWE2NjVkZTY5MmQ0NzdmNzM4ZDU5MDg2ZjgwMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vaHzciv6W6LS2rO3cG1sPM/GwEP 0g7nfoKf6YgE96/qZpgBhSODiMh1eGQXpa6FLQXgjJEKboCj0ZfSYpTxMNyu6Ab4 VqIB4n8a7/VCV8uYOfvw7zvs+Foi26XwNTyEUlK7xfGru3PxgAlDvYVEwp5o+P35 NC4Gzhqf8q++4kbf/peYUoqwUmg9E7FSQxM8P1LGCzGNPSebg4D9RyMBNlVvabtf IB8DvNfirGWJq+P66VrOJhPWxAojDCO50nGqW7Wml7/Cwdk9l5S0BdcHRPGJaO8v fxpWwV66MGvoS7CR4+TKd0JbVqUxbCgcetZKopHLAkKc7ZIvwLAzgIy2qQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFGC0Asms6mZd5pLUd/c41ZCG+AAMMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWUxRQ3lhenFabDNta3RSMzl6alZrSWI0QUF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzkhAwQA HzlNAwQAHzmaAwQAHzmcAwQAHzm7AwQAHzpbMA0GCSqGSIb3DQEBCwUAA4IBAQC0 s83EH87hABT6GpRCV1YCxmu+225dtoXoQg50f3GY/AeGHUEDinwdqbNZAy1BXPgR zuiiS/6qF/W009IPFFWye1P6foWHg1zVesr9kFiRkfJ4s/CEf5jEK/uhpbaDK1Fa AbE1r3asF3a+BWz6IsDo06OyfpMTA60JMNsE2iS79FjAsO1RORAmEaIX87f7qSSA FkQldIhfTXdaTgo9Ngv6lW22wiYvj7Ra/1aHCuQSP/z3qrGZWbMy/wpcX+3WgKT8 eLGdtT4RqSyr8elZg26taadntq8dxZwg2U/Xp3Rzs+WJuC7zJnbTNJCumF/EYooX 0yk1sWgZqzFqSDJle7I3 -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:06 2026 by rpki-client