This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/YGgmrBWdNr2gr-PCb7IviufXu1s.roa File: YGgmrBWdNr2gr-PCb7IviufXu1s.roa (raw, json) Hash identifier: XCRz3ie5NHXPDBJb939GkB0ydCGEbtQ+g5/MkaAJQ/w= Subject key identifier: 60:68:26:AC:15:9D:36:BD:A0:AF:E3:C2:6F:B2:2F:8A:E7:D7:BB:5B Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED6C788B759DC10D143E27B645883E Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/YGgmrBWdNr2gr-PCb7IviufXu1s.roa Signing time: Thu 01 Jan 2026 14:19:21 +0000 ROA not before: Thu 01 Jan 2026 14:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400040 IP address blocks: 87.248.135.0/24 maxlen: 24 87.248.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:6c:78:8b:75:9d:c1:0d:14:3e:27:b6:45:88:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=606826ac159d36bda0afe3c26fb22f8ae7d7bb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:08:6a:e2:62:3a:2e:b5:18:17:2c:30:cb:4b: e0:1f:d6:fa:42:4d:ed:78:e9:fb:37:c4:8b:f2:b2: 6f:99:0b:e2:cb:44:ad:e0:2f:40:15:b1:32:08:4b: 06:a0:18:99:a7:10:ff:dc:79:9a:9a:a7:d8:22:93: 65:e5:0a:01:c8:b2:41:f1:94:77:64:13:6f:49:a6: 2b:2d:2f:c0:8a:05:46:82:d5:e4:45:dc:fd:a9:3a: 73:c3:9b:42:1b:b4:11:60:e5:e4:07:8b:88:d3:29: 4b:d6:b5:2c:4a:6a:a5:e5:78:b4:1a:c1:c6:bb:ec: d0:ba:5a:ba:0b:fc:95:51:a8:44:b0:ff:4c:ac:af: 9c:8c:59:f9:8c:d1:bf:02:fe:d8:cc:c9:5e:9d:26: 3d:67:7b:64:31:2e:eb:ca:ae:bd:ea:f5:57:03:19: ae:21:1d:7e:63:08:5f:90:ce:77:6d:77:ce:c1:64: 7a:54:33:87:99:10:cc:cd:c6:09:ce:a0:25:71:a7: fa:55:53:10:0f:9a:98:9a:6e:6e:ec:c1:21:87:e5: c2:53:ac:02:0b:0b:34:74:ae:a8:ef:eb:ae:a7:51: 1d:83:79:a0:85:e0:ec:49:f7:58:00:a4:9b:c5:41: a7:17:50:b8:67:ee:f7:15:98:62:89:b9:da:99:0b: 57:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:26:AC:15:9D:36:BD:A0:AF:E3:C2:6F:B2:2F:8A:E7:D7:BB:5B X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/YGgmrBWdNr2gr-PCb7IviufXu1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.135.0/24 87.248.144.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ca:b4:a0:a3:ec:dd:b0:a1:5e:b3:37:2d:5b:b7:4f:19:73: 37:28:88:35:5f:7b:46:8c:76:64:51:df:e8:02:f4:62:89:9d: 65:e9:d6:ff:3a:bb:71:94:22:81:bb:1b:25:2d:22:5e:1a:71: e6:67:38:9b:ef:c7:77:38:ed:cc:92:06:e0:06:33:f9:6c:c3: f8:40:27:62:08:ef:d7:77:2b:3d:30:50:06:2f:26:9a:d3:bd: 8d:6e:f6:91:3c:ca:34:5a:88:77:58:9a:ca:f8:c1:ef:8d:26: 1e:08:b4:08:12:d7:da:44:2f:31:11:32:d0:9c:19:8f:e0:2d: 40:0c:2a:d9:c3:11:91:c9:7b:f7:1c:aa:d5:d4:2f:bc:db:54: dc:ac:72:aa:ef:94:82:7e:ef:59:78:83:71:63:65:34:fa:19: f8:89:13:04:af:84:eb:6e:59:b3:1c:d9:57:b7:1f:a8:77:3c: b5:13:37:00:76:0d:8e:ed:bc:03:f0:55:dc:22:c5:3b:fa:e1: 15:64:d1:c3:25:5e:04:82:0b:01:a9:8e:63:ed:88:89:d7:a7: d4:5d:63:2e:39:1c:57:72:65:25:2c:17:00:a1:41:fa:27:8f: 40:88:17:07:f5:65:e5:11:2c:85:48:fb:ae:fb:53:ee:7d:83: bb:9f:f1:74 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57Wx4i3WdwQ0UPie2RYg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDY4MjZhYzE1OWQzNmJkYTBhZmUzYzI2ZmIyMmY4YWU3ZDdiYjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ahq4mI6LrUYFywwy0vgH9b6Qk3t eOn7N8SL8rJvmQviy0St4C9AFbEyCEsGoBiZpxD/3HmamqfYIpNl5QoByLJB8ZR3 ZBNvSaYrLS/AigVGgtXkRdz9qTpzw5tCG7QRYOXkB4uI0ylL1rUsSmql5Xi0GsHG u+zQulq6C/yVUahEsP9MrK+cjFn5jNG/Av7YzMlenSY9Z3tkMS7ryq696vVXAxmu IR1+YwhfkM53bXfOwWR6VDOHmRDMzcYJzqAlcaf6VVMQD5qYmm5u7MEhh+XCU6wC Cws0dK6o7+uup1Edg3mgheDsSfdYAKSbxUGnF1C4Z+73FZhiibnamQtXpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGBoJqwVnTa9oK/jwm+yL4rn17tbMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvWUdnbXJCV2ROcjJnci1QQ2I3SXZpdWZYdTFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iHAwQA V/iQMA0GCSqGSIb3DQEBCwUAA4IBAQAWyrSgo+zdsKFeszctW7dPGXM3KIg1X3tG jHZkUd/oAvRiiZ1l6db/OrtxlCKBuxslLSJeGnHmZzib78d3OO3MkgbgBjP5bMP4 QCdiCO/Xdys9MFAGLyaa072NbvaRPMo0Woh3WJrK+MHvjSYeCLQIEtfaRC8xETLQ nBmP4C1ADCrZwxGRyXv3HKrV1C+821TcrHKq75SCfu9ZeINxY2U0+hn4iRMEr4Tr blmzHNlXtx+odzy1EzcAdg2O7bwD8FXcIsU7+uEVZNHDJV4EggsBqY5j7YiJ16fU XWMuORxXcmUlLBcAoUH6J49AiBcH9WXlESyFSPuu+1PufYO7n/F0 -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:00 2026 by rpki-client