This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/YTVp8HRIZA2vtkGjKasuHviHEzI.roa File: YTVp8HRIZA2vtkGjKasuHviHEzI.roa (raw, json) Hash identifier: fD4GIHwZF/xnQKXHxDrGyWuUN8the7WpF5QYQMukoHw= Subject key identifier: 61:35:69:F0:74:48:64:0D:AF:B6:41:A3:29:AB:2E:1E:F8:87:13:32 Certificate issuer: /CN=1c88af2f43654b3f452d5c74ed074712570d1fde Certificate serial: 019B7A5B863E4EAE9D6EF5BDA993C4737726 Authority key identifier: 1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/YTVp8HRIZA2vtkGjKasuHviHEzI.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16205 IP address blocks: 31.210.160.0/21 maxlen: 21 81.201.144.0/20 maxlen: 20 176.52.200.0/21 maxlen: 21 178.249.24.0/21 maxlen: 21 185.75.184.0/22 maxlen: 22 217.18.176.0/20 maxlen: 20 2a00:8180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.crl rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.mft rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:86:3e:4e:ae:9d:6e:f5:bd:a9:93:c4:73:77:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c88af2f43654b3f452d5c74ed074712570d1fde Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=613569f07448640dafb641a329ab2e1ef8871332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:55:26:e1:0f:2c:10:e5:db:7f:82:df:cb: ff:b4:9b:81:3c:d2:90:de:5b:3f:cc:1e:65:c3:e7: 84:ab:f3:58:83:4d:2e:49:23:07:d0:43:ac:89:93: 33:36:50:50:84:5b:aa:4e:da:87:30:50:ae:f7:72: 19:c4:20:00:32:f6:35:41:4f:cb:62:ba:d7:16:d0: e9:09:84:1d:70:a0:22:a0:de:5b:ff:f7:05:a7:62: d8:b1:15:bb:8b:21:c3:8e:d3:6c:60:28:a3:33:71: 10:c7:2e:f9:e6:73:5d:ef:ec:9c:70:1d:30:59:58: a0:f8:dd:bc:aa:4d:00:04:c5:4b:4b:1a:6c:11:c7: da:40:8a:90:6b:49:fa:01:83:08:f3:ca:f6:5a:2d: 35:96:f7:0d:2e:05:fe:6e:7f:58:c5:a9:9f:d4:e3: c0:a4:a7:5f:65:13:7e:b3:fd:7b:4f:54:93:e2:42: 21:34:c7:b2:7e:91:77:46:03:c3:a8:f2:ec:89:b1: 40:1f:4f:1c:f7:6f:6f:d1:09:e4:45:fa:5c:74:c4: 2d:f2:3e:7d:9c:7a:ec:24:54:1b:86:1d:c1:08:df: b9:1a:a6:5f:ac:34:2b:1a:d4:c6:a0:61:8d:0e:89: 3a:d0:42:95:94:94:7c:23:4d:c3:1c:19:4e:c2:10: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:35:69:F0:74:48:64:0D:AF:B6:41:A3:29:AB:2E:1E:F8:87:13:32 X509v3 Authority Key Identifier: keyid:1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/YTVp8HRIZA2vtkGjKasuHviHEzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.160.0/21 81.201.144.0/20 176.52.200.0/21 178.249.24.0/21 185.75.184.0/22 217.18.176.0/20 IPv6: 2a00:8180::/32 Signature Algorithm: sha256WithRSAEncryption 19:2e:39:0b:c9:3f:28:24:cb:57:69:a9:58:ac:52:6c:69:07: 