This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/YTSwtqCla-KMN-KojPP7ZcEJhCI.roa File: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (raw, json) Hash identifier: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ= Subject key identifier: 61:34:B0:B6:A0:A5:6B:E2:8C:37:E2:A8:8C:F3:FB:65:C1:09:84:22 Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019B78A30261DC09B6A5BB508C837397FFAA Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/YTSwtqCla-KMN-KojPP7ZcEJhCI.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202931 IP address blocks: 79.140.173.0/24 maxlen: 24 80.245.93.0/24 maxlen: 24 80.245.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:02:61:dc:09:b6:a5:bb:50:8c:83:73:97:ff:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6134b0b6a0a56be28c37e2a88cf3fb65c1098422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:c2:5b:64:11:c5:8f:85:e8:ee:ab:15:58: 75:40:a5:96:f9:68:75:8f:9b:5b:88:33:3b:a4:aa: 06:2c:cb:c1:c1:03:b6:4d:2c:81:61:2b:ca:d6:51: 5d:04:0b:c4:0c:9e:d2:d9:a9:5d:a4:67:93:dc:6c: 45:eb:d2:22:d0:db:46:57:df:72:02:90:cd:21:91: 8c:f7:97:d9:3f:45:f0:eb:99:81:57:03:10:27:95: 05:35:31:cb:59:af:82:af:2a:3b:a4:2d:ed:ff:ed: 7e:d6:81:b2:73:ff:fc:c0:dc:b6:55:a2:98:10:00: 06:3c:30:c9:8f:7d:54:df:a9:c4:21:00:eb:85:b5: 68:2d:19:1f:66:2f:71:02:ed:04:04:d0:06:f3:06: de:89:dd:ca:30:33:30:0a:f7:af:ff:33:98:a5:b6: 33:6d:75:a8:68:04:00:1d:2a:35:f9:fd:ba:99:22: 6b:87:97:82:ef:61:c0:3e:a9:9e:23:f9:34:7d:e6: bd:db:a6:18:56:30:9b:a7:ce:af:35:ee:e0:7b:e2: 83:62:76:5c:fa:ef:2a:e5:83:63:3c:04:45:61:d4: 88:32:9e:ee:de:38:c3:9a:ad:2d:dd:34:22:d4:7d: ea:96:31:a9:dd:22:9c:08:96:fc:d1:f9:ba:ab:a6: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:34:B0:B6:A0:A5:6B:E2:8C:37:E2:A8:8C:F3:FB:65:C1:09:84:22 X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/YTSwtqCla-KMN-KojPP7ZcEJhCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.140.173.0/24 80.245.93.0/24 80.245.95.0/24 Signature Algorithm: sha256WithRSAEncryption 63:db:b7:3a:87:99:7d:32:8d:eb:fd:ba:f9:8d:72:d5:f8:e7: 32:6b:40:3d:d3:d6:a4:7b:7e:33:aa:d7:f7:88:4b:1c:9c:9e: 17:3d:6f:d1:3c:f4:d8:d8:7e:e9:4b:60:11:1f:20:2c:8d:c0: 3a:5f:52:c8:ca:05:b1:6c:4d:e7:3e:bd:34:44:6e:3f:d2:6d: df:3e:83:a6:4e:37:2c:ba:92:79:ae:d9:f2:18:ad:4d:e6:70: 09:d0:f3:a4:a6:fd:f3:25:3b:1b:75:e3:5c:80:db:23:cb:f3: 89:e3:cf:b0:1b:24:b5:38:c1:ef:2d:84:38:a3:bd:79:fe:ce: 4c:5d:e7:19:bc:dc:f0:df:e1:d1:ae:03:f0:45:2a:ae:b4:1e: ae:68:df:ad:34:25:5c:ec:85:6d:ff:80:63:36:46:9d:1e:29: 0a:d1:47:f2:99:c6:d7:37:67:b0:69:f2:58:0f:c6:0a:65:07: 38:67:7c:c1:e6:91:24:35:e7:67:24:10:71:5f:fb:de:32:79: 60:2f:94:82:e7:fb:72:d0:09:a1:6c:c6:56:74:14:94:02:a6: 37:ca:ec:da:b0:0f:dc:c3:39:b9:3a:b3:4a:4c:f5:c6:ca:20: 3c:95:fe:b3:7b:be:dd:ab:29:aa:95:4f:e3:95:14:78:4a:a0: 41:4d:f1:35 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4owJh3Am2pbtQjINzl/+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTM0YjBiNmEwYTU2YmUyOGMzN2UyYTg4Y2YzZmI2NWMxMDk4NDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQvCW2QRxY+F6O6rFVh1QKWW+Wh1 j5tbiDM7pKoGLMvBwQO2TSyBYSvK1lFdBAvEDJ7S2aldpGeT3GxF69Ii0NtGV99y ApDNIZGM95fZP0Xw65mBVwMQJ5UFNTHLWa+Cryo7pC3t/+1+1oGyc//8wNy2VaKY EAAGPDDJj31U36nEIQDrhbVoLRkfZi9xAu0EBNAG8wbeid3KMDMwCvev/zOYpbYz bXWoaAQAHSo1+f26mSJrh5eC72HAPqmeI/k0fea926YYVjCbp86vNe7ge+KDYnZc +u8q5YNjPARFYdSIMp7u3jjDmq0t3TQi1H3qljGp3SKcCJb80fm6q6b9VQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGE0sLagpWvijDfiqIzz+2XBCYQiMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvWVRTd3RxQ2xhLUtNTi1Lb2pQUDdaY0VKaENJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT4ytAwQA UPVdAwQAUPVfMA0GCSqGSIb3DQEBCwUAA4IBAQBj27c6h5l9Mo3r/br5jXLV+Ocy a0A909ake34zqtf3iEscnJ4XPW/RPPTY2H7pS2ARHyAsjcA6X1LIygWxbE3nPr00 RG4/0m3fPoOmTjcsupJ5rtnyGK1N5nAJ0POkpv3zJTsbdeNcgNsjy/OJ48+wGyS1 OMHvLYQ4o715/s5MXecZvNzw3+HRrgPwRSqutB6uaN+tNCVc7IVt/4BjNkadHikK 0UfymcbXN2ewafJYD8YKZQc4Z3zB5pEkNednJBBxX/veMnlgL5SC5/ty0AmhbMZW dBSUAqY3yuzasA/cwzm5OrNKTPXGyiA8lf6ze77dqymqlU/jlRR4SqBBTfE1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:40 2026 by rpki-client