This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa File: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (raw, json) Hash identifier: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc= Subject key identifier: C9:4D:D7:E8:AD:C1:E0:96:53:F5:BB:EA:F1:08:67:6E:3C:4F:17:67 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 019B7B35AE578348A931185B60760654ED6C Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa Signing time: Thu 01 Jan 2026 20:17:54 +0000 ROA not before: Thu 01 Jan 2026 20:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205467 IP address blocks: 81.171.60.0/24 maxlen: 24 81.171.62.0/24 maxlen: 24 81.171.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ae:57:83:48:a9:31:18:5b:60:76:06:54:ed:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Jan 1 20:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c94dd7e8adc1e09653f5bbeaf108676e3c4f1767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3d:76:23:1d:6a:cd:0b:ce:30:0c:a0:a2:26: 43:32:47:71:90:3a:a5:4e:b5:5c:b6:8e:60:8f:14: 4e:f7:a2:f3:7d:e4:2c:71:a0:c4:41:7d:78:62:08: b4:ff:be:88:c0:f0:af:8a:77:ff:73:28:03:ce:f9: ed:e1:7d:86:0c:f2:c1:15:81:2a:a7:96:c3:94:83: 99:66:dc:fd:c2:71:52:ef:f3:6d:fc:8e:07:76:84: 27:02:1d:8d:a0:09:f9:5b:b8:fc:e8:d5:2b:97:ea: 05:91:f8:0e:17:34:83:d3:8f:2c:e6:be:29:c6:60: f2:f8:62:37:10:4a:e8:df:21:50:a1:e7:55:1e:8a: 3d:de:41:58:bc:3f:fa:13:6a:b6:d2:a4:b7:ba:ec: 87:20:ca:8f:45:6d:d6:c6:e2:9f:e2:e1:3d:25:60: 5f:07:79:e7:55:24:f1:62:03:8f:16:59:7b:0f:d6: ba:f1:fb:8f:c5:f6:11:99:30:1c:2b:47:51:09:e8: 7a:12:7f:66:a1:7d:85:35:8f:88:b4:d9:b2:5b:f8: d0:53:16:3d:09:f3:b8:3a:c5:b8:f7:00:97:96:f6: 2e:39:db:f3:fe:c5:eb:9f:1e:09:a1:26:96:65:60: e5:e4:f8:98:09:89:78:59:1c:18:ec:4e:38:99:19: a0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4D:D7:E8:AD:C1:E0:96:53:F5:BB:EA:F1:08:67:6E:3C:4F:17:67 X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.171.60.0/24 81.171.62.0/23 Signature Algorithm: sha256WithRSAEncryption 25:41:03:c5:79:72:9e:23:ec:5c:fa:d9:f4:83:69:51:65:69: 54:bd:24:dd:09:63:9c:79:39:38:e4:c6:20:7a:7c:26:8a:3c: bb:16:d0:70:38:a8:e5:0e:01:10:cc:72:3a:c1:37:e7:bf:69: 7e:47:68:37:b3:02:34:61:8e:74:a1:46:d0:76:fc:88:1c:ac: 6b:0a:6d:c5:9d:6d:a0:db:fc:ab:8a:4f:6d:ee:f9:49:fd:7f: 35:63:e6:a3:f4:c5:f8:7a:b5:c8:b1:fe:02:79:10:3e:f3:42: e5:37:70:72:ad:c2:70:48:39:e0:1b:7c:41:3c:ee:23:08:b9: 8d:cc:7e:23:1e:9b:ae:6c:a3:e6:dd:88:61:5a:eb:07:31:2b: 15:20:af:97:0d:20:9f:a6:f2:4d:58:d4:3b:0b:16:7c:5f:2f: 82:cc:73:b7:e4:5d:0f:87:6c:35:5b:06:ec:9e:b3:c4:02:ac: 9b:8c:28:b7:98:b6:cf:4f:47:93:39:1c:fa:8f:2d:69:98:48: e2:b8:ac:8b:17:5d:e5:16:c7:92:30:40:fc:c3:9e:87:d2:c6: 66:96:21:9c:f7:4f:f7:c4:e9:33:e7:e5:b9:56:5c:55:4b:b8: b3:56:24:3f:76:0d:f7:81:24:8a:82:e8:de:89:d2:dc:73:35: 22:ed:4a:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Na5Xg0ipMRhbYHYGVO1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjYwMTAxMjAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTRkZDdlOGFkYzFlMDk2NTNmNWJiZWFmMTA4Njc2ZTNjNGYxNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj12Ix1qzQvOMAygoiZDMkdxkDql TrVcto5gjxRO96LzfeQscaDEQX14Ygi0/76IwPCvinf/cygDzvnt4X2GDPLBFYEq p5bDlIOZZtz9wnFS7/Nt/I4HdoQnAh2NoAn5W7j86NUrl+oFkfgOFzSD048s5r4p xmDy+GI3EEro3yFQoedVHoo93kFYvD/6E2q20qS3uuyHIMqPRW3WxuKf4uE9JWBf B3nnVSTxYgOPFll7D9a68fuPxfYRmTAcK0dRCeh6En9moX2FNY+ItNmyW/jQUxY9 CfO4OsW49wCXlvYuOdvz/sXrnx4JoSaWZWDl5PiYCYl4WRwY7E44mRmgWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMlN1+itweCWU/W76vEIZ248TxdnMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEveVUzWDZLM0I0SlpUOWJ2cThRaG5ianhQRjJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUas8AwQB Uas+MA0GCSqGSIb3DQEBCwUAA4IBAQAlQQPFeXKeI+xc+tn0g2lRZWlUvSTdCWOc eTk45MYgenwmijy7FtBwOKjlDgEQzHI6wTfnv2l+R2g3swI0YY50oUbQdvyIHKxr Cm3FnW2g2/yrik9t7vlJ/X81Y+aj9MX4erXIsf4CeRA+80LlN3ByrcJwSDngG3xB PO4jCLmNzH4jHpuubKPm3YhhWusHMSsVIK+XDSCfpvJNWNQ7CxZ8Xy+CzHO35F0P h2w1WwbsnrPEAqybjCi3mLbPT0eTORz6jy1pmEjiuKyLF13lFseSMED8w56H0sZm liGc90/3xOkz5+W5VlxVS7izViQ/dg33gSSKgujeidLcczUi7Uqx -----END CERTIFICATE-----Generated at Mon Jan 12 00:30:12 2026 by rpki-client