This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/Y86nHrN-bbG9H8afnIR7ras_Ma0.roa File: Y86nHrN-bbG9H8afnIR7ras_Ma0.roa (raw, json) Hash identifier: hrk5zm3StPI0sBpuzLM9Lwz+1Pf71xxcm0cAPnW+R0k= Subject key identifier: 63:CE:A7:1E:B3:7E:6D:B1:BD:1F:C6:9F:9C:84:7B:AD:AB:3F:31:AD Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063 Certificate serial: 019B797E84F46F920103D05F3DC3F43BDD26 Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/Y86nHrN-bbG9H8afnIR7ras_Ma0.roa Signing time: Thu 01 Jan 2026 12:18:13 +0000 ROA not before: Thu 01 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209560 IP address blocks: 141.98.64.0/23 maxlen: 23 141.98.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:84:f4:6f:92:01:03:d0:5f:3d:c3:f4:3b:dd:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63cea71eb37e6db1bd1fc69f9c847badab3f31ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:13:50:1d:eb:0d:3e:03:f7:b0:c0:dd:bf: 4c:dc:28:96:b0:2d:9a:ef:e8:06:62:67:09:38:9c: 3b:a3:56:c6:11:6f:70:39:30:eb:39:6e:cd:4c:cb: 0e:46:02:b2:83:4a:6c:70:6b:6f:4b:66:71:1c:11: de:ee:c7:4d:49:0d:d8:8c:2b:a0:10:61:52:04:6b: 88:fe:e4:3f:10:68:70:fd:dc:01:23:a6:72:ea:b2: b7:99:a3:89:a5:bd:8e:83:4c:e3:4e:42:49:70:b9: a9:5d:9f:fd:67:08:ca:35:86:1d:c4:e6:cb:05:3e: a7:72:07:19:ed:44:0d:c3:2c:e6:eb:34:40:dc:dc: 0d:ca:11:73:2f:77:75:70:df:4a:bd:d1:0d:fb:9d: 26:ae:5b:6e:ce:44:16:9e:46:39:c9:59:af:1a:fb: 44:0d:d4:89:b7:10:1c:aa:a6:c2:67:72:72:1b:4b: 24:31:55:02:02:b1:1c:b5:a9:ba:07:bc:5e:fd:1c: df:cc:4a:d6:aa:4f:dd:14:e8:07:0b:86:d5:e4:25: 4f:37:c9:b0:0b:18:2b:1c:f5:21:47:27:bd:5e:64: 81:e9:e5:48:50:ec:de:6f:2c:ce:a1:ca:33:6f:60: 8a:6c:a4:53:cf:e6:fe:9b:25:f7:cd:45:d7:db:89: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CE:A7:1E:B3:7E:6D:B1:BD:1F:C6:9F:9C:84:7B:AD:AB:3F:31:AD X509v3 Authority Key Identifier: keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/Y86nHrN-bbG9H8afnIR7ras_Ma0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.64.0/22 Signature Algorithm: sha256WithRSAEncryption 56:b1:a5:9a:07:3a:7c:c3:59:7a:8c:6b:6b:78:7c:b1:90:fd: ad:28:bf:d4:f9:1c:9c:db:ee:f4:0d:04:82:ad:67:90:ca:31: 8e:86:8b:ad:ba:ef:00:4a:f6:37:fc:4b:f0:16:06:50:44:ad: 14:b4:af:f8:96:62:84:34:bd:f1:3c:5b:54:63:93:41:03:a9: 44:3a:d1:f0:db:13:6c:10:07:25:ee:61:29:80:3e:08:15:93: 6c:55:0b:e2:14:82:f7:2e:46:93:81:e7:71:36:9c:3e:f3:37: 81:d8:91:27:67:75:c2:e2:37:38:28:6f:c8:42:19:fd:85:97: a5:51:19:2d:87:7b:0e:aa:61:15:8e:ab:b2:57:f7:da:c1:60: a8:44:9a:aa:c8:9c:de:7b:4a:83:4d:fd:73:69:a6:68:7d:88: 22:d6:c9:63:0c:a3:97:ee:48:a1:03:79:ae:50:68:60:95:e2: 7f:12:0d:64:d7:22:4f:9b:f2:94:c7:b2:99:0b:58:fd:8e:50: 30:bf:c2:65:00:b6:93:5b:93:7a:46:a5:c1:ed:9e:ee:15:86: 1b:e7:5c:fa:a0:a6:4d:d5:b6:34:2f:0d:e3:46:46:68:c6:e0: d9:d2:89:2a:55:6b:38:ed:54:74:25:d9:de:e1:e4:ab:1f:cc: 99:d4:ac:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5foT0b5IBA9BfPcP0O90mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0N2UzZTVmOWViODA4OWI1Y2E5NGYzOGU2NTE3Y2ZiYzVi MjAwNjMwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2NlYTcxZWIzN2U2ZGIxYmQxZmM2OWY5Yzg0N2JhZGFiM2YzMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4gTUB3rDT4D97DA3b9M3CiWsC2a 7+gGYmcJOJw7o1bGEW9wOTDrOW7NTMsORgKyg0pscGtvS2ZxHBHe7sdNSQ3YjCug EGFSBGuI/uQ/EGhw/dwBI6Zy6rK3maOJpb2Og0zjTkJJcLmpXZ/9ZwjKNYYdxObL BT6ncgcZ7UQNwyzm6zRA3NwNyhFzL3d1cN9KvdEN+50mrltuzkQWnkY5yVmvGvtE DdSJtxAcqqbCZ3JyG0skMVUCArEctam6B7xe/RzfzErWqk/dFOgHC4bV5CVPN8mw CxgrHPUhRye9XmSB6eVIUOzebyzOocozb2CKbKRTz+b+myX3zUXX24npQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPOpx6zfm2xvR/Gn5yEe62rPzGtMB8GA1UdIwQY MBaAFJR+Pl+euAibXKlPOOZRfPvFsgBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgt ZjkwYWU5OTY2NDI4LzEvWTg2bkhyTi1iYkc5SDhhZm5JUjdyYXNfTWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgtZjkwYWU5OTY2NDI4 LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjWJAMA0G CSqGSIb3DQEBCwUAA4IBAQBWsaWaBzp8w1l6jGtreHyxkP2tKL/U+Ryc2+70DQSC rWeQyjGOhoutuu8ASvY3/EvwFgZQRK0UtK/4lmKENL3xPFtUY5NBA6lEOtHw2xNs EAcl7mEpgD4IFZNsVQviFIL3LkaTgedxNpw+8zeB2JEnZ3XC4jc4KG/IQhn9hZel URkth3sOqmEVjquyV/fawWCoRJqqyJzee0qDTf1zaaZofYgi1sljDKOX7kihA3mu UGhgleJ/Eg1k1yJPm/KUx7KZC1j9jlAwv8JlALaTW5N6RqXB7Z7uFYYb51z6oKZN 1bY0Lw3jRkZoxuDZ0okqVWs47VR0Jdne4eSrH8yZ1Kxj -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:54 2026 by rpki-client