97:00:8a:93:62:5b:15:d6:a7:a0:7e:97:d2:3a:84:3e:c8:a3: 1c:d9:ff:a6:75:cd:c6:87:d5:9b:5a:e1:bf:47:7c:6d:2e:db: 74:19:b4:52:55:79:fe:6b:0a:15:e9:66:11:51:5f:cf:a3:69: f5:bd:67:75:19:f7:1b:59:c1:c9:e1:fe:58:ff:57:cc:ac:43: de:89:52:a5:e8:34:10:0a:39:98:f3:73:3f:18:1c:81:46:38: 42:71:7e:e1:50:2f:03:4c:b7:4a:6c:53:56:45:38:20:ea:48: 16:5c:03:a3:0a:a0:05:b7:5e:5b:f9:b4:b7:86:7f:48:79:60: f1:77:97:53:de:1d:5c:1c:4d:54:e8:c5:e8:6a:5b:61:01:f7: ed:70:ee:73:c6:d6:8b:a7:63:62:5e:81:fc:8b:ac:5f:64:0c: cd:f8:ed:1c:b6:b2:87:01:a5:49:b3:14:34:5b:31:3f:74:c2: 5f:0f:47:37:4f:95:87:c4:b8:cf:ed:c7:01:29:9e:cc:83:88: e9:a7:05:fe:40:f2:00:58:01:bb:a3:2a:04:d8:e7:3e:38:66: cb:2e:27:ac:e7:d5:14:b9:6e:b9:77:4d:1a:3e:45:00:e8:cd: 7e:8d:18:b1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt6W4Y+Tq6dbvW9qZPEc3cmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjODhhZjJmNDM2NTRiM2Y0NTJkNWM3NGVkMDc0NzEyNTcw ZDFmZGUwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTM1NjlmMDc0NDg2NDBkYWZiNjQxYTMyOWFiMmUxZWY4ODcxMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv45VJuEPLBDl23+C38v/tJuBPNKQ 3ls/zB5lw+eEq/NYg00uSSMH0EOsiZMzNlBQhFuqTtqHMFCu93IZxCAAMvY1QU/L YrrXFtDpCYQdcKAioN5b//cFp2LYsRW7iyHDjtNsYCijM3EQxy755nNd7+yccB0w WVig+N28qk0ABMVLSxpsEcfaQIqQa0n6AYMI88r2Wi01lvcNLgX+bn9Yxamf1OPA pKdfZRN+s/17T1ST4kIhNMeyfpF3RgPDqPLsibFAH08c929v0QnkRfpcdMQt8j59 nHrsJFQbhh3BCN+5GqZfrDQrGtTGoGGNDok60EKVlJR8I03DHBlOwhDwvwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFGE1afB0SGQNr7ZBoymrLh74hxMyMB8GA1UdIwQY MBaAFByIry9DZUs/RS1cdO0HRxJXDR/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSElpdkwwTmxTejlGTFZ4MDdRZEhFbGNOSDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82Y2ZjMmItOWJlOC00ZmUwLWE0MjQt MTk2Y2MxNjcxMTNlLzEvWVRWcDhIUklaQTJ2dGtHakthc3VIdmlIRXpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS82Y2ZjMmItOWJlOC00ZmUwLWE0MjQtMTk2Y2MxNjcxMTNl LzEvSElpdkwwTmxTejlGTFZ4MDdRZEhFbGNOSDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDH9KgAwQE UcmQAwQDsDTIAwQDsvkYAwQCuUu4AwQE2RKwMA0EAgACMAcDBQAqAIGAMA0GCSqG SIb3DQEBCwUAA4IBAQAZLjkLyT8oJMtXaalYrFJsaQeXAIqTYlsV1qegfpfSOoQ+ yKMc2f+mdc3Gh9WbWuG/R3xtLtt0GbRSVXn+awoV6WYRUV/Po2n1vWd1GfcbWcHJ 4f5Y/1fMrEPeiVKl6DQQCjmY83M/GByBRjhCcX7hUC8DTLdKbFNWRTgg6kgWXAOj CqAFt15b+bS3hn9IeWDxd5dT3h1cHE1U6MXoalthAfftcO5zxtaLp2NiXoH8i6xf ZAzN+O0ctrKHAaVJsxQ0WzE/dMJfD0c3T5WHxLjP7ccBKZ7Mg4jppwX+QPIAWAG7 oyoE2Oc+OGbLLies59UUuW65d00aPkUA6M1+jRix -----END CERTIFICATE-----Generated at Tue Feb 10 07:10:55 2026 by rpki-client