This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/Y29t-Qutit4Mtq2FXXVVajwYkJ8.roa File: Y29t-Qutit4Mtq2FXXVVajwYkJ8.roa (raw, json) Hash identifier: IFvAqWAV36VhOvXLelo0nvun/QoXpwk8T72OiDJu/UQ= Subject key identifier: 63:6F:6D:F9:0B:AD:8A:DE:0C:B6:AD:85:5D:75:55:6A:3C:18:90:9F Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6 Certificate serial: 019B7F15E751E12C89CFF8C29EDF27192A5A Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/Y29t-Qutit4Mtq2FXXVVajwYkJ8.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42433 IP address blocks: 81.23.242.0/23 maxlen: 23 81.23.242.0/24 maxlen: 24 81.23.243.0/24 maxlen: 24 92.118.110.0/24 maxlen: 24 2a0f:ec40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e7:51:e1:2c:89:cf:f8:c2:9e:df:27:19:2a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=636f6df90bad8ade0cb6ad855d75556a3c18909f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:c0:fd:90:b3:80:f5:71:9c:8e:51:37:fb: 8e:a0:b9:88:6a:b0:44:42:d5:2d:07:89:d2:c6:d9: 52:f6:9f:96:3e:30:11:73:38:3e:80:bb:06:a6:b3: c7:c5:72:2c:2f:e6:b7:65:d3:e6:ea:32:aa:b1:e6: ef:40:23:c5:de:05:b4:28:4d:a1:e5:f9:f8:fa:27: cd:fb:e3:00:d2:20:fd:4c:c1:7c:ee:1f:82:ae:35: bf:85:77:bc:7b:94:71:27:15:7e:b1:d7:7e:d3:1d: e6:17:2f:98:8f:70:68:49:2f:67:6b:44:39:1b:ff: 93:87:f0:c0:eb:d8:fd:15:2a:7c:24:dd:bd:36:de: 38:12:2e:8d:45:90:cb:1b:ef:61:44:00:98:b0:ec: 33:5b:c7:bd:d5:b0:d5:22:bf:b8:07:07:1c:b7:34: 23:c4:f5:c4:51:60:75:78:69:f5:af:73:b2:ec:ca: 91:9b:a4:16:79:14:66:e1:22:07:cb:bb:34:93:15: 9f:bb:2f:2a:f5:aa:18:03:8e:2b:68:c8:da:39:43: 5a:b0:44:04:db:d7:fe:f7:db:17:72:b1:11:b0:3b: 9c:76:9a:07:69:08:e7:7c:70:7d:d0:26:cf:f4:8c: 55:83:87:0e:cf:b0:9e:5f:51:18:5b:86:36:66:da: e3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6F:6D:F9:0B:AD:8A:DE:0C:B6:AD:85:5D:75:55:6A:3C:18:90:9F X509v3 Authority Key Identifier: keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/Y29t-Qutit4Mtq2FXXVVajwYkJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.23.242.0/23 92.118.110.0/24 IPv6: 2a0f:ec40::/32 Signature Algorithm: sha256WithRSAEncryption 30:55:c1:e8:0f:c1:8f:cf:30:48:15:54:9b:65:a1:c4:19:e5: 02:df:97:0c:96:d6:a2:15:9a:58:df:31:42:9f:a0:b7:76:1d: dd:6c:1e:5e:9f:3f:50:ce:cc:35:6b:03:99:ce:79:da:f8:19: 08:6d:9f:d9:7c:92:61:a6:28:b3:be:47:52:2b:cd:89:35:7b: dd:1f:07:98:79:31:4d:83:3c:09:67:c0:cf:79:0f:df:fa:96: d7:24:5a:fd:3f:a3:0c:ed:23:0b:4e:22:ce:07:8f:f9:ec:2e: 69:69:cc:a4:07:b1:29:12:77:57:aa:21:d4:38:db:23:3c:5e: 0d:38:28:aa:72:3c:75:31:48:a6:20:dd:32:8c:ac:7a:bf:65: ba:b5:80:c7:0a:eb:23:4f:4d:17:c7:04:f3:d0:15:b8:80:9d: 5c:6b:f7:be:c9:d1:85:6f:7c:68:e1:97:ee:08:c7:d6:c1:d0: a7:cd:01:ea:f0:58:63:ce:42:40:59:76:5d:19:60:77:55:71: 0b:ee:51:46:57:a2:f6:62:f0:f4:0a:2f:0a:96:ff:08:ee:a9: 3f:98:de:1f:42:5a:ae:f4:28:33:ca:e7:95:70:59:94:4f:fd: de:5a:5e:9f:5e:0f:bb:bb:d6:cf:cb:b5:76:b0:a2:c8:c1:4c: 1e:16:63:89 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FedR4SyJz/jCnt8nGSpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmYzNGIxOTBhNTFjZTUzMDAyNTc5MTFhZjMwNDA0ZjQ5 NTFmYjYwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzZmNmRmOTBiYWQ4YWRlMGNiNmFkODU1ZDc1NTU2YTNjMTg5MDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPLA/ZCzgPVxnI5RN/uOoLmIarBE QtUtB4nSxtlS9p+WPjARczg+gLsGprPHxXIsL+a3ZdPm6jKqsebvQCPF3gW0KE2h 5fn4+ifN++MA0iD9TMF87h+CrjW/hXe8e5RxJxV+sdd+0x3mFy+Yj3BoSS9na0Q5 G/+Th/DA69j9FSp8JN29Nt44Ei6NRZDLG+9hRACYsOwzW8e91bDVIr+4BwcctzQj xPXEUWB1eGn1r3Oy7MqRm6QWeRRm4SIHy7s0kxWfuy8q9aoYA44raMjaOUNasEQE 29f+99sXcrERsDucdpoHaQjnfHB90CbP9IxVg4cOz7CeX1EYW4Y2ZtrjkwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGNvbfkLrYreDLathV11VWo8GJCfMB8GA1UdIwQY MBaAFMG/NLGQpRzlMAJXkRrzBAT0lR+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xNTNkNTMtNmU2OS00MzAxLWFiZDMt ZjMxMWJhYzJhMzdmLzEvWTI5dC1RdXRpdDRNdHEyRlhYVlZhandZa0o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xNTNkNTMtNmU2OS00MzAxLWFiZDMtZjMxMWJhYzJhMzdm LzEvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBURfyAwQA XHZuMA0EAgACMAcDBQAqD+xAMA0GCSqGSIb3DQEBCwUAA4IBAQAwVcHoD8GPzzBI FVSbZaHEGeUC35cMltaiFZpY3zFCn6C3dh3dbB5enz9Qzsw1awOZznna+BkIbZ/Z fJJhpiizvkdSK82JNXvdHweYeTFNgzwJZ8DPeQ/f+pbXJFr9P6MM7SMLTiLOB4/5 7C5pacykB7EpEndXqiHUONsjPF4NOCiqcjx1MUimIN0yjKx6v2W6tYDHCusjT00X xwTz0BW4gJ1ca/e+ydGFb3xo4ZfuCMfWwdCnzQHq8FhjzkJAWXZdGWB3VXEL7lFG V6L2YvD0Ci8Klv8I7qk/mN4fQlqu9CgzyueVcFmUT/3eWl6fXg+7u9bPy7V2sKLI wUweFmOJ -----END CERTIFICATE-----Generated at Tue Feb 10 06:08:20 2026 by rpki-client