This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/Y61lvfTY0IfOHOaNCazwXGsL2N8.roa File: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (raw, json) Hash identifier: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As= Subject key identifier: 63:AD:65:BD:F4:D8:D0:87:CE:1C:E6:8D:09:AC:F0:5C:6B:0B:D8:DF Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f Certificate serial: 019B76EB6F891BE68E752DCC14B2FF7041D1 Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/Y61lvfTY0IfOHOaNCazwXGsL2N8.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 78.41.60.0/24 maxlen: 24 194.117.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6f:89:1b:e6:8e:75:2d:cc:14:b2:ff:70:41:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63ad65bdf4d8d087ce1ce68d09acf05c6b0bd8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8a:be:16:6f:6b:aa:23:12:46:fc:7e:a9:a3: c6:b8:66:90:fd:36:63:66:3d:b0:f1:a7:1c:e3:ac: 81:f9:8c:d8:bd:2b:61:53:38:9d:d2:71:ce:7b:70: 62:c5:7a:27:bd:e0:19:be:20:5f:c2:56:1a:99:2a: 32:53:36:22:ba:28:c2:93:2f:d6:d1:28:07:ee:8d: b7:ea:59:08:dc:2a:d6:94:dd:31:ca:2c:e1:db:9f: ea:1e:3b:e8:c2:d4:6b:48:bb:91:2e:d2:ee:50:1e: 78:6f:2f:3d:86:d8:c1:21:91:7d:c5:89:1a:9b:9e: 76:9a:6b:61:f8:d6:fc:1f:91:02:d2:7c:38:f9:2b: 0c:0b:02:d5:c5:e5:4e:e6:79:c6:85:91:48:46:7b: 0d:0d:bb:37:56:26:b0:a2:fd:fe:6c:62:d7:a1:29: 6a:2b:53:9b:e3:06:ab:dc:f7:f5:ef:10:fc:66:80: 58:c7:68:09:74:be:35:fd:e1:0c:97:56:4a:af:cf: fc:ad:2e:80:00:35:40:f6:5b:15:98:39:c3:29:97: 53:cb:ba:5e:d9:b7:fc:98:22:d8:1b:e0:6f:e2:b4: e3:69:3a:a3:6f:45:6c:33:46:da:37:8e:0c:e6:7d: 6e:93:04:ed:45:9b:2b:2b:2c:70:41:9a:68:54:8f: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AD:65:BD:F4:D8:D0:87:CE:1C:E6:8D:09:AC:F0:5C:6B:0B:D8:DF X509v3 Authority Key Identifier: keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/Y61lvfTY0IfOHOaNCazwXGsL2N8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.60.0/24 194.117.63.0/24 Signature Algorithm: sha256WithRSAEncryption 56:35:32:6c:36:7e:4c:b8:6c:ab:93:a4:80:e7:c7:60:28:9f: ea:cb:16:fd:c4:28:1b:37:8d:20:d5:c3:09:31:3d:13:09:0d: c7:7c:ce:f0:fc:34:0f:56:a7:17:c6:1d:19:7e:d0:aa:f1:31: ff:e1:9c:7e:08:b9:20:36:ea:26:35:3b:25:b3:f9:ca:80:d1: 4e:0e:05:9e:b4:bd:b5:01:a5:35:35:4d:46:7d:2e:8c:07:af: 1b:11:b4:e0:be:8c:82:4b:84:db:3e:78:da:7c:78:a9:25:95: aa:79:3c:dc:d7:47:83:8b:67:a9:95:72:a2:80:a2:70:87:18: 2d:82:49:94:04:f8:a3:56:4a:5c:78:90:ad:ff:9e:b9:5c:58: af:db:8d:7a:e4:92:ef:9f:27:8b:66:2e:49:e1:42:45:af:ac: 0e:e3:82:79:52:d0:21:30:5d:22:51:3d:28:ec:59:38:4f:08: a9:53:1d:3a:cc:b1:c0:7b:43:59:8f:91:3c:a9:10:36:26:25: 5e:85:b0:42:c6:82:19:a2:bc:35:47:78:db:ac:d6:f8:70:c5: 56:03:6f:22:a6:b7:bf:76:c5:02:6a:07:e3:c6:b3:b6:86:30: 0b:35:a7:45:40:6c:32:08:fb:f4:15:f8:c0:ff:06:fa:75:0a: 07:8a:bb:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt262+JG+aOdS3MFLL/cEHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz OTZhM2YwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2FkNjViZGY0ZDhkMDg3Y2UxY2U2OGQwOWFjZjA1YzZiMGJkOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoq+Fm9rqiMSRvx+qaPGuGaQ/TZj Zj2w8acc46yB+YzYvSthUzid0nHOe3BixXonveAZviBfwlYamSoyUzYiuijCky/W 0SgH7o236lkI3CrWlN0xyizh25/qHjvowtRrSLuRLtLuUB54by89htjBIZF9xYka m552mmth+Nb8H5EC0nw4+SsMCwLVxeVO5nnGhZFIRnsNDbs3Viawov3+bGLXoSlq K1Ob4war3Pf17xD8ZoBYx2gJdL41/eEMl1ZKr8/8rS6AADVA9lsVmDnDKZdTy7pe 2bf8mCLYG+Bv4rTjaTqjb0VsM0baN44M5n1ukwTtRZsrKyxwQZpoVI+fmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGOtZb302NCHzhzmjQms8FxrC9jfMB8GA1UdIwQY MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt MTViMDlmNWY2ZWQ3LzEvWTYxbHZmVFkwSWZPSE9hTkNhendYR3NMMk44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3 LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATik8AwQA wnU/MA0GCSqGSIb3DQEBCwUAA4IBAQBWNTJsNn5MuGyrk6SA58dgKJ/qyxb9xCgb N40g1cMJMT0TCQ3HfM7w/DQPVqcXxh0ZftCq8TH/4Zx+CLkgNuomNTsls/nKgNFO DgWetL21AaU1NU1GfS6MB68bEbTgvoyCS4TbPnjafHipJZWqeTzc10eDi2eplXKi gKJwhxgtgkmUBPijVkpceJCt/565XFiv24165JLvnyeLZi5J4UJFr6wO44J5UtAh MF0iUT0o7Fk4TwipUx06zLHAe0NZj5E8qRA2JiVehbBCxoIZorw1R3jbrNb4cMVW A28ipre/dsUCagfjxrO2hjALNadFQGwyCPv0FfjA/wb6dQoHirv1 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:00 2026 by rpki-client