This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa File: YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa (raw, json) Hash identifier: BrjcqRRz5NSmt9i/9E/oQ4g12kumuE1CB1/Rk3lBLvM= Subject key identifier: 60:5C:7B:00:C1:81:98:DB:C8:10:41:74:AE:4A:45:84:14:0F:10:0D Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019B7D5B3E3A3725F8F0D8EBD2108F6F7AA7 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa Signing time: Fri 02 Jan 2026 06:18:09 +0000 ROA not before: Fri 02 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64236 IP address blocks: 45.81.150.0/24 maxlen: 24 45.92.29.0/24 maxlen: 24 85.209.84.0/23 maxlen: 23 85.209.87.0/24 maxlen: 24 185.191.228.0/23 maxlen: 23 185.191.231.0/24 maxlen: 24 185.199.224.0/23 maxlen: 23 185.199.226.0/24 maxlen: 24 185.202.172.0/23 maxlen: 23 185.215.148.0/24 maxlen: 24 185.215.150.0/23 maxlen: 23 185.215.150.0/24 maxlen: 24 185.218.235.0/24 maxlen: 24 185.235.14.0/23 maxlen: 23 193.39.185.0/24 maxlen: 24 193.39.186.0/24 maxlen: 24 212.162.148.0/22 maxlen: 22 2a0b:aac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:3e:3a:37:25:f8:f0:d8:eb:d2:10:8f:6f:7a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Jan 2 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=605c7b00c18198dbc8104174ae4a4584140f100d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:28:8d:7b:20:ab:26:fc:89:ed:00:50:d6:7b: d4:fe:92:89:01:22:e0:bc:67:94:a9:63:f5:b1:9a: aa:bf:db:3e:8b:cd:92:85:39:83:c8:3d:77:c2:35: 48:7d:6d:18:07:4f:84:da:aa:ba:8f:54:e3:81:2d: e4:ce:65:db:50:43:3a:83:63:80:0e:b8:40:eb:c6: 29:b1:1b:02:1f:a1:d8:0c:ea:d9:3b:26:d2:42:65: 3e:48:7e:3f:47:80:e5:58:dc:2b:bb:32:c9:2b:7b: 9a:e7:e0:64:13:db:d1:08:66:69:90:09:26:79:58: 99:3b:56:41:f2:b1:c0:70:7d:8c:65:bf:45:81:e4: 0a:50:ce:4b:ca:cb:e9:39:ae:07:d1:ec:af:30:3f: 97:51:58:97:2f:61:ae:d7:02:78:cb:49:d2:49:1d: 05:6a:ca:bc:4d:32:9c:46:d1:93:95:b6:0c:da:ec: e6:1f:80:5b:20:fb:7d:3d:53:eb:c6:32:6b:02:2c: 06:b2:62:d2:73:93:8e:c6:a7:24:e9:9c:c8:f9:39: 7a:5d:1c:ac:a2:f7:8a:3c:f7:3f:54:b9:b9:b3:54: d0:49:e2:c1:9e:59:d9:52:ce:b9:2a:01:ea:e5:56: df:4a:1a:a6:4d:a3:c5:af:54:a8:69:25:59:de:f8: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5C:7B:00:C1:81:98:DB:C8:10:41:74:AE:4A:45:84:14:0F:10:0D X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.150.0/24 45.92.29.0/24 85.209.84.0/23 85.209.87.0/24 185.191.228.0/23 185.191.231.0/24 185.199.224.0-185.199.226.255 185.202.172.0/23 185.215.148.0/24 