This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/YAok8AOygaZZuwSLU2W1Sxxc1Yg.roa File: YAok8AOygaZZuwSLU2W1Sxxc1Yg.roa (raw, json) Hash identifier: yDUVdy4/2fvuAIcz/zHQqqZJ4aa1nNyhqx34O7fgABc= Subject key identifier: 60:0A:24:F0:03:B2:81:A6:59:BB:04:8B:53:65:B5:4B:1C:5C:D5:88 Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B3379A86BF9307B5CF020CAC79D1C9366 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/YAok8AOygaZZuwSLU2W1Sxxc1Yg.roa Signing time: Thu 18 Dec 2025 21:59:29 +0000 ROA not before: Thu 18 Dec 2025 21:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 194.59.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:79:a8:6b:f9:30:7b:5c:f0:20:ca:c7:9d:1c:93:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Dec 18 21:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=600a24f003b281a659bb048b5365b54b1c5cd588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:68:cd:ac:a5:71:19:2d:19:da:1b:76:3b: 9b:ee:3a:e0:9f:30:d8:0d:4e:2f:f7:c3:a6:5d:b4: 49:d0:4a:77:47:78:72:21:4b:76:bb:36:dd:ce:50: 88:c4:20:39:fd:78:f8:ec:73:38:68:2f:f9:48:04: 7f:9c:c0:a6:28:67:1a:c1:95:68:d0:70:74:3f:63: 9d:ab:db:43:4b:95:77:5a:16:3d:aa:d9:73:af:5f: b8:93:23:dd:95:fd:2d:7b:95:6a:47:e9:e0:58:05: a3:4f:16:a2:36:6c:f7:b4:de:e8:47:37:b9:a8:79: c7:38:31:c6:82:da:c8:46:a0:11:0c:74:ec:5e:6d: b8:27:83:48:d1:0f:22:6a:44:64:fc:38:3d:c2:e8: 31:da:a7:24:55:1d:bf:cc:f2:db:c2:67:2e:97:45: 50:06:34:07:2b:33:1b:6c:d5:8e:5f:0d:05:cf:12: d4:c1:e3:eb:ff:6a:d2:02:18:4a:9f:ac:2b:1d:bb: d0:12:70:74:cb:d2:00:ce:f3:77:91:78:b4:68:2a: 80:f8:4a:63:b8:e2:27:3d:1f:0f:49:b3:23:30:5e: 15:95:0f:a8:d7:05:d8:98:40:97:e7:22:7c:56:56: c7:89:b2:4a:87:27:3b:8f:e3:a5:39:1e:fc:de:9c: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0A:24:F0:03:B2:81:A6:59:BB:04:8B:53:65:B5:4B:1C:5C:D5:88 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/YAok8AOygaZZuwSLU2W1Sxxc1Yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.6.0/24 Signature Algorithm: sha256WithRSAEncryption 28:90:a8:9e:8d:46:6d:12:f8:9b:cf:a2:7c:2f:cb:d0:55:2f: 27:82:70:5b:12:7c:e1:65:84:54:23:01:0e:d1:fc:46:40:e0: 02:0c:c5:48:25:c3:67:79:7d:87:bd:27:69:05:84:3b:5a:85: 3b:f6:95:e8:37:13:4e:80:55:90:59:13:86:77:61:aa:56:dc: 78:3c:e1:11:5a:ed:4d:16:46:a6:5d:38:3d:69:15:7f:b0:ea: 8a:67:21:6f:25:80:3a:9f:37:4b:b9:fa:dd:ba:2e:b0:72:47: 7b:1a:4c:d7:1c:74:7a:75:27:e3:12:42:8c:32:71:12:d6:83: 20:0a:18:47:c0:0e:0e:55:eb:0f:74:16:da:0e:54:2b:4a:40: 0e:fe:f3:d8:57:22:82:38:71:51:8c:bd:6e:90:92:68:62:8a: 0c:f7:5f:2f:8e:c3:88:2d:ae:61:fb:db:29:ef:7e:6c:3d:d4: 70:b9:b3:77:46:9d:d6:1d:a9:ef:72:9d:aa:57:4b:69:c3:53: bf:7c:dc:cd:bc:7e:74:fc:4c:29:49:c2:13:ae:ae:4d:ff:20: b8:7a:14:6a:ad:f4:dd:54:ca:41:d9:4c:7d:97:2c:70:9d:c8: 34:09:3d:d7:82:97:4c:1a:37:65:39:b8:ef:63:c8:58:8d:af: 9e:eb:86:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZszeahr+TB7XPAgysedHJNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjUxMjE4MjE1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDBhMjRmMDAzYjI4MWE2NTliYjA0OGI1MzY1YjU0YjFjNWNkNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGBozaylcRktGdobdjub7jrgnzDY DU4v98OmXbRJ0Ep3R3hyIUt2uzbdzlCIxCA5/Xj47HM4aC/5SAR/nMCmKGcawZVo 0HB0P2Odq9tDS5V3WhY9qtlzr1+4kyPdlf0te5VqR+ngWAWjTxaiNmz3tN7oRze5 qHnHODHGgtrIRqARDHTsXm24J4NI0Q8iakRk/Dg9wugx2qckVR2/zPLbwmcul0VQ BjQHKzMbbNWOXw0FzxLUwePr/2rSAhhKn6wrHbvQEnB0y9IAzvN3kXi0aCqA+Epj uOInPR8PSbMjMF4VlQ+o1wXYmECX5yJ8VlbHibJKhyc7j+OlOR783pzIkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGAKJPADsoGmWbsEi1NltUscXNWIMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvWUFvazhBT3lnYVpadXdTTFUyVzFTeHhjMVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsGMA0G CSqGSIb3DQEBCwUAA4IBAQAokKiejUZtEvibz6J8L8vQVS8ngnBbEnzhZYRUIwEO 0fxGQOACDMVIJcNneX2HvSdpBYQ7WoU79pXoNxNOgFWQWROGd2GqVtx4POERWu1N FkamXTg9aRV/sOqKZyFvJYA6nzdLufrdui6wckd7GkzXHHR6dSfjEkKMMnES1oMg ChhHwA4OVesPdBbaDlQrSkAO/vPYVyKCOHFRjL1ukJJoYooM918vjsOILa5h+9sp 735sPdRwubN3Rp3WHanvcp2qV0tpw1O/fNzNvH50/EwpScITrq5N/yC4ehRqrfTd VMpB2Ux9lyxwncg0CT3XgpdMGjdlObjvY8hYja+e64ZI -----END CERTIFICATE-----Generated at Tue Dec 30 21:08:28 2025 by rpki-client