185.215.150.0/23 185.218.235.0/24 185.235.14.0/23 193.39.185.0-193.39.186.255 212.162.148.0/22 IPv6: 2a0b:aac0::/29 Signature Algorithm: sha256WithRSAEncryption 6b:9e:93:ab:da:0b:a9:c2:fd:95:cb:ac:f4:4d:cb:3b:6b:26: 54:2f:df:8d:82:e4:63:2c:2a:9b:e3:d7:fd:95:ac:32:e3:5b: c5:e1:8b:c6:eb:5d:79:86:17:f8:3c:52:3a:99:44:7e:77:06: 1f:a8:b2:69:8a:a6:4e:0d:95:c3:8f:c7:65:4f:77:ac:e9:b5: 52:2d:1f:20:aa:60:2c:2c:6c:a5:b5:09:61:88:90:76:ac:f7: bf:ff:67:6d:a6:6e:e4:55:b4:1d:9b:c7:a8:e1:61:bc:38:11: f7:4a:0e:2c:cb:de:c0:65:cd:48:5d:c4:81:a2:67:ec:dd:7e: 54:d3:98:77:f6:74:6c:ad:0f:ed:db:b5:3e:cf:f0:0e:55:6c: 40:0e:ab:0b:6f:4b:83:40:a4:bc:34:8e:7a:95:6f:75:f3:30: af:c5:78:18:09:b9:05:76:f8:0f:49:79:8c:da:cd:dd:d8:26: 3e:94:17:37:43:34:20:c5:33:f8:80:e7:14:2d:27:a3:11:e4: 2b:06:7c:26:3b:f7:52:cc:cf:1e:c8:d4:aa:12:21:3f:60:ed: b5:d9:f7:02:d8:19:43:a6:7c:1d:f7:45:3d:2a:da:f6:51:5e: 00:7d:33:49:c4:49:98:2c:80:cc:3b:71:1b:70:8c:7b:c3:70: 00:f7:25:a8 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgISAZt9Wz46NyX48Njr0hCPb3qnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjYwMTAyMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDVjN2IwMGMxODE5OGRiYzgxMDQxNzRhZTRhNDU4NDE0MGYxMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iiNeyCrJvyJ7QBQ1nvU/pKJASLg vGeUqWP1sZqqv9s+i82ShTmDyD13wjVIfW0YB0+E2qq6j1TjgS3kzmXbUEM6g2OA DrhA68YpsRsCH6HYDOrZOybSQmU+SH4/R4DlWNwruzLJK3ua5+BkE9vRCGZpkAkm eViZO1ZB8rHAcH2MZb9FgeQKUM5LysvpOa4H0eyvMD+XUViXL2Gu1wJ4y0nSSR0F asq8TTKcRtGTlbYM2uzmH4BbIPt9PVPrxjJrAiwGsmLSc5OOxqck6ZzI+Tl6XRys oveKPPc/VLm5s1TQSeLBnlnZUs65KgHq5VbfShqmTaPFr1SoaSVZ3vi7bwIDAQAB o4ICdzCCAnMwHQYDVR0OBBYEFGBcewDBgZjbyBBBdK5KRYQUDxANMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvWUZ4N0FNR0JtTnZJRUVGMHJrcEZoQlFQRUEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGMBggrBgEFBQcBBwEB/wR9MHswagQCAAEwZAMEAC1RlgME AC1cHQMEAVXRVAMEAFXRVwMEAbm/5AMEALm/5zAMAwQFucfgAwQAucfiAwQBucqs AwQAudeUAwQBudeWAwQAudrrAwQBuesOMAwDBADBJ7kDBADBJ7oDBALUopQwDQQC AAIwBwMFAyoLqsAwDQYJKoZIhvcNAQELBQADggEBAGuek6vaC6nC/ZXLrPRNyztr JlQv342C5GMsKpvj1/2VrDLjW8Xhi8brXXmGF/g8UjqZRH53Bh+osmmKpk4NlcOP x2VPd6zptVItHyCqYCwsbKW1CWGIkHas97//Z22mbuRVtB2bx6jhYbw4EfdKDizL 3sBlzUhdxIGiZ+zdflTTmHf2dGytD+3btT7P8A5VbEAOqwtvS4NApLw0jnqVb3Xz MK/FeBgJuQV2+A9JeYzazd3YJj6UFzdDNCDFM/iA5xQtJ6MR5CsGfCY791LMzx7I 1KoSIT9g7bXZ9wLYGUOmfB33RT0q2vZRXgB9M0nESZgsgMw7cRtwjHvDcAD3Jag= -----END CERTIFICATE-----Generated at Sat Jan 24 21:32:22 2026 by rpki-client